last executing test programs: 15.380077642s ago: executing program 3 (id=555): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 13.504052389s ago: executing program 3 (id=559): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40}, {0x6, 0x0, 0x6c}]}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}, 0x2}], 0x1c) 12.943167998s ago: executing program 3 (id=561): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./bus\x00', 0x18, &(0x7f0000000300)={[{@space_cache_v1}, {@nossd_spread}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@clear_cache}, {@noacl}, {@nodatacow}, {@barrier}, {@ref_verify}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) sendfile(r1, r1, 0x0, 0x1000200201005) r3 = openat(r1, 0x0, 0x105042, 0x1fe) statx(r1, &(0x7f0000000100)='./file1\x00', 0x100, 0x777, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000001c0)={0x4, 0x7, {}, {r4}, 0x3, 0xfffffffffffffffe}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000180)={0x5, 0x204}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6f5e042c}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10f, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="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", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) 10.593595493s ago: executing program 1 (id=565): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r1, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) listen(r1, 0x100) 9.560265528s ago: executing program 1 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) timerfd_create(0x0, 0x0) r5 = syz_io_uring_setup(0x58f2, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = open$dir(0x0, 0x80, 0x107) symlinkat(&(0x7f0000000280)='./file1\x00', r8, &(0x7f0000000340)='./bus\x00') syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x1f82, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x2ba1, 0x9bb6, 0xb, &(0x7f0000000040)={[0xb]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1807000000000d000000000000000000851000000200000026000000feffff859500007b0000000095", @ANYRESHEX], &(0x7f0000000400)='GPL\x00', 0x2, 0x95, &(0x7f00000004c0)=""/149, 0x41100, 0x1}, 0x94) 7.965726332s ago: executing program 1 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 7.213001113s ago: executing program 2 (id=571): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = dup(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r5, 0x2e, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100), &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r2, r5, 0x27, 0x2004, 0x0, @value=r6, @void, @void, @void, r9}, 0x20) bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) munlockall() 6.133043999s ago: executing program 3 (id=573): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x900) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/212, 0xd4}], 0x1, 0x0, 0xff6f}, 0x3ff}], 0x4000300, 0x2, 0x0) 6.125069089s ago: executing program 2 (id=574): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = dup(r7) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r2, r5, 0x27, 0x2004, 0x0, @value=r6}, 0x20) bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) munlockall() 4.850421088s ago: executing program 0 (id=576): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000030000"], 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffe65, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x1}}, 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x14, r3, 0x65283e1aaa2ddbb1, 0x0, 0x1ffffffc}, 0x14}}, 0x0) 3.970275641s ago: executing program 3 (id=577): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r3, 0x3, &(0x7f0000000140)={0x3}, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e3002a0001f14000000d190c937dc6914243b0402d6dcb70ad80851956fe6727ae888746b02cee670a5882a0ad79716584e6b04b7f62edac751478af9c62f", 0x40, 0xfffffffffffffffc) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 3.834358953s ago: executing program 1 (id=578): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$eJzs3U1sHFcBAOA3a6/z22ZTHGrS0CYU2vJTu3FM+ImAVM2FqKm4Vaq4RElaIpyASCVI1UOSEzdaVeHK76mX8qNK5IKinrhUopG49FQ4cCAKUiUO0JC48vq99e7zbmbt2J6s9/uk2bdv3tt9b3ZnZmdn5r0XgKFVaz7OzEwUIVy+8saRfz32zy0hXBlfzNFoPo62xeohhCLGR7P3+2BkIbz14asnuoVFmG4+pnh47kbrtdtCCBfC3nA1NMLuy9def3f62WMXj17a996bh66vzdIDAMBw+c7VQzO7/v7Xh3Z+9NbDh8Om1vx0fN6I8e3xuP9wPPBPx/+10Bkv2qZ2Y1m+0TjVsnwjXfK1l1PP8o32KH8se996j3ybSsofaZvXbblhkKX1uBGK2mRHvFabnFz4Tx6a/+vHismzp2dfPFdRRYFV959HQgh7Taahny42N4jq67Gu09yOqvdAAAvy64VLXMjPLNyd1ruN9lf+jadr3V8Pq2C913/lD1b5v71oj8Pq2ahrU1qutB1tj/G26whnQpf7l/Ltby5/42z7T++XX4+o91nPXtcRBuX6Qq96jqxzPVaqV/3z9WKj+kYM0+fwzSy9ffvJv9NB+Y6B7v7r/L/JNLTTkuPbO8jvlQE2tvy+ubkopef39eXpm0rSN5ekbylJ39qRa2n6tpLXwzD748s/C68Vi//z8//0yz0fns6z3RfD+5dZn/x85HLLH7tDbD3Kd4zEIPnT8edPffXkC9cW7v8vWuv/7bi+743xRtyarsYM6Xxhfl69de9/o7OcWo98D2T1ua9L/ubz8c58xfji+4S2/cySekx0vm5Hr3x7OvM1snxb4rQ5q29+fLI1e106/kj71fR5jWbLW8+WYyyrR9qv7IxhXg9YibQ+9rr/P62fE6FevHh69tRTMZ7W07+M1DfNz99fXtTvVrvuwN3pt/3PROhs/7O9Nb9ea98v7FicX7TvFxrZ/Oke8w/EePqd+97Ilub8yRM/mD252gsPQ+7c+Ve+f3x29tSPPPHEE09aT6reMwFrberlMz+cOnf+lSdPnzn+0qmXTp09cPDggenpg187MDPVPK6faj+6BzaSxR/9qmsCAAAAAAAAAAAA9OvHR49c+9s7X3l/of3/Yvu/1P4/3fmb2v//tFho615rmx+6jAOY2gHu7JLezJN1sDqW5avH6RNZfcezcnZlr/tkDFvj+MX2/6m4vF/XVJ8Hs/l5/70pX9adwJL+UsayXkfy8QI/E8NLMfx1gAoVW7rPjmFZ/9ZpXU/9UyyjX4ruBVOJ9L2lLyX1Y5Laf/fq1ynt/3euQx1ZfevRnLDqZQS6+/cQ9//dPHZZw/f/zf3VL+Pm3mmbqq6bqfppbs4oHsC9oerxP9N5zxSe/fO3N89PKduNpzv3l3n/pXA37vXxJ5W/scb/bI1/19f+7+bS0RMaKyv3f7+4/n5bsWF3v/vffPlTP9DjeQl3PhP90Xz5NxcX5fHQX/lzv8rKzy8I9elmXP70+W/ts/wly7+nrKTzb3eb+/9YfvrYnni03/IXalzUOuuRnzdO1//y88bJrWz5T650+Vc4UOPtWD4Ms0EZZ3a5+hj/t6ls/N8lVnn8317y+zC+HONpR5juc8hHOFlm/VuR9DuwK3v/ouT3zfi/g+3rMSzbHtL4v2l9bHSJ19ri9S6f7Ubd18Cg+uDevf63+ENVfV1M/X5f1dfDtIxpbm5ubU9olai0cCr//Kv+n1B1+VV//mXy8X/zY/h8/N88PR//N0/Px//N0/Px9fL0rVl6/nnm4//m6Q9m75uPDzyR/cHO0z9V8vrdJekPlaTvKUn/dEn6vpL0h0vSHylJf6Ak/dGS9M+WpH+uJP2xkvQnStI/X5K+0aX2KMO6/DDM8vZ5tn8YHql9ba/tf7wkHRhcP39r/zMv/OG7jYX2/2Ot8yHpOt7hGK/H/84/ifH8undoi8+nvRPj/8jS7/XzHTBM8v4z8t/3x0vSgcGV7vOyfcMQKrq3k+i336pex/kMli/E8Isx/FIMn4zhZAynYrg/htPrVD/WxjO/f/vQa8Xi//0dWXq/95Pn7YHyfqIO9Fmf/PzAcu/Hz/vxW667LX+FzcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqU2s+zsxMFCFcvvLGkeePnZ6an/OtVo5G83G0LVZvvS6Ep2I4EsNfxie3Pnz1RHt4O4ZFmA5FKFrzw3M3WiVtCyFcCHvD1dAIuy9fe/3d6WePXTx6ad97bx66vnafAAAAAGx8HwcAAP//V88c0Q==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x91}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x86443, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 3.669549435s ago: executing program 0 (id=579): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) unshare(0x2c020400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)={0x10000000}) signalfd4(r0, &(0x7f0000000180), 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=@newtclass={0x104, 0x28, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x0, 0x10}, {0x7, 0xfff2}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x6, 0x7}}, @TCA_HFSC_USC={0x10, 0x3, {0xffffffff, 0xffff, 0x5}}, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x4420f45e, 0x800}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x8, 0xa00000}}, @TCA_HFSC_RSC={0x10, 0x1, {0x40, 0xff, 0xfffffff9}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x10, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x7a3, 0xfa}}]}}, @TCA_RATE={0x6, 0x5, {0x27, 0x9}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xe}}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_tbf={0x8}]}, 0x104}, 0x1, 0x0, 0x0, 0x4040}, 0x1) socket$inet6(0xa, 0x5, 0x0) 2.921393847s ago: executing program 1 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) 2.829876828s ago: executing program 0 (id=581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000"]) 2.67299776s ago: executing program 0 (id=582): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x3a) r8 = dup(r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r5, 0x2e, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100), &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r2, r5, 0x27, 0x2004, 0x0, @value=r6, @void, @void, @void, r9}, 0x20) bind$unix(r8, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) munlockall() 2.480346653s ago: executing program 2 (id=583): ptrace$cont(0x20, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 2.388222624s ago: executing program 1 (id=584): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0200400002000000010000000000000000c0ba0e6081"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[], 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x1) 1.608068166s ago: executing program 0 (id=585): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 1.522401117s ago: executing program 2 (id=586): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x900) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/212, 0xd4}], 0x1, 0x0, 0xff6f}, 0x3ff}], 0x4000300, 0x2, 0x0) 1.36341382s ago: executing program 0 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000030000"], 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffe65, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x1}}, 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x14, r3, 0x65283e1aaa2ddbb1, 0x0, 0x1ffffffc}, 0x14}}, 0x0) 1.36255391s ago: executing program 3 (id=588): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r1, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) listen(r1, 0x100) 187.574787ms ago: executing program 2 (id=589): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0214f9f407000904001f0000000000000000000000080004000100000d", 0xfe3d) 0s ago: executing program 2 (id=590): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = epoll_create1(0x0) unshare(0x2c020400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)={0x10000000}) signalfd4(r0, &(0x7f0000000180), 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xf, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=@newtclass={0x104, 0x28, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x0, 0x10}, {0x7, 0xfff2}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x6, 0x7}}, @TCA_HFSC_USC={0x10, 0x3, {0xffffffff, 0xffff, 0x5}}, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x4420f45e, 0x800}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x8, 0xa00000}}, @TCA_HFSC_RSC={0x10, 0x1, {0x40, 0xff, 0xfffffff9}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x10, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x7a3, 0xfa}}]}}, @TCA_RATE={0x6, 0x5, {0x27, 0x9}}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xe}}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_tbf={0x8}]}, 0x104}, 0x1, 0x0, 0x0, 0x4040}, 0x1) socket$inet6(0xa, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 56.625396][ T5773] cgroup: Unknown subsys name 'net' [ 56.728722][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.088027][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.536172][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.544521][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.553161][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.554100][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.561069][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.574906][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.576304][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.583130][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.590826][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.597895][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.603901][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.614483][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.618745][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.633014][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.640356][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.647693][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.659054][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.662865][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.666858][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.674176][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.680855][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.687586][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.702263][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.717460][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.120229][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 60.266526][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 60.287731][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 60.299618][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.307443][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.314807][ T5784] bridge_slave_0: entered