last executing test programs: 33.971297085s ago: executing program 3 (id=55): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 33.776382404s ago: executing program 3 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000748000/0x1000)=nil) 33.432237349s ago: executing program 3 (id=60): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000001cc0)=""/4102, &(0x7f00000000c0)=0x1006) 32.197098304s ago: executing program 3 (id=64): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 31.665024957s ago: executing program 3 (id=65): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000740)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_test={0x51, 0x0, 0x6, 0x5, [0x3e8, 0x2, 0x100000001, 0xfc71, 0x5]}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16b, @time={0x6fd, 0x7}, 0x0, {0x0, 0xff}, 0x0, 0x0, 0x2}) 30.788280436s ago: executing program 3 (id=70): ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x40000001, 0x2, 0x6, 0x2, 0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) 30.169218689s ago: executing program 32 (id=70): ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x40000001, 0x2, 0x6, 0x2, 0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) 9.964204022s ago: executing program 2 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.69095988s ago: executing program 2 (id=145): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000b40)={{0x2, 0x0, 0x4, 0xed08, 0x8}, 0x359, [0x8001, 0x3, 0xf8, 0x90, 0x4, 0x8, 0xffffffff, 0x5, 0xa, 0x8, 0x9, 0x9, 0x5, 0xf, 0x9, 0x5, 0x8001, 0x68, 0x62, 0x4, 0x3c3, 0x7, 0x7d, 0x9, 0x1, 0x3, 0x7, 0xfffffffe, 0x4, 0x1ff, 0x4, 0x1, 0x0, 0x4, 0x6, 0x6, 0xd, 0x6, 0x8, 0x7f, 0xc1, 0x3, 0xc720, 0xcbf3b151, 0xc, 0x9, 0xfffffff8, 0x7, 0x9, 0xda07, 0x7, 0x3, 0x0, 0x13a8, 0x24ce, 0x3, 0x6, 0xc9f4, 0x4e, 0x4, 0x5, 0xfffffff9, 0xf, 0x0, 0x3ff, 0xfffffffc, 0x6, 0x8, 0x0, 0x5, 0x10000, 0x6, 0x2, 0x4, 0x3, 0x7, 0x100, 0x1350, 0x2d4, 0x80000001, 0x1, 0x1b7, 0x2000, 0xa, 0x5, 0x40, 0xfffeffff, 0x1, 0x80, 0x2, 0xf9, 0x818, 0x3, 0x46fc, 0x10, 0xf, 0x7, 0x7, 0x7fff, 0x3, 0x101, 0x4, 0xd9b, 0x5, 0x9, 0x7ff, 0x6, 0x99, 0xa, 0x9, 0x3, 0x9, 0x6, 0x4, 0x1, 0x6, 0x1, 0x7, 0x72, 0x9, 0xd54, 0x1, 0x8, 0x400, 0x8, 0x5, 0x6d, 0x2, 0x3, 0xe, 0x5, 0x3, 0x7, 0x5, 0x8, 0x200, 0x75, 0x6, 0x1, 0xfe1, 0xcdcf, 0x2, 0x8, 0x1, 0x10001, 0x4, 0x80, 0x80000000, 0x8, 0x7f, 0x3, 0x2, 0xb, 0x6, 0x2, 0x0, 0x4, 0x10001, 0xc64, 0x0, 0x4fbb, 0x7, 0x4, 0x3638, 0x3, 0x9, 0x4, 0x7e4a, 0x2, 0x8, 0x8, 0x9, 0x401, 0x4, 0x4, 0x7f, 0x9, 0x5bcfec53, 0x577f, 0x0, 0x40, 0xe6, 0x1ff, 0xfffffff8, 0x7, 0x7, 0x6, 0x7, 0x2, 0x2, 0xec7, 0x7f, 0xfff, 0x1, 0x80000001, 0x58e, 0x10000, 0xc, 0x9, 0xffffff80, 0x81, 0xa31c, 0x9, 0x9, 0x7, 0x6, 0x42, 0xd, 0x2, 0x1ff, 0x1, 0x9, 0x3, 0xf, 0x1, 0xffffff01, 0x0, 0x5, 0x1, 0x4, 0x8, 0x6a, 0x6, 0x9, 0x0, 0x1, 0x5, 0xfffffffe, 0x81, 0x1000, 0xc, 0x1, 0xb733, 0x7, 0x2, 0xb, 0xf, 0x8, 0x0, 0x6, 0x4, 0x9, 0xdce4, 0x2, 0x1, 0xd1e, 0x1, 0x1, 0x6, 0x8, 0xfbe2, 0x2, 0xa4d, 0x230000, 0x1, 0x5, 0x3, 0x40, 0xe, 0x47e, 0xc063, 0xffffff05, 0xffffffff, 0x8, 0x2, 0x80, 0x7, 0x6, 0x70a, 0x7fff, 0x4, 0x7c1, 0x6, 0x2, 0x5, 0x3, 0xe667, 0x3, 0x7, 0x8, 0xb, 0x9, 0x9, 0x7fffffff, 0x6, 0x0, 0x2, 0x1, 0x5, 0x683, 0x80000001, 0x4, 0x1, 0x2, 0xffffffff, 0x5, 0x3ff, 0x7f, 0x9, 0x0, 0x7, 0xa0f, 0x8, 0x4, 0x1d9f, 0x7, 0x73, 0x7, 0x7, 0x3, 0x8c, 0xff, 0x5, 0x80, 0x0, 0x1200, 0x6, 0x6, 0x9, 0x2, 0x0, 0x2, 0x1, 0x53, 0x2, 0x5, 0x1, 0x0, 0x1, 0x57d, 0x8, 0x1, 0x1, 0x10, 0x7, 0x48, 0x8, 0x4, 0x0, 0x81, 0x0, 0x80000001, 0x60, 0x4874, 0x0, 0x7fff, 0xfffffff7, 0x75, 0x7, 0x0, 0x8, 0x2, 0x1ff, 0x7, 0x2000, 0x669, 0x7, 0x8, 0x4, 0xdb4, 0x57, 0x0, 0x0, 0x7d88, 0xc, 0x9, 0x3, 0x10001, 0x6a, 0x4, 0x2, 0x1a6, 0x7, 0x2, 0x432, 0x3f800, 0x7fff, 0xab, 0x8000, 0x2, 0x80000000, 0x2, 0x1, 0xcf, 0x13d, 0x4, 0x3, 0x0, 0x7, 0x1, 0x9, 0xffff0000, 0x200000, 0x4, 0x6, 0x4, 0xa2d3, 0x200, 0xe9d, 0x97, 0xd, 0x4, 0x9, 0x8a, 0x1ff, 0x7, 0x10000, 0x8, 0x5, 0x7ff, 0x5, 0x6, 0x3, 0x9, 0x7, 0x8, 0x8, 0x5, 0x40, 0x6, 0x800, 0x80000000, 0x7, 0xa, 0x0, 0xfffffff7, 0xde, 0x10000, 0x1000, 0x8, 0x3, 0x1, 0x2, 0x4c4c, 0x2, 0x5, 0x5, 0x2, 0x7, 0x6, 0xfffff001, 0xbf, 0x6, 0x800, 0x3, 0x6, 0x4, 0xce, 0x0, 0x9, 0x22a, 0x40, 0xb5f, 0x101, 0x6, 0x3, 0x2, 0x0, 0x7, 0xcdd5, 0x80, 0x3ff, 0x2, 0xa1c6, 0x391d209d, 0x7, 0x100, 0x5, 0xfffffff9, 0xffffff81, 0x2, 0x5, 0x375d, 0x29, 0xffc00000, 0x3, 0x401, 0x5, 0x4, 0x0, 0x5, 0x10001, 0x79c, 0x9, 0x80000001, 0x8, 0xff, 0x8, 0x9, 0x5, 0x8, 0x0, 0x8001, 0xf, 0x7, 0xffffff80, 0x10001, 0x592, 0x3, 0x1, 0x6b28, 0x6, 0x173, 0x4, 0x9, 0x5, 0x0, 0x5, 0x68e7, 0x144f, 0x1, 0x9, 0x401, 0x4, 0x597d, 0x7d99, 0x80000001, 0x3, 0xc04, 0x80, 0x5, 0x7, 0x8, 0x2, 0x5, 0x0, 0x3, 0xb95, 0x10001, 0x1, 0x5, 0x40, 0x3, 0x4, 0x9, 0xffffff80, 0x6, 0x0, 0xd, 0x1, 0x8001, 0x0, 0x7, 0x5, 0x4, 0x0, 0x9, 0x0, 0x7, 0x7b4, 0x0, 0x3cb8, 0xffffffc0, 0x10001, 0x1f, 0x34ff, 0x49, 0x2, 0x4, 0x5b9, 0x7fffffff, 0x8, 0xc, 0x7, 0x4, 0x6, 0x9, 0x0, 0x1, 0xbf, 0x200, 0x0, 0x8, 0xffff, 0x9, 0x200, 0x0, 0x8, 0x6, 0x81, 0x1c2, 0x19f9, 0xfffffffd, 0xc416, 0x101, 0x8, 0xcf, 0x8001, 0x3, 0x7, 0x40, 0x9, 0x9, 0x5, 0x7, 0x0, 0xfffffff7, 0x4, 0x7, 0xab, 0x80, 0x8, 0x5, 0x3, 0x2, 0x1, 0xe, 0xc, 0x800000, 0xba69b9a, 0x8, 0xae, 0xff800, 0x2513, 0x8, 0x0, 0x2, 0xffff0001, 0x1, 0x41074036, 0x80000001, 0x1, 0x9, 0x0, 0x1, 0x5, 0x0, 0x401, 0x1, 0xfff, 0x7, 0x4, 0xe, 0x10000, 0x6, 0x6, 0x5, 0x1, 0x7, 0xc, 0x3, 0x8000, 0xd5b, 0x4, 0x6, 0x4, 0x3, 0x9, 0x5, 0x1, 0x2, 0x9, 0x8, 0x4, 0x5, 0x6, 0xd, 0x80000001, 0x2, 0x6, 0x10, 0x3, 0x73, 0x7e31, 0x4, 0x0, 0x7d, 0x0, 0x7ff, 0x6, 0x1, 0x7ff, 0x401, 0x80000001, 0x8, 0x3, 0x0, 0x1, 0xf, 0x5, 0x8000, 0x3, 0x1, 0x401, 0x7ff, 0x2, 0x3, 0x2, 0x6, 0x101, 0x2, 0x2, 0x200, 0xf, 0x1, 0x4, 0x0, 0x4, 0x7, 0x9, 0x100, 0x539, 0x6, 0x80000001, 0x7, 0x7, 0xb, 0xfffffff8, 0x9, 0x9, 0x2975, 0x83, 0x3, 0xac180, 0x1, 0x81, 0x1, 0xbd, 0x3ff, 0x4, 0x5, 0x2, 0x7, 0x2, 0x2, 0x4, 0xb7d, 0x4, 0x2, 0x9, 0x7, 0x0, 0x0, 0xa, 0x8, 0x7, 0x6, 0xf153, 0x8, 0x5, 0xb9, 0x8, 0x8, 0x2, 0x1, 0x0, 0x2, 0x10, 0x1, 0xff, 0xffffffff, 0x1, 0x7, 0x7ff, 0x1, 0x7, 0x5, 0xb0, 0x9, 0x2, 0x4587ee71, 0x1, 0x2, 0x1ff, 0x3, 0xd, 0x7, 0x6, 0x800, 0x5, 0xf72, 0x8, 0x3, 0x1, 0xfffffffa, 0x2, 0x4, 0xf96, 0xe74, 0x6, 0x40, 0x4, 0x0, 0x4, 0x1, 0x1, 0x12000000, 0x4, 0x80000000, 0x5, 0x100, 0x0, 0x5d08, 0x800, 0x7, 0x51d, 0x9, 0x5bf, 0x652, 0x8, 0x8, 0x4, 0x33, 0xffffffff, 0x7, 0x6, 0xfffffffc, 0x3, 0x9, 0x3, 0x5, 0x5, 0x425093e3, 0x6, 0x4, 0x5, 0xc, 0xffff, 0xfc9, 0x7, 0x1, 0xfffff17b, 0xcdd1, 0x100, 0x9, 0x4240, 0x1, 0x808b, 0x4, 0x0, 0x5, 0x90000000, 0x7, 0x3, 0x9, 0x2ea, 0xfff, 0x6, 0x842, 0x94c, 0xfffffffc, 0x5, 0x0, 0x8, 0x7, 0x5, 0x7, 0x7, 0x7, 0x0, 0xffff, 0x1, 0x10000, 0x5, 0xac3a, 0x2, 0x1, 0x400, 0x40, 0x6, 0xfffffffc, 0x7, 0x7, 0x9, 0x2, 0x6, 0xffff, 0xc, 0x1, 0x5, 0x82, 0x0, 0x637, 0x4, 0x2, 0x7, 0x100000, 0x9, 0x0, 0x7, 0x2, 0x91, 0x2, 0x2, 0xe, 0xb4, 0x5, 0x7, 0x6, 0x5, 0x81, 0x5, 0x5, 0x9, 0x49, 0x1, 0x2, 0xd798, 0x7, 0x7, 0x84, 0x7fffffff, 0x0, 0x1000, 0x9, 0x2, 0xf, 0x8, 0x92, 0x7fffffff, 0x4, 0x2f5d, 0x4, 0x7, 0x469, 0xffffffff, 0x5, 0xd4fc, 0x3, 0x2, 0x8, 0x6, 0x5, 0x2, 0x6, 0xaa9, 0x0, 0x9, 0xa, 0x7, 0x8f, 0xf1d9, 0x437, 0x7f, 0xf09, 0x401, 0x0, 0x2, 0x3, 0x2, 0x16, 0x7, 0x5, 0x8, 0x10001, 0x3, 0x9, 0x173, 0x2, 0x7f, 0x7fff, 0x20000000, 0x768, 0x8001, 0x1, 0x7, 0x40, 0x8, 0x9, 0xfffffffc, 0xe, 0x9, 0x7, 0xfffffffa, 0x1, 0x7, 0x80000001, 0xfffffffb, 0x4, 0x5, 0xddd, 0x7ff, 0x1, 0x3, 0x9, 0x1, 0x1, 0xfffffffa, 0x34, 0x2, 0x0, 0xfff, 0x10000, 0x3, 0x40, 0x9, 0x1, 0x1, 0x8, 0x7, 0x7, 0x2, 0x80, 0x5, 0x4, 0x1, 0x8, 0x95, 0xfffffffb, 0x6, 0xa59e, 0x6d, 0x6, 0x2, 0x4, 0x9, 0x7, 0x2, 0x7, 0x8, 0x200, 0x3, 0xf8000000, 0x3c2c, 0x0, 0x0, 0x6, 0x1, 0xfff, 0x4, 0x9, 0x10001, 0x4c6d16dc]}) 7.568243705s ago: executing program 2 (id=149): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x1551, 0x0) 7.31538448s ago: executing program 2 (id=151): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close(r0) 7.208507721s ago: executing program 2 (id=152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xc00}]}}]}, 0x38}}, 0x40010) 6.806325002s ago: executing program 2 (id=155): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x40, 0xd, 0x4, "345efb1c"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 4.307302774s ago: executing program 1 (id=163): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x1, [0x81, 0x1ff, 0xff, 0x400, 0x1], [0xffffffffffffffff, 0x2100000001, 0x75, 0x3cd, 0x999a, 0x6, 0xd4c, 0x100000001, 0x101, 0x2c, 0x4, 0x2, 0xd063, 0x4, 0x6, 0xffff, 0x99, 0x8, 0x0, 0x80a, 0x28, 0x67137a2b, 0x8, 0x6, 0xb10c, 0x6, 0x8000, 0xffff, 0xb, 0x9, 0x1, 0x7, 0x4, 0x9, 0x7, 0x234d, 0x5, 0xe845, 0x6, 0x80000001, 0x10000005, 0x1002, 0x9, 0x9, 0x8000000000000001, 0x5, 0x0, 0x1, 0x8, 0x7fa7, 0x9, 0x5, 0x5, 0xfffffffffffffffc, 0x619a, 0x1, 0x8, 0xffffffffffffffff, 0x42, 0x204e03f6, 0x41d6, 0xd8, 0x5, 0x2000000000000, 0x7fffffffffffffff, 0xa8, 0x3, 0xdec6, 0x9, 0xfffffffffffffff9, 0x6cd, 0x9, 0x7, 0x1000, 0x5, 0x1, 0x5b24, 0xd4, 0x8, 0x7f, 0x4, 0x1, 0xa4c, 0x7de, 0x3, 0x5, 0xfffffffffffffffb, 0x9, 0xffffffffffffffff, 0x2, 0x9b86, 0x7fffffff, 0xf, 0x4, 0x3e, 0x1, 0x100, 0x6, 0x6, 0x6, 0x8db, 0xb, 0x100000001, 0x7, 0x8e, 0xd4, 0x40000006, 0x7, 0x3c24, 0x4, 0xd5, 0x7, 0x2, 0x3, 0x13, 0x5, 0x9, 0x5, 0x23ff, 0xfffffffffffffff7, 0xffffffffffffffff]}) syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@session={'session', 0x3d, 0x7}}, {@check_strict}, {@check_strict}, {}, {@dmode={'dmode', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@nocompress}, {@utf8}]}, 0x0, 