last executing test programs: 14m46.553731717s ago: executing program 1 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 14m46.209713972s ago: executing program 1 (id=1479): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) syz_io_uring_setup(0x6c5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2000001}, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0) 14m46.068984304s ago: executing program 1 (id=1481): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x400000d, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x200000000000000, 0x5, 0x7}, 0x0, 0x0) 14m45.095685048s ago: executing program 1 (id=1486): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000003c0)={[{@inlinecrypt}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) lchown(&(0x7f0000000b40)='./file0\x00', 0x0, r1) 14m43.843703618s ago: executing program 1 (id=1490): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='\x00', 0x1}]) 14m41.68250768s ago: executing program 1 (id=1497): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x0, 0x80200) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(r1, &(0x7f0000002000), 0x0) 14m41.320870106s ago: executing program 32 (id=1497): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0x0, 0x80200) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(r1, &(0x7f0000002000), 0x0) 13m55.251302999s ago: executing program 2 (id=1635): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r1, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) r3 = syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa83, &(0x7f0000000180)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000fc0)) syz_clone3(&(0x7f0000001040)={0x100000000, 0x0, &(0x7f0000000dc0), &(0x7f0000000e00), {0x20}, 0x0, 0x0, &(0x7f0000000ec0)=""/71, 0x0}, 0x58) 13m52.901538324s ago: executing program 2 (id=1638): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x8000000, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000240)={{@local, 0x1}, 0x1, 0x2, 0x8}) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0x9001, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc) 13m52.460842731s ago: executing program 2 (id=1641): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0), 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x400000d, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x200000000000000, 0x5, 0x7}, 0x0, 0x0) 13m51.663996633s ago: executing program 0 (id=1646): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x3804410, &(0x7f0000000100)={[{@quota}, {@mblk_io_submit}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x585, &(0x7f0000000580)="$eJzs3U1rG9caAOB35K98XjsQwr2Xy60hi6akkWO7Hwl0ka5KaUMD7T41tmKC5ShYcojdQJNFs+mmhEIpDZSs2+67DP0D/RWBNhBKMC2lG5eRR45iS5bqyLYSPQ9Mcs7M2O95NXMOZ3wkFEDPGk3/yUX8JyK+SCKG6471R3ZwdO28lcc3ptMtidXVD39LIsn21c5Psv8PZpV/R8RPn0WczG2OW15anpsqFgsLWX2sMn91rLy0fOry/NRsYbZwZWJy8szrkxNn33yjY7m+cuGPrz+4/+6Zz4+vfPXDwyN3kjgXh7Jj9Xk8g5v1ldEYzV6TgTi34cTxDgTrJsleN4Bt6cv6+UCkY8Bw9GW9HnjxfRoRq0CPSvR/6FG1eUDt2b5Dz8HPjUdvrz0Abc6/f+1vI7Gv+mx0YCV56skofd4d6UD8NMaPv969k27Rub9DALR081ZEnO7v3zz+Jdn4t32n2zhnYwzjH+ye++n859VG85/c+vwnGsx/Djbou9vRuv/nHnYgTFPp/O+thvPf9UWrkb6sdrg65xtILl0uFtKx7V8RcSIGhtL6Vus5Z1YerDY7Vj//S7c0fm0umLXjYf/Q0z8zM1WZepac6z26FfHfhvPfZP36Jw2uf/p6XGgzxrHC3f83O9Y6/521ei/i5YbX/8mKVrL1+uRY9X4Yq90Vm/1++9jPzeLvdf7p9T+wlv+f2SPhhvxrN1+2Xlv+5zG+3fdXodmxtu//wSd70vt/MPmoWq7tvj5VqSyMRwwm72/eP/HkZ2v12vlp/ieObz3+Nbr/90fEx23mf/vo9//bfv47K81/Zuv7fySpX6/fRuHBe5980yx+e9f/tWrpRLannfGv3QY+y2sHAAAAAAAA3SYXEYciyeXXy7lcPr/2/o6jcSBXLJUrJy+VFq/MRPWzsiMxkKutdA/XvR9iPHs/bK0+saE+GRFHIuLLvv3Ven66VJzZ6+QBAAAAAAAAAAAAAAAAAACgSxxs8vn/1C99e906YMe1+srvey/tUkOAXdfyK/878U1PQFdq2f+BF5b+D71L/4fepf9D79L/oXfp/9C79H/oXfo/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNSF8+fTbXXl8Y3ptD5zbWlxrnTt1EyhPJefX5zOT5cWruZnS6XZYiE/XZpv9fuKpdLV8YlYvD5WKZQrY+Wl5YvzpcUrlYuX5787HFEY2JWsAAAAAAAAAAAAAAAAAAAA4PlSXlqemyoWCwvdXRjMmrvjsYZ2PsQ2CsPRFc1oWOjvjmb0UmEodiFW/Shx9p29GZ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3fAQAA//+7aTSM") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=") syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) r6 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/28, 0xffd2) sendto$inet(r5, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 13m51.390747797s ago: executing program 2 (id=1647): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000003c0)={[{@inlinecrypt}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) lchown(&(0x7f0000000b40)='./file0\x00', 0x0, 0x0) 13m50.413771202s ago: executing program 0 (id=1650): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x4) 13m50.199235115s ago: executing program 2 (id=1651): openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYRESHEX=0x0], 0x1, 0x1d2, &(0x7f0000000480)="$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") 13m50.059005508s ago: executing program 0 (id=1652): syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r0 = open(&(0x7f0000000040)='.\x00', 0x2000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000080)={0x2, 0xfffffffffffffff5, 0xffff, 0x80002, 0x100, 0x400, 0x2401}) symlink(0x0, 0x0) 13m48.769562017s ago: executing program 2 (id=1657): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 13m48.144232276s ago: executing program 33 (id=1657): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 13m47.612710864s ago: executing program 0 (id=1661): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000003c0)={[{@inlinecrypt}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) lchown(&(0x7f0000000b40)='./file0\x00', 0x0, 0x0) 13m46.990457684s ago: executing program 0 (id=1664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 13m39.117590202s ago: executing program 0 (id=1677): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x3804410, &(0x7f0000000100)={[{@quota}, {@mblk_io_submit}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x585, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f00000003c0)=""/28, 0xffd2) sendto$inet(r3, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 13m38.59280474s ago: executing program 34 (id=1677): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x3804410, &(0x7f0000000100)={[{@quota}, {@mblk_io_submit}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x585, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=") syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f00000003c0)=""/28, 0xffd2) sendto$inet(r3, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 2m39.854013435s ago: executing program 6 (id=3826): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 2m39.51542426s ago: executing program 6 (id=3828): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m38.738152601s ago: executing program 6 (id=3829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002032300000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000010301080000000000000000000000000c0002"], 0x20}}, 0x0) 2m38.412217476s ago: executing program 6 (id=3832): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x40000007, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a857000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x5, 0x0, 0x7fffffff}]}) 2m36.76161015s ago: executing program 6 (id=3837): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) 2m35.527058798s ago: executing program 6 (id=3840): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='b 7'], 0xa) 2m20.477924997s ago: executing program 35 (id=3840): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='b 7'], 0xa) 8.107736312s ago: executing program 5 (id=4369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="170000005600230d060000000000000007"], 0x18}}, 0x0) 7.763451387s ago: executing program 5 (id=4371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0x0) 7.021480477s ago: executing program 3 (id=4372): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) dup3(r1, r0, 0x0) 6.877018549s ago: executing program 3 (id=4375): syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711837000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000008fcffffff"]}, 0x104) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08000100", @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 6.787935641s ago: executing program 5 (id=4376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$cdc_ecm(0x5, 0x5c, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@country_functional={0x6, 0x24, 0x7, 0x40, 0x7ff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xfd}}}}}]}}]}}, 0x0) 5.721588086s ago: executing program 4 (id=4380): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) setpgid(0x0, 0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="400b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) 5.537791909s ago: executing program 3 (id=4381): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x18, &(0x7f00000002c0)={0x0, 0x23, 0x28, {0x28, 0x26, "acf5598e8aee105b8e3f2690435840502783f6855ca6673869e6db6b2e0b86daefbf6eb2ed30"}}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0xc4, 0x1, 0xff, 0x7fff, 0x9}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) 4.597507703s ago: executing program 5 (id=4388): r0 = syz_usb_connect(0x0, 0x68, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d6500090504021000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.38803886s ago: executing program 4 (id=4390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 3.159836494s ago: executing program 4 (id=4392): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) dup3(r1, r0, 0x0) 2.926852437s ago: executing program 4 (id=4393): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0x0) 2.811581309s ago: executing program 4 (id=4395): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x22, 0x2, 0x3) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x101042, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x5e00) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0/file0\x00') setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) unshare(0x2a020400) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r3 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000280), &(0x7f0000000200)) io_uring_enter(r3, 0x54, 0x4, 0xf, 0x0, 0x18) 2.796206939s ago: executing program 7 (id=4396): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af24, &(0x7f0000000000)={0x1, 0x3}) 2.109790279s ago: executing program 7 (id=4397): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa83, &(0x7f0000000180)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_clone3(0x0, 0x0) 857.781997ms ago: executing program 4 (id=4398): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) setpgid(0x0, 0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="400b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) 531.712912ms ago: executing program 5 (id=4399): syz_read_part_table(0x618, &(0x7f0000002200)="$eJzs3D+IFGcUAPC3dzc7dwqehUWwiWctBMXSK6LsbQwGZE0IHBb5iwhXXeBgQxY3eEVyheIWYplGApviXKvoFVY5FFIHsTAIW9gETBNiipsws3O3GzgOEjaE4O9XfN/bnTfvzQfTvgn+1yYiKaMsLbY3PtozP5sdxu14r1tbOJtlWfZuRCUuRhJzyYFeRExF9G6NVI2jEbF/pM7tb/ZtfP3rW0n3yYVktH470jiY51YjL1ma2e1R0r99WMZufX5z9urqcv1a/qPe6m+9H3HnRa1x79xapzeZnPkk//9KxMMyf6pYZya27/9wKv5yZQ9fDsPKaP/tl+Py43qrf6v77PjW4frk95dOvTyycf3BiYiVvPL5KF72oeo/P/Oo9fnNrFT0X5m7sdhpnT5299DNk837jxrPJ38vLw9aToynLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/5L1fFmtxrXm/OXH9Vb/q59+fOfOi1rj3rm1Tu/t6pmnlUHewzJ/qtw/i2Z8HklELMVSfBrLu5d/bSc6sBMtVkb7z2/OXl1drg/6/7Ev4tnxrcP17sylUy8XNq4/OFFkVWI63ybGevRd+rf6K3M3Fjut08fuHrp5snn/UeP55CBvKY2Pi+NGRDr+xwAAAAAAAAAAAAAAAAAAAOAVV1s4e+T8m42DeXxxOiJ++aKYss/Sme+imLwfOFruT9PBKP/t6cG3ALpPLvxW/eCHtZ/Lofh2pNGOiP3fJhHx+k6fK8W6/fWASIaV+S/9GQAA///p7o1q") creat(0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007118370000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000008fcffffff"]}, 0x104) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08000100", @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 468.874583ms ago: executing program 7 (id=4400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 467.565053ms ago: executing program 3 (id=4401): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) dup3(r1, r0, 0x0) 392.946024ms ago: executing program 7 (id=4402): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 201.987547ms ago: executing program 3 (id=4403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005000000"], 0x80}}, 0x0) 200.950547ms ago: executing program 7 (id=4404): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) 82.763949ms ago: executing program 5 (id=4405): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r3, 0x8926, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x7ff, 0xd, "5dee000000594000"}) r4 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe4) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000600)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18000400010000004b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3], 0x90, 0x4000800}}], 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000580)=@raw=[@tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r13}, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r13, 0x68758000) connect$unix(r9, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000180)=0xf) 53.606459ms ago: executing program 3 (id=4406): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) listen(0xffffffffffffffff, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, '|P3', 0x1}}}, 0xd) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000380)) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000020940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000180)=ANY=[], 0x1, 0x2e1, &(0x7f00000003c0)="$eJzs3T9v004cx/HPOUmb/lF/7p+fkFhAhUqwVBQYEEsQysrOhIAmlSqiItoiAQspYkQ8AHaeAg+CBcQTgImJB9DN6C6XxE4cpxFNTMr7JTVyznfn7+ns+r5G1ALwz7pb/f7xxk/7Y6SCCpJuS4GkslSUXIl12KjXsjoquBb2x6jV0vTV2d6rpzW17VwLL7TfilqMl2E8oii68yPvIJA7073SEwJp1l+Hbn95wnGNS1O6kHcMkxafYHOsY73QUo7hAAD+Av7+H/jbxKIrMgoCacPf9s/U/f847wBO181GX1GU2SB2/3eru8jY+f3P7So/3zvcdfmeS+Hs/qCdJZ4kmFLP9xm1zqzEAjN2lHQulmBuZ7eoze0j1QK9UcWL5ZZr7rPWOnXbhkS73pubmmbWeAb3VtK9+VYHbkXZqx3Szm6jPms3OvF3rY52xD9nPpuv5oEJ9UE1LflJKUbGTpObqbBnpoKSjf/a4B4XXCtbSz7tr1QqQaLKsjvIeX8Eb8goy+kZidpn1HL3oUGzE0FWnK7VipKPFVqj2xrSajWtVdj5NqDVWqJVwZ8Jm9tPG5mPUsajPUTz3tw36/qlT6rG1v+BjW9DJ7kybR1X058ZrfHMpNcsupph352je7lc7ETgzY4+OIzqnR7rlpYOXr56Umg06vt241HKxrPFfeNLSm+l1Drj3ygoo46a3ZLIeh1FJ+05GmfwV0+1Q/v7o1NiL58jP5XxyvYq67QKJjZNpieMM75R/aKsE3J6NqJIGrAr599PmIgD0550XzCXc0CYNLvuMq38z63k/arOpUj2I8xYp2cnmUr0uNXJ4JJLwRX3OT9SBreQ8q+L/Ue8nsgZu1zOdemKdDlWaJR5xNDHeUaYqr7pIc//AQAAAAAAAAAAAAAAAAAAps0k/qdB3mMEAAAAAAAAAAAAAAAAAAAAAGDaDX3/7/861/c+mLS/Ee/e/xvy/l9givwOAAD//6rTc3Y=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) 0s ago: executing program 7 (id=4407): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) kernel console output (not intermixed with test programs): .136716][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.163304][ T2960] bridge_slave_1: left allmulticast mode [ 1324.169376][ T2960] bridge_slave_1: left promiscuous mode [ 1324.182711][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.198817][T11557] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1324.228022][ T2960] bridge_slave_0: left allmulticast mode [ 1324.257604][ T2960] bridge_slave_0: left promiscuous mode [ 1324.264108][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.826123][ T2960] veth1_macvtap: left promiscuous mode [ 1324.900778][ T2960] veth0_macvtap: left promiscuous mode [ 1324.963468][ T2960] veth1_vlan: left promiscuous mode [ 1324.981156][ T2960] veth0_vlan: left promiscuous mode [ 1325.488831][ T2960] bond28 (unregistering): Released all slaves [ 1325.557507][ T2960] bond27 (unregistering): Released all slaves [ 1325.580190][ T2960] bond26 (unregistering): Released all slaves [ 1325.797442][ T2960] bond25 (unregistering): Released all slaves [ 1326.062729][ T2960] bond24 (unregistering): Released all slaves [ 1326.266586][ T2960] bond23 (unregistering): Released all slaves [ 1326.314155][ T2960] bond22 (unregistering): Released all slaves [ 1326.365660][ T2960] bond21 (unregistering): Released all slaves [ 1326.387079][ T2960] bond20 (unregistering): Released all slaves [ 1326.399495][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1326.442666][ T2960] bond19 (unregistering): Released all slaves [ 1326.531951][ T2960] bond18 (unregistering): (slave veth19): Releasing backup interface [ 1326.570540][ T2960] bond18 (unregistering): Released all slaves [ 1326.665654][T19350] loop5: detected capacity change from 0 to 128 [ 1326.699792][T19351] ptrace attach of "./syz-executor exec"[14441] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ÿÿÿÿ  ‹  € ” [ 1326.733797][T19350] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1326.926859][T19350] ext4 filesystem being mounted at /556/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1327.097103][T11557] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1327.228794][T19355] capability: warning: `syz.3.3853' uses deprecated v2 capabilities in a way that may be insecure [ 1327.269649][ T2960] bond17 (unregistering): Released all slaves [ 1329.594997][T19376] loop5: detected capacity change from 0 to 128 [ 1329.622116][T19376] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1329.686681][T19376] ext4 filesystem being mounted at /560/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.710595][ T2960] bond16 (unregistering): Released all slaves [ 1329.804016][ T2960] bond15 (unregistering): (slave veth17): Releasing backup interface [ 1330.478446][T11557] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1330.702616][T19387] program syz.5.3861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1330.934650][ T2960] bond15 (unregistering): Released all slaves [ 1330.997371][ T9967] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1331.177394][ T9967] usb 4-1: Using ep0 maxpacket: 32 [ 1331.178183][ T2960] bond14 (unregistering): Released all slaves [ 1331.196752][ T9967] usb 4-1: config 0 has an invalid interface number: 78 but max is 0 [ 1331.219549][ T9967] usb 4-1: config 0 has no interface number 0 [ 1331.225873][ T9967] usb 4-1: config 0 interface 78 has no altsetting 0 [ 1331.234369][ T2960] bond13 (unregistering): (slave veth15): Releasing backup interface [ 1331.245633][ T9967] usb 4-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice=60.11 [ 1331.257298][ T9967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.265635][ T9967] usb 4-1: Product: syz [ 1331.270078][ T9967] usb 4-1: Manufacturer: syz [ 1331.274717][ T9967] usb 4-1: SerialNumber: syz [ 1331.279160][ T2960] bond13 (unregistering): Released all slaves [ 1331.286983][ T9967] usb 4-1: config 0 descriptor?? [ 1331.331440][ T9967] snd_usb_pod 4-1:0.78: Line 6 BassPODxt found [ 1331.519052][ T2960] bond12 (unregistering): Released all slaves [ 1331.528237][ T9967] snd_usb_pod 4-1:0.78: set_interface failed [ 1331.536811][ T9967] snd_usb_pod 4-1:0.78: Line 6 BassPODxt now disconnected [ 1331.552974][ T9967] snd_usb_pod: probe of 4-1:0.78 failed with error -71 [ 1331.562495][ T9967] usb 4-1: USB disconnect, device number 51 [ 1331.598697][ T2960] bond11 (unregistering): (slave veth13): Releasing backup interface [ 1331.625068][ T2960] bond11 (unregistering): Released all slaves [ 1331.833255][ T2960] bond10 (unregistering): Released all slaves [ 1332.059644][ T2960] bond9 (unregistering): Released all slaves [ 1332.154692][ T2960] bond8 (unregistering): (slave veth11): Releasing backup interface [ 1332.956052][T19403] loop3: detected capacity change from 0 to 128 [ 1333.056564][T19403] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1333.100000][T19403] ext4 filesystem being mounted at /373/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.169525][T19406] loop5: detected capacity change from 0 to 512 [ 1333.186736][T19406] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1333.214055][ T2960] bond8 (unregistering): Released all slaves [ 1333.221653][T19406] EXT4-fs (loop5): 1 truncate cleaned up [ 1333.239964][T19406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1333.259804][T14441] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1333.301124][ T2960] bond7 (unregistering): (slave veth9): Releasing backup interface [ 1333.369852][T19409] program syz.3.3870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1333.458098][T11557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.739552][ T2960] bond7 (unregistering): Released all slaves [ 1333.789006][ T2960] bond6 (unregistering): (slave veth7): Releasing backup interface [ 1334.191050][T19420] sctp: [Deprecated]: syz.5.3874 (pid 19420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1334.191050][T19420] Use struct sctp_sack_info instead [ 1334.371543][ T2960] bond6 (unregistering): Released all slaves [ 1334.982380][ T2960] bond5 (unregistering): (slave veth5): Releasing backup interface [ 1336.479463][ T2960] bond5 (unregistering): Released all slaves [ 1336.705466][T19437] loop5: detected capacity change from 0 to 512 [ 1336.757966][T19437] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1336.865349][T19437] EXT4-fs (loop5): 1 truncate cleaned up [ 1336.876047][T19437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.036712][T11557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.229881][T19449] afs: Unknown parameter 'dy' [ 1337.311007][ T2960] bond4 (unregistering): Released all slaves [ 1337.625553][ T2960] bond3 (unregistering): Released all slaves [ 1337.685705][ T2960] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1337.977581][ T2960] bond2 (unregistering): Released all slaves [ 1339.015575][ T2960] bond1 (unregistering): Released all slaves [ 1339.025509][T19465] loop5: