last executing test programs: 4m11.569311459s ago: executing program 32 (id=59): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005580)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x2) 2m46.783301021s ago: executing program 5 (id=617): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f00000001c0), 0x0}, 0x20) 2m46.521437698s ago: executing program 5 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) setresuid(0xee01, 0xee00, 0x0) write(r0, &(0x7f0000000900)='-', 0x1) 2m46.184867916s ago: executing program 5 (id=621): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m31.067639796s ago: executing program 33 (id=621): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)='%pB \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.933314776s ago: executing program 3 (id=1479): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000008000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x100, 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 55.495198046s ago: executing program 3 (id=1480): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r1 = fanotify_init(0x4, 0x2) fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) 55.185777394s ago: executing program 3 (id=1483): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local}) pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10000) 54.715922685s ago: executing program 3 (id=1489): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESHEX], 0x2, 0x1c7, &(0x7f0000000200)="$eJzs279u01AUx/HftR3XhD81lD8SYmACFuI2Q4At7LxElbpVVRcqwtIIifICPAELG0/EU9CBjYmiuNdW65omcv44NN/PknN87o1vFN/oKIkFYGl19VhGRv4weRSEn9ae1r0kAHNyYh//nABYPu7vulcAoB7Hr6UDST9/fezJ9bO24EEWDOvdrO6sXOgfjj9LDz1bN4GuFfuLb9KTbL5pls5v5vXrpfVnCu35b+imbmlVoW7rjtZsfSuff3/CbggAgOVg1Crm5w442t5N4vU8b6T5hpreae6neTuv+9runp2/ktZbvXfJ1qxeAoCKHLW+n82L+98t7H/P7n8A/7/+4WBvM0ni95cH5uh0+GDvy483GjH4siD7fqDi9OkHrl3Q6ME6GgardvyFMQ1J011hUDxibNM1+SkahaX2FuK9KAmccS+2diCN98z+Al1+ZdvBm2R/TS+Y68cQgBpEH/YPov7h4Pnu/uZOvBO/7bQ7nVfrL19sRGnjH51v/wFcIX0/6z0qTS/+3AcAAAAAAAAAAAAAAGpwV/dGDwrnsRIAAAAAszazu4iMpK+q/s9iAAAAAAAAAAAAAAAAAADwT38DAAD//zcyAcQ=") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rename(&(0x7f0000000340)='./bus\x00', &(0x7f0000000040)='./file0\x00') 53.913156534s ago: executing program 3 (id=1497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000140)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) 52.893976088s ago: executing program 3 (id=1503): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 52.300328832s ago: executing program 34 (id=1503): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 51.267826357s ago: executing program 2 (id=1515): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x1, 0x6}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000280)={{}, "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"}) 48.829405585s ago: executing program 2 (id=1529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="f08d9ca38fff48f3be35163c4841265365841a0738f4ae6189aaacb6626e97c39611e7335187d66e53cbb54b26d0db832707860120a7144e6d5c6774d7165ebb49", 0x41}], 0x1, 0x0, 0x0, 0x4000814}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/85, 0x55}], 0x1}, 0x0) 47.997956925s ago: executing program 2 (id=1533): r0 = eventfd2(0xffffffff, 0x1) write$eventfd(r0, &(0x7f0000000080)=0xffffffff26000000, 0x8) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 46.990058879s ago: executing program 2 (id=1536): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000200)={[{@resuid}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x2f703f36}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 46.612176808s ago: executing program 2 (id=1539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 45.666017061s ago: executing program 2 (id=1542): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000a00)=[{&(0x7f0000000240)="ce2026a238ba0061d2c7951b165daca189b5e24e948810258fe432d2932cb407cb", 0x21}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) 45.331908548s ago: executing program 35 (id=1542): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000a00)=[{&(0x7f0000000240)="ce2026a238ba0061d2c7951b165daca189b5e24e948810258fe432d2932cb407cb", 0x21}], 0x1, 0x0) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) 43.422832534s ago: executing program 6 (id=1556): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @broadcast, 0x4e21, 0x3, 'nq\x00', 0x1, 0x10000004, 0x40008}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 43.064068623s ago: executing program 6 (id=1560): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.72807202s ago: executing program 6 (id=1563): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, r2, r3}) 42.570102214s ago: executing program 6 (id=1564): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x100c000, &(0x7f0000000040)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000004}) 42.112671465s ago: executing program 6 (id=1568): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000280)={0xd, 0x80, [{0x80, 0x0, 0xb}, {0x9, 0x0, 0x80}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0xb}, {0x7f, 0x0, 0x4}, {0x1, 0x0, 0x404}, {0x100, 0x0, 0x3}, {0x0, 0x0, 0x6}, {0x8, 0x0, 0x4}, {0x18e, 0x0, 0x4}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x7}, {0x0, 0x0, 0x200}, {0x98, 0x0, 0x1}, {0x1000, 0x0, 0x3}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000030000000000000001701000002"], 0x48, 0x1}], 0x1, 0x20008040) 41.47248333s ago: executing program 6 (id=1572): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x1f) 40.848592695s ago: executing program 36 (id=1572): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x1f) 32.322954729s ago: executing program 4 (id=1606): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 31.936446788s ago: executing program 4 (id=1607): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 31.607707666s ago: executing program 4 (id=1609): mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1b0) lseek(r0, 0x5, 0x0) getdents(r0, &(0x7f0000000280)=""/153, 0x99) 31.340468492s ago: executing program 4 (id=1611): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', 0x0) 31.063552389s ago: executing program 4 (id=1614): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 29.829947408s ago: executing program 4 (id=1618): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='cgroup\x00') preadv(r2, &(0x7f00000008c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1000000000000252, 0x0, 0x0) 29.555467585s ago: executing program 37 (id=1618): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='cgroup\x00') preadv(r2, &(0x7f00000008c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1000000000000252, 0x0, 0x0) 29.404649608s ago: executing program 1 (id=1621): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 29.037482717s ago: executing program 1 (id=1622): syz_mount_image$hfsplus(&(0x7f0000000c00), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYRESOCT, @ANYRES8], 0xfb, 0x6b4, &(0x7f00000013c0)="$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") setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [{0x1116c3fb, 0x1001}, {0xb, 0xffffffd1}]}, 0x18, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000001000)={0x1, 0x9}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 28.463463341s ago: executing program 1 (id=1623): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110037f1ce808"], 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 26.991558076s ago: executing program 1 (id=1632): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x516, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 26.611415725s ago: executing program 1 (id=1635): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x4, 0x7fff8, 0x6}, 0x14) sendto$inet(r1, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 26.218028004s ago: executing program 1 (id=1636): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000142, 0x0) 25.759383475s ago: executing program 38 (id=1636): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000142, 0x0) 4.747887797s ago: executing program 8 (id=1740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x46, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1b}, @TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x342, 0x10000000, 0x9, 0x9ab5, 0xe9c8, {0x6, 0x2, 0x401, 0x0, 0x1}, {0xe, 0x2, 0x51, 0x0, 0x5, 0x7fffffff}, 0x6, 0x6, 0x6}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.984768335s ago: executing program 0 (id=1744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 3.235679542s ago: executing program 8 (id=1746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) write(r0, 0x0, 0x0) 2.94465416s ago: executing program 8 (id=1749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="26c50766b810a100000f23d80f21f86635000000000f23f83e0fae05ba610066ed0fc7b7cf00ba430066b8f118281566ef660f3a14751b00de2d660f3adf840020dd670faa", 0x45}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.852105352s ago: executing program 0 (id=1751): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000340)={0x7, 0x1b, 0x1}, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) splice(r0, 0x0, r3, 0x0, 0x20000000000002, 0x2) 2.603665628s ago: executing program 0 (id=1752): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 2.434619032s ago: executing program 8 (id=1754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 2.423025782s ago: executing program 0 (id=1755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000004000000080000004000000042"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.180698807s ago: executing program 7 (id=1756): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x8703268b, @local}, 0x10) 1.942710433s ago: executing program 8 (id=1758): r0 = io_uring_setup(0x7015, &(0x7f0000000240)={0x0, 0x7b6f, 0x10, 0x3, 0x277}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.878117155s ago: executing program 7 (id=1759): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./dev/mapper/control\x00', 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000012}) 1.781795857s ago: executing program 9 (id=1760): ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000f7b80000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.6875711s ago: executing program 7 (id=1761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfffffffd, @loopback, 0xff00}, 0x1c, 0x0}}], 0x1, 0xff00) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) 1.453276355s ago: executing program 9 (id=1762): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000004c0)='wg1\x00', 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x86, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x78, 0x64, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "7a8fe8ea7840fc79e36a2ccfb028ae20d71943e036e3deb67de38daeded022d4", "fb5b48b07c465211e7c4fa56d97fd431", {"b9605104458a7108ad9cb55322813e71", "1dda6fecc3c090e900"}}}}}}}, 0x0) 1.440765025s ago: executing program 7 (id=1763): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000600)={0x0, 0x0, 0x7}) 1.273003489s ago: executing program 7 (id=1764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0xfffffffc) 1.183399202s ago: executing program 0 (id=1765): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84) 1.076486124s ago: executing program 9 (id=1766): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1.006607686s ago: executing program 5 (id=1637): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000010000)={0x20080522}, &(0x7f0000000140)={0x0, 0x20200000, 0x8001, 0x3, 0xfffffff9, 0x200801}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001000)=0x2, 0x4) 979.067456ms ago: executing program 7 (id=1767): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@errors_remount}, {@nodioread_nolock}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) 779.212832ms ago: executing program 5 (id=1768): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x81, &(0x7f0000000000)=ANY=[], 0x47, 0xc51, &(0x7f0000002540)="$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") r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) dup3(r1, r0, 0x80000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 684.172973ms ago: executing program 9 (id=1769): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = dup(r0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x20080051}, 0x0) 480.396488ms ago: executing program 9 (id=1770): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0xcae3b2b47be4864d}, 0x24008081) 233.956174ms ago: executing program 5 (id=1771): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") truncate(&(0x7f0000000a80)='./file2\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 137.090466ms ago: executing program 0 (id=1772): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x13c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}]}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 122.132157ms ago: executing program 9 (id=1773): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffa, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x2, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 0s ago: executing program 8 (id=1774): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000800, &(0x7f0000000340)=ANY=[], 0xf, 0x23e, &(0x7f00000000c0)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) kernel console output (not intermixed with test programs): (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 259.432631][ T8555] EXT4-fs (loop6): This should not happen!! Data will be lost [ 259.432631][ T8555] [ 259.588781][ T6614] EXT4-fs (loop6): unmounting filesystem. [ 259.824749][ T4314] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 260.722138][ T8609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1267'. [ 260.742197][ T8608] loop2: detected capacity change from 0 to 512 [ 260.809999][ T8608] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 260.921870][ T8608] EXT4-fs (loop2): 1 truncate cleaned up [ 260.950301][ T8608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 261.147669][ T8362] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 261.240711][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 261.445828][ T8617] loop2: detected capacity change from 0 to 1024 [ 261.468641][ T8622] tipc: Started in network mode [ 261.481902][ T8617] EXT4-fs: Ignoring removed bh option [ 261.492233][ T8622] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 261.514813][ T8622] tipc: Enabled bearer , priority 0 [ 261.523141][ T8617] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.611246][ T8617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 262.024055][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 262.137437][ T4316] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 262.322513][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 262.331953][ T4316] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 262.343466][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 262.363241][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 262.373533][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.395187][ T8646] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.404327][ T8646] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.412604][ T4316] usb 4-1: Product: syz [ 262.413116][ T8646] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.422544][ T4316] usb 4-1: Manufacturer: syz [ 262.425960][ T8646] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.450901][ T4316] usb 4-1: SerialNumber: syz [ 262.509678][ T8651] loop1: detected capacity change from 0 to 1024 [ 262.564721][ T8651] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 262.657731][ T4347] tipc: Node number set to 43690 [ 262.730059][ T26] audit: type=1800 audit(1786173036.985:51): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1280" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 262.979751][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 263.080032][ T4316] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 263.096440][ T4316] usb 4-1: clock source 0 is not valid, cannot use [ 263.112148][ T4316] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 263.334422][ T4316] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 263.363659][ T4316] usb 4-1: clock source 0 is not valid, cannot use [ 263.379981][ T4316] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 263.397180][ T4316] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 263.469785][ T4316] usb 4-1: USB disconnect, device number 17 [ 263.909470][ T8683] loop2: detected capacity change from 0 to 8192 [ 263.940937][ T8683] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 263.970511][ T8683] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 263.983035][ T8683] REISERFS (device loop2): using ordered data mode [ 263.989615][ T8683] reiserfs: using flush barriers [ 264.019673][ T8690] ALSA: seq fatal error: cannot create timer (-22) [ 264.032363][ T8683] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 264.069002][ T8683] REISERFS (device loop2): checking transaction log (loop2) [ 264.265142][ T8683] REISERFS (device loop2): Using tea hash to sort names [ 264.280266][ T8683] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 265.220854][ T8720] i2c i2c-0: new_device: Extra parameters [ 265.245474][ T8720] rt1719: probe of 0-0049 failed with error -5 [ 265.279125][ T8720] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 265.302030][ T8723] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 265.437855][ T8723] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 266.028239][ T8358] Bluetooth: hci5: Frame reassembly failed (-84) [ 266.111137][ T8743] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.226181][ T8745] loop1: detected capacity change from 0 to 128 [ 266.293251][ T8745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 266.316865][ T8745] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.846772][ T8765] loop4: detected capacity change from 0 to 256 [ 266.988882][ T8770] "syz.6.1329" (8770) uses obsolete ecb(arc4) skcipher [ 267.072952][ T8773] loop4: detected capacity change from 0 to 256 [ 267.090138][ T4288] Bluetooth: hci1: Malformed Event: 0x02 [ 267.115132][ T8773] FAT-fs (loop4): Directory bread(block 64) failed [ 267.128596][ T8773] FAT-fs (loop4): Directory bread(block 65) failed [ 267.142722][ T8773] FAT-fs (loop4): Directory bread(block 66) failed [ 267.147154][ T4347] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 267.149401][ T8773] FAT-fs (loop4): Directory bread(block 67) failed [ 267.164059][ T8773] FAT-fs (loop4): Directory bread(block 68) failed [ 267.170636][ T8773] FAT-fs (loop4): Directory bread(block 69) failed [ 267.177724][ T8773] FAT-fs (loop4): Directory bread(block 70) failed [ 267.184685][ T8773] FAT-fs (loop4): Directory bread(block 71) failed [ 267.196804][ T8773] FAT-fs (loop4): Directory bread(block 72) failed [ 267.203761][ T8773] FAT-fs (loop4): Directory bread(block 73) failed [ 267.281737][ T8773] syz.4.1331: attempt to access beyond end of device [ 267.281737][ T8773] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 267.308244][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 267.372806][ T4347] usb 4-1: Using ep0 maxpacket: 32 [ 267.383300][ T4347] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 267.398106][ T4347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.446546][ T4347] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 267.476202][ T4347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.542116][ T4347] usb 4-1: config 0 descriptor?? [ 267.605044][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1334'. [ 268.042800][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 268.049844][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 268.122841][ T4287] Bluetooth: hci0: command 0x0c1a tx timeout [ 268.273475][ T8783] loop1: detected capacity change from 0 to 40427 [ 268.291766][ T8783] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff [ 268.316553][ T8783] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 268.335900][ T8790] loop2: detected capacity change from 0 to 512 [ 268.336400][ T4347] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 268.360491][ T8783] F2FS-fs (loop1): invalid crc value [ 268.400120][ T8783] F2FS-fs (loop1): Found nat_bits in checkpoint [ 268.464343][ T8790] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1338: inode has both inline data and extents flags [ 268.503145][ T8790] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1338: couldn't read orphan inode 15 (err -117) [ 268.524018][ T8783] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 268.537173][ T4347] corsair-cpro: probe of 0003:1B1C:0C10.000D failed with error -5 [ 268.546686][ T8790] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 268.596309][ T8783] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 268.643638][ T8783] F2FS-fs (loop1) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 268.648527][ T8790] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 268.687518][ T8783] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_convert_inline_inode+0x634/0x810 [ 268.739292][ T4347] usb 4-1: USB disconnect, device number 18 [ 268.793111][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 268.853053][ T8797] fido_id[8797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 268.855016][ T4270] syz-executor: attempt to access beyond end of device [ 268.855016][ T4270] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.951565][ T4644] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 268.971110][ T4644] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 269.021500][ T4644] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 269.090663][ T8788] loop6: detected capacity change from 0 to 40427 [ 269.176449][ T8788] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 269.216373][ T8788] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 269.220061][ T8803] fido_id[8803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 269.256250][ T8788] F2FS-fs (loop6): invalid crc value [ 269.266451][ T8788] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 269.451888][ T8808] loop3: detected capacity change from 0 to 1024 [ 269.478250][ T8788] F2FS-fs (loop6): Start checkpoint disabled! [ 269.559049][ T8788] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 269.588541][ T8788] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 269.836921][ T8358] kworker/u4:12: attempt to access beyond end of device [ 269.836921][ T8358] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 270.086018][ T8824] loop4: detected capacity change from 0 to 1024 [ 270.129719][ T8824] EXT4-fs: Ignoring removed oldalloc option [ 270.149567][ T8824] EXT4-fs: Ignoring removed orlov option [ 270.268824][ T8824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 270.398715][ T8831] loop3: detected capacity change from 0 to 8192 [ 270.548693][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 270.842866][ T8844] loop3: detected capacity change from 0 to 16 [ 270.886535][ T8844] erofs: (device loop3): mounted with root inode @ nid 36. [ 271.020531][ T8850] "syz.2.1359" (8850) uses obsolete ecb(arc4) skcipher [ 271.152809][ T4347] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 271.376883][ T4347] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.398762][ T4347] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.460497][ T4347] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.486073][ T4347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.632525][ T4314] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 271.736316][ T4347] usb 7-1: usb_control_msg returned -32 [ 271.742274][ T4347] usbtmc 7-1:16.0: can't read capabilities [ 271.921821][ T26] audit: type=1326 audit(1786173046.175:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8863 comm="syz.4.1365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfc099e0d9 code=0x0 [ 271.967485][ T8859] loop3: detected capacity change from 0 to 32768 [ 271.972982][ T4314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 271.993831][ T4314] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 272.001428][ T4314] usb 3-1: can't read configurations, error -71 [ 272.110287][ T8859] XFS (loop3): Mounting V5 Filesystem [ 272.117507][ T8872] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -32 [ 272.142088][ T4644] usb 7-1: USB disconnect, device number 4 [ 272.248194][ T8859] XFS (loop3): Ending clean mount [ 272.271885][ T8877] loop1: detected capacity change from 0 to 1024 [ 272.288365][ T8859] XFS (loop3): Quotacheck needed: Please wait. [ 272.393410][ T8859] XFS (loop3): Quotacheck: Done. [ 272.813657][ T4271] XFS (loop3): Unmounting Filesystem [ 273.497007][ T8915] netlink: 'syz.1.1382': attribute type 2 has an invalid length. [ 273.892080][ T8935] gadgetfs: bound to dummy_udc driver [ 273.930895][ T8937] loop1: detected capacity change from 0 to 1024 [ 274.915067][ T8980] loop1: detected capacity change from 0 to 128 [ 275.035018][ T8981] loop4: detected capacity change from 0 to 4096 [ 275.073461][ T8981] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 275.230356][ T26] audit: type=1804 audit(1786173049.485:53): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1407" name="/newroot/262/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 275.374705][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 275.643761][ T9001] loop2: detected capacity change from 0 to 1024 [ 275.711508][ T9001] hfsplus: request for non-existent node 262144 in B*Tree [ 275.725089][ T9001] hfsplus: request for non-existent node 262144 in B*Tree [ 275.733696][ T6412] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 275.747896][ T26] audit: type=1800 audit(1786173050.005:54): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1415" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 275.853387][ T9004] loop2: detected capacity change from 0 to 64 [ 275.930744][ T6412] usb 2-1: Using ep0 maxpacket: 16 [ 275.944601][ T6412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.984483][ T6412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.037550][ T6412] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 276.061289][ T6412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 276.075716][ T6412] usb 2-1: SerialNumber: syz [ 276.101263][ T6412] usb 2-1: 0:2 : does not exist [ 276.322845][ T4314] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 276.455484][ T22] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 276.514360][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 276.526481][ T4314] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 276.535611][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.549407][ T4314] usb 4-1: config 0 descriptor?? [ 276.580537][ T8927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.687446][ T22] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 276.702030][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.719818][ T22] usb 5-1: Product: syz [ 276.724303][ T22] usb 5-1: Manufacturer: syz [ 276.728987][ T22] usb 5-1: SerialNumber: syz [ 276.973901][ T4314] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 276.999492][ T4314] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000F/input/input16 [ 277.042049][ T9021] loop2: detected capacity change from 0 to 32768 [ 277.079465][ T9021] XFS (loop2): Mounting V5 Filesystem [ 277.127505][ T4314] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 277.211734][ C1] usb 4-1: input irq status -75 received [ 277.311028][ T9021] XFS (loop2): Ending clean mount [ 277.323334][ T6412] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 277.368440][ C1] usb 5-1: invalid arpc response id received: 11 [ 277.374884][ T9021] XFS (loop2): Quotacheck needed: Please wait. [ 277.420853][ T4314] usb 4-1: USB disconnect, device number 19 [ 277.438677][ T4644] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 277.467535][ T6412] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 277.472998][ T22] usb 5-1: failed to set cport flags for port 0 [ 277.482340][ T4644] XFS (loop2): Unmount and run xfs_repair [ 277.488771][ T22] greybus greybus1: 0/0:0: failed to enable host cport: -110 [ 277.498606][ T4644] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 277.510140][ T6412] usb 2-1: USB disconnect, device number 12 [ 277.528355][ T4644] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 277.536397][ T22] es2_ap_driver: probe of 5-1:1.0 failed with error -110 [ 277.568734][ T4644] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 277.590530][ T9033] fido_id[9033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 277.614368][ T4644] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 277.634192][ T4644] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 277.671444][ T4644] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 277.680753][ T4644] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 277.696959][ T4644] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 277.712544][ T4644] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 277.721469][ T8351] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 277.747109][ T9021] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 277.852605][ T4314] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 277.870968][ T4314] XFS (loop2): Unmount and run xfs_repair [ 277.877272][ T4314] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 277.891491][ T4314] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 277.909806][ T4314] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 277.921586][ T4314] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 277.957922][ T4314] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 277.987303][ T4314] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 278.031993][ T4314] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 278.060336][ T4314] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 278.081445][ T4314] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 278.096995][ T9021] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 278.116134][ T9021] XFS (loop2): page discard on page ffffea0001c16180, inode 0x244a, pos 0. [ 278.377735][ T9047] loop1: detected capacity change from 0 to 512 [ 278.416542][ T9047] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.1430: inode has both inline data and extents flags [ 278.430505][ T9047] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1430: couldn't read orphan inode 15 (err -117) [ 278.445877][ T9047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 278.486630][ T9047] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 278.558496][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 278.600582][ T4319] usb 5-1: USB disconnect, device number 16 [ 278.644942][ T9038] loop6: detected capacity change from 0 to 32768 [ 278.711358][ T4278] XFS (loop2): Unmounting Filesystem [ 278.829393][ T9038] XFS (loop6): Mounting V5 Filesystem [ 278.951759][ T9038] XFS (loop6): Ending clean mount [ 279.073005][ T6614] XFS (loop6): Unmounting Filesystem [ 279.092660][ T6412] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 279.245990][ T9051] loop3: detected capacity change from 0 to 32768 [ 279.322533][ T6412] usb 2-1: Using ep0 maxpacket: 16 [ 279.330666][ T6412] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.369761][ T9051] XFS (loop3): Mounting V5 Filesystem [ 279.379685][ T6412] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.408198][ T6412] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.417634][ T6412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.431569][ T6412] usb 2-1: Product: syz [ 279.436422][ T6412] usb 2-1: Manufacturer: syz [ 279.441034][ T6412] usb 2-1: SerialNumber: syz [ 279.588371][ T9051] XFS (loop3): Ending clean mount [ 279.645149][ T9051] XFS (loop3): Quotacheck needed: Please wait. [ 279.671286][ T6412] usb 2-1: 0:2 : does not exist [ 279.705501][ T6412] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 279.772922][ T9051] XFS (loop3): Quotacheck: Done. [ 279.785367][ T6412] usb 2-1: USB disconnect, device number 13 [ 279.992619][ T22] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 280.110062][ T4448] udevd[4448]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.184233][ T22] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 280.220719][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.220905][ T4271] XFS (loop3): Unmounting Filesystem [ 280.258220][ T9090] loop2: detected capacity change from 0 to 2048 [ 