allmulticast mode [ 60.321540][ T5784] bridge_slave_0: entered promiscuous mode [ 60.339295][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 60.364997][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.372407][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.379540][ T5784] bridge_slave_1: entered allmulticast mode [ 60.386818][ T5784] bridge_slave_1: entered promiscuous mode [ 60.454970][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.485470][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.552345][ T5784] team0: Port device team_slave_0 added [ 60.589622][ T5784] team0: Port device team_slave_1 added [ 60.617480][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.624727][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.633027][ T5785] bridge_slave_0: entered allmulticast mode [ 60.639707][ T5785] bridge_slave_0: entered promiscuous mode [ 60.656417][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.664186][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.671369][ T5783] bridge_slave_0: entered allmulticast mode [ 60.678876][ T5783] bridge_slave_0: entered promiscuous mode [ 60.697210][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.704502][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.711648][ T5785] bridge_slave_1: entered allmulticast mode [ 60.719067][ T5785] bridge_slave_1: entered promiscuous mode [ 60.725889][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.733295][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.740437][ T5786] bridge_slave_0: entered allmulticast mode [ 60.747476][ T5786] bridge_slave_0: entered promiscuous mode [ 60.754431][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.761556][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.768931][ T5783] bridge_slave_1: entered allmulticast mode [ 60.775800][ T5783] bridge_slave_1: entered promiscuous mode [ 60.794535][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.801486][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.827874][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.849875][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.857394][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.864723][ T5786] bridge_slave_1: entered allmulticast mode [ 60.871365][ T5786] bridge_slave_1: entered promiscuous mode [ 60.889403][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.896465][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.922552][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.955698][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.986273][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.998489][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.010614][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.031220][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.078862][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.116963][ T5783] team0: Port device team_slave_0 added [ 61.124667][ T5783] team0: Port device team_slave_1 added [ 61.133670][ T5785] team0: Port device team_slave_0 added [ 61.150782][ T5784] hsr_slave_0: entered promiscuous mode [ 61.157447][ T5784] hsr_slave_1: entered promiscuous mode [ 61.188303][ T5785] team0: Port device team_slave_1 added [ 61.208805][ T5786] team0: Port device team_slave_0 added [ 61.227164][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.234626][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.260640][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.283471][ T5786] team0: Port device team_slave_1 added [ 61.304857][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.312773][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.339131][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.387396][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.394529][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.420618][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.433529][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.440501][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.466885][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.484624][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.491587][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.517736][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.535706][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.542851][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.569201][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.674688][ T5785] hsr_slave_0: entered promiscuous mode [ 61.680899][ T5785] hsr_slave_1: entered promiscuous mode [ 61.687157][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.694935][ T5785] Cannot create hsr debugfs directory [ 61.720093][ T5786] hsr_slave_0: entered promiscuous mode [ 61.727583][ T5786] hsr_slave_1: entered promiscuous mode [ 61.733982][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.741535][ T5786] Cannot create hsr debugfs directory [ 61.760615][ T5783] hsr_slave_0: entered promiscuous mode [ 61.767596][ T5783] hsr_slave_1: entered promiscuous mode [ 61.773031][ T5799] Bluetooth: hci3: command tx timeout [ 61.773974][ T50] Bluetooth: hci2: command tx timeout [ 61.779142][ T5106] Bluetooth: hci0: command tx timeout [ 61.784473][ T50] Bluetooth: hci1: command tx timeout [ 61.794641][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.803931][ T5783] Cannot create hsr debugfs directory [ 62.104053][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.115497][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.125794][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.138486][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.213401][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.227637][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.237583][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.247385][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.320374][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.338779][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.349628][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.359973][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.443143][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.453279][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.464393][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.485502][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.551250][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.583953][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.637823][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.648428][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.675682][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.683063][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.695506][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.702678][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.742741][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.749905][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.759768][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.766891][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.820294][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.895206][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.910232][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.950357][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.968938][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.976121][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.021255][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.028460][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.041068][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.048272][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.088012][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.095223][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.181034][ T5785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.194293][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.289245][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.340245][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.456629][ T5783] veth0_vlan: entered promiscuous mode [ 63.498187][ T5784] veth0_vlan: entered promiscuous mode [ 63.510336][ T5783] veth1_vlan: entered promiscuous mode [ 63.560087][ T5784] veth1_vlan: entered promiscuous mode [ 63.595520][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.626952][ T5783] veth0_macvtap: entered promiscuous mode [ 63.656924][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.668354][ T5783] veth1_macvtap: entered promiscuous mode [ 63.689098][ T5784] veth0_macvtap: entered promiscuous mode [ 63.707113][ T5784] veth1_macvtap: entered promiscuous mode [ 63.738595][ T5785] veth0_vlan: entered promiscuous mode [ 63.764407][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.774232][ T5785] veth1_vlan: entered promiscuous mode [ 63.796300][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.809479][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.821717][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.834465][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.842630][ T50] Bluetooth: hci0: command tx timeout [ 63.842653][ T5106] Bluetooth: hci3: command tx timeout [ 63.848032][ T50] Bluetooth: hci2: command tx timeout [ 63.853457][ T5799] Bluetooth: hci1: command tx timeout [ 63.867003][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.877709][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.889459][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.920098][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.929891][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.938978][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.949850][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.962937][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.971659][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.980578][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.990562][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.037006][ T5785] veth0_macvtap: entered promiscuous mode [ 64.063608][ T5786] veth0_vlan: entered promiscuous mode [ 64.085485][ T5785] veth1_macvtap: entered promiscuous mode [ 64.102653][ T5786] veth1_vlan: entered promiscuous mode [ 64.198139][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.211139][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.222034][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.233124][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.246079][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.257733][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.269160][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.279623][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.291276][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.303028][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.350379][ T5786] veth0_macvtap: entered promiscuous mode [ 64.362351][ T5786] veth1_macvtap: entered promiscuous mode [ 64.362921][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.383604][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.393620][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.394705][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.401443][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.413816][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.430146][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.439438][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.506043][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.516910][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.527801][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.538463][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.548376][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.559096][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.571542][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.589426][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.604919][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.615659][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.626627][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.636724][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.647813][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.658916][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.678614][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.695673][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.710317][ T2934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.718752][ T2934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.739074][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.749988][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.758782][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.767891][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.873746][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.886351][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.940264][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.954454][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.034237][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.053397][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.118155][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.143110][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.523834][ T5879] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.972258][ T5790] Bluetooth: hci0: command tx timeout [ 65.977709][ T5790] Bluetooth: hci2: command tx timeout [ 65.983359][ T5106] Bluetooth: hci1: command tx timeout [ 65.989324][ T50] Bluetooth: hci3: command tx timeout [ 66.692441][ T5826] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.701427][ T5846] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.862083][ T5846] usb 4-1: device descriptor read/64, error -71 [ 66.916087][ T5826] usb 2-1: Using ep0 maxpacket: 8 [ 66.928456][ T5826] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 66.940449][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.950012][ T5826] usb 2-1: Product: syz [ 66.954273][ T5826] usb 2-1: Manufacturer: syz [ 66.959574][ T5826] usb 2-1: SerialNumber: syz [ 66.974043][ T5893] "syz.0.6" (5893) uses obsolete ecb(arc4) skcipher [ 66.989076][ T5826] usb 2-1: config 0 descriptor?? [ 67.020675][ T5826] gspca_main: sq930x-2.14.0 probing 2770:930c [ 67.066022][ T5894] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 67.093899][ T5894] CIFS: Unable to determine destination address [ 67.144311][ T5846] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 67.354292][ T5846] usb 4-1: device descriptor read/64, error -71 [ 67.459255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.493968][ T5846] usb usb4-port1: attempt power cycle [ 68.003268][ T50] Bluetooth: hci3: command tx timeout [ 68.009407][ T5790] Bluetooth: hci2: command tx timeout [ 68.019541][ T50] Bluetooth: hci1: command tx timeout [ 68.025499][ T5106] Bluetooth: hci0: command tx timeout [ 68.760849][ T5846] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 68.790487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.802076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 68.814580][ T5826] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 68.860744][ T5846] usb 4-1: device descriptor read/8, error -71 [ 69.042394][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 69.223444][ T5846] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 69.308997][ T5846] usb 4-1: device descriptor read/8, error -71 [ 69.443944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.479615][ T5846] usb usb4-port1: unable to enumerate USB device [ 70.092183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.100992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.139524][ T5826] gspca_sq930x: Unknown sensor [ 70.150325][ T5826] sq930x: probe of 2-1:0.0 failed with error -22 [ 70.171162][ T5826] usb 2-1: USB disconnect, device number 2 [ 70.412427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.531310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.633705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.642374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.265070][ T5931] "syz.3.17" (5931) uses obsolete ecb(arc4) skcipher [ 71.539141][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.418018][ T5937] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 72.608864][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.696599][ T5931] CIFS: Unable to determine destination address [ 76.548482][ T5972] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 76.804089][ T5975] tty tty2: ldisc open failed (-12), clearing slot 1 [ 76.899338][ T5968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 76.982167][ T5968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 79.152088][ T5853] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 79.349691][ T5853] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 79.360487][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.378787][ T5853] usb 4-1: Product: syz [ 79.385400][ T5853] usb 4-1: Manufacturer: syz [ 79.390108][ T5853] usb 4-1: SerialNumber: syz [ 79.403037][ T5853] usb 4-1: config 0 descriptor?? [ 79.426855][ T5853] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 80.225241][ T5853] gspca_sunplus: reg_r err -110 [ 81.345826][ T6009] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 81.773817][ T6016] syz.2.37[6016]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.332270][ T787] cfg80211: failed to load regulatory.db [ 82.379646][ T6005] block nbd3: shutting down sockets [ 82.466357][ T5826] usb 4-1: USB disconnect, device number 6 [ 83.107742][ T6027] overlayfs: failed to resolve './file0': -2 [ 83.992152][ T6030] 9pnet_fd: Insufficient options for proto=fd [ 84.420884][ T27] audit: type=1326 audit(1751631014.337:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067f8e929 code=0x7ffc0000 [ 84.731416][ T27] audit: type=1326 audit(1751631014.347:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067f8e929 code=0x7ffc0000 [ 85.502660][ T27] audit: type=1326 audit(1751631014.347:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4067f8e929 code=0x7ffc0000 [ 85.634173][ T27] audit: type=1326 audit(1751631014.357:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067f8e929 code=0x7ffc0000 [ 85.764113][ T27] audit: type=1326 audit(1751631014.357:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067f8e929 code=0x7ffc0000 [ 85.849661][ T27] audit: type=1326 audit(1751631014.377:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4067f8e929 code=0x7ffc0000 [ 85.929684][ T27] audit: type=1326 audit(1751631014.377:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067f8e929 code=0x7ffc0000 [ 86.022030][ T5787] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.031864][ T27] audit: type=1326 audit(1751631014.377:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067f8e929 code=0x7ffc0000 [ 86.061820][ C1] sched: RT throttling activated [ 86.070379][ T27] audit: type=1326 audit(1751631014.387:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4067f8e929 code=0x7ffc0000 [ 86.098770][ T27] audit: type=1326 audit(1751631014.387:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4067f8e929 code=0x7ffc0000 [ 86.794665][ T6050] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 86.885246][ T5787] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 86.941975][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.965167][ T5787] usb 4-1: Product: syz [ 86.969588][ T5787] usb 4-1: Manufacturer: syz [ 86.986739][ T5787] usb 4-1: SerialNumber: syz [ 87.003197][ T5787] usb 4-1: config 0 descriptor?? [ 87.054238][ T5787] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 88.157742][ T5787] gspca_sunplus: reg_r err -110 [ 88.227858][ T6070] "syz.2.51" (6070) uses obsolete ecb(arc4) skcipher [ 88.239471][ T6070] CIFS: Unable to determine destination address [ 88.484496][ T6072] 9pnet_fd: Insufficient options for proto=fd [ 88.903028][ T6085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 88.914452][ T6085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 89.594377][ T6061] block nbd3: shutting down sockets [ 89.728347][ T5826] usb 4-1: USB disconnect, device number 7 [ 90.162227][ T5839] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.641199][ T5787] libceph: connect (1)[c::]:6789 error -101 [ 90.652344][ T5787] libceph: mon0 (1)[c::]:6789 connect error [ 90.686716][ T6092] ceph: No mds server is up or the cluster is laggy [ 90.832434][ T5839] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 90.869195][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.908289][ T5839] usb 2-1: Product: syz [ 90.926566][ T5839] usb 2-1: Manufacturer: syz [ 90.941494][ T5839] usb 2-1: SerialNumber: syz [ 90.973527][ T5839] usb 2-1: config 0 descriptor?? [ 90.995813][ T5839] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 91.119395][ T6102] "syz.2.60" (6102) uses obsolete ecb(arc4) skcipher [ 91.199386][ T6103] CIFS: Unable to determine destination address [ 91.670677][ T5839] gspca_sunplus: reg_r err -110 [ 92.882027][ T6110] 9pnet_fd: Insufficient options for proto=fd [ 94.062117][ T5853] usb 2-1: USB disconnect, device number 3 [ 95.282817][ T6138] netlink: 'syz.1.69': attribute type 3 has an invalid length. [ 95.573760][ T6141] "syz.1.70" (6141) uses obsolete ecb(arc4) skcipher [ 96.167888][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'. [ 96.187899][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'. [ 96.233264][ T6141] CIFS: Unable to determine destination address [ 96.404435][ T6147] 9pnet_fd: Insufficient options for proto=fd [ 96.605460][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.702387][ T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.757050][ T6160] ======================================================= [ 96.757050][ T6160] WARNING: The mand mount option has been deprecated and [ 96.757050][ T6160] and is ignored by this kernel. Remove the mand [ 96.757050][ T6160] option from the mount to silence this warning. [ 96.757050][ T6160] ======================================================= [ 96.798435][ T6160] ufs: You didn't specify the type of your ufs filesystem [ 96.798435][ T6160] [ 96.798435][ T6160] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 96.798435][ T6160] [ 96.798435][ T6160] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 96.843050][ T6160] ufs: ufstype=old is supported read-only [ 96.856723][ T6160] ufs: ufs_fill_super(): bad magic number [ 96.868456][ T8] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 96.881650][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.900533][ T8] usb 2-1: Product: syz [ 96.917208][ T8] usb 2-1: Manufacturer: syz [ 96.922303][ T8] usb 2-1: SerialNumber: syz [ 96.938652][ T8] usb 2-1: config 0 descriptor?? [ 96.960239][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 97.954890][ T786] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.969037][ T786] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.980392][ T786] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.989594][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.376203][ T6154] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 98.617565][ T786] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 98.778017][ T8] gspca_sunplus: reg_r err -110 [ 98.863317][ T786] usb 1-1: USB disconnect, device number 2 [ 99.429954][ T5839] usb 2-1: USB disconnect, device number 4 [ 100.063499][ T6187] 9pnet_fd: Insufficient options for proto=fd [ 100.269965][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 100.742103][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.85'. [ 100.750950][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.85'. [ 101.292560][ T5853] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.371981][ T5787] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 102.694922][ T5853] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 102.705070][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.715338][ T5853] usb 2-1: Product: syz [ 102.719547][ T5853] usb 2-1: Manufacturer: syz [ 102.724984][ T5853] usb 2-1: SerialNumber: syz [ 102.738626][ T5853] usb 2-1: config 0 descriptor?? [ 102.754003][ T5853] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 102.783004][ T5787] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 102.806267][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.817958][ T5787] usb 4-1: Product: syz [ 102.822564][ T5787] usb 4-1: Manufacturer: syz [ 102.827302][ T5787] usb 4-1: SerialNumber: syz [ 102.837401][ T5787] usb 4-1: config 0 descriptor?? [ 102.852295][ T5787] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 104.121732][ T5853] gspca_sunplus: reg_r err -110 [ 104.126834][ T5787] gspca_sunplus: reg_r err -110 [ 104.180308][ T6232] "syz.0.95" (6232) uses obsolete ecb(arc4) skcipher [ 105.054059][ T6232] CIFS: Unable to determine destination address [ 105.180443][ T6228] block nbd1: shutting down sockets [ 105.268725][ T8] usb 2-1: USB disconnect, device number 5 [ 105.373908][ T6240] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.386758][ T6240] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 106.151257][ T5839] usb 4-1: USB disconnect, device number 8 [ 109.178798][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.99'. [ 