detected capacity change from 0 to 512 [ 1339.070820][T19465] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1339.169932][T19465] EXT4-fs (loop5): 1 truncate cleaned up [ 1339.193562][T19465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.242111][T19470] afs: Unknown parameter 'dy' [ 1339.356229][T19145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1339.367525][T19145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1339.381096][T19145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1339.394144][T19145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1339.404315][T19145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1339.413102][T19145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1339.502136][T11557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.180536][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 1340.257348][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 1340.324172][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.389757][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1341.163340][ T2960] bond0 (unregistering): Released all slaves [ 1341.349797][T19477] netlink: 'syz.3.3894': attribute type 1 has an invalid length. [ 1341.372721][T19477] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1341.376869][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3894'. [ 1341.415540][T19480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3894'. [ 1341.481170][T10814] Bluetooth: hci4: command tx timeout [ 1341.522617][T19482] veth13: entered promiscuous mode [ 1342.228173][T19496] afs: Unknown parameter 'dy' [ 1342.866763][T19517] netlink: 'syz.5.3904': attribute type 1 has an invalid length. [ 1342.966913][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3904'. [ 1343.215290][T19517] veth17: entered promiscuous mode [ 1343.224903][T19517] bond26: (slave veth17): Enslaving as a backup interface with a down link [ 1343.297163][ T2960] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.351296][T19527] loop5: detected capacity change from 0 to 512 [ 1343.372917][T19527] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1343.409135][T19527] EXT4-fs (loop5): 1 truncate cleaned up [ 1343.425999][T19527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1343.532897][ T2960] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.556980][T11557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.566927][T10814] Bluetooth: hci4: command tx timeout [ 1343.713136][ T2960] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.756313][T19471] chnl_net:caif_netlink_parms(): no params data found [ 1343.866271][ T2960] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.915449][T19539] afs: Unknown parameter 'dy' [ 1344.156488][T19143] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1344.169745][T19143] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1344.209011][T19143] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1344.226502][T19143] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1344.243966][T19471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.253335][T19471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.263535][T19471] bridge_slave_0: entered allmulticast mode [ 1344.274648][T19471] bridge_slave_0: entered promiscuous mode [ 1344.541730][T19471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.552454][T19471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.560260][T19471] bridge_slave_1: entered allmulticast mode [ 1344.571302][T19471] bridge_slave_1: entered promiscuous mode [ 1345.335768][T19554] loop3: detected capacity change from 0 to 512 [ 1345.356882][T19554] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1345.523128][T19554] EXT4-fs (loop3): 1 truncate cleaned up [ 1345.543314][T19554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1345.583993][T19471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.638421][T10814] Bluetooth: hci4: command tx timeout [ 1345.722312][T19471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.739509][T14441] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.830904][T19471] team0: Port device team_slave_0 added [ 1345.897823][T19471] team0: Port device team_slave_1 added [ 1345.956258][T19143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.993960][T19471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.001315][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.027231][ C0] vkms_vblank_simulate: vblank timer overrun [ 1346.034827][T19471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.109138][T19471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.111318][T19570] afs: Unknown parameter 'dy' [ 1346.121014][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.121046][T19471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.144545][T19143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.283167][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.290521][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.373274][T19471] hsr_slave_0: entered promiscuous mode [ 1346.427926][T19471] hsr_slave_1: entered promiscuous mode [ 1346.687548][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.694799][ T9031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.473622][T19143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1347.723451][T10814] Bluetooth: hci4: command tx timeout [ 1348.039907][T19593] sctp: [Deprecated]: syz.5.3922 (pid 19593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1348.039907][T19593] Use struct sctp_sack_info instead [ 1348.152046][T19600] afs: Unknown parameter 'dy' [ 1348.399654][ T2960] hsr_slave_0: left promiscuous mode [ 1348.442525][ T2960] hsr_slave_1: left promiscuous mode [ 1348.495448][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1348.511736][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.531118][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1348.550070][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.562248][ T2960] bridge_slave_1: left allmulticast mode [ 1348.577637][ T2960] bridge_slave_1: left promiscuous mode [ 1348.593687][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.609971][ T2960] bridge_slave_0: left allmulticast mode [ 1348.616935][ T2960] bridge_slave_0: left promiscuous mode [ 1348.642778][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.656984][ T2960] veth1_macvtap: left promiscuous mode [ 1349.669460][ T2960] veth0_macvtap: left promiscuous mode [ 1349.703661][ T2960] veth1_vlan: left promiscuous mode [ 1349.716230][ T2960] veth0_vlan: left promiscuous mode [ 1349.804598][T19622] loop5: detected capacity change from 0 to 2048 [ 1349.862700][T19622] loop5: p1 < > p4 [ 1349.884837][T19622] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1350.157045][ T2960] bond20 (unregistering): (slave veth19): Releasing backup interface [ 1350.203842][ T2960] bond20 (unregistering): Released all slaves [ 1350.334696][ T2960] bond19 (unregistering): (slave veth17): Releasing backup interface [ 1350.365690][ T2960] bond19 (unregistering): Released all slaves [ 1350.395320][ T2960] bond18 (unregistering): Released all slaves [ 1350.449116][T19630] afs: Unknown parameter 'dy' [ 1350.462875][ T2960] bond17 (unregistering): Released all slaves [ 1350.696913][ T2960] bond16 (unregistering): Released all slaves [ 1350.707336][ T5759] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1350.744732][ T2960] bond15 (unregistering): Released all slaves [ 1350.792910][ T2960] bond14 (unregistering): Released all slaves [ 1350.804359][T19633] loop3: detected capacity change from 0 to 2048 [ 1350.824079][T19633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1350.894908][ T2960] bond13 (unregistering): (slave veth15): Releasing backup interface [ 1350.939605][ T5759] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1350.967868][ T5759] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1351.000040][ T5759] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1351.019340][ T5759] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1351.028062][ T5759] usb 6-1: Product: syz [ 1351.032390][ T5759] usb 6-1: Manufacturer: syz [ 1351.037523][ T5759] usb 6-1: SerialNumber: syz [ 1351.062086][ T5759] usb 6-1: config 0 descriptor?? [ 1351.064001][ T2960] bond13 (unregistering): Released all slaves [ 1351.121064][ T5759] usb 6-1: selecting invalid altsetting 0 [ 1351.743751][ T2960] bond12 (unregistering): (slave veth13): Releasing backup interface [ 1351.787872][ T5839] usb 6-1: USB disconnect, device number 7 [ 1351.819199][ T2960] bond12 (unregistering): Released all slaves [ 1351.914044][ T2960] bond11 (unregistering): (slave veth11): Releasing backup interface [ 1352.235872][ T2960] bond11 (unregistering): Released all slaves [ 1352.304808][ T2960] bond10 (unregistering): (slave veth9): Releasing backup interface [ 1353.121597][ T2960] bond10 (unregistering): Released all slaves [ 1353.216119][ T2960] bond9 (unregistering): (slave veth7): Releasing backup interface [ 1353.442760][ T2960] bond9 (unregistering): Released all slaves [ 1354.221251][ T2960] bond8 (unregistering): Released all slaves [ 1354.470079][ T2960] bond7 (unregistering): Released all slaves [ 1354.516033][ T2960] bond6 (unregistering): (slave veth5): Releasing backup interface [ 1354.542838][ T2960] bond6 (unregistering): Released all slaves [ 1354.769579][ T2960] bond5 (unregistering): Released all slaves [ 1354.980423][ T2960] bond4 (unregistering): Released all slaves [ 1355.214362][ T2960] bond3 (unregistering): Released all slaves [ 1355.256305][ T2960] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1355.494084][ T2960] bond2 (unregistering): Released all slaves [ 1355.514101][ T2960] bond1 (unregistering): Released all slaves [ 1356.346997][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 1356.429066][T19652] afs: Unknown parameter 'dy' [ 1356.450305][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 1356.511231][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.582820][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.942227][ T2960] bond0 (unregistering): Released all slaves [ 1358.860580][T19471] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1358.871947][T19471] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1358.918332][T19143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.931047][T19644] netlink: 'syz.5.3938': attribute type 1 has an invalid length. [ 1358.955719][T19644] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR [ 1358.977002][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3938'. [ 1359.165162][T19648] veth19: entered promiscuous mode [ 1359.897771][T19471] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1360.014316][T19671] syz.5.3944: attempt to access beyond end of device [ 