280.278030][ T22] usb 5-1: config 0 descriptor?? [ 280.284873][ T9090] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 280.309360][ T22] cp210x 5-1:0.0: cp210x converter detected [ 280.371227][ T9090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.701085][ T9087] loop6: detected capacity change from 0 to 32768 [ 280.731318][ T22] usb 5-1: cp210x converter now attached to ttyUSB0 [ 280.831407][ T9087] XFS (loop6): Mounting V5 Filesystem [ 280.912100][ T9087] XFS (loop6): Ending clean mount [ 280.916595][ T22] usb 5-1: USB disconnect, device number 17 [ 280.929959][ T9087] XFS (loop6): Quotacheck needed: Please wait. [ 280.932649][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 281.015914][ T9087] XFS (loop6): Quotacheck: Done. [ 281.017379][ T22] cp210x 5-1:0.0: device disconnected [ 281.154635][ T9111] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1444'. [ 281.263406][ T6614] XFS (loop6): Unmounting Filesystem [ 281.702666][ T4314] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 281.852101][ T9130] loop1: detected capacity change from 0 to 1024 [ 281.956190][ T4314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.987847][ T4314] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 282.022178][ T4314] usb 4-1: can't read configurations, error -71 [ 282.217827][ T9147] loop2: detected capacity change from 0 to 512 [ 282.239597][ T9147] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.253786][ T9147] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 282.330631][ T9147] EXT4-fs (loop2): 1 truncate cleaned up [ 282.340298][ T9147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 282.686792][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 282.802544][ T9160] loop6: detected capacity change from 0 to 1024 [ 282.881350][ T9160] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 282.899015][ T9160] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.033882][ T9160] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.1447: lblock 3 mapped to illegal pblock 3 (length 3) [ 283.174779][ T9170] EXT4-fs error (device loop6): ext4_ext_remove_space:2945: inode #15: comm syz.6.1447: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 283.342740][ T9170] EXT4-fs error (device loop6) in ext4_setattr:5695: Corrupt filesystem [ 283.436875][ T9158] loop1: detected capacity change from 0 to 32768 [ 283.486986][ T9158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1465 (9158) [ 283.509717][ T6614] EXT4-fs (loop6): unmounting filesystem. [ 283.577194][ T9158] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.611985][ T9158] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 283.644241][ T9158] BTRFS info (device loop1): using free space tree [ 283.892664][ T6412] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 283.923594][ T9158] BTRFS info (device loop1): enabling ssd optimizations [ 284.092561][ T6412] usb 3-1: Using ep0 maxpacket: 8 [ 284.103946][ T6412] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 284.222333][ T8366] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.248166][ T6412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.337600][ T6412] usb 3-1: Product: syz [ 284.341861][ T6412] usb 3-1: Manufacturer: syz [ 284.450262][ T6412] usb 3-1: SerialNumber: syz [ 284.539103][ T6412] usb 3-1: config 0 descriptor?? [ 284.799605][ T6412] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 284.888403][ T4270] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 284.891984][ T4333] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 285.482104][ T9239] loop6: detected capacity change from 0 to 256 [ 285.554472][ T9233] loop4: detected capacity change from 0 to 40427 [ 285.583992][ T9239] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.594744][ T9233] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff [ 285.595768][ T9233] F2FS-fs (loop4): invalid crc value [ 285.649396][ T9233] F2FS-fs (loop4): Found nat_bits in checkpoint [ 285.667993][ T9246] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1479'. [ 285.730969][ T9239] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 285.761631][ T9248] "syz.1.1476" (9248) uses obsolete ecb(arc4) skcipher [ 285.821214][ T6412] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 285.825378][ T9239] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 285.858897][ T6412] usb 3-1: USB disconnect, device number 17 [ 285.912165][ T9233] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 286.738558][ T9272] loop3: detected capacity change from 0 to 64 [ 286.839119][ T9272] MINIX-fs: mounting file system with errors, running fsck is recommended [ 286.975601][ T26] audit: type=1804 audit(1786173061.235:55): pid=9281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1491" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=50578 res=1 errno=0 [ 287.112769][ T9272] loop3: detected capacity change from 64 to 0 [ 287.170665][ T4314] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 287.193306][ T4314] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.281280][ C1] blk_print_req_error: 47 callbacks suppressed [ 287.281299][ C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.312519][ T9272] Unable to read inode block [ 287.421604][ T9293] loop6: detected capacity change from 0 to 1024 [ 287.447866][ C0] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.466668][ T4271] Unable to read inode block [ 287.527861][ C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.538447][ T4271] Unable to read inode block [ 287.548515][ T9293] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 287.589397][ T9293] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.740274][ T9293] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.1506: lblock 3 mapped to illegal pblock 3 (length 3) [ 287.789318][ T9301] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: comm syz.6.1506: lblock 0 mapped to illegal pblock 0 (length 1) [ 287.821778][ C0] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.831458][ T8362] Unable to read inode block [ 287.838090][ T4333] loop: Write error at byte offset 9223372036854781951, length 1024. [ 287.856853][ T9293] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 287.872734][ C1] I/O error, dev loop3, sector 12 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 287.882196][ C1] buffer_io_error: 47 callbacks suppressed [ 287.882208][ C1] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 287.910799][ C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.920074][ T8362] Unable to read inode block [ 287.926123][ T9293] EXT4-fs (loop6): This should not happen!! Data will be lost [ 287.926123][ T9293] [ 288.051427][ T8417] tipc: Resetting bearer [ 288.140166][ T4333] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 288.143181][ T8417] tipc: Disabling bearer [ 288.174917][ T4333] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 288.196410][ T4333] EXT4-fs (loop6): This should not happen!! Data will be lost [ 288.196410][ T4333] [ 288.218520][ T6614] EXT4-fs (loop6): unmounting filesystem. [ 288.669936][ T9307] loop4: detected capacity change from 0 to 65536 [ 288.790366][ T9307] XFS (loop4): Mounting V5 Filesystem [ 288.870829][ T9307] XFS (loop4): Ending clean mount [ 288.903085][ T9307] XFS (loop4): Quotacheck needed: Please wait. [ 289.015752][ T9307] XFS (loop4): Quotacheck: Done. [ 289.116916][ T4277] XFS (loop4): Unmounting Filesystem [ 289.443526][ T9331] loop6: detected capacity change from 0 to 512 [ 289.482357][ T9331] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.526673][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready [ 289.542688][ T9331] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 289.548750][ T9333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1512'. [ 289.576373][ T9331] EXT4-fs (loop6): 1 truncate cleaned up [ 289.592118][ T9331] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 289.608291][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready [ 289.634473][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.676602][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.687331][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.698234][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.705803][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 289.719072][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 289.955463][ T6614] EXT4-fs (loop6): unmounting filesystem. [ 290.062158][ T9335] chnl_net:caif_netlink_parms(): no params data found [ 290.268203][ T9335] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.275606][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.284527][ T9335] device bridge_slave_0 entered promiscuous mode [ 290.297258][ T9335] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.305307][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.321528][ T9335] device bridge_slave_1 entered promiscuous mode [ 290.352221][ T9335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.378880][ T9335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.435930][ T9335] team0: Port device team_slave_0 added [ 290.447961][ T9335] team0: Port device team_slave_1 added [ 290.498875][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.537227][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.539766][ T9339] loop4: detected capacity change from 0 to 32768 [ 290.622255][ T9335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.699086][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.717518][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.784894][ T9349] loop2: detected capacity change from 0 to 32768 [ 290.824108][ T9349] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1515 (9349) [ 290.837897][ T9335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.841252][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1527'. [ 290.881487][ T9349] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 290.913245][ T9349] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 290.942083][ T9341] loop1: detected capacity change from 0 to 40427 [ 290.963534][ T9349] BTRFS info (device loop2): force clearing of disk cache [ 290.993233][ T9335] device hsr_slave_0 entered promiscuous mode [ 291.003118][ T9349] BTRFS info (device loop2): metadata ratio 0 [ 291.009793][ T9341] F2FS-fs (loop1): invalid crc value [ 291.023308][ T9335] device hsr_slave_1 entered promiscuous mode [ 291.044786][ T9349] BTRFS info (device loop2): enabling ssd optimizations [ 291.063479][ T9349] BTRFS info (device loop2): using spread ssd allocation scheme [ 291.072373][ T9349] BTRFS info (device loop2): using free space tree [ 291.092148][ T9341] F2FS-fs (loop1): Found nat_bits in checkpoint [ 291.269951][ T9341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 291.456762][ T9349] BTRFS info (device loop2): rebuilding free space tree [ 291.689723][ T4270] syz-executor: attempt to access beyond end of device [ 291.689723][ T4270] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 291.818022][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 291.845451][ T9335] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 291.933774][ T9335] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 291.968969][ T9335] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 292.002667][ T9335] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 292.017662][ T4632] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 292.175754][ T4320] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 292.264074][ T9335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.363802][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.393549][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.461100][ T9335] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.480642][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.510077][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.527110][ T4278] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 292.544905][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.552289][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.615288][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.630409][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.666776][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.695870][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.703045][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.731437][ T9403] loop1: detected capacity change from 0 to 1024 [ 292.744116][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.755861][ T4314] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 292.787122][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.805420][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.841913][ T9403] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 292.851058][ T9403] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.879397][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.898458][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.920199][ T9403] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.1523: lblock 3 mapped to illegal pblock 3 (length 3) [ 292.959863][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.971027][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.982737][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 292.997101][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.015011][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.030436][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.035534][ T9409] EXT4-fs error (device loop1): ext4_ext_remove_space:2945: inode #15: comm syz.1.1523: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 293.041849][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.088506][ T4314] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 293.112746][ T9409] EXT4-fs error (device loop1) in ext4_setattr:5695: Corrupt filesystem [ 293.121941][ T9335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.147252][ T4314] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 293.152701][ T9335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.169079][ T4314] usb 5-1: Manufacturer: syz [ 293.175406][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.194365][ T4314] usb 5-1: config 0 descriptor?? [ 293.201680][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.281262][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 293.362769][ T4644] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 293.597249][ T4644] usb 7-1: unable to get BOS descriptor or descriptor too short [ 293.616938][ T4644] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.639321][ T4314] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0011/input/input17 [ 293.651282][ T4644] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.690425][ T4644] usb 7-1: string descriptor 0 read error: -22 [ 293.705704][ T4644] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 293.735206][ T4644] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.754255][ T4314] creative-sb0540 0003:041E:3100.0011: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 293.791888][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.806245][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.816802][ T4644] usb 7-1: selecting invalid altsetting 1 [ 293.834760][ T130] usb 5-1: USB disconnect, device number 18 [ 293.837997][ T4644] usb 7-1: unit 6 not found! [ 293.858383][ T9335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.882754][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 293.971586][ T9426] fido_id[9426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 294.384947][ T9436] loop2: detected capacity change from 0 to 512 [ 294.422654][ T9436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.476947][ T9436] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1536: iget: bad i_size value: 38620345925642 [ 294.490698][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.514078][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.548780][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.567682][ T9436] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1536: couldn't read orphan inode 15 (err -117) [ 294.581683][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.583122][ T9436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 294.594305][ T9335] device veth0_vlan entered promiscuous mode [ 294.630012][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.639000][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.664100][ T9335] device veth1_vlan entered promiscuous mode [ 294.706145][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 294.763123][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 294.779563][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.791498][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.792762][ T130] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 294.819719][ T9335] device veth0_macvtap entered promiscuous mode [ 294.828185][ T4644] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 294.836512][ T9335] device veth1_macvtap entered promiscuous mode [ 294.884713][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.898185][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.906698][ T9443] loop1: detected capacity change from 0 to 512 [ 294.912662][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.927091][ T4644] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 294.952370][ T4644] usb 7-1: USB disconnect, device number 5 [ 294.968812][ T4448] udevd[4448]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.978080][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.003649][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.012534][ T130] usb 5-1: Using ep0 maxpacket: 32 [ 295.018049][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.024444][ T130] usb 5-1: unable to get BOS descriptor or descriptor too short [ 295.031069][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.061550][ T9443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 295.071937][ T130] usb 5-1: config 8 has an invalid interface number: 94 but max is 0 [ 295.072673][ T9443] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.080124][ T130] usb 5-1: config 8 has no interface number 0 [ 295.097587][ T130] usb 5-1: config 8 interface 94 has no altsetting 0 [ 295.100673][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.107269][ T130] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 295.124056][ T130] usb 5-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 295.132174][ T130] usb 5-1: Product: syz [ 295.136942][ T130] usb 5-1: Manufacturer: syz [ 295.141560][ T130] usb 5-1: SerialNumber: syz [ 295.173698][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.192483][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.215037][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.231674][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.263496][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.296906][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.320195][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.338446][ T9446] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 295.352591][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.361395][ T9446] EXT4-fs (loop1): Remounting filesystem read-only [ 295.364332][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.383373][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.394011][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.405322][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.416170][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.436355][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.462615][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.516292][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.540082][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 295.550637][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.566655][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.588414][ T9335] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.598910][ T9335] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.614635][ T130] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 295.624959][ T9335] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.670036][ T9335] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.817967][ T130] gspca_sn9c2028: read1 error -32 [ 295.823958][ T130] gspca_sn9c2028: read1 error -32 [ 295.911428][ T4336] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.962976][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 295.974556][ T4336] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.070514][ T4643] usb 5-1: USB disconnect, device number 19 [ 296.181544][ T4336] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.191934][ T4336] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.255187][ T8362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.278572][ T8362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.340375][ T4336] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.359521][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 296.360268][ T4336] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.422235][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.454923][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.471062][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.570086][ T4336] device netdevsim0 left promiscuous mode [ 296.591556][ T4336] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.606096][ T4336] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.641631][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.643499][ T9462] device-mapper: ioctl: name not supplied when creating device [ 296.781555][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 296.794496][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 296.804604][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 296.812352][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.822619][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 296.832870][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.116118][ T9460] loop1: detected capacity change from 0 to 32768 [ 297.302388][ T9463] chnl_net:caif_netlink_parms(): no params data found [ 297.318278][ T9479] loop6: detected capacity change from 0 to 2048 [ 297.444377][ T9479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.462681][ T4643] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 297.531248][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.539090][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.547289][ T9463] device bridge_slave_0 entered promiscuous mode [ 297.556258][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.565031][ T9463] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.573591][ T9463] device bridge_slave_1 entered promiscuous mode [ 297.598941][ T9463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.612546][ T9463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.652482][ T4643] usb 5-1: Using ep0 maxpacket: 32 [ 297.663914][ T4643] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 297.672299][ T4643] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 297.692870][ T9463] team0: Port device team_slave_0 added [ 297.712800][ T9463] team0: Port device team_slave_1 added [ 297.730114][ T4643] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 297.762734][ T4643] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.788825][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.802485][ T4643] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 297.822622][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.853037][ T4643] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 297.893375][ T4643] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 297.918407][ T9463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.930048][ T4643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.951493][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.960386][ T4643] usb 5-1: config 0 descriptor?? [ 298.002522][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.053025][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 298.142614][ T9463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.180899][ T4643] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 298.309818][ T9463] device hsr_slave_0 entered promiscuous mode [ 298.318968][ T9497] loop5: detected capacity change from 0 to 7 [ 298.334472][ T9463] device hsr_slave_1 entered promiscuous mode [ 298.348685][ T9463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.357330][ T9463] Cannot create hsr debugfs directory [ 298.367785][ T9497] Dev loop5: unable to read RDB block 7 [ 298.374419][ T9497] loop5: AHDI p1 p2 p3 [ 298.380350][ T9497] loop5: partition table partially beyond EOD, truncated [ 298.388419][ T9497] loop5: p1 start 5472580 is beyond EOD, truncated [ 298.395403][ T9497] loop5: p2 start 167772160 is beyond EOD, truncated [ 298.414828][ T4316] usb 5-1: USB disconnect, device number 20 [ 298.428618][ T4316] usblp0: removed [ 298.918218][ T9511] loop6: detected capacity change from 0 to 1024 [ 298.924824][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 298.930509][ T9463] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 298.995119][ T9463] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 299.397881][ T9463] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 299.415884][ T9463] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 299.641105][ T9507] loop7: detected capacity change from 0 to 32768 [ 299.747051][ T9507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1561 (9507) [ 299.861542][ T9507] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 299.914478][ T9507] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 299.959883][ T9507] BTRFS info (device loop7): force clearing of disk cache [ 299.987970][ T9507] BTRFS info (device loop7): metadata ratio 0 [ 300.017683][ T9507] BTRFS info (device loop7): enabling ssd optimizations [ 300.052647][ T9507] BTRFS info (device loop7): using spread ssd allocation scheme [ 300.093674][ T9507] BTRFS info (device loop7): using free space tree [ 300.341812][ T9507] BTRFS info (device loop7): rebuilding free space tree [ 300.408314][ T9463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.558905][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.603874][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.711821][ T57] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 300.718231][ T9463] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.783867][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.809764][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.849764][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.856943][ T8364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.905750][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.000987][ T9335] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.002672][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 301.037307][ T4336] device gretap0 left promiscuous mode [ 301.194097][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.253227][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.297525][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.304981][ T8364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.368274][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.458172][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.494021][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.503049][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.521968][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.532151][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 301.539865][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.689189][ T9581] loop1: detected capacity change from 0 to 512 [ 301.772785][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.793542][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.804794][ T9581] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 301.829256][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.859842][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.872655][ T9581] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.1580: bad orphan inode 83886093 [ 301.909738][ T9581] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 301.989221][ T9581] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 302.014931][ T9586] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 302.032799][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.046043][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.066073][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.088762][ T9589] loop4: detected capacity change from 0 to 2048 [ 302.096205][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.109889][ T9581] Quota error (device loop1): write_blk: dquota write failed [ 302.120673][ T9581] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 302.132133][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.145828][ T9581] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1580: Failed to acquire dquot type 1 [ 302.172925][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.209357][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.233559][ T9589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 302.296444][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 302.491042][ T9597] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 302.532065][ T9597] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 302.555996][ T9597] EXT4-fs (loop4): This should not happen!! Data will be lost [ 302.555996][ T9597] [ 302.585324][ T9597] EXT4-fs (loop4): Total free blocks count 0 [ 302.591375][ T9597] EXT4-fs (loop4): Free/Dirty block details [ 302.604040][ T9587] loop7: detected capacity change from 0 to 32768 [ 302.633643][ T9597] EXT4-fs (loop4): free_blocks=2415919104 [ 302.639505][ T9597] EXT4-fs (loop4): dirty_blocks=320 [ 302.641572][ T9587] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.1583 (9587) [ 302.662837][ T9597] EXT4-fs (loop4): Block reservation details [ 302.668901][ T9597] EXT4-fs (loop4): i_reserved_data_blocks=20 [ 302.745351][ T9587] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 302.800489][ T9587] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 302.819420][ T9587] BTRFS info (device loop7): using free space tree [ 303.072523][ T9587] BTRFS info (device loop7): enabling ssd optimizations [ 303.083359][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 303.373213][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 303.472480][ T26] audit: type=1800 audit(1786173077.725:56): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1583" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 303.491760][ T9631] loop1: detected capacity change from 0 to 256 [ 303.551079][ T9631] exfat: Deprecated parameter 'utf8' [ 303.632616][ T9631] exfat: Deprecated parameter 'namecase' [ 303.638380][ T9631] exfat: Deprecated parameter 'namecase' [ 303.642649][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 303.696305][ T9631] exfat: Deprecated parameter 'utf8' [ 303.723533][ T9631] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 303.932933][ T9335] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 304.567863][ T9634] loop4: detected capacity change from 0 to 32768 [ 304.585179][ T9653] loop1: detected capacity change from 0 to 512 [ 304.635868][ T9634] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1586 (9634) [ 304.755322][ T9653] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1590: invalid indirect mapped block 10 (level 1) [ 304.777004][ T9634] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 304.835871][ T9634] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 304.874182][ T4336] device hsr_slave_0 left promiscuous mode [ 304.902868][ T9634] BTRFS info (device loop4): force clearing of disk cache [ 304.912152][ T9653] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1590: invalid indirect mapped block 8 (level 1) [ 304.932622][ T9634] BTRFS info (device loop4): metadata ratio 0 [ 304.938738][ T9634] BTRFS info (device loop4): enabling ssd optimizations [ 304.945925][ T4336] device hsr_slave_1 left promiscuous mode [ 304.958692][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.967152][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.988748][ T9634] BTRFS info (device loop4): using spread ssd allocation scheme [ 305.000143][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.032994][ T9634] BTRFS info (device loop4): using free space tree [ 305.033376][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.050744][ T9653] EXT4-fs (loop1): 1 truncate cleaned up [ 305.070350][ T9653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 305.091179][ T4336] device bridge_slave_1 left promiscuous mode [ 305.108119][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.162538][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 305.194318][ T4336] device bridge_slave_0 left promiscuous mode [ 305.203154][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.307325][ T9653] EXT4-fs (loop1): shut down requested (2) [ 305.367226][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 305.369477][ T9634] BTRFS info (device loop4): rebuilding free space tree [ 305.506559][ T4336] device veth1_macvtap left promiscuous mode [ 305.531588][ T9656] loop7: detected capacity change from 0 to 32768 [ 305.536863][ T4336] device veth0_macvtap left promiscuous mode [ 305.556687][ T4336] device veth1_vlan left promiscuous mode [ 305.622316][ T4336] device veth0_vlan left promiscuous mode [ 305.670079][ T4333] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 305.688651][ T9656] XFS (loop7): Mounting V5 Filesystem [ 305.722544][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 305.866017][ T9656] XFS (loop7): Ending clean mount [ 305.900734][ T9656] XFS (loop7): Quotacheck needed: Please wait. [ 305.945935][ T4277] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.095426][ T5010] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 13 /dev/loop4 scanned by udevd (5010) [ 306.163413][ T9656] XFS (loop7): Quotacheck: Done. [ 306.605125][ T9335] XFS (loop7): Unmounting Filesystem [ 307.591737][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 307.675583][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 307.757063][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.803304][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 307.827560][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.273338][ T4336] bond0 (unregistering): Released all slaves [ 308.393204][ T9573] chnl_net:caif_netlink_parms(): no params data found [ 308.493864][ T9463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.505591][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 308.523957][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 308.653920][ T9573] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.661844][ T9573] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.670531][ T9573] device bridge_slave_0 entered promiscuous mode [ 308.711325][ T9573] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.722884][ T9573] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.731120][ T9573] device bridge_slave_1 entered promiscuous mode [ 308.757060][ T9573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.783184][ T9573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.934444][ T9573] team0: Port device team_slave_0 added [ 308.964182][ T9573] team0: Port device team_slave_1 added [ 309.051368][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.075613][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.156176][ T9743] input: syz0 as /devices/virtual/input/input18 [ 309.168134][ T9573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.234654][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.256132][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.362916][ T9573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.443240][ T9731] loop1: detected capacity change from 0 to 32768 [ 309.477215][ T9731] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 13 [ 309.592207][ T9573] device hsr_slave_0 entered promiscuous mode [ 309.630406][ T9573] device hsr_slave_1 entered promiscuous mode [ 309.682601][ T9573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.710809][ T9573] Cannot create hsr debugfs directory [ 309.784861][ T5010] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 13 [ 309.882797][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 310.104284][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 310.121077][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.165417][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.199519][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.200052][ T9768] loop4: detected capacity change from 0 to 256 [ 310.236092][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.256734][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.282869][ T9463] device veth0_vlan entered promiscuous mode [ 310.301862][ T4277] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 310.322068][ T9775] loop7: detected capacity change from 0 to 8 [ 310.340125][ T4277] FAT-fs (loop4): Filesystem has been set read-only [ 310.359358][ T9463] device veth1_vlan entered promiscuous mode [ 310.375874][ T4277] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 310.515926][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 310.533274][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 310.577621][ T9463] device veth0_macvtap entered promiscuous mode [ 310.641596][ T9573] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 310.735102][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 310.769686][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.921957][ T9463] device veth1_macvtap entered promiscuous mode [ 310.938297][ T9573] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 310.960316][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.974267][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.999133][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.112523][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.126570][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.131562][ T9799] loop7: detected capacity change from 0 to 1024 [ 311.137555][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.154556][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.252595][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.326958][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.352851][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.381969][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.393208][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.408876][ T9799] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 311.412087][ T9463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.426441][ T9573] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 311.439856][ T9573] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 311.549556][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.560047][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.591922][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.613419][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.635261][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.666684][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.692582][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.711385][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.754805][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.787696][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.800004][ T9463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.824140][ T9463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.854157][ T9463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.868472][ T9335] EXT4-fs (loop7): unmounting filesystem. [ 311.892366][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.964072][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.022281][ T9463] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.047688][ T9813] loop7: detected capacity change from 0 to 256 [ 312.064600][ T9463] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.102014][ T9463] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.121641][ T9816] IPv4: Oversized IP packet from 127.202.26.0 [ 312.140751][ T9463] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.171732][ T9813] FAT-fs (loop7): Directory bread(block 64) failed [ 312.241871][ T9813] FAT-fs (loop7): Directory bread(block 65) failed [ 312.303614][ T9813] FAT-fs (loop7): Directory bread(block 66) failed [ 312.310196][ T9813] FAT-fs (loop7): Directory bread(block 67) failed [ 312.399933][ T9813] FAT-fs (loop7): Directory bread(block 68) failed [ 312.402277][ T9821] loop1: detected capacity change from 0 to 1024 [ 312.423279][ T9813] FAT-fs (loop7): Directory bread(block 69) failed [ 312.429926][ T9813] FAT-fs (loop7): Directory bread(block 70) failed [ 312.452604][ T9813] FAT-fs (loop7): Directory bread(block 71) failed [ 312.459680][ T9813] FAT-fs (loop7): Directory bread(block 72) failed [ 312.474290][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.482113][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.529544][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.542681][ T9813] FAT-fs (loop7): Directory bread(block 73) failed [ 312.569467][ T9573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.652604][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.661648][ T8358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.686069][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.691002][ T8358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.745099][ T9573] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.758908][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.823636][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.833018][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.846760][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.855209][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.863699][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.877153][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.884961][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 312.895053][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.913299][ T8360] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.920433][ T8360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.951080][ T26] audit: type=1800 audit(1786173087.205:57): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1620" name="file2" dev="loop7" ino=1048688 res=0 errno=0 [ 312.974061][ T47] hfsplus: b-tree write err: -5, ino 8 [ 313.141266][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.186629][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.231306][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.253096][ T8360] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.260269][ T8360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.270279][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.279434][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.314739][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.329722][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.339448][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.352228][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.403887][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.423536][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.429316][ T9838] binder: 9837:9838 ioctl 40046205 0 returned -22 [ 313.451140][ T9573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.461734][ T130] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 313.474187][ T9573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.482204][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.498084][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.509066][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.642796][ T130] usb 2-1: Using ep0 maxpacket: 8 [ 313.722304][ T130] usb 2-1: unable to get BOS descriptor or descriptor too short [ 313.744636][ T130] usb 2-1: no configurations [ 313.750350][ T130] usb 2-1: can't read configurations, error -22 [ 313.935183][ T9825] chnl_net:caif_netlink_parms(): no params data found [ 314.090130][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.097785][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.106286][ T9825] device bridge_slave_0 entered promiscuous mode [ 314.116752][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.124969][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.137040][ T9825] device bridge_slave_1 entered promiscuous mode [ 314.166220][ T9825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.178487][ T9825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.255906][ T9825] team0: Port device team_slave_0 added [ 314.269754][ T9573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.283618][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.291955][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.316792][ T9825] team0: Port device team_slave_1 added [ 314.366459][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.412707][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.488526][ T9874] loop1: detected capacity change from 0 to 512 [ 314.512365][ T9825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.550046][ T9874] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.1632: iget: bad i_size value: 38620345925642 [ 314.564633][ T9825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.571596][ T9825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.597530][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.614848][ T9874] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1632: couldn't read orphan inode 15 (err -117) [ 314.627520][ T9874] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 314.662819][ T9874] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1632: bg 0: block 5: invalid block bitmap [ 314.757164][ T9825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.838345][ T9825] device hsr_slave_0 entered promiscuous mode [ 314.880986][ T9825] device hsr_slave_1 entered promiscuous mode [ 314.909170][ T9825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.929180][ T9825] Cannot create hsr debugfs directory [ 315.002946][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 315.045095][ T8111] EXT4-fs (loop1): unmounting filesystem. [ 315.625921][ T4632] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.686442][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.708277][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.906581][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.923544][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.965796][ T9573] device veth0_vlan entered promiscuous mode [ 316.018436][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.053143][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.063170][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.073064][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.094093][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.101348][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.154346][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.162993][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.178527][ T9573] device veth1_vlan entered promiscuous mode [ 316.292756][ T22] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 316.328711][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 316.344928][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.368324][ T9573] device veth0_macvtap entered promiscuous mode [ 316.409363][ T9573] device veth1_macvtap entered promiscuous mode [ 316.466520][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.493158][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.506447][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.517438][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.527715][ T22] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 316.539796][ T22] usb 9-1: config 0 interface 0 has no altsetting 0 [ 316.547881][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.559360][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.571945][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.583074][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.593817][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.605193][ T22] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 316.614457][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.624675][ T22] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 316.634048][ T22] usb 9-1: Product: syz [ 316.638290][ T22] usb 9-1: Manufacturer: syz [ 316.651229][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.670605][ T22] usb 9-1: SerialNumber: syz [ 316.676183][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.695626][ T22] usb 9-1: config 0 descriptor?? [ 316.708747][ T22] usb 9-1: selecting invalid altsetting 0 [ 316.716117][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.841939][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 316.858997][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 316.873522][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.883532][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.922841][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.967937][ T8450] usb 9-1: USB disconnect, device number 2 [ 316.967988][ C0] usb 9-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 316.985934][ C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 316.987976][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.052545][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.064600][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.074704][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.082690][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 317.085592][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.101762][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.112594][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.123087][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.133861][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.144055][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.154778][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.167862][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.179858][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 317.189727][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 317.219442][ T9573] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.247482][ T9573] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.272462][ T9573] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.282691][ T9573] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.382794][ T9825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 317.413495][ T9825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.420583][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.427044][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.490331][ T9825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.531875][ T9901] chnl_net:caif_netlink_parms(): no params data found [ 317.606455][ T4632] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.618044][ T4632] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.643105][ T9825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.864714][ T4632] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.875155][ T4632] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.944134][ T9927] loop8: detected capacity change from 0 to 4096 [ 318.012653][ T9927] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 318.120305][ T4632] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.131341][ T4632] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.175635][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.192541][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.203938][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 318.259491][ T4632] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.271139][ T4632] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.335997][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 318.378903][ T9901] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.400618][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.421833][ T9901] device bridge_slave_0 entered promiscuous mode [ 318.441641][ T9937] netlink: 'syz.7.1644': attribute type 2 has an invalid length. [ 318.487260][ T9938] netlink: 'syz.7.1644': attribute type 2 has an invalid length. [ 318.518687][ T9940] loop8: detected capacity change from 0 to 16 [ 318.522911][ T9938] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.1644'. [ 318.537871][ T9940] erofs: (device loop8): mounted with root inode @ nid 36. [ 318.554443][ T9901] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.561565][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.580578][ T9901] device bridge_slave_1 entered promiscuous mode [ 318.591198][ T4288] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 318.609995][ T9940] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 318.704376][ T26] audit: type=1800 audit(1786173092.955:58): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1645" name="file2" dev="overlay" ino=89 res=0 errno=0 [ 318.784037][ T9825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.803278][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.811141][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.823620][ T9901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.844442][ T9901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.919304][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 318.928843][ T9945] loop7: detected capacity change from 0 to 2048 [ 318.965787][ T9825] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.973723][ T9945] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=2362, location=2362 [ 319.025579][ T9945] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 319.058488][ T9945] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 319.108083][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.118231][ T9945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.128318][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.162839][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 319.180082][ T26] audit: type=1800 audit(1786173093.435:59): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1647" name="file1" dev="loop7" ino=1346 res=0 errno=0 [ 319.280772][ T9901] team0: Port device team_slave_0 added [ 319.331037][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.358434][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.394322][ T9956] loop9: detected capacity change from 0 to 128 [ 319.414038][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.421190][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.447948][ T9956] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 319.498053][ T9956] hpfs: filesystem error: improperly stopped [ 319.523079][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.527093][ T9956] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 319.553579][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.570374][ T9956] [ 319.575368][ T9956] hpfs: You really don't want any checks? You are crazy... [ 319.612652][ T9956] hpfs: Code page index out of array [ 319.620199][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.627359][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.641080][ T9956] hpfs: code page support is disabled [ 319.672952][ T9901] team0: Port device team_slave_1 added [ 319.673988][ T9956] hpfs: hpfs_map_4sectors(): unaligned read [ 319.679257][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.696509][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.717887][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.736398][ T9956] hpfs: hpfs_map_4sectors(): unaligned read [ 319.740064][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.742326][ T9956] hpfs: filesystem error: unable to find root dir [ 319.757808][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.772654][ T9956] [ 319.879796][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.894446][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.895444][ T9956] hpfs: hpfs_map_4sectors(): unaligned read [ 319.938647][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.991593][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.037230][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.073848][ T9901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.080838][ T9901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.251501][ T9901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.282649][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 320.304451][ T9901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.311451][ T9901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.364785][ T9901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.417076][ T9825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.469893][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.513049][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.524288][ T9982] input: syz0 as /devices/virtual/input/input19 [ 320.705258][ T9901] device hsr_slave_0 entered promiscuous mode [ 320.764440][ T9901] device hsr_slave_1 entered promiscuous mode [ 320.783753][ T9901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.805751][ T9901] Cannot create hsr debugfs directory [ 320.997775][ T9997] loop7: detected capacity change from 0 to 512 [ 321.033544][ T4632] bond1: (slave ip6erspan0): Releasing active interface [ 321.102100][ T9997] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 321.188196][ T9997] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.1661: bad orphan inode 131083 [ 321.244561][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 321.300100][ T9997] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 321.467833][T10009] loop8: detected capacity change from 0 to 164 [ 321.499119][ T9335] EXT4-fs (loop7): unmounting filesystem. [ 321.678251][T10015] input: syz1 as /devices/virtual/input/input20 [ 321.924845][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.938938][T10027] loop9: detected capacity change from 0 to 128 [ 321.945520][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.047918][T10027] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 322.124117][T10027] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 322.333171][T10033] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1669'. [ 322.362576][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 322.443912][ T9573] EXT4-fs (loop9): unmounting filesystem. [ 322.615002][T10041] loop9: detected capacity change from 0 to 64 [ 322.635981][T10041] hfs: unable to parse mount options [ 322.693648][ T9825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.096258][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.133852][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.203548][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 323.436343][ T4640] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 323.508130][T10049] loop8: detected capacity change from 0 to 32768 [ 323.596962][T10049] XFS (loop8): Mounting V5 Filesystem [ 323.657010][ T4640] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 323.667350][ T4640] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.678166][ T4640] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 323.687663][ T4640] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.709407][ T4640] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.710181][ T9825] device veth0_vlan entered promiscuous mode [ 323.719899][ T4640] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.746884][ T4640] usb 10-1: Product: syz [ 323.751374][ T4640] usb 10-1: Manufacturer: syz [ 323.761021][ T4640] cdc_wdm 10-1:1.0: skipping garbage [ 323.770612][ T4640] cdc_wdm 10-1:1.0: skipping garbage [ 323.780430][ T4640] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 323.786784][ T4640] cdc_wdm 10-1:1.0: Unknown control protocol [ 323.808538][T10071] loop7: detected capacity change from 0 to 512 [ 323.826200][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.838626][T10049] XFS (loop8): Ending clean mount [ 323.854310][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.890291][ T26] audit: type=1800 audit(1786173098.145:60): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1673" name="file1" dev="loop8" ino=6150 res=0 errno=0 [ 324.027409][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.037700][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.051709][ T9825] device veth1_vlan entered promiscuous mode [ 324.055207][T10071] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 324.077523][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 324.084282][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 324.098548][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 324.102966][T10071] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.105274][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 324.138697][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 324.145452][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 324.152740][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 324.159457][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 324.170047][ T4316] usb 10-1: USB disconnect, device number 2 [ 324.170374][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.244455][ T8362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.302779][ T9825] device veth0_macvtap entered promiscuous mode [ 324.332651][ T9463] XFS (loop8): Unmounting Filesystem [ 324.349595][T10085] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 324.385958][T10085] EXT4-fs (loop7): Remounting filesystem read-only [ 324.443349][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 324.531372][ T9825] device veth1_macvtap entered promiscuous mode [ 324.617332][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.639770][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.650664][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.661938][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.672284][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.693441][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.703726][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.722358][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.732756][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.744635][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.755131][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.766790][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.788290][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.828178][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.842351][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.856489][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.884984][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.904610][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.923358][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.032035][ T9335] EXT4-fs (loop7): unmounting filesystem. [ 325.105460][T10093] loop9: detected capacity change from 0 to 2048 [ 325.126853][T10093] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=2362, location=2362 [ 325.213350][T10093] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 325.227071][T10093] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 325.258631][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.279110][T10093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.283666][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.319966][ T26] audit: type=1800 audit(1786173099.575:61): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1681" name="file1" dev="loop9" ino=1346 res=0 errno=0 [ 325.324578][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.457698][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.490023][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.539229][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.588910][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.629481][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.653344][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.705945][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.738402][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.749150][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.759238][ T9825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.776795][ T9825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.813960][ T9825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.863577][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.882586][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.920389][ C1] Unknown status report in ack skb [ 326.060750][ T4632] device hsr_slave_0 left promiscuous mode [ 326.091106][ T4632] device hsr_slave_1 left promiscuous mode [ 326.145881][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.155150][ T4632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.163932][ T4632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.172051][ T4632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.223610][ T4632] device bridge_slave_1 left promiscuous mode [ 326.229983][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.261772][ T4632] device bridge_slave_0 left promiscuous mode [ 326.282855][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.288674][T10113] loop7: detected capacity change from 0 to 4096 [ 326.435570][ T4632] device veth1_macvtap left promiscuous mode [ 326.442051][ T4632] device veth0_macvtap left promiscuous mode [ 326.449390][ T4632] device veth1_vlan left promiscuous mode [ 326.461505][ T4632] device veth0_vlan left promiscuous mode [ 326.682788][ T4643] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 326.755180][ T4632] bond2 (unregistering): (slave geneve2): Releasing active interface [ 326.904373][ T4643] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.922553][ T4643] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.940545][ T4643] usb 10-1: config 0 interface 0 has no altsetting 0 [ 326.951408][ T4643] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 326.960726][ T4643] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.985762][ T4632] bond2 (unregistering): Released all slaves [ 326.992336][ T4643] usb 10-1: config 0 descriptor?? [ 327.218767][ T4632] bond1 (unregistering): Released all slaves [ 327.421870][ T4643] mcp2221 0003:04D8:00DD.0012: unbalanced delimiter at end of report description [ 327.431940][ T4643] mcp2221 0003:04D8:00DD.0012: can't parse reports [ 327.438659][ T4643] mcp2221: probe of 0003:04D8:00DD.0012 failed with error -22 [ 327.632152][ T4316] usb 10-1: USB disconnect, device number 3 [ 328.007510][ T4632] team0 (unregistering): Port device team_slave_1 removed [ 328.072258][ T4632] team0 (unregistering): Port device team_slave_0 removed [ 328.134875][ T4632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.514709][ T4640] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 328.700127][ T4632] bond0 (unregistering): Released all slaves [ 328.739869][ T4640] usb 10-1: unable to get BOS descriptor or descriptor too short [ 328.778442][ T4640] usb 10-1: not running at top speed; connect to a high speed hub [ 328.796968][ T4640] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.815867][ T4640] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.830677][ T4640] usb 10-1: string descriptor 0 read error: -22 [ 328.840896][ T4640] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.850455][ T4640] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.882241][ T9825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.891200][ T9825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.893600][ T4640] usb 10-1: 0:2 : does not exist [ 328.900560][ T9825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.916842][ T9825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.054263][ T9901] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 329.104574][ T9901] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 329.143203][ T9901] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.231804][ T9901] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.349475][ T8364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.369176][ T8364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.380054][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.439743][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.466899][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.521933][ T8364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 329.604014][T10129] loop8: detected capacity change from 0 to 512 [ 329.698636][T10129] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 329.763869][T10129] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.799830][ T9901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.928488][ T9901] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.950943][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.966649][T10142] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 330.008714][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.010151][T10142] EXT4-fs (loop8): Remounting filesystem read-only [ 330.059478][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.093353][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.101994][ T8358] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.109340][ T8358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.135640][ T4640] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 330.155501][ T4640] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 330.168776][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.187400][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.199925][ T8358] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.207117][ T8358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.218792][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.230486][ T4640] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 330.245723][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.254050][ T4640] usb 10-1: USB disconnect, device number 4 [ 330.359508][ T4632] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.400938][ T4632] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.467883][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.518325][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.550424][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.566043][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.585139][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.610291][ T8358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.706690][ T4632] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.737213][ T4632] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.787859][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.815542][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.852563][ T9463] EXT4-fs (loop8): unmounting filesystem. [ 330.854009][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.882719][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.047425][ T4632] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.059075][T10161] loop0: detected capacity change from 0 to 64 [ 331.118144][ T4632] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.175281][ T9901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.333123][ T4632] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.404248][ T4632] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.470284][T10168] loop8: detected capacity change from 0 to 4096 [ 331.570944][T10168] EXT4-fs (loop8): Test dummy encryption mode enabled [ 331.667761][T10168] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 331.739590][T10174] loop7: detected capacity change from 0 to 4096 [ 331.893331][T10184] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.952008][T10174] overlayfs: upper fs does not support tmpfile. [ 331.961450][T10174] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 331.968993][T10174] overlayfs: failed to set xattr on upper [ 331.974836][T10174] overlayfs: ...falling back to index=off,metacopy=off. [ 332.336684][T10168] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 332.378882][ T4632] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.407635][T10168] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 332.480354][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.526202][ T8356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.561496][ T9901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.610208][ T9463] EXT4-fs (loop8): unmounting filesystem. [ 332.723236][ T4632] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.941483][T10201] loop9: detected capacity change from 0 to 2048 [ 333.036130][T10201] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 333.051742][ T4632] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.104466][T10201] EXT4-fs (loop9): shut down requested (1) [ 333.336790][ T9573] EXT4-fs (loop9): unmounting filesystem. [ 333.458948][ T4632] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.805453][T10223] block device autoloading is deprecated and will be removed. [ 334.241898][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.262241][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.302299][ T9901] device veth0_vlan entered promiscuous mode [ 334.574986][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.588736][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.622888][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1725'. [ 334.640599][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1725'. [ 334.650140][T10256] netlink: 'syz.8.1725': attribute type 6 has an invalid length. [ 334.681914][T10256] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.692360][T10256] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.701144][T10256] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.709940][T10256] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.734127][ T4632] tipc: Left network mode [ 334.734126][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1725'. [ 334.748772][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1725'. [ 334.848245][T10256] netlink: 'syz.8.1725': attribute type 6 has an invalid length. [ 334.915187][ T9901] device veth1_vlan entered promiscuous mode [ 334.925362][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.954634][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.993265][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.266545][T10269] loop0: detected capacity change from 0 to 4096 [ 335.354467][T10269] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 335.410357][T10269] ntfs3: loop0: Failed to load $Extend. [ 335.468118][ T4632] bond1: (slave ip6erspan0): Releasing active interface [ 335.885424][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 335.927588][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.966728][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.287121][ T9901] device veth0_macvtap entered promiscuous mode [ 336.516080][ T9901] device veth1_macvtap entered promiscuous mode [ 336.860514][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.886837][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.900070][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.900332][T10331] netlink: 22 bytes leftover after parsing attributes in process `syz.8.1740'. [ 336.933237][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.951147][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.970666][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.980853][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.001444][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.012339][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.033960][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.045873][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.057172][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.067534][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.078546][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.106969][ T9901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.249134][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.285563][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.307905][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.318427][T10341] loop7: detected capacity change from 0 to 64 [ 337.347457][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.397780][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.428959][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.451896][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.485792][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.511577][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.522336][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.571315][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.581588][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.592264][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.602281][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.651541][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.674298][ T9901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.693443][ T9901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.729558][ T9901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.956186][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.972787][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.985003][ T9901] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.995290][ T9901] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.006743][ T9901] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.021624][ T9901] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.262096][ T8364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.288894][ T8364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.323473][ T8360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.763392][ T8360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.805567][ T8360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.813315][ T4317] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 339.821333][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.012688][ T4317] usb 9-1: Using ep0 maxpacket: 32 [ 340.042890][ T4317] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 340.087151][ T4317] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 340.122151][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 340.178731][ T4317] usb 9-1: Product: syz [ 340.192500][ T4317] usb 9-1: Manufacturer: syz [ 340.206073][ T4317] usb 9-1: SerialNumber: syz [ 340.231291][ T4317] usb 9-1: config 0 descriptor?? [ 340.243547][T10402] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 340.263482][ T4317] hub 9-1:0.0: bad descriptor, ignoring hub [ 340.269447][ T4317] hub: probe of 9-1:0.0 failed with error -5 [ 340.489175][T10432] loop7: detected capacity change from 0 to 1024 [ 340.544801][T10432] EXT4-fs: Ignoring removed oldalloc option [ 340.551598][T10432] EXT4-fs: Ignoring removed bh option [ 340.622712][ T130] usb 9-1: USB disconnect, device number 3 [ 340.679824][T10432] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 340.724370][T10432] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.757717][ T22] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 340.788595][T10432] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.1767: lblock 0 mapped to illegal pblock 0 (length 1) [ 340.826759][ T22] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.840902][T10441] loop5: detected capacity change from 0 to 2048 [ 340.858207][T10441] UDF-fs: error (device loop5): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 340.929212][T10441] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 340.948867][T10432] EXT4-fs (loop7): Remounting filesystem read-only [ 340.996581][T10445] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.1767: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.104785][T10445] EXT4-fs (loop7): Remounting filesystem read-only [ 341.165925][T10430] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.1767: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.192554][T10439] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 341.193200][T10446] fido_id[10446]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 341.257137][T10430] EXT4-fs (loop7): Remounting filesystem read-only [ 341.283236][T10439] EXT4-fs (loop7): Remounting filesystem read-only [ 341.304114][T10447] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: comm syz.7.1767: lblock 0 mapped to illegal pblock 0 (length 1) [ 341.327359][T10451] loop5: detected capacity change from 0 to 2048 [ 341.377978][T10447] EXT4-fs (loop7): Remounting filesystem read-only [ 341.389755][T10451] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 341.414973][T10447] EXT4-fs error (device