109.188306][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.99'. [ 109.373169][ T6261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.103'. [ 109.780020][ T6270] overlayfs: failed to resolve './file0': -2 [ 110.403334][ T6273] "syz.0.107" (6273) uses obsolete ecb(arc4) skcipher [ 110.628522][ T6273] CIFS: Unable to determine destination address [ 110.731355][ T6276] netlink: 'syz.1.109': attribute type 3 has an invalid length. [ 110.981907][ T5839] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 111.025173][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.187163][ T5839] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 111.205179][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.222128][ T5839] usb 4-1: Product: syz [ 111.230801][ T5839] usb 4-1: Manufacturer: syz [ 111.232712][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 111.243081][ T5839] usb 4-1: SerialNumber: syz [ 111.258415][ T5839] usb 4-1: config 0 descriptor?? [ 111.271417][ T5839] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 111.298561][ T8] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 111.334221][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.365573][ T8] usb 1-1: Product: syz [ 111.379001][ T8] usb 1-1: Manufacturer: syz [ 111.391915][ T8] usb 1-1: SerialNumber: syz [ 111.422346][ T8] usb 1-1: config 0 descriptor?? [ 111.447207][ T8] gspca_main: sq930x-2.14.0 probing 2770:930c [ 112.126679][ T8] gspca_sq930x: reg_r 001f failed -110 [ 112.421728][ T8] sq930x: probe of 1-1:0.0 failed with error -110 [ 112.428588][ T5839] gspca_sunplus: reg_r err -110 [ 113.792472][ T8] usb 4-1: USB disconnect, device number 9 [ 114.472948][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 115.254347][ T5826] usb 1-1: USB disconnect, device number 3 [ 115.791553][ T6315] overlayfs: failed to resolve './file0': -2 [ 118.132295][ T5787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.379117][ T5787] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 118.408335][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.471914][ T5787] usb 3-1: Product: syz [ 118.503459][ T5787] usb 3-1: Manufacturer: syz [ 118.508245][ T5787] usb 3-1: SerialNumber: syz [ 118.520030][ T5787] usb 3-1: config 0 descriptor?? [ 118.527473][ T6336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 118.536532][ T6336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 119.239589][ T5787] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 119.442315][ T6345] 9pnet_fd: Insufficient options for proto=fd [ 119.964259][ T5787] gspca_sunplus: reg_r err -110 [ 120.042116][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.372024][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 120.387573][ T787] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 120.405349][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.425541][ T787] usb 2-1: Product: syz [ 120.436260][ T787] usb 2-1: Manufacturer: syz [ 120.442874][ T787] usb 2-1: SerialNumber: syz [ 120.468156][ T787] usb 2-1: config 0 descriptor?? [ 120.483701][ T787] gspca_main: sq930x-2.14.0 probing 2770:930c [ 121.000345][ T787] gspca_sq930x: reg_r 001f failed -110 [ 121.112493][ T787] sq930x: probe of 2-1:0.0 failed with error -110 [ 121.213822][ T6348] block nbd2: shutting down sockets [ 121.266916][ T8] usb 3-1: USB disconnect, device number 2 [ 121.993635][ T6375] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 122.002430][ T6375] bridge0: port 3(team0) entered blocking state [ 122.011202][ T6375] bridge0: port 3(team0) entered disabled state [ 122.018551][ T6375] team0: entered allmulticast mode [ 122.024613][ T6375] team_slave_0: entered allmulticast mode [ 122.036382][ T6375] team_slave_1: entered allmulticast mode [ 122.053837][ T6375] team0: entered promiscuous mode [ 122.059114][ T6375] team_slave_0: entered promiscuous mode [ 122.087782][ T6375] team_slave_1: entered promiscuous mode [ 122.100188][ T6375] bridge0: port 3(team0) entered blocking state [ 122.106898][ T6375] bridge0: port 3(team0) entered forwarding state [ 123.017372][ T8] usb 2-1: USB disconnect, device number 6 [ 123.190991][ T6390] Zero length message leads to an empty skb [ 123.761267][ T6393] "syz.2.142" (6393) uses obsolete ecb(arc4) skcipher [ 123.899597][ T6396] CIFS: Unable to determine destination address [ 123.994394][ T6399] random: crng reseeded on system resumption [ 124.242065][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.212603][ T8] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 125.901106][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.911645][ T8] usb 2-1: Product: syz [ 125.916145][ T8] usb 2-1: Manufacturer: syz [ 125.920877][ T8] usb 2-1: SerialNumber: syz [ 125.930227][ T8] usb 2-1: config 0 descriptor?? [ 125.950134][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 127.120083][ T8] gspca_sunplus: reg_r err -110 [ 128.715671][ T6414] block nbd1: shutting down sockets [ 128.856220][ T5853] usb 2-1: USB disconnect, device number 7 [ 133.417329][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 133.451685][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.494321][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.503347][ T5826] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.200037][ T5826] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 134.209376][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.217878][ T5826] usb 4-1: Product: syz [ 134.224963][ T5826] usb 4-1: Manufacturer: syz [ 134.229592][ T5826] usb 4-1: SerialNumber: syz [ 134.253317][ T5826] usb 4-1: config 0 descriptor?? [ 134.261424][ T5826] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 135.569635][ T5826] gspca_sunplus: reg_r err -110 [ 135.574981][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.751915][ T28] usb 1-1: device descriptor read/64, error -71 [ 135.890539][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 135.900718][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.171'. [ 136.032091][ T28] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.192031][ T28] usb 1-1: device descriptor read/64, error -71 [ 136.336316][ T28] usb usb1-port1: attempt power cycle [ 136.605084][ T6486] block nbd3: shutting down sockets [ 137.059872][ T787] usb 4-1: USB disconnect, device number 10 [ 137.371890][ T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.662224][ T28] usb 1-1: device not accepting address 6, error -71 [ 142.098486][ T6528] overlayfs: failed to resolve './file1': -2 [ 142.681875][ T28] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.684595][ T6537] 9pnet_fd: Insufficient options for proto=fd [ 143.151524][ T28] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 143.262545][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.459152][ T28] usb 4-1: Product: syz [ 143.523755][ T28] usb 4-1: Manufacturer: syz [ 143.529585][ T28] usb 4-1: SerialNumber: syz [ 143.547146][ T28] usb 4-1: config 0 descriptor?? [ 143.557643][ T28] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 144.752008][ T28] gspca_sunplus: reg_r err -110 [ 145.215663][ T6561] overlayfs: failed to resolve './file1': -2 [ 145.883985][ T6550] block nbd3: shutting down sockets [ 146.009631][ T5832] usb 4-1: USB disconnect, device number 11 [ 148.798517][ T6598] "syz.2.204" (6598) uses obsolete ecb(arc4) skcipher [ 148.841966][ T5839] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.980590][ T6601] overlayfs: failed to resolve './file1': -2 [ 149.687143][ T6600] CIFS: Unable to determine destination address [ 149.809575][ T5839] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 149.830194][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.955566][ T5839] usb 1-1: Product: syz [ 149.959930][ T5839] usb 1-1: Manufacturer: syz [ 149.965970][ T5839] usb 1-1: SerialNumber: syz [ 149.979223][ T5839] usb 1-1: config 0 descriptor?? [ 150.853594][ T5839] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 151.664328][ T6606] loop3: detected capacity change from 0 to 32768 [ 152.123092][ T5839] gspca_sunplus: reg_r err -110 [ 152.191432][ T6606] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.442074][ T6606] XFS (loop3): Ending clean mount [ 152.711249][ T5826] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 152.728268][ T5826] XFS (loop3): Unmount and run xfs_repair [ 152.736145][ T5826] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 152.748681][ T5826] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 152.813941][ T5826] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 152.858314][ T5826] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 152.897397][ T5826] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 152.909226][ T5826] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 152.918605][ T5826] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 152.931952][ T5826] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 152.951330][ T5826] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 152.961758][ T1129] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74 [ 153.026064][ T1129] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 153.050131][ T1129] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 153.118212][ T6612] block nbd0: shutting down sockets [ 153.164546][ T5853] usb 1-1: USB disconnect, device number 8 [ 153.235557][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.201904][ T5787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.401532][ T5787] usb 2-1: device descriptor read/64, error -71 [ 154.406768][ T6637] loop2: detected capacity change from 0 to 1024 [ 154.513111][ T6637] 9pnet_virtio: no channels available for device syz [ 154.681999][ T5787] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.439486][ T5787] usb 2-1: device descriptor read/64, error -71 [ 156.639119][ T5787] usb usb2-port1: attempt power cycle [ 157.122256][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.287711][ T6652] loop1: detected capacity change from 0 to 32768 [ 157.306565][ T5832] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 157.336101][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.353106][ T5832] usb 3-1: Product: syz [ 157.357491][ T5832] usb 3-1: Manufacturer: syz [ 157.358180][ T6652] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.368720][ T5832] usb 3-1: SerialNumber: syz [ 157.378429][ T5832] usb 3-1: config 0 descriptor?? [ 158.492510][ T5832] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 159.516992][ T5832] gspca_sunplus: reg_r err -110 [ 159.551652][ T6652] XFS (loop1): Ending clean mount [ 159.689636][ T6652] XFS (loop1): Quotacheck needed: Please wait. [ 159.784265][ T6652] XFS (loop1): Quotacheck: Done. [ 159.872000][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.645301][ T6686] block nbd2: shutting down sockets [ 160.792245][ T28] usb 3-1: USB disconnect, device number 3 [ 161.829861][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 161.829874][ T27] audit: type=1804 audit(1751631091.757:13): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.232" name="/newroot/61/file1" dev="fuse" ino=1 res=1 errno=0 [ 161.936366][ T6716] loop2: detected capacity change from 0 to 2048 [ 161.971293][ T6716] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 162.012312][ T6175] udevd[6175]: incorrect nilfs2 checksum on /dev/loop2 [ 162.103777][ T6175] udevd[6175]: incorrect nilfs2 checksum on /dev/loop2 [ 162.141595][ T27] audit: type=1800 audit(1751631092.067:14): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.232" name="/" dev="fuse" ino=1 res=0 errno=0 [ 162.169998][ T6721] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.844910][ T27] audit: type=1800 audit(1751631093.637:15): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.233" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 164.055521][ T6729] "syz.0.236" (6729) uses obsolete ecb(arc4) skcipher [ 164.143618][ T5783] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 164.168792][ T5783] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 164.354491][ T6732] CIFS: Unable to determine destination address [ 164.418995][ T5783] Remounting filesystem read-only [ 164.444456][ T5783] NILFS (loop2): error -5 truncating bmap (ino=15) [ 164.515321][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 164.572068][ T5783] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 164.579455][ T5783] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 164.589617][ T5783] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 164.598197][ T5783] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 164.924412][ T6737] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 165.202170][ T28] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.485940][ T28] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 165.607922][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.769137][ T28] usb 4-1: Product: syz [ 165.777199][ T28] usb 4-1: Manufacturer: syz [ 165.786800][ T28] usb 4-1: SerialNumber: syz [ 165.794699][ T6744] 9pnet_fd: Insufficient options for proto=fd [ 165.802360][ T28] usb 4-1: config 0 descriptor?? [ 165.810801][ T28] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 166.377047][ T28] gspca_sunplus: reg_r err -110 [ 169.490968][ T6734] block nbd3: shutting down sockets [ 170.932022][ T6768] overlayfs: failed to resolve './file0': -2 [ 170.940869][ T6770] overlayfs: missing 'lowerdir' [ 171.366257][ T5871] usb 4-1: USB disconnect, device number 12 [ 171.398567][ T6777] loop2: detected capacity change from 0 to 512 [ 171.448705][ T6777] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 171.492141][ T6777] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.545382][ T6777] EXT4-fs (loop2): 1 truncate cleaned up [ 171.566436][ T6777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.678026][ T6784] 9pnet_fd: Insufficient options for proto=fd [ 171.713183][ T6793] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 172.251710][ T6787] loop0: detected capacity change from 0 to 32768 [ 172.281442][ T6787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.253 (6787) [ 172.316079][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.320032][ T6787] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.340241][ T6787] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 172.349393][ T6787] BTRFS info (device loop0): turning on sync discard [ 172.356648][ T6787] BTRFS info (device loop0): disabling tree log [ 172.364103][ T6787] BTRFS info (device loop0): metadata ratio 5 [ 172.370343][ T6787] BTRFS info (device loop0): using free space tree [ 172.434071][ T6787] BTRFS info (device loop0): enabling ssd optimizations [ 172.571986][ T5787] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 172.679529][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.790790][ T5787] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 172.801041][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.822013][ T5787] usb 2-1: Product: syz [ 172.826239][ T5787] usb 2-1: Manufacturer: syz [ 172.840963][ T5787] usb 2-1: SerialNumber: syz [ 172.962931][ T5787] usb 2-1: config 0 descriptor?? [ 172.975279][ T5787] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 173.457800][ T6831] overlayfs: failed to resolve './file0': -2 [ 175.495739][ T5787] gspca_sunplus: reg_r err -110 [ 175.750689][ T6843] 9pnet_fd: Insufficient options for proto=fd [ 176.237108][ T6833] block nbd1: shutting down sockets [ 176.321537][ T9] usb 2-1: USB disconnect, device number 11 [ 178.285721][ T6881] overlayfs: missing 'lowerdir' [ 179.418455][ T6865] loop1: detected capacity change from 0 to 32768 [ 179.432354][ T6865] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.268 (6865) [ 179.481908][ T6865] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.516527][ T6865] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 179.526149][ T6885] 9pnet_fd: Insufficient options for proto=fd [ 179.529451][ T6865] BTRFS info (device loop1): enabling ssd optimizations [ 179.562052][ T6865] BTRFS info (device loop1): using spread ssd allocation scheme [ 179.579536][ T6865] BTRFS info (device loop1): using free space tree [ 179.918049][ T6865] BTRFS info (device loop1): auto enabling async discard [ 180.858386][ T6919] random: crng reseeded on system resumption [ 181.748781][ T5785] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.556454][ T6928] overlayfs: missing 'lowerdir' [ 184.797610][ T6945] 9pnet_fd: Insufficient options for proto=fd [ 185.382707][ T786] libceph: connect (1)[c::]:6789 error -101 [ 185.418351][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 185.713247][ T6954] ceph: No mds server is up or the cluster is laggy [ 185.911962][ T6955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.289'. [ 185.934070][ T6963] random: crng reseeded on system resumption [ 186.485105][ T6969] overlayfs: missing 'lowerdir' [ 186.718555][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 186.725203][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 189.752964][ T6978] loop3: detected capacity change from 0 to 40427 [ 189.756154][ T6993] 9pnet_fd: Insufficient options for proto=fd [ 189.785990][ T6978] F2FS-fs (loop3): invalid crc value [ 189.816774][ T6978] F2FS-fs (loop3): Found nat_bits in checkpoint [ 191.124202][ T7013] overlayfs: missing 'workdir' [ 191.729670][ T7015] loop2: detected capacity change from 0 to 2048 [ 191.777977][ T7015] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 191.845862][ T7016] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.606772][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.613392][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.829742][ T7048] overlayfs: missing 'workdir' [ 196.237526][ T7053] loop2: detected capacity change from 0 to 2048 [ 196.284449][ T7053] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 196.379719][ T7055] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.439417][ T27] audit: type=1800 audit(1751631126.367:16): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.314" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 196.533994][ T5783] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 196.562433][ T5783] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 196.604546][ T5783] Remounting filesystem read-only [ 196.609620][ T5783] NILFS (loop2): error -5 truncating bmap (ino=15) [ 196.624359][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 196.631085][ T5783] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 196.638655][ T7051] loop0: detected capacity change from 0 to 32768 [ 196.647732][ T5783] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 196.655513][ T7051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.313 (7051) [ 196.667779][ T5783] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 196.682403][ T7051] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.682947][ T5783] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 196.711947][ T7051] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 196.720689][ T7051] BTRFS info (device loop0): turning on sync discard [ 196.741900][ T7051] BTRFS info (device loop0): disabling tree log [ 196.748208][ T7051] BTRFS info (device loop0): metadata ratio 5 [ 196.762212][ T7051] BTRFS info (device loop0): using free space tree [ 196.905573][ T7051] BTRFS info (device loop0): enabling ssd optimizations [ 196.913160][ T28] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 197.112656][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 197.132341][ T27] audit: type=1800 audit(1751631126.977:17): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.313" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 197.184243][ T28] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 197.443785][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.646408][ T28] usb 2-1: Product: syz [ 197.787374][ T28] usb 2-1: Manufacturer: syz [ 197.847774][ T28] usb 2-1: SerialNumber: syz [ 197.939401][ T28] usb 2-1: config 0 descriptor?? [ 197.955832][ T28] gspca_main: sq930x-2.14.0 probing 2770:930c [ 199.025589][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.490962][ T7102] overlayfs: missing 'workdir' [ 200.711865][ T28] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 200.937761][ T7106] loop2: detected capacity change from 0 to 2048 [ 200.956871][ T7106] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.984169][ T7107] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.166020][ T27] audit: type=1800 audit(1751631131.097:18): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.325" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 201.241390][ T7112] random: crng reseeded on system resumption [ 201.262578][ T5783] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 201.271127][ T5783] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 201.318566][ T7113] loop1: detected capacity change from 0 to 512 [ 201.373412][ T7113] EXT4-fs: Ignoring removed oldalloc option [ 201.444215][ T5783] Remounting filesystem read-only [ 201.449260][ T5783] NILFS (loop2): error -5 truncating bmap (ino=15) [ 201.511137][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 201.518043][ T5783] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 201.533818][ T5783] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 201.541153][ T5783] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 201.556870][ T7113] EXT4-fs (loop1): 1 truncate cleaned up [ 201.556930][ T5783] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 201.584255][ T7113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.165288][ T28] gspca_sq930x: Unknown sensor [ 202.251210][ T28] sq930x: probe of 2-1:0.0 failed with error -22 [ 202.708254][ T28] usb 2-1: USB disconnect, device number 12 [ 202.724272][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.834139][ T7129] 9pnet_fd: Insufficient options for proto=fd [ 203.273073][ T7134] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 205.086614][ T7149] overlayfs: missing 'lowerdir' [ 205.231379][ T28] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 205.491951][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 205.512996][ T28] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 205.531382][ T7155] random: crng reseeded on system resumption [ 205.670471][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.823721][ T28] usb 4-1: Product: syz [ 205.828323][ T28] usb 4-1: Manufacturer: syz [ 205.832995][ T28] usb 4-1: SerialNumber: syz [ 205.842975][ T28] usb 4-1: config 0 descriptor?? [ 205.853208][ T28] gspca_main: sq930x-2.14.0 probing 2770:930c [ 206.512636][ T28] gspca_sq930x: reg_r 001f failed -110 [ 206.523151][ T28] sq930x: probe of 4-1:0.0 failed with error -110 [ 206.659054][ T7165] 9pnet_fd: Insufficient options for proto=fd [ 206.841338][ T7172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.342'. [ 208.261028][ T7180] loop0: detected capacity change from 0 to 2048 [ 208.271445][ T7180] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 208.293139][ T7183] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.868313][ T7166] loop1: detected capacity change from 0 to 32768 [ 208.910502][ T7166] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 209.142651][ T5787] usb 4-1: USB disconnect, device number 13 [ 210.136374][ T7201] overlayfs: missing 'lowerdir' [ 210.405754][ T7166] XFS (loop1): Ending clean mount [ 210.478155][ T7204] "syz.3.348" (7204) uses obsolete ecb(arc4) skcipher [ 210.709889][ T5785] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 212.970542][ T7221] random: crng reseeded on system resumption [ 213.512077][ T786] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.895210][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 213.975571][ T786] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 214.014762][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.038008][ T786] usb 1-1: Product: syz [ 214.042380][ T786] usb 1-1: Manufacturer: syz [ 214.047070][ T786] usb 1-1: SerialNumber: syz [ 214.102250][ T786] usb 1-1: config 0 descriptor?? [ 214.128199][ T786] gspca_main: sq930x-2.14.0 probing 2770:930c [ 214.479613][ T7236] loop3: detected capacity change from 0 to 512 [ 214.489498][ T7236] EXT4-fs: Ignoring removed oldalloc option [ 214.501416][ T7236] EXT4-fs (loop3): 1 truncate cleaned up [ 214.514216][ T7236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.574323][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.674923][ T7219] loop2: detected capacity change from 0 to 40427 [ 214.686247][ T7219] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 214.697273][ T7219] F2FS-fs (loop2): Image doesn't support compression [ 214.704384][ T7219] F2FS-fs (loop2): heap/no_heap options were deprecated [ 214.717584][ T7219] F2FS-fs (loop2): invalid crc value [ 214.731952][ T7219] F2FS-fs (loop2): Found nat_bits in checkpoint [ 214.804472][ T7219] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 214.964145][ T7245] overlayfs: missing 'lowerdir' [ 215.411959][ T786] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 215.753167][ T7248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.360'. [ 216.146216][ T5783] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 216.218101][ T7255] overlayfs: missing 'lowerdir' [ 216.353911][ T5783] F2FS-fs (loop2): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 217.024211][ T7257] "syz.3.364" (7257) uses