1360.014316][T19671] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1360.014661][T19471] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1360.064046][T19671] syz.5.3944: attempt to access beyond end of device [ 1360.064046][T19671] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1360.105890][T19671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1360.140658][T19671] syz.5.3944: attempt to access beyond end of device [ 1360.140658][T19671] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1360.204692][T19671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1360.277663][T19671] syz.5.3944: attempt to access beyond end of device [ 1360.277663][T19671] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1360.301518][T19671] syz.5.3944: attempt to access beyond end of device [ 1360.301518][T19671] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1360.326516][T19671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1360.347180][T19671] syz.5.3944: attempt to access beyond end of device [ 1360.347180][T19671] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1360.392299][T19671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1360.464118][T19671] syz.5.3944: attempt to access beyond end of device [ 1360.464118][T19671] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1360.627479][T19671] syz.5.3944: attempt to access beyond end of device [ 1360.627479][T19671] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1360.646380][T19671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1360.670696][T19671] syz.5.3944: attempt to access beyond end of device [ 1360.670696][T19671] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1360.706726][T19671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1360.856634][T19671] syz.5.3944: attempt to access beyond end of device [ 1360.856634][T19671] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1360.884465][T19671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1360.943930][T19671] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1360.956098][T19671] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1361.156434][T19471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.208447][T19471] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.298926][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.306120][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.427786][T19688] afs: Unknown parameter 'dy' [ 1361.482232][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.489471][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.565356][T19143] veth0_vlan: entered promiscuous mode [ 1361.652517][T19143] veth1_vlan: entered promiscuous mode [ 1361.822267][T19143] veth0_macvtap: entered promiscuous mode [ 1361.869591][T19143] veth1_macvtap: entered promiscuous mode [ 1361.880194][T19698] loop5: detected capacity change from 0 to 1024 [ 1361.918344][T19143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.969148][T19698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.981319][T19143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.011892][T19143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.046033][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.058409][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.090204][T19143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.134132][T19143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.175932][T19143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.218215][T19143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.228514][T19143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.242679][T19143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.259220][T11557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.271825][T19143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.355265][T19143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.405988][T19143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.443510][T19143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.471044][T19143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.692956][T19471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.807848][ T9031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.830085][ T9031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.940087][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.970102][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.255571][T19725] loop4: detected capacity change from 0 to 2048 [ 1363.279975][T19725] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1363.350202][T19728] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1363.440567][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1363.479605][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1363.545539][T19722] Remounting filesystem read-only [ 1363.589200][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1363.627451][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1363.660084][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1363.717482][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1363.752478][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1363.762950][T19471] veth0_vlan: entered promiscuous mode [ 1363.795351][T19471] veth1_vlan: entered promiscuous mode [ 1363.801525][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1363.841097][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1363.877782][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1363.915885][T19471] veth0_macvtap: entered promiscuous mode [ 1363.929640][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1363.956008][T19471] veth1_macvtap: entered promiscuous mode [ 1363.959846][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1363.988961][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1364.077897][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.093461][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1364.127415][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.164293][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1364.174990][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.196295][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1364.223649][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.247860][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1364.258300][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.287668][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.297735][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1364.319624][T19471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.340100][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1364.365987][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.387893][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1364.397649][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.437687][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1364.448790][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.468030][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1364.477939][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.498113][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.509544][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1364.529129][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.546336][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1364.558320][T19471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.581372][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1364.595503][T19471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.610526][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1364.622759][T19471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.633202][T19471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.642489][T19471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.672309][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1364.688673][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1364.747647][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1364.765629][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1364.800586][T19722] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1364.857397][T19722] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1364.904904][ T28] audit: type=1800 audit(1750163704.488:38): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3786" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1364.928240][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.936205][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.030008][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.069568][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.192740][T19752] netlink: 'syz.3.3950': attribute type 1 has an invalid length. [ 1365.288353][T19752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3950'. [ 1365.431167][T19752] veth13: entered promiscuous mode [ 1365.451098][T19752] bond15: (slave veth13): Enslaving as a backup interface with a down link [ 1365.884451][T19769] loop7: detected capacity change from 0 to 256 [ 1368.186751][T19145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1368.296556][T19145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1368.315517][T19145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1368.329061][T19145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1368.337004][T19145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1368.344942][T19145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1369.346661][T19796] loop3: detected capacity change from 0 to 2048 [ 1369.374469][T19796] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1369.463394][T19801] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1369.474667][T19796] bio_check_eod: 3 callbacks suppressed [ 1369.474685][T19796] syz.3.3959: attempt to access beyond end of device [ 1369.474685][T19796] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1369.537113][T19803] loop4: detected capacity change from 0 to 1024 [ 1369.603661][T19803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.609746][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1369.661090][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1369.690372][T19796] Remounting filesystem read-only [ 1369.714807][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1369.801473][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1369.816460][T19143] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.843045][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1369.887633][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1369.941733][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1369.963295][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.006432][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.049686][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.090196][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.113534][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.119175][ T1321] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.130238][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.156903][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.169419][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.184454][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.199086][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.221277][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.244973][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.261999][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.278682][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.298841][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.309604][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.327447][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.341259][ T1321] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.372249][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.401096][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.411822][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.438111][T19145] Bluetooth: hci2: command tx timeout [ 1370.473341][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.510891][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.549114][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.585385][T19796] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1370.620610][T19796] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1370.645625][ T1321] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.686696][T19780] chnl_net:caif_netlink_parms(): no params data found [ 1370.697378][ T28] audit: type=1800 audit(1750163710.268:39): pid=19796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3959" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1370.840928][ T1321] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.956379][T19829] loop7: detected capacity change from 0 to 256 [ 1372.299059][T19780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.306396][T19780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.377350][T19780] bridge_slave_0: entered allmulticast mode [ 1372.527343][T19145] Bluetooth: hci2: command tx timeout [ 1372.570111][T19780] bridge_slave_0: entered promiscuous mode [ 1372.598384][T19780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.606410][T19780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.615941][T19780] bridge_slave_1: entered allmulticast mode [ 1372.634905][T19780] bridge_slave_1: entered promiscuous mode [ 1373.028300][T19780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.031142][T19850] loop7: detected capacity change from 0 to 128 [ 1373.113684][T19780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.605316][T19861] loop7: detected capacity change from 0 to 64 [ 1373.961908][T19780] team0: Port device team_slave_0 added [ 1374.023476][T19780] team0: Port device team_slave_1 added [ 1374.223264][T19857] loop3: detected capacity change from 0 to 8192 [ 1374.407125][T19864] warning: `syz.4.3974' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1374.426099][T19780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.466214][T19780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1374.492193][ C0] vkms_vblank_simulate: vblank timer overrun [ 1374.575824][T19780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.607379][T19145] Bluetooth: hci2: command tx timeout [ 1374.660569][T19780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1374.708034][T19780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1374.772609][T19871] loop4: detected capacity change from 0 to 2048 [ 1374.795581][T19871] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1374.807330][T19780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.952575][T19874] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1374.964915][T19871] syz.4.3976: attempt to access beyond end of device [ 1374.964915][T19871] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1375.478715][T19145] Bluetooth: hci4: command tx timeout [ 1375.705044][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1375.807866][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1375.931377][T19871] Remounting filesystem read-only [ 1375.967520][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.013089][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.055981][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.065918][T19780] hsr_slave_0: entered promiscuous mode [ 1376.077123][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.098741][T19780] hsr_slave_1: entered promiscuous mode [ 1376.100673][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.122379][T19780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1376.130863][T19780] Cannot create hsr debugfs directory [ 1376.149819][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.152065][T19887] netlink: 'syz.7.3981': attribute type 1 has an invalid length. [ 1376.172290][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.195851][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.236479][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.282235][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.305143][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.338184][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.396610][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.420826][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.434454][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.451387][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.462017][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.477063][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.499937][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.510832][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.521722][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.533572][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.562987][T19892] veth3: entered promiscuous mode [ 1376.568756][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.589973][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.626271][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.639856][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.677320][T19145] Bluetooth: hci2: command tx timeout [ 1376.683906][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.730527][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.785513][T19871] NILFS (loop4): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1376.826910][T19871] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1376.864978][ T28] audit: type=1800 audit(1750163716.448:40): pid=19871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3976" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1377.019227][T19907] syz.3.3985: attempt to access beyond end of device [ 1377.019227][T19907] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1377.073797][T19907] syz.3.3985: attempt to access beyond end of device [ 1377.073797][T19907] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1377.120170][T19907] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1377.157787][T19907] syz.3.3985: attempt to access beyond end of device [ 1377.157787][T19907] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1377.201506][T19907] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1377.311279][T19907] syz.3.3985: attempt to access beyond end of device [ 1377.311279][T19907] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1377.338223][T19907] syz.3.3985: attempt to access beyond end of device [ 1377.338223][T19907] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1377.383959][T19907] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1377.445753][T19907] syz.3.3985: attempt to access beyond end of device [ 1377.445753][T19907] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1377.461190][T19907] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1377.495787][T19907] syz.3.3985: attempt to access beyond end of device [ 1377.495787][T19907] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1377.528072][T19907] syz.3.3985: attempt to access beyond end of device [ 1377.528072][T19907] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1377.541980][T19907] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1377.554081][T19907] syz.3.3985: attempt to access beyond end of device [ 1377.554081][T19907] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1377.568214][T19907] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1377.618950][T19907] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1378.476794][T19921] loop3: detected capacity change from 0 to 512 [ 1378.534636][T19921] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1378.576811][T19921] EXT4-fs (loop3): 1 truncate cleaned up [ 1378.635074][T19921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1378.839379][T19929] loop7: detected capacity change from 0 to 256 [ 1378.876797][T19929] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1378.887845][T19929] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1379.042164][T19929] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1379.614396][T14441] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.731723][T19927] netlink: 'syz.4.3992': attribute type 1 has an invalid length. [ 1379.872136][T19931] veth3: entered promiscuous mode [ 1380.048718][T19937] loop4: detected capacity change from 0 to 2048 [ 1380.091462][T19937] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1380.112856][T19937] syz.4.3995: attempt to access beyond end of device [ 1380.112856][T19937] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1380.127856][T19939] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1381.478139][T19943] loop3: detected capacity change from 0 to 256 [ 1382.844167][T19965] program syz.3.4000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1383.009152][T19969] netlink: 'syz.4.3999': attribute type 1 has an invalid length. [ 1383.065107][ T1321] hsr_slave_0: left promiscuous mode [ 1383.077049][ T1321] hsr_slave_1: left promiscuous mode [ 1383.095925][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.122753][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.132457][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.140446][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.160458][ T1321] bridge_slave_1: left allmulticast mode [ 1383.166171][ T1321] bridge_slave_1: left promiscuous mode [ 1383.178860][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.195211][ T1321] bridge_slave_0: left allmulticast mode [ 1383.203194][ T1321] bridge_slave_0: left promiscuous mode [ 1383.209944][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.283263][ T1321] veth1_macvtap: left promiscuous mode [ 1383.289163][ T1321] veth0_macvtap: left promiscuous