0x3fc, &(0x7f0000000280)="$eJzs3M9OG0ccwPFZYiilUlQpagKEw6RpJXqIs7sUI5TTdj02k6x3VzPrCE5VVCBCBVKVVCpcWi5pK7UPkWvfoJc+UaP2Dah211DANq7CH6Po+5HQjD2/nfnNypqRjWYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQTlh3Xc8RkY7by7K/sG6SVq+GT7eL4rC/j08UZ4wrhJP/ifFxMVm+NXnrv+aPyk7ulK/uiPG8GBd7H9z+8NGtysjh9WckfCV2dvde/FHm+L/iK/8cFC49sSvSVLG2iW4FTSW1TeRireY+XGpY2dCRsis2Uy0ZGhVkiZGz4WfSW1yck6q6krTjZj2I1OGbCw98163Jx9VUBcYm8cPHVRsu6SjScbOIyZvzmIX8g/hEZzJTQUvK9Y3NtblBSeZB3hntjhA/FkH+oJ581/c9z/e92vzi/ILrVnzXlyfecE8RXZcM/0OL4brI5Rs4l4PO/g8AAAAAAN5dTvEbe/79f7T4Hd4RDR0pd9hpAQAAAACAC1T85/9OXozmtUnh8P0fAAAAAIB3zc/Hz9i93+uMnU3fc/78Wxgz6uyny584W0EeHmyJSnHdjdM9Zo1p52ank6KoVTqvQjXjTJVBU4fRbzrF+qCzfk5XAp2RTydQnrA7+KFHAuJXMV0GTa+W5ephSznKRENHqhom0SNPBMHNkUwtZ99tb3wviun/ErduOmJ9Y3Ot+tWLzdUil/28l/2tzgGKrnMU/W+GeHl07rH3jMc6XRTjTpTjusfnP1K2j3SPOSX6jPlK3C1j7k6U5cTJ+Y/n8/eq/WbfycI758xfiZkyZmb2fl7cn+2RhT8oC/94Fv3vxfmymOudxV9HWcydMwsAGJb1AbuQ073xv8Uqd3G7+9kr+r0y5t50sbBWpnus6O6gfcU95+72e9czEPrtsfm4v8Wt6pgQR7vq6/yC133HtZHv5Lfwxsutb8Ttnd29Bxtbz56vPV/b9v25mvu56877YrSYRqdg7wEA9KDMG2ci+8kxRqdfemOLXpAtKWmS8Ik0ut5UUseZMuFSEDeVTE2SJWES5ZWnuq6stO00TUwmG4mRaWL1cvHkF9l59ItVrSDOdGjTSAVWyTCJsyDMZF3bUKbtLyJtl5QpLrapCnVDh0Gmk1japG1CVZXSKnUsUNdVnOmGzquxTI1uBWZFPk2idkvJurKh0WmW5NMyR2PpuJGYVtFtddg3GwCAa2Jnd+/rZ5uba99eYmXYcwQAACexSwMAAAAAAAAAAAAAAAAAAAAAcP1dxfm/i604QohrkAYVKhddGXvbD/bBJeQz7JUJwGX7NwAA//++Aql5") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x101000, 0xdf) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000006c0)=ANY=[@ANYBLOB="0400000000000000050000000000000041"]) 4.007196465s ago: executing program 1 (id=165): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn") r0 = creat(&(0x7f0000000400)='./file0\x00', 0x120) creat(0x0, 0x1) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 3.590980797s ago: executing program 1 (id=166): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000800)=ANY=[], 0x1, 0x1df, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xbb) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xc12) getdents64(r0, &(0x7f0000000000)=""/41, 0x29) 3.215298925s ago: executing program 1 (id=167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x1, 0x4, 0x88, {}, 0x0, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) 2.96961632s ago: executing program 1 (id=170): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007280)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e746567726974792c6e6f646973636172642c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d332c6469736361726400726573697a652c71756f74612c75737271756f74612c726573697a653d3078303030303030303030303030303d30372c696e746567726974792c646973636172642c6e6f71756f74612c6e6f71756f74612c657569643c8c72c5bf762ab3dd5153bdd55a1a291ea0696f2f1f0a7b31c91bccf7f4707502478f37599eb13d60653683e6a858f2a54586fd6dc9da99078d3e365b7fe2d52d0591c9c049673c6720ed91bb2b448310341bd4cf4f", @ANYBLOB="bd64b6041239144b5313cab29052af8baa63248a435f468211eaf1cda12e7b755f36f4b84edaede577e305c82d2f10c839077fd7175af43599595aaa9f4fa5cce4171ea1087725bf7bc406fc1019149d10691db95f4c87c33568975c840d3807cc28748d19af5c2d62180bb9501684cfeff4562b30e7c44d9cc0196ee0523871265e79e4e4bf0e92d2f759c74da6dfe564f8daf77dbefd18a096b1092f43d796bd282d279f88fb9a08109782c856b20d4e302343205c2d398e573a70003ceda73b8407b8d79cafee7e2b79c754963fb69b61a70837f204d9", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRES64], 0x2, 0x60ee, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.611522196s ago: executing program 0 (id=171): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r0, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.184478529s ago: executing program 0 (id=173): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='environ\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000018c0)=""/15, 0xf}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 1.951330593s ago: executing program 0 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 1.742158704s ago: executing program 0 (id=175): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x9845, &(0x7f0000009780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 1.667487001s ago: executing program 4 (id=176): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010001, 0x0, 0x200000000400}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0xe}) 1.519454047s ago: executing program 1 (id=177): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x6000, 0x0, 0x0}, {0x6, 0x1, 0x0, 0x0}], 0x2}) 1.166814772s ago: executing program 4 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0xa, 0x1, 0x4}) 705.117039ms ago: executing program 4 (id=179): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='N-N,'], 0x6a) 491.287221ms ago: executing program 4 (id=180): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) syz_emit_ethernet(0xdd, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0) 381.482122ms ago: executing program 4 (id=181): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) 315.127928ms ago: executing program 0 (id=182): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 115.424829ms ago: executing program 4 (id=183): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=184): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xf6, 0x477, &(0x7f0000001e00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000004c90020000000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeff000000"]) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 55.208526][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.234601][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts. syzkaller login: [ 82.421718][ T5757] cgroup: Unknown subsys name 'net' [ 82.560144][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.253369][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.423784][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.432966][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.441722][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.450278][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.458546][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.466434][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.481167][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.503445][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.521967][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.530676][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.538359][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.545778][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.556592][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.560048][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.578480][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.586873][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.596430][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.603870][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.636496][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.644872][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.653114][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.662731][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.670507][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.678175][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.237172][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 87.250599][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.416697][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 87.452600][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 87.598225][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.606517][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.614886][ T5776] bridge_slave_0: entered allmulticast mode [ 87.622784][ T5776] bridge_slave_0: entered promiscuous mode [ 87.666377][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.678767][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.687328][ T5776] bridge_slave_1: entered allmulticast mode [ 87.694905][ T5776] bridge_slave_1: entered promiscuous mode [ 87.717228][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.724545][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.731784][ T5771] bridge_slave_0: entered allmulticast mode [ 87.739463][ T5771] bridge_slave_0: entered promiscuous mode [ 87.757082][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.766763][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.777165][ T5771] bridge_slave_1: entered allmulticast mode [ 87.784319][ T5771] bridge_slave_1: entered promiscuous mode [ 87.880523][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.893891][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.905937][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.928746][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.935972][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.943418][ T5782] bridge_slave_0: entered allmulticast mode [ 87.951093][ T5782] bridge_slave_0: entered promiscuous mode [ 87.972899][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.994928][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.002535][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.009700][ T5781] bridge_slave_0: entered allmulticast mode [ 88.016886][ T5781] bridge_slave_0: entered promiscuous mode [ 88.025508][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.032821][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.040145][ T5782] bridge_slave_1: entered allmulticast mode [ 88.047934][ T5782] bridge_slave_1: entered promiscuous mode [ 88.078547][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.086327][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.094256][ T5781] bridge_slave_1: entered allmulticast mode [ 88.101608][ T5781] bridge_slave_1: entered promiscuous mode [ 88.125550][ T5776] team0: Port device team_slave_0 added [ 88.134825][ T5776] team0: Port device team_slave_1 added [ 88.143513][ T5771] team0: Port device team_slave_0 added [ 88.200818][ T5771] team0: Port device team_slave_1 added [ 88.221761][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.234425][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.246240][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.298030][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.309288][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.316808][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.343641][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.356164][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.366952][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.393263][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.430151][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.437347][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.463800][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.483829][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.490824][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.520354][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.538117][ T5781] team0: Port device team_slave_0 added [ 88.562464][ T5782] team0: Port device team_slave_0 added [ 88.571203][ T5782] team0: Port device team_slave_1 added [ 88.584306][ T5781] team0: Port device team_slave_1 added [ 88.591721][ T5783] Bluetooth: hci0: command tx timeout [ 88.647962][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.655154][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.681818][ T5783] Bluetooth: hci1: command tx timeout [ 88.687499][ T5783] Bluetooth: hci2: command tx timeout [ 88.693220][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.699465][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.714527][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.740998][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.751860][ T5783] Bluetooth: hci3: command tx timeout [ 88.798806][ T5776] hsr_slave_0: entered promiscuous mode [ 88.805670][ T5776] hsr_slave_1: entered promiscuous mode [ 88.819168][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.826543][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.853286][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.884033][ T5771] hsr_slave_0: entered promiscuous mode [ 88.891391][ T5771] hsr_slave_1: entered promiscuous mode [ 88.897570][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.905614][ T5771] Cannot create hsr debugfs directory [ 88.928935][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.938320][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.967677][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.068858][ T5781] hsr_slave_0: entered promiscuous mode [ 89.075877][ T5781] hsr_slave_1: entered promiscuous mode [ 89.085362][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.093498][ T5781] Cannot create hsr debugfs directory [ 89.136285][ T5782] hsr_slave_0: entered promiscuous mode [ 89.142947][ T5782] hsr_slave_1: entered promiscuous mode [ 89.149040][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.156778][ T5782] Cannot create hsr debugfs directory [ 89.544057][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.558664][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.570411][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.582599][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.663793][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.677133][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.687612][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.702772][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.815126][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.831494][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.844427][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.855634][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.943033][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.957135][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.968546][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.984212][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.994380][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.039513][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.078165][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.085542][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.098744][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.105901][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.176554][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.226235][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.265854][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.293618][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.309579][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.316823][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.348257][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.355458][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.367412][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.374619][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.402800][ T3493] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.410014][ T3493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.506139][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.536503][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.622475][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.659952][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.667154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.682225][ T5783] Bluetooth: hci0: command tx timeout [ 90.706188][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.713413][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.752692][ T5778] Bluetooth: hci1: command tx timeout [ 90.758228][ T5783] Bluetooth: hci2: command tx timeout [ 90.832100][ T5783] Bluetooth: hci3: command tx timeout [ 91.004034][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.026385][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.136558][ T5781] veth0_vlan: entered promiscuous mode [ 91.213021][ T5781] veth1_vlan: entered promiscuous mode [ 91.234309][ T5771] veth0_vlan: entered promiscuous mode [ 91.251599][ T5771] veth1_vlan: entered promiscuous mode [ 91.310309][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.326358][ T5781] veth0_macvtap: entered promiscuous mode [ 91.336866][ T5781] veth1_macvtap: entered promiscuous mode [ 91.376318][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.408936][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.421639][ T5771] veth0_macvtap: entered promiscuous mode [ 91.437380][ T5771] veth1_macvtap: entered promiscuous mode [ 91.460434][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.469606][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.483413][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.492597][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.505831][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.527463][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.538507][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.552685][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.585428][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.599155][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.611723][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.646374][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.657587][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.670082][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.680595][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.697047][ T5776] veth0_vlan: entered promiscuous mode [ 91.760539][ T5776] veth1_vlan: entered promiscuous mode [ 91.835880][ T5782] veth0_vlan: entered promiscuous mode [ 91.873824][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.888872][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.908808][ T5776] veth0_macvtap: entered promiscuous mode [ 91.935573][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.939515][ T5776] veth1_macvtap: entered promiscuous mode [ 91.956787][ T5782] veth1_vlan: entered promiscuous mode [ 91.958085][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.025417][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.037041][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.058012][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.070177][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.080840][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.091860][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.103924][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.122004][ T787] cfg80211: failed to load regulatory.db [ 92.162564][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.174539][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.184998][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.196057][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.208938][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.241370][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.254312][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.260590][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.270445][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.286225][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.295185][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.319377][ T5782] veth0_macvtap: entered promiscuous mode [ 92.352106][ T5782] veth1_macvtap: entered promiscuous mode [ 92.425143][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.438333][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.452235][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.467697][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.477840][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.484108][ T5859] ======================================================= [ 92.484108][ T5859] WARNING: The mand mount option has been deprecated and [ 92.484108][ T5859] and is ignored by this kernel. Remove the mand [ 92.484108][ T5859] option from the mount to silence this warning. [ 92.484108][ T5859] ======================================================= [ 92.491317][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.552853][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.582957][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.599069][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.641517][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.662396][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.672761][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.684854][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.710134][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.735913][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.753270][ T5783] Bluetooth: hci0: command tx timeout [ 92.779074][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.799587][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.808950][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.831427][ T5783] Bluetooth: hci2: command tx timeout [ 92.837759][ T5783] Bluetooth: hci1: command tx timeout [ 92.911467][ T5783] Bluetooth: hci3: command tx timeout [ 92.978115][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.006889][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.136605][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.159022][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.274376][ T5870] syz.3.8[5870]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.358389][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.403591][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.494759][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.529221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.929741][ T5876] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.250915][ C0] sched: RT throttling activated [ 94.464757][ T5882] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 94.557783][ T5870] loop3: detected capacity change from 0 to 131072 [ 94.573684][ T5870] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 94.582250][ T5870] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 94.597555][ T5870] F2FS-fs (loop3): invalid crc value [ 94.638656][ T5870] F2FS-fs (loop3): Found nat_bits in checkpoint [ 94.720981][ T5870] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 94.728264][ T5870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 94.833054][ T5783] Bluetooth: hci0: command tx timeout [ 94.860984][ T5870] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 94.911607][ T5778] Bluetooth: hci2: command tx timeout [ 94.917821][ T5870] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 94.928373][ T5783] Bluetooth: hci1: command tx timeout [ 94.991237][ T5783] Bluetooth: hci3: command tx timeout [ 95.060697][ T5892] loop1: detected capacity change from 0 to 1024 [ 95.486217][ T5885] loop2: detected capacity change from 0 to 32768 [ 95.521460][ T967] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.527430][ T5885] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.12 (5885) [ 95.563424][ T5885] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.563657][ T5885] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 95.563767][ T5885] BTRFS info (device loop2): enabling auto defrag [ 95.563795][ T5885] BTRFS info (device loop2): use no compression [ 95.563811][ T5885] BTRFS info (device loop2): force clearing of disk cache [ 95.563869][ T5885] BTRFS info (device loop2): max_inline at 4096 [ 95.563893][ T5885] BTRFS info (device loop2): disabling free space tree [ 95.718679][ T967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.718772][ T967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.727002][ T967] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.727041][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.727063][ T967] usb 1-1: Product: syz [ 95.727078][ T967] usb 1-1: Manufacturer: syz [ 95.727093][ T967] usb 1-1: SerialNumber: syz [ 95.855990][ T5885] BTRFS info (device loop2): enabling ssd optimizations [ 95.927389][ T5885] BTRFS info (device loop2): auto enabling async discard [ 95.956875][ T5885] BTRFS info (device loop2): rebuilding free space tree [ 96.042687][ T967] usb 1-1: 0:2 : does not exist [ 96.092063][ T967] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 96.129508][ T5885] BTRFS info (device loop2): disabling free space tree [ 96.129641][ T5885] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.129742][ T5885] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.223076][ T967] usb 1-1: USB disconnect, device number 2 [ 96.374018][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.959745][ T5919] loop3: detected capacity change from 0 to 4096 [ 97.001214][ T5885] syz.2.12 (5885) used greatest stack depth: 20944 bytes left [ 97.080123][ T5907] loop1: detected capacity change from 0 to 40427 [ 97.116758][ T5907] F2FS-fs (loop1): invalid crc value [ 97.143175][ T5907] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.266604][ T5776] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.322747][ T5907] F2FS-fs (loop1): Start checkpoint disabled! [ 97.380452][ T5907] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 97.939102][ T49] kworker/u4:3: attempt to access beyond end of device [ 97.939102][ T49] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 97.982143][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 98.015532][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 98.446506][ T5926] loop3: detected capacity change from 0 to 32768 [ 98.511353][ T967] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.532406][ T5926] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 98.744063][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.762047][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.772818][ T5926] (syz.3.20,5926,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 98.791693][ T967] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 98.800783][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.840423][ T967] usb 1-1: config 0 descriptor?? [ 98.964546][ T5781] ocfs2: Unmounting device (7,3) on (node local) [ 99.260190][ T5940] loop1: detected capacity change from 0 to 32768 [ 99.338192][ T5940] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 99.357425][ T967] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 99.382180][ T967] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 99.548343][ T5940] XFS (loop1): Ending clean mount [ 99.560039][ T967] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 99.599036][ T5943] loop2: detected capacity change from 0 to 32768 [ 99.740726][ T5943] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.889847][ T5943] XFS (loop2): Ending clean mount [ 99.913347][ T5962] syz.1.21 (5962) used greatest stack depth: 20712 bytes left [ 99.954614][ T5943] XFS (loop2): Quotacheck needed: Please wait. [ 99.972118][ T967] cp2112 0003:10C4:EA90.0001: error setting SMBus config [ 99.993257][ T967] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71 [ 100.053508][ T5782] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 100.053781][ T967] usb 1-1: USB disconnect, device number 3 [ 100.084854][ T5943] XFS (loop2): Quotacheck: Done. [ 100.496134][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.508093][ T5969] loop3: detected capacity change from 0 to 512 [ 100.540423][ T5969] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.636753][ T5969] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4047: comm syz.3.30: Allocating blocks 41-42 which overlap fs metadata [ 100.755458][ T5969] Quota error (device loop3): write_blk: dquota write failed [ 100.797322][ T5969] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 100.845590][ T5969] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4047: comm syz.3.30: Allocating blocks 41-42 which overlap fs metadata [ 100.895451][ T5969] Quota error (device loop3): write_blk: dquota write failed [ 100.918669][ T5969] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 100.949559][ T5969] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.30: Failed to acquire dquot type 1 [ 100.982033][ T5969] EXT4-fs error (device loop3): mb_free_blocks:1954: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 101.039474][ T5969] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz.3.30: corrupted inode contents [ 101.098481][ T5969] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #12: comm syz.3.30: mark_inode_dirty error [ 101.110312][ T5972] loop1: detected capacity change from 0 to 32768 [ 101.140835][ T5969] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz.3.30: corrupted inode contents [ 101.156130][ T5972] gfs2: fsid=([{{|Zp"t'I Jv$: Trying to join cluster "lock_nolock", "([{{|Zp"t'I Jv$" [ 101.170201][ T5972] gfs2: fsid=([{{|Zp"t'I Jv$: Now mounting FS (format 0)... [ 101.187919][ T5969] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.30: mark_inode_dirty error [ 101.200151][ T5972] gfs2: not a GFS2 filesystem [ 101.204924][ T5972] gfs2: fsid=([{{|Zp"t'I Jv$: can't read superblock [ 101.213204][ T5972] gfs2: fsid=([{{|Zp"t'I Jv$: can't read superblock: -22 [ 101.249521][ T5969] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz.3.30: corrupted inode contents [ 101.271169][ T5969] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 101.322460][ T5969] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #12: comm syz.3.30: corrupted inode contents [ 101.395251][ T5969] EXT4-fs error (device loop3): ext4_truncate:4294: inode #12: comm syz.3.30: mark_inode_dirty error [ 101.434070][ T5969] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 101.476183][ T5969] EXT4-fs (loop3): 1 truncate cleaned up [ 101.496402][ T5983] loop1: detected capacity change from 0 to 128 [ 101.519043][ T5969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.587964][ T5983] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.631971][ T5983] hpfs: filesystem error: improperly stopped [ 101.638038][ T5983] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.701064][ T5983] hpfs: You really don't want any checks? You are crazy... [ 101.708863][ T5983] hpfs: hpfs_map_sector(): read error [ 101.779021][ T5983] hpfs: code page support is disabled [ 101.809723][ T5983] hpfs: hpfs_map_4sectors(): unaligned read [ 101.823508][ T5983] hpfs: hpfs_map_4sectors(): unaligned read [ 101.829465][ T5983] hpfs: filesystem error: unable to find root dir [ 102.421039][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.469778][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.640707][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 102.652804][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 102.666825][ T8] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 102.679428][ T6006] mkiss: ax0: crc mode is auto. [ 102.685410][ T6004] dlm: non-version read from control device 2147479552 [ 102.691050][ T8] usb 2-1: config 8 has no interface number 0 [ 102.709463][ T8] usb 2-1: config 8 interface 255 has no altsetting 0 [ 102.728038][ T8] usb 2-1: string descriptor 0 read error: -22 [ 102.746010][ T8] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 102.776145][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.953881][ T6014] loop2: detected capacity change from 0 to 256 [ 103.319209][ T6019] kvm: user requested TSC rate below hardware speed [ 103.551613][ T5154] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.585751][ T6026] loop3: detected capacity change from 0 to 736 [ 103.628089][ T8] catc 2-1:8.255: Couldn't detect memory size, assuming 32k [ 103.768794][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 103.790331][ T5154] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 103.810166][ T5154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.820132][ T6017] loop0: detected capacity change from 0 to 40427 [ 103.827504][ T5154] usb 3-1: Product: syz [ 103.832339][ T5154] usb 3-1: Manufacturer: syz [ 103.839444][ T5154] usb 3-1: SerialNumber: syz [ 103.847235][ T6017] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 103.870178][ T8] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 103.880003][ T5154] usb 3-1: config 0 descriptor?? [ 103.885116][ T6017] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 103.897254][ T5154] hub 3-1:0.0: bad descriptor, ignoring hub [ 103.911231][ T5154] hub: probe of 3-1:0.0 failed with error -5 [ 103.941118][ T6017] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 103.966821][ T5154] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 103.973934][ T6017] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 103.999416][ T6017] F2FS-fs (loop0): Image doesn't support compression [ 104.000563][ T8] usb 2-1: USB disconnect, device number 2 [ 104.031764][ T6017] F2FS-fs (loop0): invalid crc value [ 104.084332][ T6017] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.343427][ T6017] F2FS-fs (loop0): Start checkpoint disabled! [ 104.381565][ T6017] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 104.408986][ T6017] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 104.555725][ T28] audit: type=1800 audit(1768190165.802:2): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.48" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 104.595123][ T6017] syz.0.48: attempt to access beyond end of device [ 104.595123][ T6017] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 104.758426][ T6047] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 104.795863][ T3493] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of f2fs_write_inode+0x3c0/0x4b0 [ 104.812220][ T3493] F2FS-fs (loop0): Stopped filesystem due to reason: 1 [ 106.078950][ T6062] loop1: detected capacity change from 0 to 32768 [ 106.108403][ T6062] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.62 (6062) [ 106.221975][ T6062] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 106.241314][ T6062] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 106.250833][ T6062] BTRFS info (device loop1): using free space tree [ 106.334887][ T6082] loop3: detected capacity change from 0 to 2048 [ 106.391241][ T6082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.466316][ T6062] BTRFS info (device loop1): enabling ssd optimizations [ 106.484220][ T6060] loop2: detected capacity change from 0 to 32768 [ 106.489639][ T6082] overlayfs: upper fs needs to support d_type. [ 106.503218][ T6062] BTRFS info (device loop1): auto enabling async discard [ 106.568349][ T6082] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 106.568900][ T6060] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 106.576275][ T6082] overlayfs: failed to set xattr on upper [ 106.594652][ T6082] overlayfs: ...falling back to redirect_dir=nofollow. [ 106.601939][ T6082] overlayfs: ...falling back to index=off. [ 106.608007][ T6082] overlayfs: ...falling back to uuid=null. [ 106.679723][ T6060] XFS (loop2): Ending clean mount [ 106.746005][ T6060] XFS (loop2): Quotacheck needed: Please wait. [ 106.785898][ T5781] UDF-fs: error (device loop3): udf_read_inode: (ino 1410) failed !bh [ 106.832983][ T5781] UDF-fs: error (device loop3): udf_read_inode: (ino 1410) failed !bh [ 106.875952][ T6060] XFS (loop2): Quotacheck: Done. [ 107.244408][ T5776] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.424371][ T5782] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 107.896068][ T3493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.108454][ T3493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.324637][ T6128] loop0: detected capacity change from 0 to 2048 [ 108.327408][ T3493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.359264][ T6128] EXT4-fs: Ignoring removed i_version option [ 108.554543][ T6128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.586099][ T3493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.645057][ T6137] loop2: detected capacity change from 0 to 256 [ 108.676699][ T5154] usb 3-1: USB disconnect, device number 2 [ 109.058120][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.071475][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.099075][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.117856][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.141214][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.149412][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.274534][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.520270][ T6147] loop0: detected capacity change from 0 to 512 [ 109.605463][ T6147] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 109.648431][ T6147] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 109.671542][ T6147] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 109.718913][ T6147] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 109.737459][ T6157] loop2: detected capacity change from 0 to 1024 [ 109.771797][ T6147] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 109.788825][ T6147] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.798906][ T6147] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.77: bg 0: block 34: padding at end of block bitmap is not set [ 109.840647][ T6147] Quota error (device loop0): write_blk: dquota write failed [ 109.848413][ T6147] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 109.858381][ T6147] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.77: Failed to acquire dquot type 1 [ 109.890451][ T28] audit: type=1800 audit(1768190171.142:3): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.78" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 109.965068][ T12] hfsplus: b-tree write err: -5, ino 4 [ 110.001266][ T6147] EXT4-fs (loop0): 1 truncate cleaned up [ 110.029598][ T6147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.352745][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.449276][ T6139] chnl_net:caif_netlink_parms(): no params data found [ 110.835119][ T6166] loop2: detected capacity change from 0 to 32768 [ 110.881811][ T6166] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.79 (6166) [ 110.984086][ T6166] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.021141][ T6166] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 111.029907][ T6166] BTRFS info (device loop2): turning off barriers [ 111.055108][ T6166] BTRFS info (device loop2): setting