obsolete ecb(arc4) skcipher [ 217.038297][ T7260] random: crng reseeded on system resumption [ 217.261909][ T786] gspca_sq930x: Unknown sensor [ 217.267396][ T786] sq930x: probe of 1-1:0.0 failed with error -22 [ 217.285615][ T786] usb 1-1: USB disconnect, device number 9 [ 219.646546][ T7277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.370'. [ 219.922123][ T7282] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 219.936927][ T7282] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 220.002192][ T786] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.559054][ T7292] "syz.1.375" (7292) uses obsolete ecb(arc4) skcipher [ 220.652753][ T7294] overlayfs: missing 'lowerdir' [ 221.367089][ T7297] CIFS: Unable to determine destination address [ 221.840459][ T7299] random: crng reseeded on system resumption [ 222.097032][ T7305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.379'. [ 222.754877][ T787] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 222.777573][ T7317] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 222.786775][ T7317] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 223.613515][ T787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.653928][ T787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.673191][ T787] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.702824][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.714855][ T787] usb 1-1: SerialNumber: syz [ 223.730988][ T7326] loop1: detected capacity change from 0 to 512 [ 223.752970][ T7324] 9pnet_fd: Insufficient options for proto=fd [ 223.786846][ T7326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.804685][ T7326] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.082326][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 224.091401][ T787] usb 1-1: 0:2 : does not exist [ 224.121916][ T787] usb 1-1: USB disconnect, device number 11 [ 224.220654][ T7335] overlayfs: missing 'workdir' [ 224.846062][ T7322] loop2: detected capacity change from 0 to 32768 [ 224.926205][ T7322] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 224.938808][ T7322] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 225.875234][ T7322] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 225.916120][ T5871] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 225.948998][ T5871] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 226.181249][ T7348] overlayfs: missing 'lowerdir' [ 226.833487][ T7330] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 226.853631][ T5871] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 904ms [ 226.861294][ T5871] gfs2: fsid=syz:syz.0: jid=0: Done [ 226.868372][ T7346] random: crng reseeded on system resumption [ 227.069830][ T7322] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 227.083278][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.105182][ T7322] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 227.184658][ T7352] loop3: detected capacity change from 0 to 2048 [ 227.230794][ T7352] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 227.281206][ T7358] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.522026][ T27] audit: type=1800 audit(1751631157.437:19): pid=7352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.393" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 228.101274][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.113792][ T7361] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 228.122719][ T7361] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 228.563428][ T7365] 9pnet_fd: Insufficient options for proto=fd [ 228.769846][ T5786] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 228.782568][ T5786] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 228.812114][ T5786] Remounting filesystem read-only [ 228.817384][ T5786] NILFS (loop3): error -5 truncating bmap (ino=15) [ 228.842082][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 228.859035][ T5786] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 228.871121][ T5786] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 228.895282][ T5786] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 228.913965][ T5786] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 229.155174][ T5871] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 229.469255][ T5871] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.619839][ T5871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.704415][ T7375] loop3: detected capacity change from 0 to 2048 [ 229.840157][ T5871] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.858351][ T7375] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 229.917024][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.944732][ T7381] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.962570][ T5871] usb 1-1: SerialNumber: syz [ 230.067886][ T27] audit: type=1800 audit(1751631159.997:20): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.397" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 230.169218][ T7384] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 230.460260][ T7384] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 230.658045][ T5871] usb 1-1: 0:2 : does not exist [ 230.945072][ T5871] usb 1-1: USB disconnect, device number 12 [ 230.953658][ T7384] Remounting filesystem read-only [ 230.959498][ T7384] NILFS (loop3): error -5 truncating bmap (ino=15) [ 231.012938][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 231.019660][ T5786] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 231.049484][ T5786] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 231.065852][ T5786] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 231.084911][ T5786] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 231.313649][ T7393] random: crng reseeded on system resumption [ 234.239877][ T7420] loop0: detected capacity change from 0 to 2048 [ 234.261544][ T7420] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 234.307711][ T7425] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.352310][ T27] audit: type=1800 audit(1751631164.287:21): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.412" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 234.357463][ T7420] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952 [ 234.413809][ T7420] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 234.453334][ T7420] Remounting filesystem read-only [ 234.458644][ T7420] NILFS (loop0): error -5 truncating bmap (ino=15) [ 234.585189][ T5784] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 234.596583][ T5784] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 234.604065][ T5784] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 234.611470][ T5784] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 234.629925][ T5784] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 234.686077][ T786] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 234.896220][ T7436] random: crng reseeded on system resumption [ 234.938117][ T786] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 234.968999][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.008024][ T786] usb 4-1: Product: syz [ 235.020567][ T786] usb 4-1: Manufacturer: syz [ 235.033655][ T786] usb 4-1: SerialNumber: syz [ 235.066441][ T786] usb 4-1: config 0 descriptor?? [ 235.107274][ T786] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 235.921671][ T786] gspca_sunplus: reg_r err -110 [ 236.096410][ T5787] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 236.550227][ T5787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.569177][ T5787] usb 1-1: config 0 has no interfaces? [ 236.600733][ T5787] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 236.769851][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.784848][ T5787] usb 1-1: Product: syz [ 236.790513][ T5787] usb 1-1: Manufacturer: syz [ 236.795813][ T5787] usb 1-1: SerialNumber: syz [ 236.931486][ T5787] usb 1-1: config 0 descriptor?? [ 237.273327][ T7423] block nbd3: shutting down sockets [ 238.268455][ T786] usb 4-1: USB disconnect, device number 14 [ 238.415233][ T7450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.419'. [ 239.247962][ T7458] loop3: detected capacity change from 0 to 2048 [ 239.276118][ T7458] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 239.329660][ T7461] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.367705][ T27] audit: type=1800 audit(1751631169.297:22): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.422" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 239.375247][ T7458] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 239.408906][ T7458] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 239.421687][ T7458] Remounting filesystem read-only [ 239.429835][ T7458] NILFS (loop3): error -5 truncating bmap (ino=15) [ 239.465671][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 239.472939][ T5786] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 239.480204][ T5786] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 239.487660][ T5786] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 239.495397][ T5786] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 239.871536][ T5787] usb 1-1: USB disconnect, device number 13 [ 240.053631][ T7472] random: crng reseeded on system resumption [ 241.580563][ T28] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 241.797685][ T28] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 242.113329][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.125697][ T28] usb 1-1: Product: syz [ 242.130012][ T28] usb 1-1: Manufacturer: syz [ 242.149115][ T28] usb 1-1: SerialNumber: syz [ 242.237891][ T28] usb 1-1: config 0 descriptor?? [ 242.273550][ T28] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 242.324544][ T7486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.430'. [ 242.942151][ T28] gspca_sunplus: reg_r err -110 [ 243.612091][ T5832] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 244.502319][ T7489] block nbd0: shutting down sockets [ 244.635298][ T7502] random: crng reseeded on system resumption [ 244.952113][ T5871] usb 1-1: USB disconnect, device number 14 [ 245.082300][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.112001][ T5832] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.124056][ T5832] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 245.134178][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.142478][ T5832] usb 4-1: Product: syz [ 245.152754][ T5832] usb 4-1: Manufacturer: syz [ 245.157478][ T5832] usb 4-1: SerialNumber: syz [ 245.175792][ T5832] usb 4-1: config 0 descriptor?? [ 247.333025][ T28] usb 4-1: USB disconnect, device number 15 [ 247.574235][ T7538] random: crng reseeded on system resumption [ 251.313271][ T5871] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 251.515420][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.533131][ T5871] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.866130][ T5871] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 251.927634][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.937741][ T5871] usb 4-1: Product: syz [ 251.947858][ T5871] usb 4-1: Manufacturer: syz [ 251.955931][ T5871] usb 4-1: SerialNumber: syz [ 251.964267][ T5871] usb 4-1: config 0 descriptor?? [ 252.000921][ T7569] fuse: Bad value for 'fd' [ 252.234030][ T7576] random: crng reseeded on system resumption [ 254.684781][ T5787] usb 4-1: USB disconnect, device number 16 [ 255.797101][ T7608] overlayfs: missing 'workdir' [ 256.877721][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.900144][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.270287][ T5787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 257.426145][ T7612] ceph: No mds server is up or the cluster is laggy [ 257.476774][ T787] libceph: connect (1)[c::]:6789 error -101 [ 257.502920][ T787] libceph: mon0 (1)[c::]:6789 connect error [ 257.637274][ T7618] random: crng reseeded on system resumption [ 257.776998][ T5787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.662020][ T787] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 259.070959][ T5787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.179108][ T5787] usb 3-1: string descriptor 0 read error: -71 [ 259.209244][ T5787] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 259.226408][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 259.249893][ T5787] usb 3-1: can't set config #1, error -71 [ 259.264001][ T5787] usb 3-1: USB disconnect, device number 4 [ 259.323868][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.336371][ T787] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 259.756347][ T787] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 