last executing test programs: 5.737985979s ago: executing program 0 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x4009000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x80}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 5.693130971s ago: executing program 2 (id=375): socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f00000004c0)=""/234}, 0x20) 5.602595703s ago: executing program 0 (id=376): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$eJzs3U9sHNX9APA367+JTbwGfmDgR0ihFYGCHZJITW9BoB4Rl95BIaERhqKGHoiAmB4QlRBFQpwqDlRcKJVSpCKBKlWop7anVr31hHqhUpVKQT20SImr2G/Wuy/72PXYnrV3Px/p67dv3ux8v2M7zszs7NsAjKzG2tfjxxeKEN759O1HX36q+Pjasrtaaxxa+1rEXjOEMNHWL5LtfR4XXLn80qlubRGOrn0t++GxS63nzoQQVsKh8Flohg+Xlr/84N1HDn/02vQtb55/5pUd2v2WdD8AAGAYXfzT8t/u+8cfH5j/6uLBk2Gqtbw8Pm/G/kw87j8SD5TL4+VG6OwXbdFuMllvLEYjWW8sWW88yTOeyTeRbGcis95kj3xjbcu67ScAAADsReV5bTMUjcWOfqOxuLh+3n/N53OTxeJzZ5fPnBtQoQAAAEBl/76wdtOtEEIIIYQQQgghhjhW5wZ9BQIAAAAYNel8YddZ2d6Zulpba/aX/9LDje7Ph21Q9+//1+efHnD+LkY8//uv+osDAEB1w3o0We5XeRxdzmOQziM4ljxvs8f/jWQ745usMzev4F6ZbzBXZ/p93a1y9W/25zgoufrT+TB3q1z96Tydu1Wu/qma66gqV3+XKz+7Uq7+fTXXUVWu/v0111FVrv6ZmuuoKlf/bM11VJWr/4aa66gqV/+BmuuoKlf/XrmtNld/s+Y6qsrVP19zHVXl6r+x5jqqytV/U811VJWr/+aa6xiUO2Nbfh8OZtab6XJOt1fO8QAAAGDU/df8f0IIIUR7rN8CMfg6hBBCCCG2NS4M+gIEAAAAMHDl+wLKd72vRuX4WI/x8fbx6Y0VyvGJHs+f7DE+1WMcAAAACOG3r5+57a1iY767rc6HV84btS98fDVUmMconY9ws/m3Ou/ZVvPvlXnLAAAAGC3F9z67ev+j770w/9XFgyfbzn6vxvPdch7Q8Xht4JPYL+8LmE36RXkOfbIzTyOzXnp94Ibc9h7f4o4CAADACCvP35uhaCy2nXc3Q6OxuLhxPr4QJoozZ5dPH4n98vNZ/jA3MXVt+UM11w0AAAD0b+N8v/v5f/k5vgthslh87uzymXPr/dnW8olG+3WBuY3lRft1gWay/Ghm+bHYLz+/8wdz+9aWL5764fJT273zAAAAMCLOvXj+mSeXl0//yAMPPPCg9WDQf5kAAIDt9sUXb0/8+Njs79bf/78x/93V+OBQ7Dfj3H5/jsvL+wTK9wFc9379JzrzzOXWe75zvWay3liMqaTu6bbthLX5BjufN5/L1+zczmQm30ySbzbJl85TMJ6sX3SZSzB0mZ+wXG8uWZ7Owzie5CiS/Hd3yQUAAAClpReefX7p3IvnHzz77JNPn3769HPHjp747okTRx76zkNLa/f1L7Xf3Q8AAADsRRs3/Q66EgAAAAAAAAAAAAAAAAAAABhddXyc2KD3EQAAAEbdvy6EEFaEyET5AYODrkPs5lidGnwNwx3Bv0MhhBBCbDGc94mVEFZX00+aBwAAANhZVy6/dKq9vc5Ksa35WltrrjdXY96ynX3wr/PXolzt0sOd10v2b2s1jLq6f//l3635p7qOv//q9uafDht/+0Jff/8anRs42dHb12/ee5d+udDKH0K4fbzP/On+P95vxk6Hk/z3hv7yr76X5H+io9foN/99Sf79fea/bv+f7zdjp/tj/oXYP3xPv/k7d7H8LS33o99fgG8n+/9U6Dd/sv/NPhMmHoj5AWAUtf43X70w2EK2WXmUUB5Pz8R+ub/xcDOkdz9s9vi/kWxnfMuVd263PA66NfanW3V05i1ttv7y+zIb2xsq1pnaK3eV5Orfrp/jTsvVP1FzHVXl6p+suY6qcvV3P3vffXL1T9dcR1W5+vu+EDFgufr3ynXlXP0zNddRVa7+2ZrrqCpX/2b/Hx+UXP0Haq6jqlz9czXXUVWu/oqX1WqXq3++5jqqytV/Y811VJWr/6aa66gqV//NNdcxKHfENnc+XJ5/zsWxst9M+lNdvpd9vxgCAAAA7Kh/7sp5INquHAy8FiGEEEIIIYY//rO6btB1CCF2LlZXB3n1gUHb2XczA7Bb+fs/2vz8R5uf/2jz8+frlK/EF0m/NNZjfLzH+ESP8clkPP19neoxflOy3dXyumZ0c4/x/4t7kBs/0OP5t/YYX+gxfluP8dt7jN/RYxwAAIDRcEtsnR8CAADA8Hr5V5+88Zt7n7g8/9XFgyfD5HXzzh+J/an42vrrsZ/Oe1+aiK/5/yT2fxHb38f278n67j8BAACAnVd+TozX/wEAAGB4lZ9T6vwfAAAAhtd8bJ3/AwAAwPC6MbbO/wEAAGCIFdPdF8e2vC5wd2z7ndcPANj9/j+2d8b2YGzviu03YlseB9wT22/WVB8AsH1+/v2fnnir2Jjv/1gyfiUuL9vrrKxfKSganTP574vt/th+q8960s8D6Dd/6UCfeXYq/9wW8wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6Ox9vX48YUihHc+ffvRn02+8Zdry+5qrXFo7WsRe80QwkTreeXoRv/XccUrl1861d5ejW0RjoYiFK3l4bFLrUwzIYSVcCh8Fprhw6XlLz9495HDH702fcub5595ZQe/BR37BwAAAMPofwEAAP//fccg7g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0x2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0xffff, 0x10000000002}, {0x0, 0x0, 0x28, 0xfffe, 0x1000000000000101}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 5.154637054s ago: executing program 2 (id=378): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x2, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="1400000009000000", 0x8) 4.797642762s ago: executing program 0 (id=387): r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x68e, &(0x7f0000000880)="$eJzs3c9vHGf9B/D3rNfrbL79pm6atCmqlKiRABGR2LFSMJcGhFAOFarKgbOVOInVTVoSF7kVouH3tYf8AeWQGweExD2iXLjArVcfKyG49IIRh0U7O7tee+21nR9eO7xe0XiemWee5/k8n52d2fXG2gD/s66cS/1hilw59+ZKZ3v1wVxr9cHcrV45yVSSWlLvrlL8q91uf5pcTnfJK52dVXfFduPcX5p/+7MvVj/vbtWrpTy+Nqrd7tyrlpxJMlGtn1R/V3fq78hO3RX9GXYSdraXOBi3ySTt0j/ud/f86C/P9WsGNLdqveOZDxwCRfe+OWQ6OVo90TuvA7p3xe49+1C7N+4AAAAAYB88v5a1rOTYuOMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAw6T6/v+iWmq98pkUve//b1T7UpUPltN7O/zh04oDAAAAAAAAAPbR6bWsZSXHetvtovzM/7Vy40T58//yfu5mMXdyPitZyHKWcyezSaYHOmqsLCwv35ntt+z9z4Dhlhe3bHlxh0CnqnXzScwaAAAAAAAAAJ45P8+V9c//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgICiSie6qXE70ytOp1ZMcSdLoHHcv+VuvfJg9HHcAAAAA8BjaI+pqA+Xn17KWlRzrtyvK9/wvle/7j+T93M5ylrKcVhZzrfxdQPddf231wVxr9cHcrc4yPMa3/7mncBtVWBPl1lYjnyqPaOZ6lso953M176YorqXWn9CpXjxbx/WzTkzFG12TowOq9wrXqnVn5h9X6yEf7Wmy2xn1y5Sp4V3TZUYm+xmZqWLrZOOF0ZnY46OzeaTZ1PrBntg00qZJbMj5G7sc72i17szn19vlfCw2Z+LiwNn30n9G5jz5yh9/98Obrdvv3Lx+99zBmdLuTFTr7nWlOZyJwcf95dFn3+HOxJCZMhMn+9tX8r38IOdyJm/lTpby4yxkOYs5k++WpYXqfC4GnvLbZOryhq23doqkUZ2h3QdrY0zZIabXyrbHspTv591cy2JeL/9dzGy+kUu5lPmBc/3kLq60tW2e9e3/3zL4s1+tCs0kv6nWpRv1nSb+lHXy+sJAXgevudNl3eCe9Swd38P9qJel348Opf6lqtAZ4xebbubjtTkTswOZeHF0Jn5bXlbudm5yNxfeG6zZ/upw/OOBQ351oO4SnfPleP9FxMazo1P3YlU3WS7r+WpUn7h029WG6k7267rP1HvbPlMb1Wu44Z4ulnUvb1k3V9adGqjb/Hqr1X899Cx8+APwzDr6taON5t+bf21+0vxl82bzzSPfmfrm1KuNTP558lv1mYkv114t/pBP8tP19/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCju/vBh+8stFqLdzYV2u32Rxv2JEPHHMJC7+vM9nHQV54bX+oaSQ5G5v/dbrerPcWj9lPs2wPX7phK+xGb/ynJ7g6uJ9mq6vS4H6+F1pgvTMBTd2H51nsX7n7w4deXbi3cWLyxeHv+0qX5mflLr89duL7UWpzp/hx3lMDTsH7TH3ckAAAAAAAAAAAAwG49xl8IZHqXB28/+pH9nCoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwSF05l/rDFJmdOT/T2V59MNfqLL3y+pH1JLUkxU+S4tPkcrpLpge6K7Yb5/7S/NuffbH6+Xpf9d7xtVHtdudeteRMkolq/aT6u/rY/RX9GXYSdraXOBi3/wYAAP//iJAA+A==") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x835, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x9e) 4.405751612s ago: executing program 0 (id=380): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000440)={0x40, 0x6, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.405618422s ago: executing program 2 (id=381): syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4004, &(0x7f0000000a40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) read$FUSE(r0, 0x0, 0x0) 4.190253828s ago: executing program 3 (id=382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfdff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x92}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) 4.038028811s ago: executing program 3 (id=383): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='5', 0x1) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) 3.437481426s ago: executing program 3 (id=384): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1}) syz_clone(0xc0000, 0x0, 0x19, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x500}) 3.436660026s ago: executing program 2 (id=393): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000180)=""/244, 0xf4}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0xfffffffffffffcdb, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c2122b97d1414260a2a66d7", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2.88030296s ago: executing program 1 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 2.564049437s ago: executing program 1 (id=388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00008863aaaaaaaaaaaa00000000000088a8400081"], 0x1a) 2.089037279s ago: executing program 2 (id=389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000088a2020100000800faff0700d06d6558b77917dd27803253b8a84b006558"], 0x44) 2.014745021s ago: executing program 1 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c9) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 1.62279295s ago: executing program 1 (id=391): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 1.008702865s ago: executing program 0 (id=392): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) readv(r0, &(0x7f0000002800)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) 990.566606ms ago: executing program 1 (id=394): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setreuid(0xffffffffffffffff, 0xee01) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 961.638816ms ago: executing program 2 (id=395): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x25, 0x559a, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) copy_file_range(r0, 0x0, r1, &(0x7f0000000080)=0x8010000, 0x400000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x143242, 0xd1) 842.44019ms ago: executing program 3 (id=396): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind(r0, &(0x7f0000000100)=@can={0x1d, r1, 0x1, 0x2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$unix(r0, &(0x7f0000004140)={0x0, 0x0, 0x0}, 0x20) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000380)={0x1d, r1}, 0x10, &(0x7f0000000400)={&(0x7f0000000480)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) 357.415661ms ago: executing program 3 (id=397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x7, 0x8, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f000000ae00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 100.194918ms ago: executing program 3 (id=398): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 99.227608ms ago: executing program 1 (id=399): r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000021f000/0x400000)=nil, 0x400000}) 0s ago: executing program 0 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1df) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 83.748087][ T5765] cgroup: Unknown subsys name 'net' [ 83.889850][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.544746][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.242504][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.255940][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.310926][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.320721][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.329399][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.337790][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.346010][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.355830][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.363824][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.372212][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.380157][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.388271][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.395506][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.403119][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.434958][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.444716][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.453452][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.462457][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.472702][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.488603][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.496416][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.505320][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.514149][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.522281][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.188643][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 