nodatasum [ 111.081138][ T6166] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.090837][ T6166] BTRFS info (device loop2): use zstd compression, level 3 [ 111.112043][ T6166] BTRFS info (device loop2): using free space tree [ 111.152554][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.160226][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.220126][ T6139] bridge_slave_0: entered allmulticast mode [ 111.231191][ T5783] Bluetooth: hci2: command tx timeout [ 111.275680][ T6139] bridge_slave_0: entered promiscuous mode [ 111.316154][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.366111][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.381151][ T6139] bridge_slave_1: entered allmulticast mode [ 111.422622][ T6139] bridge_slave_1: entered promiscuous mode [ 111.609806][ T6170] loop1: detected capacity change from 0 to 32768 [ 111.680680][ T6139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.731974][ T6170] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.914706][ T5776] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.944748][ T6139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.076681][ T6170] XFS (loop1): Ending clean mount [ 112.104152][ T6170] XFS (loop1): Quotacheck needed: Please wait. [ 112.262591][ T6170] XFS (loop1): Quotacheck: Done. [ 112.534599][ T6139] team0: Port device team_slave_0 added [ 112.663719][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.758611][ T3493] hsr_slave_0: left promiscuous mode [ 112.802435][ T3493] hsr_slave_1: left promiscuous mode [ 112.819299][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.833960][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.859915][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.892566][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.939707][ T3493] bridge_slave_1: left allmulticast mode [ 112.952636][ T3493] bridge_slave_1: left promiscuous mode [ 112.965618][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.048460][ T3493] bridge_slave_0: left allmulticast mode [ 113.058481][ T3493] bridge_slave_0: left promiscuous mode [ 113.075746][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.144028][ T3493] veth1_macvtap: left promiscuous mode [ 113.150140][ T3493] veth0_macvtap: left promiscuous mode [ 113.170401][ T3493] veth1_vlan: left promiscuous mode [ 113.198073][ T3493] veth0_vlan: left promiscuous mode [ 113.311129][ T5783] Bluetooth: hci2: command tx timeout [ 113.511359][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.722911][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.740648][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.759452][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.772454][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.787169][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.799144][ T8] usb 2-1: config 0 descriptor?? [ 113.851149][ T3493] team0 (unregistering): Port device team_slave_1 removed [ 113.900161][ T3493] team0 (unregistering): Port device team_slave_0 removed [ 113.949843][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.000598][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.246381][ T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 114.329622][ T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 114.609510][ T8] usb 2-1: USB disconnect, device number 3 [ 114.658266][ T3493] bond0 (unregistering): Released all slaves [ 114.773863][ T6139] team0: Port device team_slave_1 added [ 114.983635][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.003648][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.054543][ T6139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.101246][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.120870][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.209567][ T6139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.392231][ T5783] Bluetooth: hci2: command tx timeout [ 115.413385][ T6139] hsr_slave_0: entered promiscuous mode [ 115.451362][ T6139] hsr_slave_1: entered promiscuous mode [ 115.486658][ T6139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.524986][ T6139] Cannot create hsr debugfs directory [ 115.868058][ T6254] loop1: detected capacity change from 0 to 2048 [ 115.956870][ T6243] loop2: detected capacity change from 0 to 32768 [ 115.999196][ T6256] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.005991][ T6243] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.91 (6243) [ 116.089446][ T6243] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.151168][ T6243] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 116.212855][ T6243] BTRFS info (device loop2): force clearing of disk cache [ 116.291471][ T6243] BTRFS info (device loop2): enabling ssd optimizations [ 116.321533][ T6243] BTRFS info (device loop2): using spread ssd allocation scheme [ 116.324024][ T6139] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.359998][ T6139] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.366831][ T6243] BTRFS info (device loop2): enabling disk space caching [ 116.366855][ T6243] BTRFS info (device loop2): turning on sync discard [ 116.366874][ T6243] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 116.424919][ T6243] BTRFS info (device loop2): use zstd compression, level 3 [ 116.428506][ T6139] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.483019][ T6243] BTRFS info (device loop2): setting nodatacow, compression disabled [ 116.501356][ T6139] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.541552][ T6243] BTRFS info (device loop2): disk space caching is enabled [ 116.645364][ T6288] loop1: detected capacity change from 0 to 128 [ 116.765368][ T6243] BTRFS info (device loop2): rebuilding free space tree [ 116.862318][ T6243] BTRFS info (device loop2): disabling free space tree [ 116.869385][ T6243] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.912739][ T6243] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.959308][ T6139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.989771][ T6294] loop1: detected capacity change from 0 to 256 [ 117.078869][ T6139] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.144344][ T3493] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.151580][ T3493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.186798][ T6294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 117.234278][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.241502][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.381969][ T6294] exFAT-fs (loop1): error, invalid size(size(1) > aligned(9223372036854777344) [ 117.381969][ T6294] [ 117.404983][ T6139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.433353][ T6294] exFAT-fs (loop1): Filesystem has been set read-only [ 117.452995][ T6300] exFAT-fs (loop1): error, invalid size(size(61) > aligned(9223372036854777344) [ 117.452995][ T6300] [ 117.471125][ T5783] Bluetooth: hci2: command tx timeout [ 117.557289][ T5776] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.975329][ T6139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.449695][ T6326] loop2: detected capacity change from 0 to 1024 [ 118.472720][ T6326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.512352][ T6326] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.555752][ T6326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 118.567683][ T6326] System zones: 0-1, 3-36 [ 118.586621][ T6326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.814564][ T6314] loop1: detected capacity change from 0 to 32768 [ 118.903292][ T6314] JBD2: Ignoring recovery information on journal [ 118.925894][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.957751][ T6139] veth0_vlan: entered promiscuous mode [ 118.974326][ T6139] veth1_vlan: entered promiscuous mode [ 119.010724][ T6139] veth0_macvtap: entered promiscuous mode [ 119.022426][ T6139] veth1_macvtap: entered promiscuous mode [ 119.064874][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.109552][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.120408][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.131466][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.141713][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.152644][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.168855][ T6314] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 119.178884][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.200439][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.252699][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.279013][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.313635][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.335997][ T6139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.367833][ T6139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.408280][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.484342][ T6139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.521032][ T6139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.529836][ T6139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.547514][ T6139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.559904][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 119.773536][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.794343][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.885367][ T3493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.918948][ T3493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.300795][ T6363] loop5: detected capacity change from 0 to 4527 [ 120.351789][ T6366] loop5: detected capacity change from 4527 to 6071 [ 121.321051][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.523721][ T5840] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 121.540978][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.570540][ T5840] usb 3-1: config 0 descriptor?? [ 121.609113][ T5840] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 121.722175][ T6402] loop4: detected capacity change from 0 to 4096 [ 121.756081][ T6402] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 121.792701][ T6402] ntfs3: loop4: It is recommened to use chkdsk. [ 122.015041][ T5840] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 122.243154][ T6399] loop1: detected capacity change from 0 to 32768 [ 122.297585][ T6399] (syz.1.115,6399,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.331283][ T6399] (syz.1.115,6399,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.350547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 122.377381][ T28] audit: type=1326 audit(1768190183.632:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b738f749 code=0x7ffc0000 [ 122.401101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 122.426037][ T5840] gspca_cpia1: usb_control_msg 02, error -32 [ 122.446582][ T5840] gspca_cpia1: usb_control_msg 02, error -71 [ 122.452860][ T5840] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 122.463052][ T5840] usb 3-1: USB disconnect, device number 3 [ 122.472746][ T28] audit: type=1326 audit(1768190183.662:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b732b829 code=0x7ffc0000 [ 122.494800][ T28] audit: type=1326 audit(1768190183.662:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b732b829 code=0x7ffc0000 [ 122.517407][ T28] audit: type=1326 audit(1768190183.662:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b732b829 code=0x7ffc0000 [ 122.550792][ T28] audit: type=1326 audit(1768190183.662:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b732b829 code=0x7ffc0000 [ 122.601471][ T6399] JBD2: Ignoring recovery information on journal [ 122.643872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.681096][ T28] audit: type=1326 audit(1768190183.662:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b732b829 code=0x7ffc0000 [ 122.749755][ T6399] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 122.768982][ T28] audit: type=1326 audit(1768190183.662:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b732b829 code=0x7ffc0000 [ 122.798083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 122.808835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 122.818682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.886416][ T28] audit: type=1326 audit(1768190183.662:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b732b829 code=0x7ffc0000 [ 122.941460][ T28] audit: type=1326 audit(1768190183.662:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b732b829 code=0x7ffc0000 [ 122.984260][ T28] audit: type=1326 audit(1768190183.662:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6410 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44b732b829 code=0x7ffc0000 [ 123.276785][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 123.957222][ T6442] loop1: detected capacity change from 0 to 1024 [ 123.972225][ T6442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.999992][ T6442] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.030157][ T6442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 124.041503][ T6442] System zones: 0-1, 3-36 [ 124.077431][ T6442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.171430][ T6429] loop4: detected capacity change from 0 to 32768 [ 124.248413][ T6429] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.370428][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.555048][ T6429] XFS (loop4): Ending clean mount [ 124.627013][ T6429] XFS (loop4): Quotacheck needed: Please wait. [ 124.732496][ T6429] XFS (loop4): Quotacheck: Done. [ 125.147125][ T6139] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.680088][ T6464] loop1: detected capacity change from 0 to 32768 [ 125.714224][ T6440] loop2: detected capacity change from 0 to 32768 [ 125.762487][ T6440] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 125.785667][ T6464] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 125.797789][ T6440] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 125.961731][ T6440] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 125.999216][ T6464] XFS (loop1): Ending clean mount [ 126.015097][ T6464] XFS (loop1): Quotacheck needed: Please wait. [ 126.036239][ T5857] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 126.055505][ T6489] PID 6489 killed due to inadequate hugepage pool [ 126.091261][ T5857] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 126.123193][ T6464] XFS (loop1): Quotacheck: Done. [ 126.279022][ T5782] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.333006][ T5857] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 241ms [ 126.366679][ T5857] gfs2: fsid=syz:syz.0: jid=0: Done [ 126.384701][ T6440] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 126.639336][ T6507] netlink: 'syz.1.131': attribute type 21 has an invalid length. [ 126.677825][ T6507] netlink: 'syz.1.131': attribute type 6 has an invalid length. [ 126.698021][ T6507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.131'. [ 128.127651][ T6534] loop2: detected capacity change from 0 to 8192 [ 128.214120][ T6534] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.536950][ T6542] Illegal XDP return value 4294967294 on prog (id 17) dev N/A, expect packet loss! [ 128.761332][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 128.959606][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.984447][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.007168][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.021268][ T5840] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.039187][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.049296][ T9] usb 1-1: Product: syz [ 129.059459][ T9] usb 1-1: Manufacturer: syz [ 129.069617][ T9] usb 1-1: SerialNumber: syz [ 129.244036][ T5840] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 129.262686][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 129.297299][ T9] usb 1-1: 0:2 : does not exist [ 129.309537][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 129.356314][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.393346][ T5840] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.403118][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 129.415178][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.469823][ T5840] usb 3-1: config 0 descriptor?? [ 129.475884][ T9] usb 1-1: USB disconnect, device number 4 [ 129.493241][ T6544] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 129.590818][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.949605][ T5840] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 129.983580][ T5840] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 130.043381][ T5840] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 130.226101][ T5840] usb 3-1: USB disconnect, device number 4 [ 131.941157][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.160790][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 132.185397][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.195080][ T9] usb 3-1: Product: syz [ 132.205086][ T9] usb 3-1: Manufacturer: syz [ 132.214984][ T9] usb 3-1: SerialNumber: syz [ 132.248907][ T9] usb 3-1: config 0 descriptor?? [ 132.298316][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 132.310117][ T9] hub: probe of 3-1:0.0 failed with error -5 [ 132.491969][ T6591] netlink: 156 bytes leftover after parsing attributes in process `syz.0.158'. [ 132.532857][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 132.558507][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.574092][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 132.583785][ T9] usb 3-1: media controller created [ 132.615922][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.753503][ T9] DVB: Unable to find symbol dib7000p_attach() [ 132.759749][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 132.920980][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 132.927129][ T9] Registered IR keymap rc-empty [ 132.941658][ T9] dvb-usb: could not initialize remote control. [ 132.944860][ T6597] binder: binder_mmap: 6596 200000000000-200000b36000 bad vm_flags failed -1 [ 132.957278][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 133.030194][ T6583] loop4: detected capacity change from 0 to 32768 [ 133.080246][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.089863][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.228843][ T6583] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 133.399033][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 133.399050][ T28] audit: type=1800 audit(1768190194.652:130): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.156" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 133.516430][ T6139] (syz-executor,6139,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 133.593745][ T6139] ocfs2: Unmounting device (7,4) on (node local) [ 133.936007][ T6525] Set syz1 is full, maxelem 65536 reached [ 134.135006][ T6611] loop1: detected capacity change from 0 to 136 [ 134.528274][ T6614] loop1: detected capacity change from 0 to 256 [ 134.748844][ T6607] loop4: detected capacity change from 0 to 32768 [ 134.810564][ T6607] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.874038][ T6624] loop1: detected capacity change from 0 to 8 [ 134.892391][ T6607] XFS (loop4): Ending clean mount [ 134.908729][ T6607] XFS (loop4): Quotacheck needed: Please wait. [ 134.978116][ T6607] XFS (loop4): Quotacheck: Done. [ 135.015828][ T28] audit: type=1800 audit(1768190196.272:131): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.162" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 135.051660][ T6607] XFS (loop4): User initiated shutdown received. [ 135.105384][ T6607] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 135.162551][ T6607] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 135.305231][ T6139] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.218975][ T6655] loop4: detected capacity change from 0 to 512 [ 136.239500][ T6655] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 136.325662][ T6655] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.390336][ T6655] EXT4-fs (loop4): 1 truncate cleaned up [ 136.424967][ T6655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.450547][ T6638] loop1: detected capacity change from 0 to 32768 [ 136.714660][ T6139] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.282460][ T5840] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.481100][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 137.499734][ T5840] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 137.519164][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.539492][ T5840] usb 2-1: Product: syz [ 137.545004][ T5840] usb 2-1: Manufacturer: syz [ 137.559895][ T5840] usb 2-1: SerialNumber: syz [ 137.575230][ T5840] usb 2-1: config 0 descriptor?? [ 138.055382][ T5840] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 138.082843][ T5840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.112280][ T5840] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 138.150385][ T5840] usb 2-1: media controller created [ 138.160190][ T6703] netlink: 'syz.0.182': attribute type 21 has an invalid length. [ 138.181309][ T6703] netlink: 'syz.0.182': attribute type 6 has an invalid length. [ 138.189000][ T6703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.182'. [ 138.207985][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.439281][ T6679] ------------[ cut here ]------------ [ 138.445676][ T6679] usb 3-1: BOGUS control dir, pipe 80000580 doesn't match bRequestType c0 [ 138.481817][ T6679] WARNING: CPU: 0 PID: 6679 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10a1/0x17d0 [ 138.491625][ T6679] Modules linked in: [ 138.495620][ T6679] CPU: 0 PID: 6679 Comm: syz.1.177 Not tainted syzkaller #0 [ 138.503337][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.513904][ T6679] RIP: 0010:usb_submit_urb+0x10a1/0x17d0 [ 138.519636][ T6679] Code: df 0f b6 44 05 00 84 c0 0f 85 2d 06 00 00 45 0f b6 45 00 48 c7 c7 40 e3 4a 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 1f d2 ff fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 138.540161][ T6679] RSP: 0018:ffffc90004fe7870 EFLAGS: 00010246 [ 138.546548][ T6679] RAX: 94c896f3ab4c9f00 RBX: ffff888063782600 RCX: 0000000000080000 [ 138.554627][ T6679] RDX: ffffc9000dccc000 RSI: 0000000000006f5a RDI: 0000000000006f5b [ 138.562851][ T6679] RBP: 1ffff11003b5dc14 R08: ffffc90004fe7467 R09: 1ffff920009fce8c [ 138.570954][ T6679] R10: dffffc0000000000 R11: fffff520009fce8d R12: dffffc0000000000 [ 138.575609][ T27] usb 3-1: USB disconnect, device number 5 [ 138.579041][ T6679] R13: ffff88801daee0a0 R14: 0000000080000580 R15: ffff888146a6d618 [ 138.593017][ T6679] FS: 00007f1465bae6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 138.602141][ T6679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.608809][ T6679] CR2: 0000200000001e20 CR3: 00000000657e8000 CR4: 00000000003506f0 [ 138.616909][ T6679] Call Trace: [ 138.620264][ T6679] [ 138.623345][ T6679] usb_start_wait_urb+0x115/0x4b0 [ 138.628482][ T6679] ? usb_api_blocking_completion+0xb0/0xb0 [ 138.634425][ T6679] usb_control_msg+0x233/0x3e0 [ 138.639721][ T6679] dib0700_i2c_xfer+0xb92/0xf60 [ 138.644807][ T6679] ? rt_mutex_slowlock+0x31f/0x5e0 [ 138.650015][ T6679] ? dib0700_set_gpio+0x1f0/0x1f0 [ 138.655172][ T6679] __i2c_transfer+0x868/0x2080 [ 138.660075][ T6679] ? i2c_cmd+0x110/0x110 [ 138.664541][ T6679] ? i2c_transfer+0x11b/0x390 [ 138.669318][ T6679] i2c_transfer+0x250/0x390 [ 138.674285][ T6679] ? __i2c_transfer+0x2080/0x2080 [ 138.679507][ T6679] ? __might_fault+0xc6/0x120 [ 138.684301][ T6679] ? __might_fault+0xaa/0x120 [ 138.689070][ T6679] ? _copy_from_user+0xa5/0xe0 [ 138.693968][ T6679] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 138.699018][ T6679] i2cdev_ioctl+0x646/0x7e0 [ 138.703668][ T6679] ? i2cdev_write+0x120/0x120 [ 138.708443][ T6679] ? bpf_lsm_file_ioctl+0x9/0x10 [ 138.713492][ T6679] ? security_file_ioctl+0x80/0xa0 [ 138.718708][ T6679] ? i2cdev_write+0x120/0x120 [ 138.723512][ T6679] __se_sys_ioctl+0xfd/0x170 [ 138.728190][ T6679] do_syscall_64+0x55/0xb0 [ 138.732737][ T6679] ? clear_bhb_loop+0x40/0x90 [ 138.737501][ T6679] ? clear_bhb_loop+0x40/0x90 [ 138.742785][ T6679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.748748][ T6679] RIP: 0033:0x7f1464d8f749 [ 138.753382][ T6679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.773204][ T6679] RSP: 002b:00007f1465bae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.781753][ T6679] RAX: ffffffffffffffda RBX: 00007f1464fe5fa0 RCX: 00007f1464d8f749 [ 138.789808][ T6679] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 138.797989][ T6679] RBP: 00007f1464e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 138.806076][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.814147][ T6679] R13: 00007f1464fe6038 R14: 00007f1464fe5fa0 R15: 00007ffd22c10768 [ 138.822274][ T6679] [ 138.825375][ T6679] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.832689][ T6679] CPU: 0 PID: 6679 Comm: syz.1.177 Not tainted syzkaller #0 [ 138.840095][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.850189][ T6679] Call Trace: [ 138.853505][ T6679] [ 138.856476][ T6679] dump_stack_lvl+0x16c/0x230 [ 138.861198][ T6679] ? show_regs_print_info+0x20/0x20 [ 138.866439][ T6679] ? load_image+0x3b0/0x3b0 [ 138.871015][ T6679] panic+0x2c0/0x710 [ 138.874968][ T6679] ? bpf_jit_dump+0xd0/0xd0 [ 138.879539][ T6679] __warn+0x2e0/0x470 [ 138.883574][ T6679] ? usb_submit_urb+0x10a1/0x17d0 [ 138.888654][ T6679] ? usb_submit_urb+0x10a1/0x17d0 [ 138.893827][ T6679] report_bug+0x2be/0x4f0 [ 138.898209][ T6679] ? usb_submit_urb+0x10a1/0x17d0 [ 138.903290][ T6679] ? usb_submit_urb+0x10a1/0x17d0 [ 138.908366][ T6679] ? usb_submit_urb+0x10a3/0x17d0 [ 138.913449][ T6679] handle_bug+0xcf/0x120 [ 138.917740][ T6679] exc_invalid_op+0x1a/0x50 [ 138.922288][ T6679] asm_exc_invalid_op+0x1a/0x20 [ 138.927182][ T6679] RIP: 0010:usb_submit_urb+0x10a1/0x17d0 [ 138.932865][ T6679] Code: df 0f b6 44 05 00 84 c0 0f 85 2d 06 00 00 45 0f b6 45 00 48 c7 c7 40 e3 4a 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 1f d2 ff fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 138.952598][ T6679] RSP: 0018:ffffc90004fe7870 EFLAGS: 00010246 [ 138.958722][ T6679] RAX: 94c896f3ab4c9f00 RBX: ffff888063782600 RCX: 0000000000080000 [ 138.966737][ T6679] RDX: ffffc9000dccc000 RSI: 0000000000006f5a RDI: 0000000000006f5b [ 138.974766][ T6679] RBP: 1ffff11003b5dc14 R08: ffffc90004fe7467 R09: 1ffff920009fce8c [ 138.982790][ T6679] R10: dffffc0000000000 R11: fffff520009fce8d R12: dffffc0000000000 [ 138.990807][ T6679] R13: ffff88801daee0a0 R14: 0000000080000580 R15: ffff888146a6d618 [ 138.998890][ T6679] usb_start_wait_urb+0x115/0x4b0 [ 139.004005][ T6679] ? usb_api_blocking_completion+0xb0/0xb0 [ 139.009890][ T6679] usb_control_msg+0x233/0x3e0 [ 139.014721][ T6679] dib0700_i2c_xfer+0xb92/0xf60 [ 139.019634][ T6679] ? rt_mutex_slowlock+0x31f/0x5e0 [ 139.024796][ T6679] ? dib0700_set_gpio+0x1f0/0x1f0 [ 139.029886][ T6679] __i2c_transfer+0x868/0x2080 [ 139.034744][ T6679] ? i2c_cmd+0x110/0x110 [ 139.039049][ T6679] ? i2c_transfer+0x11b/0x390 [ 139.043786][ T6679] i2c_transfer+0x250/0x390 [ 139.048361][ T6679] ? __i2c_transfer+0x2080/0x2080 [ 139.053430][ T6679] ? __might_fault+0xc6/0x120 [ 139.058141][ T6679] ? __might_fault+0xaa/0x120 [ 139.062866][ T6679] ? _copy_from_user+0xa5/0xe0 [ 139.067688][ T6679] i2cdev_ioctl_rdwr+0x3b0/0x690 [ 139.072725][ T6679] i2cdev_ioctl+0x646/0x7e0 [ 139.077278][ T6679] ? i2cdev_write+0x120/0x120 [ 139.082018][ T6679] ? bpf_lsm_file_ioctl+0x9/0x10 [ 139.086997][ T6679] ? security_file_ioctl+0x80/0xa0 [ 139.092159][ T6679] ? i2cdev_write+0x120/0x120 [ 139.096897][ T6679] __se_sys_ioctl+0xfd/0x170 [ 139.101541][ T6679] do_syscall_64+0x55/0xb0 [ 139.106004][ T6679] ? clear_bhb_loop+0x40/0x90 [ 139.110718][ T6679] ? clear_bhb_loop+0x40/0x90 [ 139.115442][ T6679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.121384][ T6679] RIP: 0033:0x7f1464d8f749 [ 139.125851][ T6679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.145675][ T6679] RSP: 002b:00007f1465bae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.154138][ T6679] RAX: ffffffffffffffda RBX: 00007f1464fe5fa0 RCX: 00007f1464d8f749 [ 139.162151][ T6679] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 139.170336][ T6679] RBP: 00007f1464e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 139.178353][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.186365][ T6679] R13: 00007f1464fe6038 R14: 00007f1464fe5fa0 R15: 00007ffd22c10768 [ 139.194404][ T6679] [ 139.198019][ T6679] Kernel Offset: disabled [ 139.202421][ T6679] Rebooting in 86400 seconds..