mode [ 1383.294846][ T1321] veth1_vlan: left promiscuous mode [ 1383.300341][ T1321] veth0_vlan: left promiscuous mode [ 1383.473224][ T1321] bond26 (unregistering): (slave veth17): Releasing backup interface [ 1383.493377][ T1321] bond26 (unregistering): Released all slaves [ 1383.510348][ T1321] bond25 (unregistering): Released all slaves [ 1383.525557][ T1321] bond24 (unregistering): Released all slaves [ 1383.543028][ T1321] bond23 (unregistering): Released all slaves [ 1383.564485][ T1321] bond22 (unregistering): Released all slaves [ 1383.609628][ T1321] bond21 (unregistering): Released all slaves [ 1383.624710][ T1321] bond20 (unregistering): Released all slaves [ 1383.676490][ T1321] bond19 (unregistering): (slave veth15): Releasing backup interface [ 1383.700651][ T1321] bond19 (unregistering): Released all slaves [ 1383.722165][ T1321] bond18 (unregistering): Released all slaves [ 1383.741426][ T1321] bond17 (unregistering): Released all slaves [ 1383.945504][ T1321] bond16 (unregistering): Released all slaves [ 1383.962580][ T1321] bond15 (unregistering): Released all slaves [ 1383.979672][ T1321] bond14 (unregistering): Released all slaves [ 1383.994819][ T1321] bond13 (unregistering): Released all slaves [ 1384.021874][ T1321] bond12 (unregistering): Released all slaves [ 1384.064279][ T1321] bond11 (unregistering): (slave veth13): Releasing backup interface [ 1384.089325][ T1321] bond11 (unregistering): Released all slaves [ 1384.265589][ T1321] bond10 (unregistering): Released all slaves [ 1384.439558][ T1321] bond9 (unregistering): Released all slaves [ 1384.474099][ T1321] bond8 (unregistering): (slave veth11): Releasing backup interface [ 1384.655557][ T1321] bond8 (unregistering): Released all slaves [ 1384.835435][ T1321] bond7 (unregistering): Released all slaves [ 1384.880370][ T1321] bond6 (unregistering): (slave veth9): Releasing backup interface [ 1385.066230][ T1321] bond6 (unregistering): Released all slaves [ 1385.257552][ T1321] bond5 (unregistering): Released all slaves [ 1385.442165][ T1321] bond4 (unregistering): Released all slaves [ 1385.465605][ T1321] bond3 (unregistering): Released all slaves [ 1385.505703][ T1321] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1385.680630][ T1321] bond2 (unregistering): Released all slaves [ 1385.721098][ T1321] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1385.920768][ T1321] bond1 (unregistering): Released all slaves [ 1386.598001][ T1321] team0 (unregistering): Port device team_slave_1 removed [ 1386.660791][ T1321] team0 (unregistering): Port device team_slave_0 removed [ 1386.716047][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.773898][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1387.438877][ T1321] bond0 (unregistering): Released all slaves [ 1387.619454][T19969] veth3: entered promiscuous mode [ 1387.771135][T19780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1387.810702][T19780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1388.018609][T19780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1388.080939][T19780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1388.217946][T19989] loop7: detected capacity change from 0 to 2048 [ 1388.270633][T19989] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1388.386015][T19992] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1388.386420][T19989] syz.7.4006: attempt to access beyond end of device [ 1388.386420][T19989] loop7: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1389.226557][T19996] loop4: detected capacity change from 0 to 128 [ 1389.277833][T19999] program syz.3.4010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1389.317569][T19982] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1389.388444][T19780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.686492][T19780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.721978][T18730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.729212][T18730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.827142][T13032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.834401][T13032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.850553][T20005] loop4: detected capacity change from 0 to 64 [ 1390.274834][T20018] netlink: 'syz.7.4014': attribute type 1 has an invalid length. [ 1390.416352][T20018] veth3: entered promiscuous mode [ 1390.911018][T20034] loop3: detected capacity change from 0 to 128 [ 1390.939885][T19780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.948665][T20034] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1391.026204][T20034] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1391.129172][T20039] loop4: detected capacity change from 0 to 2048 [ 1391.168084][T20039] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1391.326035][T20041] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1391.326492][T20039] syz.4.4019: attempt to access beyond end of device [ 1391.326492][T20039] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1391.639148][T19145] Bluetooth: hci1: command tx timeout [ 1392.524740][T20047] loop7: detected capacity change from 0 to 40427 [ 1392.543845][T20047] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff [ 1392.552384][T20047] F2FS-fs (loop7): Image doesn't support compression [ 1392.559275][T20047] F2FS-fs (loop7): Image doesn't support compression [ 1392.572612][T20047] F2FS-fs (loop7): invalid crc value [ 1392.604512][T20047] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1392.669505][T20047] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1392.777095][ T28] audit: type=1800 audit(1750163732.358:41): pid=20047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4020" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 1392.819749][T20047] syz.7.4020: attempt to access beyond end of device [ 1392.819749][T20047] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1392.838229][T20047] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1393.054911][T19780] veth0_vlan: entered promiscuous mode [ 1393.122269][T19780] veth1_vlan: entered promiscuous mode [ 1394.116707][T19780] veth0_macvtap: entered promiscuous mode [ 1394.170557][T19780] veth1_macvtap: entered promiscuous mode [ 1394.303261][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.377449][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.416991][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.437245][T20063] loop4: detected capacity change from 0 to 40427 [ 1394.447311][T20063] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1394.457581][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.467833][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.478677][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.488650][T20063] F2FS-fs (loop4): invalid crc value [ 1394.498729][T19780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.519688][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.531785][T20063] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1394.587345][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.601775][T20063] F2FS-fs (loop4): Start checkpoint disabled! [ 1394.618547][T20063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1394.627834][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.657535][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.707691][T19780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.725831][T20063] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x161f/0x3c00 [ 1394.741639][T19780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.782479][T19780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1394.799468][ T1321] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1394.825429][T19780] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.885816][T19780] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.934257][T19780] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.957777][T19780] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.047042][T20073] loop3: detected capacity change from 0 to 128 [ 1395.232325][T19979] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1395.313278][ T48] kworker/u4:3: attempt to access beyond end of device [ 1395.313278][ T48] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1395.343714][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.412583][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.421085][ T48] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1395.443240][ T48] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1395.484602][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.522899][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.653402][T20082] loop3: detected capacity change from 0 to 64 [ 1396.258765][T20093] syz_tun: entered allmulticast mode [ 1396.302515][T20090] syz_tun: left allmulticast mode [ 1396.598693][T20098] loop5: detected capacity change from 0 to 2048 [ 1396.608164][T20098] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1396.624608][T20100] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1396.625030][T20098] syz.5.4029: attempt to access beyond end of device [ 1396.625030][T20098] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1396.691986][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.702346][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.714874][T20098] Remounting filesystem read-only [ 1396.720712][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.734791][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.746408][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.756754][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.766990][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.778950][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.791727][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.802122][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.812516][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.823015][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.833875][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.844426][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.855585][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.865989][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.883000][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.893428][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.904342][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.914697][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.927243][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.937759][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.966845][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1396.979351][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1396.991990][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1397.002408][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1397.013432][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1397.023937][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1397.034804][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1397.045252][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1397.055351][T20098] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1397.065798][T20098] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1397.075735][ T28] audit: type=1800 audit(1750163736.658:42): pid=20098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4029" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1397.353612][T20110] sctp: [Deprecated]: syz.4.4032 (pid 20110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1397.353612][T20110] Use struct sctp_sack_info instead [ 1399.330150][T20150] program syz.5.4044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1399.748341][T20138] loop4: detected capacity change from 0 to 40427 [ 1399.784165][T20138] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1399.936031][T20138] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1400.193055][ T28] audit: type=1804 audit(1750163739.748:43): pid=20138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4039" name="/newroot/30/file2/file1" dev="loop4" ino=10 res=1 errno=0 [ 1400.344592][T19143] syz-executor: attempt to access beyond end of device [ 1400.344592][T19143] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1400.417501][T19143] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1400.781819][T20186] netlink: 'syz.3.4055': attribute type 1 has an invalid length. [ 1400.795273][T20188] program syz.5.4054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1400.882200][T20186] veth15: entered promiscuous mode [ 1400.901937][T20186] bond16: (slave veth15): Enslaving as a backup interface with a down link [ 1403.042794][T20225] netlink: 'syz.3.4064': attribute type 1 has an invalid length. [ 1403.071850][T20226] program syz.5.4065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1403.136433][T20225] veth17: entered promiscuous mode [ 1403.146055][T20225] bond17: (slave veth17): Enslaving as a backup interface with a down link [ 1403.960712][T20206] loop7: detected capacity change from 0 to 40427 [ 1403.978293][T20248] loop5: detected capacity change from 0 to 256 [ 1404.036145][T20248] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1404.048791][T20248] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1404.223232][T20206] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff [ 1404.447776][T20248] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1404.670555][T20206] F2FS-fs (loop7): invalid crc value [ 1404.760202][T20206] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 1405.296847][T20267] program syz.4.4077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1405.914145][T20274] loop5: detected capacity change from 0 to 40427 [ 1405.947781][T20274] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 1405.956301][T20274] F2FS-fs (loop5): Image doesn't support compression [ 1405.963228][T20274] F2FS-fs (loop5): Image doesn't support compression [ 1405.982046][T20274] F2FS-fs (loop5): invalid crc value [ 1406.021264][T20274] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1406.078688][T20274] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1406.098692][ T28] audit: type=1800 audit(1750163745.688:44): pid=20274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4080" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 1406.119238][ C0] vkms_vblank_simulate: vblank timer overrun [ 1406.135498][T20274] syz.5.4080: attempt to access beyond end of device [ 1406.135498][T20274] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1406.152443][T20274] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1406.444178][T20291] loop4: detected capacity change from 0 to 256 [ 1406.579915][T20291] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1406.590800][T20291] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1406.744795][T20291] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1407.973650][T20288] loop3: detected capacity change from 0 to 40427 [ 1408.168377][T20288] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 1408.610813][T20288] F2FS-fs (loop3): invalid crc value [ 1408.716435][T20288] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1408.973174][T20288] F2FS-fs (loop3): Start checkpoint disabled! [ 1409.013733][T20319] ptrace attach of "./syz-executor exec"[19143] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  GPL  ‹  €   À   ÿÿÿÿ   ” … m • [ 1409.033801][T20288] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1409.125096][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.204024][T20288] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x161f/0x3c00 [ 1409.644069][T20326] syzkaller0: entered promiscuous mode [ 1409.649761][T20326] syzkaller0: entered allmulticast mode [ 1409.697676][T13032] kworker/u4:17: attempt to access beyond end of device [ 1409.697676][T13032] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1409.732799][T13032] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1409.759366][T13032] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1411.169275][T20353] loop5: detected capacity change from 0 to 128 [ 1411.227292][T19979] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1412.391904][T20368] loop5: detected capacity change from 0 to 64 [ 1413.403550][T20371] loop3: detected capacity change from 0 to 40427 [ 1413.419251][T20371] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 1413.458418][T20371] F2FS-fs (loop3): invalid crc value [ 1413.496073][T20371] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1413.600752][T20371] F2FS-fs (loop3): Start checkpoint disabled! [ 1413.609391][T20371] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1413.699917][T20371] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 1413.798577][T19145] Bluetooth: hci2: command tx timeout [ 1413.948287][ T48] kworker/u4:3: attempt to access beyond end of device [ 1413.948287][ T48] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1413.963783][ T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1413.974319][ T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1414.952439][T20386] loop3: detected capacity change from 0 to 40427 [ 1414.963188][T20386] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 1414.971698][T20386] F2FS-fs (loop3): Image doesn't support compression [ 1414.978566][T20386] F2FS-fs (loop3): Image doesn't support compression [ 1414.988475][T20386] F2FS-fs (loop3): invalid crc value [ 1415.034103][T20386] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1415.123243][T20386] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1415.161597][ T28] audit: type=1800 audit(1750163754.758:45): pid=20386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4109" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1415.251581][T14441] syz-executor: attempt to access beyond end of device [ 1415.251581][T14441] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1415.267657][T14441] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1416.250238][T20400] loop3: detected capacity change from 0 to 256 [ 1416.262780][T20400] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1416.273639][T20400] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1416.386002][T20400] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1417.595577][T20411] syz.7.4118: attempt to access beyond end of device [ 1417.595577][T20411] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1417.625523][T20411] syz.7.4118: attempt to access beyond end of device [ 1417.625523][T20411] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1417.694011][T20411] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1417.791754][T20411] syz.7.4118: attempt to access beyond end of device [ 1417.791754][T20411] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1417.836830][T20411] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1417.859408][T20411] syz.7.4118: attempt to access beyond end of device [ 1417.859408][T20411] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1417.910872][T20411] syz.7.4118: attempt to access beyond end of device [ 1417.910872][T20411] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1417.956805][T20411] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1418.011858][T20411] syz.7.4118: attempt to access beyond end of device [ 1418.011858][T20411] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1418.030089][T20411] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1418.061365][T20411] syz.7.4118: attempt to access beyond end of device [ 1418.061365][T20411] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1418.101456][T20411] syz.7.4118: attempt to access beyond end of device [ 1418.101456][T20411] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1418.119965][T20411] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1418.138739][T20411] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1418.152733][T20411] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1418.197469][T20411] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1418.207051][T20411] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1418.230036][T20429] loop5: detected capacity change from 0 to 16 [ 1418.275143][T20429] erofs: (device loop5): mounted with root inode @ nid 36. [ 1418.335719][T20429] erofs: (device loop5): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1418.364190][T20402] loop3: detected capacity change from 0 to 40427 [ 1418.386735][T20402] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 1418.388588][T20429] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1418.430229][T20402] F2FS-fs (loop3): invalid crc value [ 1418.457655][T20429] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1418.484725][T20402] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1418.736388][T20402] F2FS-fs (loop3): Start checkpoint disabled! [ 1418.762593][T20402] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1418.815622][T20402] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 1419.233320][ T9031] bio_check_eod: 5 callbacks suppressed [ 1419.233338][ T9031] kworker/u4:14: attempt to access beyond end of device [ 1419.233338][ T9031] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1419.410070][ T9031] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1419.417061][ T9031] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1419.656612][T20467] loop5: detected capacity change from 0 to 256 [ 1420.461180][T20467] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1420.471984][T20467] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1420.581272][T20467] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1421.010882][T20470] ptrace