88.223069][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 88.264171][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.324315][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 88.462260][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.470104][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.477928][ T5776] bridge_slave_0: entered allmulticast mode [ 88.485706][ T5776] bridge_slave_0: entered promiscuous mode [ 88.512638][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.519942][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.527524][ T5780] bridge_slave_0: entered allmulticast mode [ 88.534895][ T5780] bridge_slave_0: entered promiscuous mode [ 88.561095][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.568414][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.576043][ T5776] bridge_slave_1: entered allmulticast mode [ 88.583604][ T5776] bridge_slave_1: entered promiscuous mode [ 88.598889][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.606397][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.617003][ T5780] bridge_slave_1: entered allmulticast mode [ 88.624303][ T5780] bridge_slave_1: entered promiscuous mode [ 88.678167][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.685577][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.693548][ T5781] bridge_slave_0: entered allmulticast mode [ 88.700732][ T5781] bridge_slave_0: entered promiscuous mode [ 88.728797][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.745556][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.766433][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.774325][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.781721][ T5781] bridge_slave_1: entered allmulticast mode [ 88.789303][ T5781] bridge_slave_1: entered promiscuous mode [ 88.830775][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.854059][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.861276][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.868828][ T5782] bridge_slave_0: entered allmulticast mode [ 88.876617][ T5782] bridge_slave_0: entered promiscuous mode [ 88.900043][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.912578][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.925687][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.935477][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.943327][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.950626][ T5782] bridge_slave_1: entered allmulticast mode [ 88.958434][ T5782] bridge_slave_1: entered promiscuous mode [ 88.981098][ T5780] team0: Port device team_slave_0 added [ 89.027634][ T5776] team0: Port device team_slave_0 added [ 89.048298][ T5780] team0: Port device team_slave_1 added [ 89.068744][ T5781] team0: Port device team_slave_0 added [ 89.078356][ T5776] team0: Port device team_slave_1 added [ 89.098257][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.123450][ T5781] team0: Port device team_slave_1 added [ 89.152294][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.159323][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.185742][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.204405][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.237193][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.244836][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.274830][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.287028][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.294298][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.321883][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.356970][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.364328][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.390932][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.436444][ T5782] team0: Port device team_slave_0 added [ 89.446101][ T5782] team0: Port device team_slave_1 added [ 89.453288][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.460268][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.487135][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.491961][ T5785] Bluetooth: hci0: command tx timeout [ 89.504834][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.512317][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.538707][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.550038][ T5785] Bluetooth: hci1: command tx timeout [ 89.551757][ T5785] Bluetooth: hci2: command tx timeout [ 89.588863][ T5776] hsr_slave_0: entered promiscuous mode [ 89.595803][ T5776] hsr_slave_1: entered promiscuous mode [ 89.622097][ T5785] Bluetooth: hci3: command tx timeout [ 89.656184][ T5780] hsr_slave_0: entered promiscuous mode [ 89.663225][ T5780] hsr_slave_1: entered promiscuous mode [ 89.669947][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.678387][ T5780] Cannot create hsr debugfs directory [ 89.684794][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.697649][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.725402][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.738922][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.748720][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.774979][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.854733][ T5781] hsr_slave_0: entered promiscuous mode [ 89.861360][ T5781] hsr_slave_1: entered promiscuous mode [ 89.868600][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.876356][ T5781] Cannot create hsr debugfs directory [ 90.070059][ T5782] hsr_slave_0: entered promiscuous mode [ 90.077121][ T5782] hsr_slave_1: entered promiscuous mode [ 90.083687][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.091276][ T5782] Cannot create hsr debugfs directory [ 90.376823][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.398975][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.420683][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.448300][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.530802][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.542599][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.580061][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.594933][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.673268][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.703228][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.716579][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.727756][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.807750][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.832798][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.844903][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.857521][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.954262][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.025946][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.040496][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.082371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.089769][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.103803][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.111016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.140895][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.170077][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.240616][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.247859][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.266284][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.277891][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.307213][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.314396][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.325948][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.333182][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.344645][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.351850][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.442595][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.518624][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.525991][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.542584][ T5785] Bluetooth: hci0: command tx timeout [ 91.555560][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.562797][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.602167][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.632082][ T5785] Bluetooth: hci2: command tx timeout [ 91.632776][ T5784] Bluetooth: hci1: command tx timeout [ 91.643000][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.701644][ T5784] Bluetooth: hci3: command tx timeout [ 91.916520][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.064169][ T5776] veth0_vlan: entered promiscuous mode [ 92.107240][ T5776] veth1_vlan: entered promiscuous mode [ 92.235404][ T5776] veth0_macvtap: entered promiscuous mode [ 92.260629][ T5776] veth1_macvtap: entered promiscuous mode [ 92.278660][ T1207] cfg80211: failed to load regulatory.db [ 92.296148][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.315433][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.364699][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.397136][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.408335][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.418636][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.428927][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.438531][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.473259][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.594699][ T5781] veth0_vlan: entered promiscuous mode [ 92.640790][ T5780] veth0_vlan: entered promiscuous mode [ 92.648952][ T5782] veth0_vlan: entered promiscuous mode [ 92.688156][ T5781] veth1_vlan: entered promiscuous mode [ 92.717295][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.728477][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.736610][ T5780] veth1_vlan: entered promiscuous mode [ 92.792938][ T5782] veth1_vlan: entered promiscuous mode [ 92.819276][ T5781] veth0_macvtap: entered promiscuous mode [ 92.850579][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.857493][ T5781] veth1_macvtap: entered promiscuous mode [ 92.866767][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.957082][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.968934][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.988975][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.000514][ T5780] veth0_macvtap: entered promiscuous mode [ 93.010224][ T5782] veth0_macvtap: entered promiscuous mode [ 93.029889][ T5782] veth1_macvtap: entered promiscuous mode [ 93.046078][ T5780] veth1_macvtap: entered promiscuous mode [ 93.068207][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.081737][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.103322][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.138128][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.150678][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.161811][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.170682][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.224956][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.235648][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.247632][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.258926][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.278717][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.291597][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.313611][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.332272][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.347343][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.357756][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.371572][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.401365][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.446349][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.458142][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.478955][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.491219][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.510117][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.519386][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.530547][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.541053][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.573562][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.585189][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.596930][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.613007][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.622827][ T5784] Bluetooth: hci0: command tx timeout [ 93.646764][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.655862][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.665462][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.675152][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.689983][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.700151][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.710054][ T5784] Bluetooth: hci1: command tx timeout [ 93.712842][ T5785] Bluetooth: hci2: command tx timeout [ 93.741527][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.750436][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.782702][ T5785] Bluetooth: hci3: command tx timeout [ 93.827762][ T5849] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.932962][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.942087][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.018810][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.030518][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.181402][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.201056][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.218544][ T5853] syz.0.6[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.230616][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.244339][ T5823] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 94.255586][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.304488][ T5823] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.347727][ T5853] loop0: detected capacity change from 0 to 4096 [ 94.416982][ T5777] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.417124][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.492524][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.500692][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.510101][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.345966][ T5870] vivid-000: disconnect [ 95.396105][ T5861] loop0: detected capacity change from 0 to 32768 [ 95.413103][ T5861] ======================================================= [ 95.413103][ T5861] WARNING: The mand mount option has been deprecated and [ 95.413103][ T5861] and is ignored by this kernel. Remove the mand [ 95.413103][ T5861] option from the mount to silence this warning. [ 95.413103][ T5861] ======================================================= [ 95.425101][ T5822] vivid-000: reconnect [ 95.587479][ T5861] JBD2: Ignoring recovery information on journal [ 95.679597][ T5861] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.702168][ T5785] Bluetooth: hci0: command tx timeout [ 95.782157][ T5785] Bluetooth: hci2: command tx timeout [ 95.783315][ T5784] Bluetooth: hci1: command tx timeout [ 95.862663][ T5784] Bluetooth: hci3: command tx timeout [ 96.470151][ T5776] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 96.488012][ T5776] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 96.508538][ T5776] OCFS2: File system is now read-only. [ 96.519280][ T5776] (syz-executor,5776,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 96.530838][ T5776] (syz-executor,5776,1):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 96.544782][ T5776] (syz-executor,5776,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 96.554771][ T5776] (syz-executor,5776,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 96.564248][ T5776] (syz-executor,5776,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 96.608022][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 96.756412][ T5908] loop3: detected capacity change from 0 to 128 [ 96.800949][ T5908] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.892865][ T5908] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.024785][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.146230][ T5916] loop1: detected capacity change from 0 to 512 [ 97.169204][ T5916] EXT4-fs: inline encryption not supported [ 97.222044][ T5916] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 97.267607][ T5916] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.24: invalid indirect mapped block 2683928664 (level 1) [ 97.331571][ T5916] EXT4-fs (loop1): Remounting filesystem read-only [ 97.343496][ T5916] EXT4-fs (loop1): 1 truncate cleaned up [ 97.350894][ T5916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.659297][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.239527][ T5947] loop2: detected capacity change from 0 to 32768 [ 98.282529][ T5947] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 98.345774][ T5947] XFS (loop2): Ending clean mount [ 98.396198][ T28] audit: type=1800 audit(1791212424.150:2): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 98.562719][ T5962] loop3: detected capacity change from 0 to 512 [ 98.599215][ T5962] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.38: Unrecognised inode hash code 255 [ 98.634458][ T5962] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.38: Corrupt directory, running e2fsck is recommended [ 98.658709][ T5962] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 98.668893][ T5962] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.38: corrupted in-inode xattr: invalid ea_ino [ 98.686047][ T5962] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.38: couldn't read orphan inode 15 (err -117) [ 98.707715][ T5962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.789932][ T5962] EXT4-fs error (device loop3): __ext4_remount:6756: comm syz.3.38: Abort forced by user [ 98.817464][ T5962] EXT4-fs (loop3): Remounting filesystem read-only [ 98.848757][ T5962] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 98.881629][ T5965] FAULT_INJECTION: forcing a failure. [ 98.881629][ T5965] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.896472][ T5965] CPU: 1 PID: 5965 Comm: syz.0.39 Not tainted syzkaller #0 [ 98.903945][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.914069][ T5965] Call Trace: [ 98.917390][ T5965] [ 98.920355][ T5965] dump_stack_lvl+0x18c/0x250 [ 98.925114][ T5965] ? show_regs_print_info+0x20/0x20 [ 98.930356][ T5965] ? load_image+0x420/0x420 [ 98.934898][ T5965] ? __lock_acquire+0x7eb0/0x7eb0 [ 98.939961][ T5965] ? __virt_addr_valid+0x10c/0x380 [ 98.945119][ T5965] should_fail_ex+0x394/0x4c0 [ 98.949845][ T5965] _copy_from_user+0x2f/0xe0 [ 98.954475][ T5965] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 98.959726][ T5965] bpf_vlog_finalize+0x174/0x3e0 [ 98.964712][ T5965] btf_new_fd+0x4ca/0x9e0 [ 98.969086][ T5965] ? bpf_btf_show_fdinfo+0x80/0x80 [ 98.974238][ T5965] ? capable+0x88/0xe0 [ 98.978345][ T5965] __sys_bpf+0x670/0x890 [ 98.982625][ T5965] ? bpf_link_show_fdinfo+0x560/0x560 [ 98.988045][ T5965] ? lock_chain_count+0x20/0x20 [ 98.992934][ T5965] __x64_sys_bpf+0x7c/0x90 [ 98.997382][ T5965] do_syscall_64+0x55/0xb0 [ 99.001841][ T5965] ? clear_bhb_loop+0x40/0x90 [ 99.006592][ T5965] ? clear_bhb_loop+0x40/0x90 [ 99.011301][ T5965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.017235][ T5965] RIP: 0033:0x7f60dbf9e199 [ 99.021684][ T5965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.041360][ T5965] RSP: 002b:00007f60dcdbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.049845][ T5965] RAX: ffffffffffffffda RBX: 00007f60dc225fa0 RCX: 00007f60dbf9e199 [ 99.057847][ T5965] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 99.065852][ T5965] RBP: 00007f60dc0350b8 R08: 0000000000000000 R09: 0000000000000000 [ 99.073848][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.081845][ T5965] R13: 00007f60dc226038 R14: 00007f60dc225fa0 R15: 00007ffdbec8af78 [ 99.089857][ T5965] [ 99.108324][ T5962] EXT4-fs warning (device loop3): ext4_empty_dir:3149: inode #2: comm syz.3.38: directory missing '.' [ 99.136220][ T5782] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 99.189256][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.404819][ T5972] loop0: detected capacity change from 0 to 1024 [ 99.497842][ T5972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.544340][ T5975] loop3: detected capacity change from 0 to 2048 [ 99.581285][ T5975] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 99.640575][ T5975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.718512][ T5978] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 100.092050][ T174] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.142549][ T56] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 100.174304][ T8] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 100.206306][ T5995] input: syz1 