259.768882][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.786581][ T787] usb 1-1: Product: syz [ 259.791136][ T787] usb 1-1: Manufacturer: syz [ 259.796452][ T787] usb 1-1: SerialNumber: syz [ 259.813728][ T787] usb 1-1: config 0 descriptor?? [ 260.876865][ T7644] loop2: detected capacity change from 0 to 2048 [ 261.813942][ T7644] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 261.978931][ T7653] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.025982][ T27] audit: type=1800 audit(1751631191.957:23): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.478" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 262.047329][ T7644] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 262.072956][ T7644] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 262.089397][ T7644] Remounting filesystem read-only [ 262.140198][ T7644] NILFS (loop2): error -5 truncating bmap (ino=15) [ 262.624504][ T5895] usb 1-1: USB disconnect, device number 15 [ 262.720321][ T5783] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 262.821136][ T5783] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 262.933329][ T5783] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 262.977417][ T5783] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 263.032092][ T5783] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 263.044471][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 263.668457][ T7678] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 263.678593][ T7678] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 266.631927][ T5787] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 267.022071][ T5787] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.040825][ T7711] random: crng reseeded on system resumption [ 267.185006][ T5787] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 267.196075][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.441584][ T5787] usb 1-1: Product: syz [ 267.517932][ T5787] usb 1-1: Manufacturer: syz [ 267.527250][ T5787] usb 1-1: SerialNumber: syz [ 267.534281][ T5787] usb 1-1: config 0 descriptor?? [ 268.545537][ T28] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 268.807801][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 269.849926][ T28] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 269.897240][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.919647][ T5871] usb 1-1: USB disconnect, device number 16 [ 269.948603][ T28] usb 4-1: Product: syz [ 269.961852][ T28] usb 4-1: Manufacturer: syz [ 269.975188][ T28] usb 4-1: SerialNumber: syz [ 270.035193][ T28] usb 4-1: config 0 descriptor?? [ 270.053026][ T28] gspca_main: sq930x-2.14.0 probing 2770:930c [ 270.154644][ T7742] loop0: detected capacity change from 0 to 128 [ 270.197958][ T27] audit: type=1800 audit(1751631200.127:24): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.506" name="file2" dev="loop0" ino=1048592 res=0 errno=0 [ 270.233966][ T7742] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 270.243772][ T7742] FAT-fs (loop0): Filesystem has been set read-only [ 270.251937][ T7742] syz.0.506: attempt to access beyond end of device [ 270.251937][ T7742] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 270.266377][ T7742] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 270.274396][ T7742] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 270.288437][ T7742] syz.0.506: attempt to access beyond end of device [ 270.288437][ T7742] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 270.316012][ T7742] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 270.324881][ T7742] syz.0.506: attempt to access beyond end of device [ 270.324881][ T7742] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 270.339058][ T7742] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 270.346986][ T7742] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 270.355922][ T7742] syz.0.506: attempt to access beyond end of device [ 270.355922][ T7742] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 270.815558][ T28] gspca_sq930x: ucbus_write failed -110 [ 271.801859][ T28] gspca_sq930x: Unknown sensor [ 271.806751][ T28] sq930x: probe of 4-1:0.0 failed with error -22 [ 271.829497][ T28] usb 4-1: USB disconnect, device number 17 [ 272.121911][ T5839] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 272.351007][ T5839] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.445214][ T5839] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 272.514204][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.703599][ T5839] usb 2-1: Product: syz [ 272.742872][ T5839] usb 2-1: Manufacturer: syz [ 272.788352][ T5839] usb 2-1: SerialNumber: syz [ 272.886947][ T5839] usb 2-1: config 0 descriptor?? [ 273.921484][ T7779] loop3: detected capacity change from 0 to 2048 [ 273.931572][ T7779] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 273.957261][ T7782] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.988256][ T27] audit: type=1800 audit(1751631203.917:25): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.516" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 274.027488][ T7779] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 274.038947][ T7779] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 274.106083][ T7779] Remounting filesystem read-only [ 274.111301][ T7779] NILFS (loop3): error -5 truncating bmap (ino=15) [ 274.213131][ T7784] overlayfs: missing 'lowerdir' [ 274.444488][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 274.506487][ T5786] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 274.580416][ T5786] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 274.653534][ T5786] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 274.694747][ T5786] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 274.922948][ T5839] usb 2-1: USB disconnect, device number 13 [ 275.312149][ T7796] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 276.766084][ T7806] 9pnet_fd: Insufficient options for proto=fd [ 276.817668][ T7811] loop1: detected capacity change from 0 to 2048 [ 276.838671][ T7811] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 276.866464][ T7814] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.917885][ T27] audit: type=1800 audit(1751631206.837:26): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.527" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 276.955996][ T7811] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952 [ 276.965312][ T7811] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 276.979126][ T7811] Remounting filesystem read-only [ 276.988450][ T7811] NILFS (loop1): error -5 truncating bmap (ino=15) [ 277.013046][ T5785] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 277.214757][ T28] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 277.228829][ T5785] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 277.236356][ T5785] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 277.243942][ T5785] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 277.251495][ T5785] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 277.415862][ T28] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 277.438034][ T28] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 277.450821][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.468729][ T28] usb 4-1: Product: syz [ 277.474429][ T28] usb 4-1: Manufacturer: syz [ 277.479178][ T28] usb 4-1: SerialNumber: syz [ 277.502053][ T28] usb 4-1: config 0 descriptor?? [ 280.201095][ T28] usb 4-1: USB disconnect, device number 18 [ 281.353930][ T7856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.535'. [ 281.602604][ T7860] 9pnet_fd: Insufficient options for proto=fd [ 282.111907][ T5895] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 282.323380][ T5895] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 282.352489][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.373282][ T5895] usb 1-1: Product: syz [ 282.381738][ T5895] usb 1-1: Manufacturer: syz [ 282.395562][ T5895] usb 1-1: SerialNumber: syz [ 282.406315][ T5895] usb 1-1: config 0 descriptor?? [ 282.416274][ T5895] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 282.977419][ T5895] gspca_sunplus: reg_r err -110 [ 284.850298][ T5853] usb 1-1: USB disconnect, device number 17 [ 285.880025][ T7893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.551'. [ 288.427725][ T7923] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 288.436635][ T7923] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 288.992102][ T5853] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 289.286990][ T5853] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 289.352008][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.399328][ T5853] usb 2-1: Product: syz [ 289.418821][ T5853] usb 2-1: Manufacturer: syz [ 289.424508][ T5853] usb 2-1: SerialNumber: syz [ 289.445344][ T5853] usb 2-1: config 0 descriptor?? [ 289.457775][ T5853] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 290.532141][ T5853] gspca_sunplus: reg_r err -110 [ 290.734578][ T7931] loop3: detected capacity change from 0 to 32768 [ 290.758483][ T7931] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.561 (7931) [ 290.866618][ T7931] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 290.892262][ T7931] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 290.902621][ T7931] BTRFS info (device loop3): enabling disk space caching [ 290.911117][ T7931] BTRFS info (device loop3): doing ref verification [ 290.918001][ T7931] BTRFS info (device loop3): use zlib compression, level 3 [ 290.925446][ T7931] BTRFS info (device loop3): force clearing of disk cache [ 291.172098][ T7931] BTRFS info (device loop3): setting nodatacow, compression disabled [ 291.238745][ T7931] BTRFS info (device loop3): doing ref verification [ 291.316086][ T7931] BTRFS info (device loop3): disk space caching is enabled [ 291.633116][ T5853] usb 2-1: USB disconnect, device number 14 [ 291.651167][ T7931] BTRFS info (device loop3): enabling ssd optimizations [ 291.682634][ T7931] BTRFS info (device loop3): auto enabling async discard [ 291.721586][ T7931] BTRFS info (device loop3): rebuilding free space tree [ 291.821486][ T7931] BTRFS info (device loop3): disabling free space tree [ 291.841013][ T7931] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 291.863158][ T7931] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 292.667255][ T27] audit: type=1800 audit(1751631222.537:27): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.561" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 292.681251][ T7931] BTRFS error (device loop3): balance: mixed groups data and metadata options must be the same [ 292.752965][ T27] audit: type=1800 audit(1751631222.537:28): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.561" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 294.371940][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.567'. [ 294.382509][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.567'. [ 295.998292][ T7998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.572'. [ 296.029801][ T7931] syz.3.561 (7931) used greatest stack depth: 20816 bytes left [ 296.059980][ T5786] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 298.534604][ T8020] loop1: detected capacity change from 0 to 2048 [ 298.556753][ T8020] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 298.631873][ T8021] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.803496][ T27] audit: type=1800 audit(1751631228.737:29): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.578" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 298.811588][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.579'. [ 298.838265][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.579'. [ 298.866243][ T8024] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952 [ 298.876083][ T8024] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 298.926615][ T8024] Remounting filesystem read-only [ 298.938164][ T8024] NILFS (loop1): error -5 truncating bmap (ino=15) [ 299.305066][ T5785] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 299.319465][ T5785] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 299.334190][ T5785] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 299.358022][ T5785] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 299.371892][ T5785] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 300.088635][ T8042] netlink: 36 bytes leftover after parsing attributes in process `syz.2.583'. [ 302.196460][ T8059] ================================================================== [ 302.204572][ T8059] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5ba/0x740 [ 302.212572][ T8059] Read of size 1 at addr