loop7): ext4_ext_remove_space:2945: inode #15: comm syz.7.1767: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 341.497317][T10447] EXT4-fs (loop7): Remounting filesystem read-only [ 341.507721][T10451] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 341.529784][T10451] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 341.530288][T10462] loop8: detected capacity change from 0 to 16 [ 341.538499][ C0] ------------[ cut here ]------------ [ 341.538540][ C0] WARNING: CPU: 0 PID: 10462 at net/mac80211/tx.c:4961 __ieee80211_beacon_get+0x1141/0x1520 [ 341.538583][ C0] Modules linked in: [ 341.538602][ C0] CPU: 0 PID: 10462 Comm: syz.8.1774 Not tainted syzkaller #0 [ 341.538623][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.538640][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 341.538663][ C0] Code: f7 4c 89 ef e8 80 75 07 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 db d0 ce f7 0f 0b e9 61 f8 ff ff e8 cf d0 ce f7 <0f> 0b e9 85 fb ff ff e8 c3 d0 ce f7 48 c7 c7 a0 fc fb 8d 4c 89 e6 [ 341.538679][ C0] RSP: 0018:ffffc90000007a48 EFLAGS: 00010246 [ 341.538692][ C0] RAX: ffffffff89b35d51 RBX: dffffc0000000000 RCX: ffff88802c011e00 [ 341.538704][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.538722][ C0] RBP: 0000000000000000 R08: ffff88802c011e00 R09: 0000000000000003 [ 341.538736][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805e11e228 [ 341.538748][ C0] R13: ffff888062488824 R14: ffff88805e11e760 R15: ffff888062488800 [ 341.538761][ C0] FS: 00007fe5d4ed46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 341.538777][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.538801][ C0] CR2: 00007fe5c9df8fc5 CR3: 0000000049463000 CR4: 00000000003506f0 [ 341.538817][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 341.538829][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 341.538839][ C0] Call Trace: [ 341.538847][ C0] [ 341.538855][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 341.538884][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 341.538912][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 341.538937][ C0] __iterate_interfaces+0x225/0x4c0 [ 341.538959][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 341.538976][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 341.538998][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 341.539015][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 341.539041][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 341.539072][ C0] __hrtimer_run_queues+0x522/0xc90 [ 341.539099][ C0] ? hw_scan_work+0xf00/0xf00 [ 341.539130][ C0] ? hrtimer_interrupt+0x980/0x980 [ 341.539153][ C0] hrtimer_run_softirq+0x173/0x290 [ 341.539176][ C0] handle_softirqs+0x291/0x910 [ 341.539196][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 341.539213][ C0] ? do_softirq+0x210/0x210 [ 341.539226][ C0] ? hrtimer_interrupt+0x775/0x980 [ 341.539247][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 341.539266][ C0] __irq_exit_rcu+0x13b/0x230 [ 341.539282][ C0] ? irq_exit_rcu+0x20/0x20 [ 341.539307][ C0] irq_exit_rcu+0x5/0x20 [ 341.539320][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 341.539339][ C0] [ 341.539345][ C0] [ 341.539351][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 341.539371][ C0] RIP: 0010:vprintk_emit+0x48b/0x6a0 [ 341.539394][ C0] Code: 86 01 00 00 e8 c6 0a 1b 00 41 89 df 4d 85 f6 48 8b 5c 24 08 75 07 e8 b4 0a 1b 00 eb 06 e8 ad 0a 1b 00 fb 48 c7 c7 20 1e b2 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fd d4 [ 341.539408][ C0] RSP: 0018:ffffc900039a7240 EFLAGS: 00000287 [ 341.539423][ C0] RAX: ffffffff81672373 RBX: ffffffff81672205 RCX: 0000000000080000 [ 341.539436][ C0] RDX: ffffc9000cc19000 RSI: 000000000003d01a RDI: ffffffff8cb21e20 [ 341.539449][ C0] RBP: ffffc900039a7330 R08: ffffffff90b102ff R09: 1ffffffff216205f [ 341.539461][ C0] R10: dffffc0000000000 R11: fffffbfff2162060 R12: dffffc0000000000 [ 341.539473][ C0] R13: 1ffff92000734e4c R14: 0000000000000200 R15: 000000000000002c [ 341.539486][ C0] ? vprintk_emit+0x315/0x6a0 [ 341.539507][ C0] ? vprintk_emit+0x483/0x6a0 [ 341.539533][ C0] ? vprintk_emit+0x315/0x6a0 [ 341.539555][ C0] ? printk_sprint+0x460/0x460 [ 341.539581][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 341.539599][ C0] ? _raw_spin_unlock+0x40/0x40 [ 341.539622][ C0] _printk+0xda/0x130 [ 341.539645][ C0] ? load_image+0x410/0x410 [ 341.539663][ C0] ? kernfs_put+0x442/0x480 [ 341.539683][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 341.539703][ C0] set_capacity_and_notify+0x348/0x370 [ 341.539741][ C0] ? set_capacity+0xc0/0xc0 [ 341.539767][ C0] ? sysfs_create_group+0x20/0x20 [ 341.539789][ C0] ? loop_set_status_from_info+0x173/0x2a0 [ 341.539817][ C0] loop_set_size+0x44/0xa0 [ 341.539835][ C0] loop_configure+0xd82/0x1240 [ 341.539872][ C0] lo_ioctl+0x21c/0x1d10 [ 341.539896][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 341.539924][ C0] ? lo_release+0x1f0/0x1f0 [ 341.539955][ C0] ? unwind_next_frame+0x1719/0x1fd0 [ 341.539973][ C0] ? deref_stack_reg+0x18e/0x220 [ 341.539995][ C0] ? is_bpf_text_address+0x28b/0x2a0 [ 341.540009][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 341.540025][ C0] ? kernel_text_address+0x9c/0xd0 [ 341.540046][ C0] ? __kernel_text_address+0x9/0x30 [ 341.540063][ C0] ? unwind_get_return_address+0x49/0x80 [ 341.540080][ C0] ? stack_trace_save+0xf0/0xf0 [ 341.540099][ C0] ? arch_stack_walk+0xf2/0x140 [ 341.540125][ C0] ? stack_trace_save+0xa6/0xf0 [ 341.540145][ C0] ? __stack_depot_save+0x35/0x480 [ 341.540162][ C0] ? security_file_ioctl+0x6c/0xa0 [ 341.540179][ C0] ? __se_sys_ioctl+0x48/0x170 [ 341.540198][ C0] ? do_syscall_64+0x4c/0xa0 [ 341.540223][ C0] ? kasan_set_track+0x60/0x70 [ 341.540243][ C0] ? kasan_set_track+0x4b/0x70 [ 341.540259][ C0] ? kasan_save_free_info+0x27/0x40 [ 341.540273][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 341.540292][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 341.540311][ C0] ? __kmem_cache_free+0xb6/0x200 [ 341.540327][ C0] ? tomoyo_path_number_perm+0x4fb/0x650 [ 341.540343][ C0] ? security_file_ioctl+0x6c/0xa0 [ 341.540358][ C0] ? __se_sys_ioctl+0x48/0x170 [ 341.540376][ C0] ? do_syscall_64+0x4c/0xa0 [ 341.540394][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.540441][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 341.540465][ C0] ? do_vfs_ioctl+0x1be3/0x1d40 [ 341.540485][ C0] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 341.540506][ C0] ? tomoyo_path_number_perm+0x205/0x650 [ 341.540524][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 341.540548][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 341.540569][ C0] ? tomoyo_path_number_perm+0x4fb/0x650 [ 341.540592][ C0] ? blkdev_common_ioctl+0x6c1/0x2090 [ 341.540614][ C0] ? tomoyo_path_number_perm+0x205/0x650 [ 341.540630][ C0] ? tomoyo_path_number_perm+0x5a4/0x650 [ 341.540646][ C0] ? blkdev_bszset+0x200/0x200 [ 341.540666][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 341.540710][ C0] ? lo_release+0x1f0/0x1f0 [ 341.540742][ C0] blkdev_ioctl+0x37b/0x740 [ 341.540767][ C0] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 341.540793][ C0] ? bpf_lsm_file_ioctl+0x5/0x10 [ 341.540816][ C0] ? security_file_ioctl+0x7c/0xa0 [ 341.540833][ C0] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 341.540854][ C0] __se_sys_ioctl+0xfa/0x170 [ 341.540877][ C0] do_syscall_64+0x4c/0xa0 [ 341.540897][ C0] ? clear_bhb_loop+0x60/0xb0 [ 341.540936][ C0] ? clear_bhb_loop+0x60/0xb0 [ 341.540974][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.540993][ C0] RIP: 0033:0x7fe5d3f9dd6b [ 341.541017][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 341.541030][ C0] RSP: 002b:00007fe5d4ed3db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.541047][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe5d3f9dd6b [ 341.541058][ C0] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004 [ 341.541068][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.541077][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 341.541087][ C0] R13: 00007fe5d4ed3ee0 R14: 00007fe5d4ed3ea0 R15: 00007fe5c9df7000 [ 341.541110][ C0] [ 341.541123][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 341.541132][ C0] CPU: 0 PID: 10462 Comm: syz.8.1774 Not tainted syzkaller #0 [ 341.541148][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.541156][ C0] Call Trace: [ 341.541162][ C0] [ 341.541167][ C0] dump_stack_lvl+0x188/0x24e [ 341.541187][ C0] ? memcpy+0x3c/0x60 [ 341.541202][ C0] ? show_regs_print_info+0x12/0x12 [ 341.541222][ C0] ? load_image+0x410/0x410 [ 341.541248][ C0] panic+0x2d3/0x710 [ 341.541266][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 341.541291][ C0] __warn+0x2f8/0x4f0 [ 341.541304][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 341.541322][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 341.541337][ C0] report_bug+0x2ba/0x4f0 [ 341.541359][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 341.541378][ C0] handle_bug+0x3a/0x70 [ 341.541398][ C0] exc_invalid_op+0x16/0x40 [ 341.541418][ C0] asm_exc_invalid_op+0x16/0x20 [ 341.541436][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 341.541453][ C0] Code: f7 4c 89 ef e8 80 75 07 f8 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 db d0 ce f7 0f 0b e9 61 f8 ff ff e8 cf d0 ce f7 <0f> 0b e9 85 fb ff ff e8 c3 d0 ce f7 48 c7 c7 a0 fc fb 8d 4c 89 e6 [ 341.541466][ C0] RSP: 0018:ffffc90000007a48 EFLAGS: 00010246 [ 341.541479][ C0] RAX: ffffffff89b35d51 RBX: dffffc0000000000 RCX: ffff88802c011e00 [ 341.541490][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.541499][ C0] RBP: 0000000000000000 R08: ffff88802c011e00 R09: 0000000000000003 [ 341.541508][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805e11e228 [ 341.541517][ C0] R13: ffff888062488824 R14: ffff88805e11e760 R15: ffff888062488800 [ 341.541533][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 341.541553][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 341.541568][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 341.541591][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 341.541613][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 341.541636][ C0] __iterate_interfaces+0x225/0x4c0 [ 341.541657][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 341.541671][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 341.541692][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 341.541708][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 341.541752][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 341.541779][ C0] __hrtimer_run_queues+0x522/0xc90 [ 341.541799][ C0] ? hw_scan_work+0xf00/0xf00 [ 341.541826][ C0] ? hrtimer_interrupt+0x980/0x980 [ 341.541852][ C0] hrtimer_run_softirq+0x173/0x290 [ 341.541872][ C0] handle_softirqs+0x291/0x910 [ 341.541890][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 341.541907][ C0] ? do_softirq+0x210/0x210 [ 341.541920][ C0] ? hrtimer_interrupt+0x775/0x980 [ 341.541940][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 341.541959][ C0] __irq_exit_rcu+0x13b/0x230 [ 341.541974][ C0] ? irq_exit_rcu+0x20/0x20 [ 341.541997][ C0] irq_exit_rcu+0x5/0x20 [ 341.542009][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 341.542025][ C0] [ 341.542030][ C0] [ 341.542037][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 341.542061][ C0] RIP: 0010:vprintk_emit+0x48b/0x6a0 [ 341.542087][ C0] Code: 86 01 00 00 e8 c6 0a 1b 00 41 89 df 4d 85 f6 48 8b 5c 24 08 75 07 e8 b4 0a 1b 00 eb 06 e8 ad 0a 1b 00 fb 48 c7 c7 20 1e b2 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fd d4 [ 341.542101][ C0] RSP: 0018:ffffc900039a7240 EFLAGS: 00000287 [ 341.542117][ C0] RAX: ffffffff81672373 RBX: ffffffff81672205 RCX: 0000000000080000 [ 341.542131][ C0] RDX: ffffc9000cc19000 RSI: 000000000003d01a RDI: ffffffff8cb21e20 [ 341.542144][ C0] RBP: ffffc900039a7330 R08: ffffffff90b102ff R09: 1ffffffff216205f [ 341.542157][ C0] R10: dffffc0000000000 R11: fffffbfff2162060 R12: dffffc0000000000 [ 341.542169][ C0] R13: 1ffff92000734e4c R14: 0000000000000200 R15: 000000000000002c [ 341.542184][ C0] ? vprintk_emit+0x315/0x6a0 [ 341.542209][ C0] ? vprintk_emit+0x483/0x6a0 [ 341.542234][ C0] ? vprintk_emit+0x315/0x6a0 [ 341.542253][ C0] ? printk_sprint+0x460/0x460 [ 341.542271][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 341.542286][ C0] ? _raw_spin_unlock+0x40/0x40 [ 341.542306][ C0] _printk+0xda/0x130 [ 341.542331][ C0] ? load_image+0x410/0x410 [ 341.542349][ C0] ? kernfs_put+0x442/0x480 [ 341.542365][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 341.542380][ C0] set_capacity_and_notify+0x348/0x370 [ 341.542409][ C0] ? set_capacity+0xc0/0xc0 [ 341.542430][ C0] ? sysfs_create_group+0x20/0x20 [ 341.542451][ C0] ? loop_set_status_from_info+0x173/0x2a0 [ 341.542477][ C0] loop_set_size+0x44/0xa0 [ 341.542497][ C0] loop_configure+0xd82/0x1240 [ 341.542534][ C0] lo_ioctl+0x21c/0x1d10 [ 341.542556][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 341.542577][ C0] ? lo_release+0x1f0/0x1f0 [ 341.542594][ C0] ? unwind_next_frame+0x1719/0x1fd0 [ 341.542615][ C0] ? deref_stack_reg+0x18e/0x220 [ 341.542637][ C0] ? is_bpf_text_address+0x28b/0x2a0 [ 341.542655][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 341.542674][ C0] ? kernel_text_address+0x9c/0xd0 [ 341.542699][ C0] ? __kernel_text_address+0x9/0x30 [ 341.542729][ C0] ? unwind_get_return_address+0x49/0x80 [ 341.542749][ C0] ? stack_trace_save+0xf0/0xf0 [ 341.542770][ C0] ? arch_stack_walk+0xf2/0x140 [ 341.542797][ C0] ? stack_trace_save+0xa6/0xf0 [ 341.542821][ C0] ? __stack_depot_save+0x35/0x480 [ 341.542842][ C0] ? security_file_ioctl+0x6c/0xa0 [ 341.542859][ C0] ? __se_sys_ioctl+0x48/0x170 [ 341.542881][ C0] ? do_syscall_64+0x4c/0xa0 [ 341.542908][ C0] ? kasan_set_track+0x60/0x70 [ 341.542929][ C0] ? kasan_set_track+0x4b/0x70 [ 341.542950][ C0] ? kasan_save_free_info+0x27/0x40 [ 341.542965][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 341.542995][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 341.543014][ C0] ? __kmem_cache_free+0xb6/0x200 [ 341.543030][ C0] ? tomoyo_path_number_perm+0x4fb/0x650 [ 341.543046][ C0] ? security_file_ioctl+0x6c/0xa0 [ 341.543064][ C0] ? __se_sys_ioctl+0x48/0x170 [ 341.543084][ C0] ? do_syscall_64+0x4c/0xa0 [ 341.543105][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.543150][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 341.543177][ C0] ? do_vfs_ioctl+0x1be3/0x1d40 [ 341.543203][ C0] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 341.543234][ C0] ? tomoyo_path_number_perm+0x205/0x650 [ 341.543256][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 341.543278][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 341.543302][ C0] ? tomoyo_path_number_perm+0x4fb/0x650 [ 341.543322][ C0] ? blkdev_common_ioctl+0x6c1/0x2090 [ 341.543347][ C0] ? tomoyo_path_number_perm+0x205/0x650 [ 341.543384][ C0] ? tomoyo_path_number_perm+0x5a4/0x650 [ 341.543403][ C0] ? blkdev_bszset+0x200/0x200 [ 341.543426][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 341.543476][ C0] ? lo_release+0x1f0/0x1f0 [ 341.543498][ C0] blkdev_ioctl+0x37b/0x740 [ 341.543524][ C0] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 341.543551][ C0] ? bpf_lsm_file_ioctl+0x5/0x10 [ 341.543577][ C0] ? security_file_ioctl+0x7c/0xa0 [ 341.543597][ C0] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 341.543621][ C0] __se_sys_ioctl+0xfa/0x170 [ 341.543647][ C0] do_syscall_64+0x4c/0xa0 [ 341.543670][ C0] ? clear_bhb_loop+0x60/0xb0 [ 341.543691][ C0] ? clear_bhb_loop+0x60/0xb0 [ 341.543722][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.543744][ C0] RIP: 0033:0x7fe5d3f9dd6b [ 341.543761][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 341.543776][ C0] RSP: 002b:00007fe5d4ed3db0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.543795][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe5d3f9dd6b [ 341.543808][ C0] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004 [ 341.543819][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 341.543830][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 341.543841][ C0] R13: 00007fe5d4ed3ee0 R14: 00007fe5d4ed3ea0 R15: 00007fe5c9df7000 [ 341.543867][ C0] [ 341.544019][ C0] Kernel Offset: disabled [ 343.128404][ C0] Rebooting in 86400 seconds..