as /devices/virtual/input/input7 [ 100.301511][ T174] usb 3-1: Using ep0 maxpacket: 16 [ 100.328697][ T174] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 100.343835][ T174] usb 3-1: config 0 has no interface number 0 [ 100.350093][ T174] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 100.371874][ T174] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 100.396461][ T174] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 100.411533][ T174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.419060][ T56] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 100.430224][ T174] usb 3-1: Product: syz [ 100.437781][ T174] usb 3-1: Manufacturer: syz [ 100.443800][ T8] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 100.458384][ T174] usb 3-1: SerialNumber: syz [ 100.481306][ T174] usb 3-1: config 0 descriptor?? [ 100.487209][ T6000] loop3: detected capacity change from 0 to 256 [ 100.504515][ T5980] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.515971][ T5980] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.587422][ T6000] FAT-fs (loop3): Directory bread(block 64) failed [ 100.595659][ T6000] FAT-fs (loop3): Directory bread(block 65) failed [ 100.604442][ T6000] FAT-fs (loop3): Directory bread(block 66) failed [ 100.611192][ T6000] FAT-fs (loop3): Directory bread(block 67) failed [ 100.618654][ T6000] FAT-fs (loop3): Directory bread(block 68) failed [ 100.627947][ T6000] FAT-fs (loop3): Directory bread(block 69) failed [ 100.636394][ T6000] FAT-fs (loop3): Directory bread(block 70) failed [ 100.645979][ T6000] FAT-fs (loop3): Directory bread(block 71) failed [ 100.653213][ T6000] FAT-fs (loop3): Directory bread(block 72) failed [ 100.667032][ T6000] FAT-fs (loop3): Directory bread(block 73) failed [ 100.733888][ T6002] loop0: detected capacity change from 0 to 4096 [ 100.760127][ T6002] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 100.797226][ T5980] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.813919][ T5980] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.868602][ T6002] ntfs3: loop0: ino=19, mi_enum_attr [ 100.884975][ T6002] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 100.915059][ T6002] ntfs3: loop0: ino=1a, mi_enum_attr [ 100.920616][ T6002] ntfs3: loop0: ino=1a, mi_enum_attr [ 100.936308][ T6002] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 100.946598][ T56] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 100.962695][ T8] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 101.004682][ T5986] ceph: No mds server is up or the cluster is laggy [ 101.021718][ T5991] ceph: No mds server is up or the cluster is laggy [ 101.069117][ T174] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 101.358091][ T6010] Bluetooth: MGMT ver 1.22 [ 101.573894][ T6016] loop3: detected capacity change from 0 to 4096 [ 101.583748][ T6018] Illegal XDP return value 4294967294 on prog (id 4) dev N/A, expect packet loss! [ 101.702471][ T6021] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.885116][ T174] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 101.901166][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 101.912263][ T174] asix: probe of 3-1:0.34 failed with error -71 [ 101.939417][ T174] usb 3-1: USB disconnect, device number 2 [ 102.110046][ T6031] ip_tables: iptables: counters copy to user failed while replacing table [ 102.142600][ T6033] af_packet: packet size is too long (926103344 > 2016) [ 102.681536][ T174] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.738462][ T6049] loop2: detected capacity change from 0 to 4096 [ 102.756549][ T6049] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.891681][ T174] usb 2-1: Using ep0 maxpacket: 16 [ 102.916043][ T174] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 102.938434][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.957415][ T174] usb 2-1: Product: syz [ 102.965890][ T174] usb 2-1: Manufacturer: syz [ 102.975435][ T174] usb 2-1: SerialNumber: syz [ 102.995493][ T174] usb 2-1: config 0 descriptor?? [ 103.010828][ T174] usb 2-1: selecting invalid altsetting 1 [ 103.024856][ T174] technisat-usb2: could not set alternate setting to 0 [ 103.052308][ T6049] EXT4-fs: Ignoring removed orlov option [ 103.069972][ T6049] EXT4-fs (loop2): Test dummy encryption mode enabled [ 103.092730][ T6049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.111557][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.262003][ T174] technisat-usb2: firmware version: 0.0 [ 103.271534][ T174] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 103.311669][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 103.319569][ T8] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.331520][ T8] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.351039][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.361141][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=00dc, bcdDevice= 0.00 [ 103.410877][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.437626][ T8] usb 1-1: config 0 descriptor?? [ 103.490599][ T6049] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 103.585347][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.703911][ T174] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.733964][ T174] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 103.754331][ T174] usb 2-1: media controller created [ 103.771127][ T174] technisat-usb2: i2c-error: out failed 53 = -22 [ 103.788017][ T174] dvb-usb: MAC address reading failed. [ 103.874087][ T174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.884725][ T6042] technisat-usb2: i2c-error: out failed 41 = -22 [ 103.910827][ T8] input: HID 045e:00dc as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:00DC.0002/input/input8 [ 104.052591][ T174] DVB: Unable to find symbol stv090x_attach() [ 104.072213][ T174] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 104.144131][ T8] microsoft 0003:045E:00DC.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 045e:00dc] on usb-dummy_hcd.0-1/input0 [ 104.281732][ T174] rc_core: IR keymap rc-technisat-usb2 not found [ 104.295394][ T174] Registered IR keymap rc-empty [ 104.313373][ T174] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 104.347019][ T174] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9 [ 104.384598][ T174] dvb-usb: schedule remote query interval to 100 msecs. [ 104.398004][ T174] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 104.416586][ T174] usb 2-1: USB disconnect, device number 2 [ 104.559185][ T174] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 104.801719][ T9] usb 1-1: USB disconnect, device number 2 [ 104.935960][ T6084] Set syz1 is full, maxelem 2 reached [ 105.655826][ T6106] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 105.667489][ T6106] Zero length message leads to an empty skb [ 107.293596][ T6152] loop2: detected capacity change from 0 to 4096 [ 108.060296][ T6180] netlink: 27 bytes leftover after parsing attributes in process `syz.2.122'. [ 108.171565][ T5822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.198103][ T6185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.366178][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.378908][ T5822] usb 4-1: config 0 has no interfaces? [ 108.385056][ T5822] usb 4-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 108.394827][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.412416][ T5822] usb 4-1: config 0 descriptor?? [ 108.502558][ T6196] syz.0.129 uses obsolete (PF_INET,SOCK_PACKET) [ 108.553442][ T6196] loop0: detected capacity change from 0 to 2048 [ 108.595401][ T5790] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.748816][ T8] usb 4-1: USB disconnect, device number 2 [ 108.846010][ T6198] loop2: detected capacity change from 0 to 4096 [ 108.883068][ T6198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.988805][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'. [ 109.205475][ T6207] veth0_to_bond: entered promiscuous mode [ 109.211586][ T6207] veth0_to_bond: entered allmulticast mode [ 109.252960][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.471611][ T6207] syz.0.132 (6207) used greatest stack depth: 20104 bytes left [ 109.578206][ T6215] loop0: detected capacity change from 0 to 512 [ 109.643357][ T6215] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 109.693255][ T6215] EXT4-fs (loop0): invalid journal inode [ 109.699205][ T6215] EXT4-fs (loop0): can't get journal size [ 109.780794][ T6215] EXT4-fs (loop0): 1 truncate cleaned up [ 109.794351][ T6215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.908591][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.194125][ T6232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.140'. [ 110.347528][ T6232] nbd: socks must be embedded in a SOCK_ITEM attr [ 110.383013][ T5790] block nbd64: NBD_DISCONNECT [ 110.732938][ T5790] udevd[5790]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 111.346274][ T6237] loop1: detected capacity change from 0 to 40427 [ 111.372918][ T6237] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 111.411593][ T6237] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 111.467631][ T6237] F2FS-fs (loop1): invalid crc value [ 111.819577][ T6237] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 111.838653][ T6237] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.937083][ T6284] loop0: detected capacity change from 0 to 1024 [ 111.955424][ T6284] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.010060][ T6237] syz.1.142: attempt to access beyond end of device [ 112.010060][ T6237] loop1: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 112.044805][ T6284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.132436][ T5781] syz-executor: attempt to access beyond end of device [ 112.132436][ T5781] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.132923][ T6289] process 'syz.2.155' launched './file1' with NULL argv: empty string added [ 112.157991][ T5781] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 112.495152][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.722075][ T5822] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.913743][ T6306] ip_tables: iptables: counters copy to user failed while replacing table [ 112.944893][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 112.954465][ T5822] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 112.977854][ T5822] usb 3-1: config 179 has no interface number 0 [ 112.991551][ T5822] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 113.017947][ T5822] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 113.044785][ T5822] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 113.077324][ T5822] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 113.107624][ T5822] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 113.127375][ T5822] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 113.136961][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.162112][ T6295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.228241][ T6309] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 113.705371][ T5822] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10 [ 113.941039][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.969605][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.305638][ T9] usb 3-1: USB disconnect, device number 3 [ 114.305661][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 114.321768][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 114.321795][ T9] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 114.856777][ T6328] loop1: detected capacity change from 0 to 2048 [ 114.873705][ T6328] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 114.936086][ T6328] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 114.968669][ T6328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.180136][ T6356] loop2: detected capacity change from 0 to 1024 [ 116.229132][ T6334] loop0: detected capacity change from 0 to 131072 [ 116.284402][ T6334] F2FS-fs (loop0): invalid crc value [ 116.319611][ T6334] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.385175][ T6334] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.523443][ T28] audit: type=1800 audit(1791212442.280:3): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.173" name="file2" dev="loop0" ino=8 res=0 errno=0 [ 116.688268][ T6372] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 117.579516][ T6388] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.599816][ T6388] netlink: 'syz.3.195': attribute type 12 has an invalid length. [ 117.622103][ T6388] netlink: 'syz.3.195': attribute type 29 has an invalid length. [ 117.642056][ T6388] netlink: 148 bytes leftover after parsing attributes in process `syz.3.195'. [ 117.997629][ T6386] loop2: detected capacity change from 0 to 32768 [ 118.061869][ T6386] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.288976][ T6386] XFS (loop2): Ending clean mount [ 118.320456][ T6386] XFS (loop2): Quotacheck needed: Please wait. [ 118.411178][ T6386] XFS (loop2): Quotacheck: Done. [ 118.471772][ T6414] FAULT_INJECTION: forcing a failure. [ 118.471772][ T6414] name fail_futex, interval 1, probability 0, space 0, times 1 [ 118.489653][ T6414] CPU: 1 PID: 6414 Comm: syz.0.202 Not tainted syzkaller #0 [ 118.497042][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.507188][ T6414] Call Trace: [ 118.510530][ T6414] [ 118.513549][ T6414] dump_stack_lvl+0x18c/0x250 [ 118.518351][ T6414] ? show_regs_print_info+0x20/0x20 [ 118.523654][ T6414] ? load_image+0x420/0x420 [ 118.528227][ T6414] ? get_user_pages_fast_only+0xa0/0xa0 [ 118.533859][ T6414] should_fail_ex+0x394/0x4c0 [ 118.538619][ T6414] get_futex_key+0x16f/0x1030 [ 118.543415][ T6414] ? futex_setup_timer+0xc0/0xc0 [ 118.548428][ T6414] futex_wake_op+0x1e8/0xd40 [ 118.553090][ T6414] ? wake_up_q+0xca/0x100 [ 118.557469][ T6414] ? futex_wake+0x4f0/0x4f0 [ 118.562007][ T6414] ? futex_wake+0x42a/0x4f0 [ 118.566567][ T6414] ? futex_wake_mark+0x150/0x150 [ 118.571546][ T6414] ? __lock_acquire+0x7eb0/0x7eb0 [ 118.576605][ T6414] ? file_end_write+0x159/0x250 [ 118.581528][ T6414] ? vfs_write+0x5de/0x9a0 [ 118.585984][ T6414] do_futex+0x385/0x3e0 [ 118.590183][ T6414] ? __ia32_sys_get_robust_list+0x110/0x110 [ 118.596299][ T6414] __se_sys_futex+0x3a9/0x440 [ 118.601048][ T6414] ? __x64_sys_futex+0xf0/0xf0 [ 118.605896][ T6414] ? __x64_sys_futex+0x21/0xf0 [ 118.610721][ T6414] do_syscall_64+0x55/0xb0 [ 118.615203][ T6414] ? clear_bhb_loop+0x40/0x90 [ 118.619928][ T6414] ? clear_bhb_loop+0x40/0x90 [ 118.624746][ T6414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.630725][ T6414] RIP: 0033:0x7f60dbf9e199 [ 118.635190][ T6414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.654857][ T6414] RSP: 002b:00007f60dcdbb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.663343][ T6414] RAX: ffffffffffffffda RBX: 00007f60dc225fa0 RCX: 00007f60dbf9e199 [ 118.671358][ T6414] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000020000000cffc [ 118.679379][ T6414] RBP: 00007f60dc0350b8 R08: 0000000000000000 R09: 0000000034fffffd [ 118.687390][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.695420][ T6414] R13: 00007f60dc226038 R14: 00007f60dc225fa0 R15: 00007ffdbec8af78 [ 118.703570][ T6414] [ 118.871705][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.029072][ T5782] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.071962][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 119.098380][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.121137][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.132508][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.142426][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.157955][ T6421] fuse: root generation should be zero [ 119.169215][ T9] usb 4-1: config 0 descriptor?? [ 119.185139][ T9] hub 4-1:0.0: USB hub found [ 119.427125][ T9] hub 4-1:0.0: 1 port detected [ 119.455781][ T6427] loop0: detected capacity change from 0 to 2048 [ 119.524172][ T6427] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 119.556189][ T6427] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.733478][ T6436] trusted_key: syz.1.210 sent an empty control message without MSG_MORE. [ 120.094153][ T9] hub 4-1:0.0: activate --> -90 [ 120.487876][ T6462] loop0: detected capacity change from 0 to 512 [ 120.505714][ T8] usb 4-1: USB disconnect, device number 3 [ 120.579866][ T6462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.592847][ T6462] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.685316][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.962906][ T6474] loop0: detected capacity change from 0 to 512 [ 120.975991][ T6478] loop2: detected capacity change from 0 to 128 [ 120.985522][ T6474] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.999886][ T6474] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.041279][ T6474] EXT4-fs (loop0): 1 truncate cleaned up [ 121.059942][ T6478] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.072891][ T6474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.098903][ T6478] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.301740][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.313400][ T5782] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.521509][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 121.536115][ T8] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 121.561615][ T8] usb 2-1: config 0 has no interface number 0 [ 121.567821][ T8] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.612169][ T8] usb 2-1: config 0 interface 85 has no altsetting 0 [ 121.624005][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 121.638347][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.647184][ T8] usb 2-1: Product: syz [ 121.652253][ T8] usb 2-1: Manufacturer: syz [ 121.656920][ T8] usb 2-1: SerialNumber: syz [ 121.688413][ T8] usb 2-1: config 0 descriptor?? [ 121.824370][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.335284][ T8] appletouch 2-1:0.85: Geyser mode initialized. [ 122.360248][ T8] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input11 [ 122.432442][ T5783] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.651565][ T5783] usb 1-1: Using ep0 maxpacket: 32 [ 122.687411][ T5783] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 122.723539][ T5783] usb 1-1: config 0 has no interface number 0 [ 122.736288][ T5783] usb 1-1: config 0 interface 12 has no altsetting 0 [ 122.750351][ T5783] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 122.769528][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.785126][ T5783] usb 1-1: Product: syz [ 122.793797][ T5783] usb 1-1: Manufacturer: syz [ 122.800890][ T5783] usb 1-1: SerialNumber: syz [ 122.825721][ T5783] usb 1-1: config 0 descriptor?? [ 123.069898][ T6528] loop3: detected capacity change from 0 to 4096 [ 123.155517][ T6528] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 123.883565][ T6541] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 123.883565][ T6541] Q&|x [ 124.005997][ T5822] usb 2-1: USB disconnect, device number 3 [ 124.090598][ T5822] appletouch 2-1:0.85: input: appletouch disconnected [ 124.118264][ T5783] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 124.133459][ T5783] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 124.140942][ T5783] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 124.191569][ T5783] f81534: probe of 1-1:0.12 failed with error -71 [ 124.240639][ T5783] usb 1-1: USB disconnect, device number 3 [ 124.249353][ T6550] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.584137][ T6536] loop3: detected capacity change from 0 to 40427 [ 124.641588][ T6536] F2FS-fs (loop3): invalid crc value [ 124.658589][ T6536] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.752932][ T6558] loop1: detected capacity change from 0 to 256 [ 124.834113][ T6536] F2FS-fs (loop3): Start checkpoint disabled! [ 124.861192][ T6558] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 124.908399][ T6536] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 125.447750][ T6571] syzkaller1: entered allmulticast mode [ 125.476100][ T3502] kworker/u4:11: attempt to access beyond end of device [ 125.476100][ T3502] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 125.495889][ T3502] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 126.203818][ T6580] loop3: detected capacity change from 0 to 512 [ 126.226229][ T6582] loop0: detected capacity change from 0 to 256 [ 126.287787][ T6582] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 126.331526][ T6580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.376866][ T6580] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.428266][ T6580] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.636248][ T5780] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 127.048338][ T5783] smpboot: CPU 1 is now offline [ 127.435971][ T6584] loop1: detected capacity change from 0 to 32768 [ 127.505234][ T6584] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.253 (6584) [ 127.614800][ T6584] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.615024][ T6584] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 127.615081][ T6584] BTRFS info (device loop1): setting nodatasum [ 127.615094][ T6584] BTRFS info (device loop1): force zlib compression, level 3 [ 127.615326][ T6584] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 127.615413][ T6584] BTRFS info (device loop1): use lzo compression, level 0 [ 127.615429][ T6584] BTRFS info (device loop1): turning on flush-on-commit [ 127.615442][ T6584] BTRFS info (device loop1): enabling auto defrag [ 127.615482][ T6584] BTRFS info (device loop1): max_inline at 4096 [ 127.615514][ T6584] BTRFS info (device loop1): using free space tree [ 127.930595][ T6584] BTRFS info (device loop1): enabling ssd optimizations [ 128.846696][ T5781] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.981291][ T6636] loop0: detected capacity change from 0 to 32768 [ 130.025872][ T6636] (syz.0.268,6636,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 130.083325][ T6636] (syz.0.268,6636,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 130.573379][ T6651] loop5: detected capacity change from 0 to 7 [ 130.651738][ T6651] Dev loop5: unable to read RDB block 7 [ 130.657657][ T6651] loop5: AHDI p1 p2 p3 [ 130.705366][ T6651] loop5: partition table partially beyond EOD, truncated [ 130.756938][ T6651] loop5: p1 start 5472580 is beyond EOD, truncated [ 130.769403][ T6656] futex_wake_op: syz.3.277 tries to shift op by 144; fix this program [ 130.796501][ T6651] loop5: p2 start 167772160 is beyond EOD, truncated [ 130.849757][ T28] audit: type=1326 audit(1791212462.599:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a39e199 code=0x7ffc0000 [ 130.988632][ T28] audit: type=1326 audit(1791212462.649:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a39e199 code=0x7ffc0000 [ 131.123946][ T28] audit: type=1326 audit(1791212462.649:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a39e199 code=0x7ffc0000 [ 131.252360][ T28] audit: type=1326 audit(1791212462.669:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa88a39e199 code=0x7ffc0000 [ 131.324538][ T6666] loop3: detected capacity change from 0 to 1024 [ 131.376574][ T6666] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 131.396685][ T28] audit: type=1326 audit(1791212462.689:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a39e199 code=0x7ffc0000 [ 131.475382][ T6666] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 131.518458][ T6666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.564902][ T6670] warning: `syz.0.281' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.581544][ T28] audit: type=1326 audit(1791212462.699:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88a39e199 code=0x7ffc0000 [ 131.730150][ T28] audit: type=1326 audit(1791212462.699:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa88a39df02 code=0x7ffc0000 [ 131.854910][ T28] audit: type=1326 audit(1791212462.699:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa88a39df97 code=0x7ffc0000 [ 131.920469][ T6672] loop1: detected capacity change from 0 to 2048 [ 131.946345][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.991537][ T28] audit: type=1326 audit(1791212462.699:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa88a35ae91 code=0x7ffc0000 [ 132.170681][ T6672] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 132.192751][ T28] audit: type=1326 audit(1791212462.699:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.2.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa88a39ef89 code=0x7ffc0000 [ 132.287796][ T6672] FAT-fs (loop1): Filesystem has been set read-only [ 132.512136][ T6672] loop1: detected capacity change from 0 to 512 [ 132.558740][ T6672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.670401][ T6672] EXT4-fs (loop1): 1 truncate cleaned up [ 132.732473][ T6672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.835797][ T6672] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 1954183539 (only 1 groups) [ 133.041340][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.240413][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.254067][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.554358][ T6697] FAULT_INJECTION: forcing a failure. [ 133.554358][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 133.568341][ T174] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.612765][ T6697] CPU: 0 PID: 6697 Comm: syz.3.293 Not tainted syzkaller #0 [ 133.620118][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.630187][ T6697] Call Trace: [ 133.633501][ T6697] [ 133.636444][ T6697] dump_stack_lvl+0x18c/0x250 [ 133.641152][ T6697] ? show_regs_print_info+0x20/0x20 [ 133.646370][ T6697] ? load_image+0x420/0x420 [ 133.650891][ T6697] ? __lock_acquire+0x7eb0/0x7eb0 [ 133.655937][ T6697] should_fail_ex+0x394/0x4c0 [ 133.660637][ T6697] should_failslab+0x9/0x20 [ 133.665156][ T6697] slab_pre_alloc_hook+0x59/0x300 [ 133.670197][ T6697] ? __rwlock_init+0x150/0x150 [ 133.674976][ T6697] ? init_listener+0x50/0x1d0 [ 133.679673][ T6697] __kmem_cache_alloc_node+0x53/0x250 [ 133.685068][ T6697] ? init_listener+0x50/0x1d0 [ 133.689784][ T6697] kmalloc_trace+0x2a/0xe0 [ 133.694217][ T6697] init_listener+0x50/0x1d0 [ 133.698739][ T6697] do_seccomp+0x93a/0xdc0 [ 133.703108][ T6697] ? prctl_set_seccomp+0x60/0x60 [ 133.708104][ T6697] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 133.714120][ T6697] ? lockdep_hardirqs_on+0x98/0x150 [ 133.719339][ T6697] do_syscall_64+0x55/0xb0 [ 133.723773][ T6697] ? clear_bhb_loop+0x40/0x90 [ 133.728455][ T6697] ? clear_bhb_loop+0x40/0x90 [ 133.733168][ T6697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.739093][ T6697] RIP: 0033:0x7fb681d9e199 [ 133.743541][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.763179][ T6697] RSP: 002b:00007fb682b8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 133.771614][ T6697] RAX: ffffffffffffffda RBX: 00007fb682025fa0 RCX: 00007fb681d9e199 [ 133.779596][ T6697] RDX: 0000200000000040 RSI: 000000000000001d RDI: 0000000000000001 [ 133.787642][ T6697] RBP: 00007fb681e350b8 R08: 0000000000000000 R09: 0000000000000000 [ 133.795645][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.803641][ T6697] R13: 00007fb682026038 R14: 00007fb682025fa0 R15: 00007ffd77841bf8 [ 133.811672][ T6697] [ 133.938369][ T174] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.981515][ T174] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 134.016680][ T174] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 134.067104][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.119458][ T174] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 134.174176][ T174] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 134.581845][ T6695] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 134.627087][ T6695] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 134.665348][ T6695] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 134.770942][ T6695] SPCP8x5 ttyUSB0: Set UART format 0xb failed (error = -32) [ 134.811297][ T174] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.871827][ T174] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.626127][ T6691] loop2: detected capacity change from 0 to 32768 [ 135.719715][ T6691] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 135.949752][ T6691] XFS (loop2): Ending clean mount [ 136.078936][ T5782] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 136.308434][ T8] usb 2-1: USB disconnect, device number 4 [ 136.387874][ T8] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 136.454789][ T8] spcp8x5 2-1:1.0: device disconnected [ 136.627579][ T6735] loop0: detected capacity change from 0 to 2048 [ 136.715047][ T6735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.497919][ T6757] ip_tables: iptables: counters copy to user failed while replacing table [ 137.648836][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 137.648847][ T28] audit: type=1326 audit(1791212469.399:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd20f9e199 code=0x0 [ 138.809201][ T6789] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 139.076661][ T6797] loop1: detected capacity change from 0 to 1024 [ 140.097566][ T6820] input: syz0 as /devices/virtual/input/input12 [ 140.558380][ T6833] FAULT_INJECTION: forcing a failure. [ 140.558380][ T6833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.652056][ T6833] CPU: 0 PID: 6833 Comm: syz.2.344 Not tainted syzkaller #0 [ 140.659408][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.669483][ T6833] Call Trace: [ 140.672773][ T6833] [ 140.675723][ T6833] dump_stack_lvl+0x18c/0x250 [ 140.680432][ T6833] ? show_regs_print_info+0x20/0x20 [ 140.685688][ T6833] ? load_image+0x420/0x420 [ 140.690210][ T6833] ? __lock_acquire+0x7eb0/0x7eb0 [ 140.695254][ T6833] ? __virt_addr_valid+0x10c/0x380 [ 140.700387][ T6833] should_fail_ex+0x394/0x4c0 [ 140.705091][ T6833] _copy_from_user+0x2f/0xe0 [ 140.709712][ T6833] bpf_vlog_reverse_ubuf+0xbb/0x3a0 [ 140.714939][ T6833] bpf_vlog_finalize+0x174/0x3e0 [ 140.719900][ T6833] btf_new_fd+0x4ca/0x9e0 [ 140.724277][ T6833] ? bpf_btf_show_fdinfo+0x80/0x80 [ 140.729406][ T6833] ? capable+0x88/0xe0 [ 140.733517][ T6833] __sys_bpf+0x670/0x890 [ 140.737797][ T6833] ? bpf_link_show_fdinfo+0x560/0x560 [ 140.743193][ T6833] ? lock_chain_count+0x20/0x20 [ 140.748067][ T6833] __x64_sys_bpf+0x7c/0x90 [ 140.752496][ T6833] do_syscall_64+0x55/0xb0 [ 140.756931][ T6833] ? clear_bhb_loop+0x40/0x90 [ 140.761614][ T6833] ? clear_bhb_loop+0x40/0x90 [ 140.766306][ T6833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.772319][ T6833] RIP: 0033:0x7fa88a39e199 [ 140.776789][ T6833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.796424][ T6833] RSP: 002b:00007fa88b263028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.804863][ T6833] RAX: ffffffffffffffda RBX: 00007fa88a625fa0 RCX: 00007fa88a39e199 [ 140.812856][ T6833] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 140.820885][ T6833] RBP: 00007fa88a4350b8 R08: 0000000000000000 R09: 0000000000000000 [ 140.828891][ T6833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.836886][ T6833] R13: 00007fa88a626038 R14: 00007fa88a625fa0 R15: 00007fff0e9783e8 [ 140.844897][ T6833] [ 141.150481][ T6842] loop3: detected capacity change from 0 to 128 [ 141.196845][ T6842] FAT-fs (loop3): bogus number of reserved sectors [ 141.240246][ T6842] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 141.302700][ T6842] FAT-fs (loop3): Can't find a valid FAT filesystem [ 141.794152][ T6854] loop1: detected capacity change from 0 to 128 [ 141.805612][ T6853] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 141.903558][ T6854] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.065575][ T6854] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.174066][ T6843] loop0: detected capacity change from 0 to 32768 [ 142.251097][ T6843] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 142.358753][ T5781] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.395435][ T6843] XFS (loop0): Ending clean mount [ 142.533369][ T28] audit: type=1800 audit(1791212474.279:78): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.349" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 142.771754][ T6870] input: syz1 as /devices/virtual/input/input13 [ 142.967191][ T5776] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 143.385078][ T6884] FAULT_INJECTION: forcing a failure. [ 143.385078][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 143.416971][ T6884] CPU: 0 PID: 6884 Comm: syz.1.361 Not tainted syzkaller #0 [ 143.424339][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.434435][ T6884] Call Trace: [ 143.437731][ T6884] [ 143.440672][ T6884] dump_stack_lvl+0x18c/0x250 [ 143.445378][ T6884] ? show_regs_print_info+0x20/0x20 [ 143.450615][ T6884] ? load_image+0x420/0x420 [ 143.455152][ T6884] ? __might_sleep+0xe0/0xe0 [ 143.459780][ T6884] ? __lock_acquire+0x7eb0/0x7eb0 [ 143.464829][ T6884] should_fail_ex+0x394/0x4c0 [ 143.469528][ T6884] should_failslab+0x9/0x20 [ 143.474051][ T6884] slab_pre_alloc_hook+0x59/0x300 [ 143.479106][ T6884] kmem_cache_alloc+0x5a/0x2c0 [ 143.483910][ T6884] ? __pmd_alloc+0x111/0x8c0 [ 143.488521][ T6884] __pmd_alloc+0x111/0x8c0 [ 143.492970][ T6884] ? mt_find+0x169/0x640 [ 143.497235][ T6884] ? __lock_acquire+0x7eb0/0x7eb0 [ 143.502277][ T6884] ? __pud_alloc+0x200/0x200 [ 143.506913][ T6884] ? hugepage_vma_check+0x471/0x560 [ 143.512141][ T6884] handle_mm_fault+0xb75/0x4a50 [ 143.517014][ T6884] ? handle_mm_fault+0xe6/0x4a50 [ 143.521973][ T6884] ? numa_migrate_prep+0x350/0x350 [ 143.527124][ T6884] ? futex_wait_setup+0x270/0x270 [ 143.532164][ T6884] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 143.537466][ T6884] do_user_addr_fault+0x736/0x12d0 [ 143.542617][ T6884] exc_page_fault+0x64/0x100 [ 143.547238][ T6884] asm_exc_page_fault+0x26/0x30 [ 143.552122][ T6884] RIP: 0010:strncpy_from_user+0x10b/0x2f0 [ 143.557873][ T6884] Code: 00 00 48 89 de e8 a5 4b 20 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48 [ 143.577540][ T6884] RSP: 0018:ffffc900035dfdf0 EFLAGS: 00050246 [ 143.583619][ T6884] RAX: ffffffff8467494b RBX: 0000000000000020 RCX: ffff88802ef40000 [ 143.591623][ T6884] RDX: 0000000000000002 RSI: 0000000000000020 RDI: 0000000000000007 [ 143.599615][ T6884] RBP: ffffc900035dff10 R08: ffff88802ef40000 R09: 0000000000000003 [ 143.607606][ T6884] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 143.616413][ T6884] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000 [ 143.624492][ T6884] ? strncpy_from_user+0xeb/0x2f0 [ 143.629659][ T6884] __se_sys_request_key+0xb9/0x350 [ 143.634813][ T6884] ? __x64_sys_request_key+0xb0/0xb0 [ 143.640135][ T6884] ? lockdep_hardirqs_on+0x98/0x150 [ 143.645540][ T6884] do_syscall_64+0x55/0xb0 [ 143.650010][ T6884] ? clear_bhb_loop+0x40/0x90 [ 143.654805][ T6884] ? clear_bhb_loop+0x40/0x90 [ 143.659529][ T6884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.665470][ T6884] RIP: 0033:0x7fdd20f9e199 [ 143.669946][ T6884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.689583][ T6884] RSP: 002b:00007fdd21f3a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 143.698043][ T6884] RAX: ffffffffffffffda RBX: 00007fdd21225fa0 RCX: 00007fdd20f9e199 [ 143.706040][ T6884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.714138][ T6884] RBP: 00007fdd210350b8 R08: 0000000000000000 R09: 0000000000000000 [ 143.722142][ T6884] R10: fffffffffffffff9 R11: 0000000000000246 R12: 0000000000000000 [ 143.730129][ T6884] R13: 00007fdd21226038 R14: 00007fdd21225fa0 R15: 00007ffe17406058 [ 143.738126][ T6884] [ 144.534322][ T9] libceph: connect (1)[c::]:6789 error -101 [ 144.572519][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 144.616170][ T9] libceph: connect (1)[c::]:6789 error -101 [ 144.636525][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 144.837458][ T5783] libceph: connect (1)[c::]:6789 error -101 [ 144.863597][ T5783] libceph: mon0 (1)[c::]:6789 connect error [ 144.951963][ T9] libceph: connect (1)[c::]:6789 error -101 [ 144.979072][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 145.019881][ T6911] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.349358][ T6897] ceph: No mds server is up or the cluster is laggy [ 145.371737][ T6901] ceph: No mds server is up or the cluster is laggy [ 145.382245][ T9] libceph: connect (1)[c::]:6789 error -101 [ 145.388332][ T5783] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.400149][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 145.472932][ T6921] loop0: detected capacity change from 0 to 4096 [ 145.577221][ T6923] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.641786][ T5783] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 145.691511][ T5783] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 145.759752][ T5783] usb 2-1: config 0 has no interface number 0 [ 145.794977][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 145.831765][ T5783] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 145.868752][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.908723][ T5783] usb 2-1: Product: syz [ 145.917441][ T5783] usb 2-1: Manufacturer: syz [ 145.964155][ T5783] usb 2-1: SerialNumber: syz [ 146.025819][ T5783] usb 2-1: config 0 descriptor?? [ 146.198015][ T6930] loop0: detected capacity change from 0 to 1024 [ 146.501856][ T5783] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 146.551498][ T5783] usb 2-1: No valid video chain found. [ 146.746292][ T5846] usb 2-1: USB disconnect, device number 5 [ 146.901072][ T6939] FAULT_INJECTION: forcing a failure. [ 146.901072][ T6939] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 146.941382][ T6939] CPU: 0 PID: 6939 Comm: syz.3.383 Not tainted syzkaller #0 [ 146.948725][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.958790][ T6939] Call Trace: [ 146.962075][ T6939] [ 146.965077][ T6939] dump_stack_lvl+0x18c/0x250 [ 146.969797][ T6939] ? show_regs_print_info+0x20/0x20 [ 146.975038][ T6939] ? load_image+0x420/0x420 [ 146.979571][ T6939] ? __lock_acquire+0x7eb0/0x7eb0 [ 146.984618][ T6939] should_fail_ex+0x394/0x4c0 [ 146.989321][ T6939] prepare_alloc_pages+0x1e1/0x5b0 [ 146.994450][ T6939] __alloc_pages+0x134/0x460 [ 146.999132][ T6939] ? zone_statistics+0x170/0x170 [ 147.004097][ T6939] ? __mod_lruvec_page_state+0xa5/0x410 [ 147.009712][ T6939] ? do_raw_spin_unlock+0x121/0x230 [ 147.014937][ T6939] ? __pmd_alloc+0x68c/0x8c0 [ 147.019560][ T6939] pte_alloc_one+0x84/0x540 [ 147.024113][ T6939] ? pfn_modify_allowed+0x560/0x560 [ 147.029352][ T6939] ? hugepage_vma_check+0x471/0x560 [ 147.034579][ T6939] handle_mm_fault+0x2f72/0x4a50 [ 147.039542][ T6939] ? handle_mm_fault+0xe6/0x4a50 [ 147.044521][ T6939] ? numa_migrate_prep+0x350/0x350 [ 147.049692][ T6939] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 147.054994][ T6939] do_user_addr_fault+0x736/0x12d0 [ 147.060145][ T6939] exc_page_fault+0x64/0x100 [ 147.064774][ T6939] asm_exc_page_fault+0x26/0x30 [ 147.069666][ T6939] RIP: 0010:strncpy_from_user+0x10b/0x2f0 [ 147.075418][ T6939] Code: 00 00 48 89 de e8 a5 4b 20 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48 [ 147.095042][ T6939] RSP: 0018:ffffc900036e7df0 EFLAGS: 00050246 [ 147.101124][ T6939] RAX: ffffffff8467494b RBX: 0000000000000020 RCX: ffff88801e683c00 [ 147.109108][ T6939] RDX: 0000000000000002 RSI: 0000000000000020 RDI: 0000000000000007 [ 147.117087][ T6939] RBP: ffffc900036e7f10 R08: ffff88801e683c00 R09: 0000000000000003 [ 147.125069][ T6939] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 147.133065][ T6939] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000 [ 147.141060][ T6939] ? strncpy_from_user+0xeb/0x2f0 [ 147.146113][ T6939] __se_sys_request_key+0xb9/0x350 [ 147.151244][ T6939] ? __x64_sys_request_key+0xb0/0xb0 [ 147.156555][ T6939] ? lockdep_hardirqs_on+0x98/0x150 [ 147.161770][ T6939] do_syscall_64+0x55/0xb0 [ 147.166205][ T6939] ? clear_bhb_loop+0x40/0x90 [ 147.170902][ T6939] ? clear_bhb_loop+0x40/0x90 [ 147.175600][ T6939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.181544][ T6939] RIP: 0033:0x7fb681d9e199 [ 147.186118][ T6939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.205758][ T6939] RSP: 002b:00007fb682b8b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 147.214187][ T6939] RAX: ffffffffffffffda RBX: 00007fb682025fa0 RCX: 00007fb681d9e199 [ 147.222181][ T6939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.230165][ T6939] RBP: 00007fb681e350b8 R08: 0000000000000000 R09: 0000000000000000 [ 147.238144][ T6939] R10: fffffffffffffff9 R11: 0000000000000246 R12: 0000000000000000 [ 147.246126][ T6939] R13: 00007fb682026038 R14: 00007fb682025fa0 R15: 00007ffd77841bf8 [ 147.254125][ T6939] [ 147.257287][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.283628][ T5783] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.514360][ T5783] usb 1-1: Using ep0 maxpacket: 16 [ 147.531278][ T5783] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 147.540803][ T5783] usb 1-1: config 0 has no interface number 0 [ 147.561559][ T5783] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 147.604280][ T5783] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 147.649324][ T5783] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 147.669155][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.702978][ T5783] usb 1-1: Product: syz [ 147.707187][ T5783] usb 1-1: Manufacturer: syz [ 147.751586][ T5783] usb 1-1: SerialNumber: syz [ 147.779221][ T5783] usb 1-1: config 0 descriptor?? [ 147.810516][ T6934] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 147.819279][ T6934] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 148.091359][ T6934] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 148.129467][ T6934] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 148.389042][ T5783] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 149.197490][ T5783] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 149.247935][ T5783] asix: probe of 1-1:0.34 failed with error -71 [ 149.296359][ T5783] usb 1-1: USB disconnect, device number 4 [ 150.020133][ T6963] loop1: detected capacity change from 0 to 256 [ 150.998557][ T6977] ================================================================== [ 151.006718][ T6977] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 151.014387][ T6977] Read of size 8 at addr ffff8880270dc618 by task syz.3.398/6977 [ 151.022132][ T6977] [ 151.024469][ T6977] CPU: 0 PID: 6977 Comm: syz.3.398 Not tainted syzkaller #0 [ 151.031772][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.041852][ T6977] Call Trace: [ 151.045153][ T6977] [ 151.048096][ T6977] dump_stack_lvl+0x18c/0x250 [ 151.052814][ T6977] ? read_lock_is_recursive+0x20/0x20 [ 151.058200][ T6977] ? show_regs_print_info+0x20/0x20 [ 151.063500][ T6977] ? load_image+0x420/0x420 [ 151.068015][ T6977] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 151.073487][ T6977] ? __virt_addr_valid+0x10c/0x380 [ 151.078613][ T6977] ? __virt_addr_valid+0x10c/0x380 [ 151.083737][ T6977] ? __virt_addr_valid+0x10c/0x380 [ 151.088863][ T6977] print_report+0xa8/0x210 [ 151.093292][ T6977] ? dvb_device_open+0xc9/0x360 [ 151.098153][ T6977] kasan_report+0x117/0x150 [ 151.102672][ T6977] ? dvb_device_open+0xc9/0x360 [ 151.107539][ T6977] dvb_device_open+0xc9/0x360 [ 151.112231][ T6977] chrdev_open+0x58c/0x600 [ 151.116677][ T6977] ? cd_forget+0x160/0x160 [ 151.121112][ T6977] ? fsnotify_perm+0x3ed/0x5e0 [ 151.125908][ T6977] do_dentry_open+0x880/0x14b0 [ 151.130701][ T6977] ? cd_forget+0x160/0x160 [ 151.135141][ T6977] path_openat+0x284f/0x3270 [ 151.139745][ T6977] ? do_sys_openat2+0xda/0x1d0 [ 151.144526][ T6977] ? __x64_sys_openat+0x139/0x160 [ 151.149563][ T6977] ? verify_lock_unused+0x140/0x140 [ 151.154771][ T6977] ? do_filp_open+0x430/0x430 [ 151.159487][ T6977] do_filp_open+0x1f2/0x430 [ 151.164004][ T6977] ? vfs_tmpfile+0x620/0x620 [ 151.168615][ T6977] ? _raw_spin_unlock+0x28/0x40 [ 151.173490][ T6977] ? alloc_fd+0x590/0x640 [ 151.177834][ T6977] do_sys_openat2+0x134/0x1d0 [ 151.182527][ T6977] ? do_sys_open+0xe0/0xe0 [ 151.186954][ T6977] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 151.192948][ T6977] ? lock_chain_count+0x20/0x20 [ 151.197811][ T6977] __x64_sys_openat+0x139/0x160 [ 151.202672][ T6977] do_syscall_64+0x55/0xb0 [ 151.207116][ T6977] ? clear_bhb_loop+0x40/0x90 [ 151.211802][ T6977] ? clear_bhb_loop+0x40/0x90 [ 151.216485][ T6977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.222402][ T6977] RIP: 0033:0x7fb681d5e9ce [ 151.226825][ T6977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.246434][ T6977] RSP: 002b:00007fb682b8ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 151.254850][ T6977] RAX: ffffffffffffffda RBX: 00007fb682b8b6c0 RCX: 00007fb681d5e9ce [ 151.262832][ T6977] RDX: 0000000000000002 RSI: 00007fb682b8ac00 RDI: ffffffffffffff9c [ 151.270816][ T6977] RBP: 00007fb682b8ac00 R08: 0000000000000000 R09: 0000000000000000 [ 151.278796][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 151.286779][ T6977] R13: 00007fb682026038 R14: 00007fb682025fa0 R15: 00007ffd77841bf8 [ 151.294784][ T6977] [ 151.297811][ T6977] [ 151.300136][ T6977] Allocated by task 1: [ 151.304201][ T6977] kasan_set_track+0x4e/0x70 [ 151.308800][ T6977] __kasan_kmalloc+0x8f/0xa0 [ 151.313397][ T6977] dvb_register_device+0x309/0x1df0 [ 151.318608][ T6977] dvb_register_frontend+0x62d/0x900 [ 151.323900][ T6977] vidtv_bridge_probe+0x9d6/0xf60 [ 151.328943][ T6977] platform_probe+0x13b/0x1c0 [ 151.333645][ T6977] really_probe+0x247/0xae0 [ 151.338167][ T6977] __driver_probe_device+0x1f5/0x390 [ 151.343487][ T6977] driver_probe_device+0x4f/0x420 [ 151.348558][ T6977] __driver_attach+0x444/0x6d0 [ 151.353343][ T6977] bus_for_each_dev+0x235/0x2b0 [ 151.358224][ T6977] bus_add_driver+0x340/0x630 [ 151.362923][ T6977] driver_register+0x23a/0x310 [ 151.367700][ T6977] vidtv_bridge_init+0x49/0x80 [ 151.372498][ T6977] do_one_initcall+0x242/0x790 [ 151.377282][ T6977] do_initcall_level+0x13d/0x1f0 [ 151.382231][ T6977] do_initcalls+0x69/0xd0 [ 151.386568][ T6977] kernel_init_freeable+0x3d9/0x560 [ 151.391774][ T6977] kernel_init+0x1d/0x1c0 [ 151.396114][ T6977] ret_from_fork+0x48/0x80 [ 151.400544][ T6977] ret_from_fork_asm+0x11/0x20 [ 151.405321][ T6977] [ 151.407650][ T6977] Freed by task 6946: [ 151.411749][ T6977] kasan_set_track+0x4e/0x70 [ 151.416350][ T6977] kasan_save_free_info+0x28/0x40 [ 151.421398][ T6977] ____kasan_slab_free+0x126/0x1f0 [ 151.426524][ T6977] slab_free_freelist_hook+0x130/0x1a0 [ 151.431987][ T6977] __kmem_cache_free+0xba/0x1f0 [ 151.436858][ T6977] dvb_device_open+0x2d9/0x360 [ 151.441649][ T6977] chrdev_open+0x58c/0x600 [ 151.446104][ T6977] do_dentry_open+0x880/0x14b0 [ 151.450878][ T6977] path_openat+0x284f/0x3270 [ 151.455501][ T6977] do_filp_open+0x1f2/0x430 [ 151.460015][ T6977] do_sys_openat2+0x134/0x1d0 [ 151.464703][ T6977] __x64_sys_openat+0x139/0x160 [ 151.469563][ T6977] do_syscall_64+0x55/0xb0 [ 151.473995][ T6977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.479901][ T6977] [ 151.482227][ T6977] The buggy address belongs to the object at ffff8880270dc600 [ 151.482227][ T6977] which belongs to the cache kmalloc-256 of size 256 [ 151.496288][ T6977] The buggy address is located 24 bytes inside of [ 151.496288][ T6977] freed 256-byte region [ffff8880270dc600, ffff8880270dc700) [ 151.510009][ T6977] [ 151.512343][ T6977] The buggy address belongs to the physical page: [ 151.518776][ T6977] page:ffffea00009c3700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x270dc [ 151.528937][ T6977] head:ffffea00009c3700 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 151.537885][ T6977] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 151.545886][ T6977] page_type: 0xffffffff() [ 151.550231][ T6977] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 151.558820][ T6977] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 151.567401][ T6977] page dumped because: kasan: bad access detected [ 151.573841][ T6977] page_owner tracks the page as allocated [ 151.579668][ T6977] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19774563883, free_ts 0 [ 151.599397][ T6977] post_alloc_hook+0x1c1/0x200 [ 151.604260][ T6977] get_page_from_freelist+0x2181/0x22a0 [ 151.609818][ T6977] __alloc_pages+0x1f0/0x460 [ 151.614412][ T6977] alloc_page_interleave+0x24/0x1e0 [ 151.619617][ T6977] alloc_slab_page+0x5d/0x180 [ 151.624306][ T6977] new_slab+0x87/0x2d0 [ 151.628380][ T6977] ___slab_alloc+0xc5c/0x12f0 [ 151.633057][ T6977] __kmem_cache_alloc_node+0x11f/0x250 [ 151.638548][ T6977] kmalloc_trace+0x2a/0xe0 [ 151.642993][ T6977] bus_add_driver+0x162/0x630 [ 151.647700][ T6977] driver_register+0x23a/0x310 [ 151.652485][ T6977] i2c_register_driver+0xba/0x160 [ 151.657518][ T6977] do_one_initcall+0x242/0x790 [ 151.662305][ T6977] do_initcall_level+0x13d/0x1f0 [ 151.667254][ T6977] do_initcalls+0x69/0xd0 [ 151.671603][ T6977] kernel_init_freeable+0x3d9/0x560 [ 151.676821][ T6977] page_owner free stack trace missing [ 151.682205][ T6977] [ 151.684535][ T6977] Memory state around the buggy address: [ 151.690172][ T6977] ffff8880270dc500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.698332][ T6977] ffff8880270dc580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.706399][ T6977] >ffff8880270dc600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.714459][ T6977] ^ [ 151.719309][ T6977] ffff8880270dc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 151.727376][ T6977] ffff8880270dc700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 151.735455][ T6977] ================================================================== [ 152.312085][ T6967] loop2: detected capacity change from 0 to 32768 [ 152.444545][ T6967] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.395 (6967) [ 152.587498][ T6967] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 152.684283][ T6967] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 152.764960][ T6967] BTRFS info (device loop2): use zlib compression, level 3 [ 152.836871][ T6967] BTRFS info (device loop2): using free space tree [ 153.060120][ T6967] BTRFS info (device loop2): enabling ssd optimizations [ 153.123028][ T6967] BTRFS info (device loop2): auto enabling async discard [ 153.326218][ T5782] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.634967][ T6977] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.642246][ T6977] CPU: 0 PID: 6977 Comm: syz.3.398 Not tainted syzkaller #0 [ 154.649546][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 154.659650][ T6977] Call Trace: [ 154.662948][ T6977] [ 154.665888][ T6977] dump_stack_lvl+0x18c/0x250 [ 154.670604][ T6977] ? show_regs_print_info+0x20/0x20 [ 154.675820][ T6977] ? load_image+0x420/0x420 [ 154.680340][ T6977] panic+0x2ca/0x720 [ 154.684262][ T6977] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.690449][ T6977] ? bpf_jit_dump+0xd0/0xd0 [ 154.694978][ T6977] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 154.700997][ T6977] ? _raw_spin_unlock+0x40/0x40 [ 154.705887][ T6977] ? dvb_device_open+0xc9/0x360 [ 154.710760][ T6977] check_panic_on_warn+0x84/0xa0 [ 154.715729][ T6977] ? dvb_device_open+0xc9/0x360 [ 154.720604][ T6977] end_report+0x6f/0x130 [ 154.724855][ T6977] kasan_report+0x128/0x150 [ 154.729367][ T6977] ? dvb_device_open+0xc9/0x360 [ 154.734238][ T6977] dvb_device_open+0xc9/0x360 [ 154.738928][ T6977] chrdev_open+0x58c/0x600 [ 154.743355][ T6977] ? cd_forget+0x160/0x160 [ 154.747777][ T6977] ? fsnotify_perm+0x3ed/0x5e0 [ 154.752554][ T6977] do_dentry_open+0x880/0x14b0 [ 154.757336][ T6977] ? cd_forget+0x160/0x160 [ 154.761760][ T6977] path_openat+0x284f/0x3270 [ 154.766375][ T6977] ? do_sys_openat2+0xda/0x1d0 [ 154.771150][ T6977] ? __x64_sys_openat+0x139/0x160 [ 154.776187][ T6977] ? verify_lock_unused+0x140/0x140 [ 154.781399][ T6977] ? do_filp_open+0x430/0x430 [ 154.786089][ T6977] do_filp_open+0x1f2/0x430 [ 154.790597][ T6977] ? vfs_tmpfile+0x620/0x620 [ 154.795200][ T6977] ? _raw_spin_unlock+0x28/0x40 [ 154.800070][ T6977] ? alloc_fd+0x590/0x640 [ 154.804415][ T6977] do_sys_openat2+0x134/0x1d0 [ 154.809103][ T6977] ? do_sys_open+0xe0/0xe0 [ 154.813540][ T6977] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 154.819530][ T6977] ? lock_chain_count+0x20/0x20 [ 154.824388][ T6977] __x64_sys_openat+0x139/0x160 [ 154.829264][ T6977] do_syscall_64+0x55/0xb0 [ 154.833703][ T6977] ? clear_bhb_loop+0x40/0x90 [ 154.838381][ T6977] ? clear_bhb_loop+0x40/0x90 [ 154.843067][ T6977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.848989][ T6977] RIP: 0033:0x7fb681d5e9ce [ 154.853417][ T6977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 154.873034][ T6977] RSP: 002b:00007fb682b8ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.881460][ T6977] RAX: ffffffffffffffda RBX: 00007fb682b8b6c0 RCX: 00007fb681d5e9ce [ 154.889453][ T6977] RDX: 0000000000000002 RSI: 00007fb682b8ac00 RDI: ffffffffffffff9c [ 154.897429][ T6977] RBP: 00007fb682b8ac00 R08: 0000000000000000 R09: 0000000000000000 [ 154.905403][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 154.913385][ T6977] R13: 00007fb682026038 R14: 00007fb682025fa0 R15: 00007ffd77841bf8 [ 154.921385][ T6977] [ 154.924486][ T6977] Kernel Offset: disabled [ 154.928826][ T6977] Rebooting in 86400 seconds..