ffff88805c477832 by task syz.3.588/8059 [ 302.220304][ T8059] [ 302.222645][ T8059] CPU: 0 PID: 8059 Comm: syz.3.588 Not tainted 6.6.95-syzkaller #0 [ 302.230545][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.240627][ T8059] Call Trace: [ 302.243915][ T8059] [ 302.246860][ T8059] dump_stack_lvl+0x16c/0x230 [ 302.251559][ T8059] ? __lock_acquire+0x7c80/0x7c80 [ 302.256607][ T8059] ? show_regs_print_info+0x20/0x20 [ 302.261808][ T8059] ? load_image+0x3b0/0x3b0 [ 302.266324][ T8059] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 302.271687][ T8059] ? __virt_addr_valid+0x18c/0x540 [ 302.276795][ T8059] ? __virt_addr_valid+0x469/0x540 [ 302.281903][ T8059] print_report+0xac/0x230 [ 302.286312][ T8059] ? rose_transmit_link+0x5ba/0x740 [ 302.291501][ T8059] kasan_report+0x117/0x150 [ 302.295998][ T8059] ? kmem_cache_alloc_node+0x17f/0x330 [ 302.301452][ T8059] ? rose_transmit_link+0x5ba/0x740 [ 302.306644][ T8059] rose_transmit_link+0x5ba/0x740 [ 302.311656][ T8059] ? skb_put+0x11b/0x210 [ 302.315896][ T8059] rose_write_internal+0x11d1/0x1ab0 [ 302.321178][ T8059] ? rose_validate_nr+0x120/0x120 [ 302.326194][ T8059] ? __timer_delete+0x6b/0x290 [ 302.330955][ T8059] ? skb_queue_purge_reason+0x6c/0x1c0 [ 302.336405][ T8059] rose_release+0x24e/0x510 [ 302.340900][ T8059] sock_close+0xbd/0x230 [ 302.345128][ T8059] ? sock_mmap+0xa0/0xa0 [ 302.349358][ T8059] __fput+0x234/0x970 [ 302.353367][ T8059] task_work_run+0x1ce/0x250 [ 302.357952][ T8059] ? task_work_cancel+0x240/0x240 [ 302.362967][ T8059] get_signal+0x1235/0x1400 [ 302.367463][ T8059] ? task_work_add+0x3a3/0x440 [ 302.372232][ T8059] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 302.377607][ T8059] ? wake_bit_function+0x200/0x200 [ 302.382710][ T8059] ? __might_fault+0xaa/0x120 [ 302.387379][ T8059] arch_do_signal_or_restart+0x96/0x780 [ 302.392920][ T8059] ? __sys_connect+0x240/0x420 [ 302.397678][ T8059] ? get_sigframe_size+0x20/0x20 [ 302.402615][ T8059] ? exit_to_user_mode_loop+0x3b/0x110 [ 302.408067][ T8059] exit_to_user_mode_loop+0x70/0x110 [ 302.413340][ T8059] exit_to_user_mode_prepare+0xb1/0x140 [ 302.418877][ T8059] syscall_exit_to_user_mode+0x1a/0x50 [ 302.424327][ T8059] do_syscall_64+0x61/0xb0 [ 302.428733][ T8059] ? clear_bhb_loop+0x40/0x90 [ 302.433401][ T8059] ? clear_bhb_loop+0x40/0x90 [ 302.438068][ T8059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.443947][ T8059] RIP: 0033:0x7f55da18e929 [ 302.448362][ T8059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.468046][ T8059] RSP: 002b:00007f55daf55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 302.476455][ T8059] RAX: fffffffffffffe00 RBX: 00007f55da3b6080 RCX: 00007f55da18e929 [ 302.484420][ T8059] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000007 [ 302.492380][ T8059] RBP: 00007f55da210b39 R08: 0000000000000000 R09: 0000000000000000 [ 302.500337][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.508297][ T8059] R13: 0000000000000000 R14: 00007f55da3b6080 R15: 00007fff0fb55a88 [ 302.516263][ T8059] [ 302.519268][ T8059] [ 302.521583][ T8059] Allocated by task 7399: [ 302.525896][ T8059] kasan_set_track+0x4e/0x70 [ 302.530475][ T8059] __kasan_kmalloc+0x8f/0xa0 [ 302.535051][ T8059] rose_add_node+0x23a/0xdd0 [ 302.539629][ T8059] rose_rt_ioctl+0xa42/0xfb0 [ 302.544255][ T8059] rose_ioctl+0x3cf/0x8b0 [ 302.548573][ T8059] sock_do_ioctl+0xd7/0x2f0 [ 302.553060][ T8059] sock_ioctl+0x623/0x7a0 [ 302.557371][ T8059] __se_sys_ioctl+0xfd/0x170 [ 302.561950][ T8059] do_syscall_64+0x55/0xb0 [ 302.566353][ T8059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.572243][ T8059] [ 302.574553][ T8059] Freed by task 8053: [ 302.578514][ T8059] kasan_set_track+0x4e/0x70 [ 302.583096][ T8059] kasan_save_free_info+0x2e/0x50 [ 302.588108][ T8059] ____kasan_slab_free+0x126/0x1e0 [ 302.593206][ T8059] slab_free_freelist_hook+0x130/0x1b0 [ 302.598651][ T8059] __kmem_cache_free+0xba/0x1f0 [ 302.603497][ T8059] rose_rt_device_down+0x66d/0x6c0 [ 302.608613][ T8059] rose_device_event+0x604/0x690 [ 302.613559][ T8059] notifier_call_chain+0x197/0x390 [ 302.618665][ T8059] __dev_notify_flags+0x18e/0x2e0 [ 302.623678][ T8059] dev_change_flags+0xe8/0x1a0 [ 302.628431][ T8059] dev_ifsioc+0x6a7/0xe20 [ 302.632747][ T8059] dev_ioctl+0x7e2/0x1170 [ 302.637062][ T8059] sock_do_ioctl+0x226/0x2f0 [ 302.641638][ T8059] sock_ioctl+0x623/0x7a0 [ 302.645948][ T8059] __se_sys_ioctl+0xfd/0x170 [ 302.650535][ T8059] do_syscall_64+0x55/0xb0 [ 302.654950][ T8059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.660832][ T8059] [ 302.663144][ T8059] Last potentially related work creation: [ 302.668837][ T8059] kasan_save_stack+0x3e/0x60 [ 302.673532][ T8059] __kasan_record_aux_stack+0xaf/0xc0 [ 302.678894][ T8059] insert_work+0x3d/0x310 [ 302.683211][ T8059] __queue_work+0xd2c/0x1020 [ 302.687788][ T8059] call_timer_fn+0x16e/0x530 [ 302.692365][ T8059] __run_timers+0x558/0x7d0 [ 302.696849][ T8059] run_timer_softirq+0x67/0xf0 [ 302.701597][ T8059] handle_softirqs+0x280/0x820 [ 302.706347][ T8059] __irq_exit_rcu+0xc7/0x190 [ 302.710918][ T8059] irq_exit_rcu+0x9/0x20 [ 302.715142][ T8059] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 302.720756][ T8059] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.726813][ T8059] [ 302.729127][ T8059] Second to last potentially related work creation: [ 302.735689][ T8059] kasan_save_stack+0x3e/0x60 [ 302.740361][ T8059] __kasan_record_aux_stack+0xaf/0xc0 [ 302.745722][ T8059] call_rcu+0x14f/0x920 [ 302.750037][ T8059] ip6_route_info_create+0x9c0/0x1200 [ 302.755480][ T8059] ip6_route_add+0x28/0x130 [ 302.759973][ T8059] addrconf_prefix_route+0x211/0x2b0 [ 302.765245][ T8059] inet6_addr_add+0x64a/0xb60 [ 302.769907][ T8059] inet6_rtm_newaddr+0x68d/0x940 [ 302.774841][ T8059] rtnetlink_rcv_msg+0x7c7/0xf10 [ 302.779773][ T8059] netlink_rcv_skb+0x216/0x480 [ 302.784528][ T8059] netlink_unicast+0x750/0x8c0 [ 302.789283][ T8059] netlink_sendmsg+0x8c1/0xbe0 [ 302.794122][ T8059] __sys_sendto+0x46a/0x620 [ 302.798629][ T8059] __x64_sys_sendto+0xde/0xf0 [ 302.803295][ T8059] do_syscall_64+0x55/0xb0 [ 302.807700][ T8059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.814103][ T8059] [ 302.816412][ T8059] The buggy address belongs to the object at ffff88805c477800 [ 302.816412][ T8059] which belongs to the cache kmalloc-512 of size 512 [ 302.830538][ T8059] The buggy address is located 50 bytes inside of [ 302.830538][ T8059] freed 512-byte region [ffff88805c477800, ffff88805c477a00) [ 302.844234][ T8059] [ 302.846543][ T8059] The buggy address belongs to the physical page: [ 302.852948][ T8059] page:ffffea0001711d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c474 [ 302.863084][ T8059] head:ffffea0001711d00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 302.871999][ T8059] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 302.879971][ T8059] page_type: 0xffffffff() [ 302.884287][ T8059] raw: 00fff00000000840 ffff888017841c80 dead000000000100 dead000000000122 [ 302.892857][ T8059] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 302.901418][ T8059] page dumped because: kasan: bad access detected [ 302.907821][ T8059] page_owner tracks the page as allocated [ 302.913531][ T8059] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5784, tgid 5784 (syz-executor), ts 63687684212, free_ts 15673237501 [ 302.934875][ T8059] post_alloc_hook+0x1cd/0x210 [ 302.939630][ T8059] get_page_from_freelist+0x195c/0x19f0 [ 302.945161][ T8059] __alloc_pages+0x1e3/0x460 [ 302.949738][ T8059] alloc_slab_page+0x5d/0x170 [ 302.954497][ T8059] new_slab+0x87/0x2e0 [ 302.958549][ T8059] ___slab_alloc+0xc6d/0x12f0 [ 302.963209][ T8059] __kmem_cache_alloc_node+0x1a2/0x260 [ 302.968650][ T8059] __kmalloc+0xa4/0x240 [ 302.972788][ T8059] fib6_info_alloc+0x32/0xe0 [ 302.977370][ T8059] ip6_route_info_create+0x44f/0x1200 [ 302.983078][ T8059] ip6_route_add+0x28/0x130 [ 302.987568][ T8059] addrconf_add_dev+0x257/0x340 [ 302.992408][ T8059] inet6_addr_add+0x215/0xb60 [ 302.997074][ T8059] inet6_rtm_newaddr+0x68d/0x940 [ 303.002000][ T8059] rtnetlink_rcv_msg+0x7c7/0xf10 [ 303.006929][ T8059] netlink_rcv_skb+0x216/0x480 [ 303.011682][ T8059] page last free stack trace: [ 303.016336][ T8059] free_unref_page_prepare+0x7ce/0x8e0 [ 303.021791][ T8059] free_unref_page+0x32/0x2e0 [ 303.026463][ T8059] free_contig_range+0xa1/0x160 [ 303.031305][ T8059] destroy_args+0x87/0x770 [ 303.035711][ T8059] debug_vm_pgtable+0x3cc/0x410 [ 303.040550][ T8059] do_one_initcall+0x1fd/0x750 [ 303.045301][ T8059] do_initcall_level+0x137/0x1f0 [ 303.050224][ T8059] do_initcalls+0x69/0xd0 [ 303.054539][ T8059] kernel_init_freeable+0x3d2/0x570 [ 303.059718][ T8059] kernel_init+0x1d/0x1c0 [ 303.064030][ T8059] ret_from_fork+0x48/0x80 [ 303.068432][ T8059] ret_from_fork_asm+0x11/0x20 [ 303.073187][ T8059] [ 303.075494][ T8059] Memory state around the buggy address: [ 303.081102][ T8059] ffff88805c477700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.089148][ T8059] ffff88805c477780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.097284][ T8059] >ffff88805c477800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.105336][ T8059] ^ [ 303.110948][ T8059] ffff88805c477880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.118991][ T8059] ffff88805c477900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.127032][ T8059] ================================================================== [ 303.161946][ T8059] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 303.169189][ T8059] CPU: 1 PID: 8059 Comm: syz.3.588 Not tainted 6.6.95-syzkaller #0 [ 303.177110][ T8059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.187266][ T8059] Call Trace: [ 303.190546][ T8059] [ 303.193481][ T8059] dump_stack_lvl+0x16c/0x230 [ 303.198175][ T8059] ? show_regs_print_info+0x20/0x20 [ 303.203391][ T8059] ? load_image+0x3b0/0x3b0 [ 303.207912][ T8059] panic+0x2c0/0x710 [ 303.211820][ T8059] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 303.217993][ T8059] ? bpf_jit_dump+0xd0/0xd0 [ 303.222521][ T8059] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 303.228430][ T8059] ? _raw_spin_unlock+0x40/0x40 [ 303.233300][ T8059] ? rose_transmit_link+0x5ba/0x740 [ 303.238514][ T8059] check_panic_on_warn+0x84/0xa0 [ 303.243461][ T8059] ? rose_transmit_link+0x5ba/0x740 [ 303.248681][ T8059] end_report+0x6f/0x140 [ 303.252942][ T8059] kasan_report+0x128/0x150 [ 303.257445][ T8059] ? kmem_cache_alloc_node+0x17f/0x330 [ 303.262893][ T8059] ? rose_transmit_link+0x5ba/0x740 [ 303.268086][ T8059] rose_transmit_link+0x5ba/0x740 [ 303.273101][ T8059] ? skb_put+0x11b/0x210 [ 303.277330][ T8059] rose_write_internal+0x11d1/0x1ab0 [ 303.282615][ T8059] ? rose_validate_nr+0x120/0x120 [ 303.287632][ T8059] ? __timer_delete+0x6b/0x290 [ 303.292393][ T8059] ? skb_queue_purge_reason+0x6c/0x1c0 [ 303.297926][ T8059] rose_release+0x24e/0x510 [ 303.302416][ T8059] sock_close+0xbd/0x230 [ 303.306643][ T8059] ? sock_mmap+0xa0/0xa0 [ 303.310876][ T8059] __fput+0x234/0x970 [ 303.314851][ T8059] task_work_run+0x1ce/0x250 [ 303.319430][ T8059] ? task_work_cancel+0x240/0x240 [ 303.324447][ T8059] get_signal+0x1235/0x1400 [ 303.328939][ T8059] ? task_work_add+0x3a3/0x440 [ 303.333692][ T8059] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 303.339053][ T8059] ? wake_bit_function+0x200/0x200 [ 303.344152][ T8059] ? __might_fault+0xaa/0x120 [ 303.348815][ T8059] arch_do_signal_or_restart+0x96/0x780 [ 303.354387][ T8059] ? __sys_connect+0x240/0x420 [ 303.359138][ T8059] ? get_sigframe_size+0x20/0x20 [ 303.364068][ T8059] ? exit_to_user_mode_loop+0x3b/0x110 [ 303.369513][ T8059] exit_to_user_mode_loop+0x70/0x110 [ 303.374789][ T8059] exit_to_user_mode_prepare+0xb1/0x140 [ 303.380326][ T8059] syscall_exit_to_user_mode+0x1a/0x50 [ 303.385773][ T8059] do_syscall_64+0x61/0xb0 [ 303.390180][ T8059] ? clear_bhb_loop+0x40/0x90 [ 303.394845][ T8059] ? clear_bhb_loop+0x40/0x90 [ 303.399510][ T8059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.405389][ T8059] RIP: 0033:0x7f55da18e929 [ 303.409789][ T8059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.429380][ T8059] RSP: 002b:00007f55daf55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 303.437778][ T8059] RAX: fffffffffffffe00 RBX: 00007f55da3b6080 RCX: 00007f55da18e929 [ 303.445758][ T8059] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000007 [ 303.453724][ T8059] RBP: 00007f55da210b39 R08: 0000000000000000 R09: 0000000000000000 [ 303.461681][ T8059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.469655][ T8059] R13: 0000000000000000 R14: 00007f55da3b6080 R15: 00007fff0fb55a88 [ 303.477626][ T8059] [ 303.480850][ T8059] Kernel Offset: disabled [ 303.485156][ T8059] Rebooting in 86400 seconds..