attach of "./syz-executor exec"[19471] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  GPL  ‹  €   À   ÿÿÿÿ   ” … m • [ 1421.893163][T20484] loop7: detected capacity change from 0 to 128 [ 1421.984472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1422.106071][T19982] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1422.158340][ T786] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1422.380645][ T786] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1422.417291][ T786] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1422.448177][ T786] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1422.477282][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.496609][ T786] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1423.514467][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.521730][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.883857][ T786] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input11 [ 1423.930217][T20510] loop7: detected capacity change from 0 to 64 [ 1423.937760][T20488] loop4: detected capacity change from 0 to 40427 [ 1424.014915][ T786] input: failed to attach handler kbd to device input11, error: -5 [ 1424.028023][T20488] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1424.120902][T20488] F2FS-fs (loop4): invalid crc value [ 1424.152579][T20488] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1424.171171][ T786] usb 4-1: USB disconnect, device number 52 [ 1424.374840][T20517] ptrace attach of "./syz-executor exec"[19780] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  GPL  ‹  €   À   ÿÿÿÿ   ” … m • [ 1424.401723][T20488] F2FS-fs (loop4): Start checkpoint disabled! [ 1424.492859][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.625279][T20488] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1424.779697][T20488] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 1425.167365][T19145] Bluetooth: hci4: command tx timeout [ 1425.418174][ T48] kworker/u4:3: attempt to access beyond end of device [ 1425.418174][ T48] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1425.453565][ T48] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1425.467318][ T48] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1427.260274][T20554] loop3: detected capacity change from 0 to 2048 [ 1427.319895][T20554] loop3: p1 < > p4 [ 1427.334422][T20554] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1427.526138][T20568] loop5: detected capacity change from 0 to 256 [ 1427.542588][T20568] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1427.553346][T20568] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1427.776445][T20568] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1428.398296][T14441] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1428.405550][T19982] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1428.415838][T19979] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1428.487439][T19982] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1428.496967][T19979] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1428.551535][T19982] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 1428.560226][T19979] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 1428.619854][T19979] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1428.687468][T19979] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 1428.766309][T19979] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1428.850736][T19979] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 1429.151175][T19979] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1429.160551][T19979] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 1429.359619][T19979] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1429.551455][T19979] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 1430.093279][T20596] loop4: detected capacity change from 0 to 128 [ 1430.102764][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1430.138984][T19982] udevd[19982]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1430.230804][ T28] audit: type=1800 audit(1750163769.798:46): pid=20596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4169" name="file1" dev="loop4" ino=1048684 res=0 errno=0 [ 1430.283631][T18722] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 1430.325025][T18722] FAT-fs (loop4): Filesystem has been set read-only [ 1430.346221][T20600] loop5: detected capacity change from 0 to 2048 [ 1430.355785][T18722] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 1430.436404][T20600] loop5: p1 < > p4 [ 1430.469634][T20600] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1430.685811][T10814] Bluetooth: hci1: command 0x0406 tx timeout [ 1431.623239][T20614] udevd[20614]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1431.636728][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1431.848159][ T786] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1432.250171][ T786] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1432.424416][ T786] usb 5-1: config 0 has no interface number 0 [ 1432.478145][ T786] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1432.538346][ T786] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1432.581955][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.591658][ T786] usb 5-1: Product: syz [ 1432.595875][ T786] usb 5-1: Manufacturer: syz [ 1432.604471][ T786] usb 5-1: SerialNumber: syz [ 1432.644588][ T786] usb 5-1: config 0 descriptor?? [ 1432.650378][T20629] syz.7.4180: attempt to access beyond end of device [ 1432.650378][T20629] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1432.697587][T20629] syz.7.4180: attempt to access beyond end of device [ 1432.697587][T20629] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1432.749518][T20629] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1432.808335][T20629] syz.7.4180: attempt to access beyond end of device [ 1432.808335][T20629] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1432.873185][T20629] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1432.918227][T20629] syz.7.4180: attempt to access beyond end of device [ 1432.918227][T20629] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1432.953580][T20629] syz.7.4180: attempt to access beyond end of device [ 1432.953580][T20629] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1432.987325][T20629] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1433.034303][T20629] syz.7.4180: attempt to access beyond end of device [ 1433.034303][T20629] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1433.172194][T20629] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1433.330815][T20629] syz.7.4180: attempt to access beyond end of device [ 1433.330815][T20629] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1433.497118][T20629] syz.7.4180: attempt to access beyond end of device [ 1433.497118][T20629] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1433.747867][T20629] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1433.848547][ T786] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1433.862722][T20629] syz.7.4180: attempt to access beyond end of device [ 1433.862722][T20629] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1433.879921][ T786] CoreChips: probe of 5-1:0.41 failed with error -71 [ 1433.897555][ T786] usb 5-1: USB disconnect, device number 14 [ 1433.928789][T20629] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1433.959410][T20647] loop5: detected capacity change from 0 to 2048 [ 1433.996259][T20629] syz.7.4180: attempt to access beyond end of device [ 1433.996259][T20629] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1434.046115][T20647] loop5: p1 < > p4 [ 1434.049699][T20629] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1434.073525][T20629] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1434.088728][T20647] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1434.112503][T20629] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1434.858158][T20671] loop5: detected capacity change from 0 to 64 [ 1434.876320][ T786] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1435.324796][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1435.340950][T19982] udevd[19982]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1435.397382][ T786] usb 5-1: Using ep0 maxpacket: 8 [ 1435.427605][ T786] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1435.502295][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.565323][ T786] usb 5-1: Product: syz [ 1435.593025][ T786] usb 5-1: Manufacturer: syz [ 1435.633409][ T786] usb 5-1: SerialNumber: syz [ 1435.849901][ T786] usb 5-1: config 0 descriptor?? [ 1436.193385][ T786] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1436.373474][ T786] usb 5-1: setting power ON [ 1436.416658][ T786] dvb-usb: bulk message failed: -22 (2/0) [ 1436.493466][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1436.579005][ T786] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1436.620942][ T786] usb 5-1: media controller created [ 1436.676463][T20685] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1436.705854][T20685] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1436.723831][T20685] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1436.733000][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1436.750764][T20685] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1436.767341][T19145] Bluetooth: hci2: command tx timeout [ 1436.799086][ T786] usb 5-1: selecting invalid altsetting 6 [ 1436.805539][ T786] usb 5-1: digital interface selection failed (-22) [ 1436.814089][ T786] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1436.823363][T20685] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1436.826095][ T786] usb 5-1: setting power OFF [ 1436.846948][T20688] loop3: detected capacity change from 0 to 2048 [ 1436.853791][ T786] dvb-usb: bulk message failed: -22 (2/0) [ 1436.862458][ T786] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1436.872409][T20685] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1436.901374][ T786] (NULL device *): no alternate interface [ 1436.912109][T20688] loop3: p1 < > p4 [ 1436.938298][T20685] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1436.961903][T20688] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1437.016731][T20685] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1437.070845][T20685] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1437.083453][ T786] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1437.173810][ T786] usb 5-1: USB disconnect, device number 15 [ 1437.331111][T20701] loop7: detected capacity change from 0 to 128 [ 1437.360035][T20704] loop3: detected capacity change from 0 to 128 [ 1437.368845][T20701] EXT4-fs: Ignoring removed oldalloc option [ 1437.447053][T20708] netlink: 'syz.5.4205': attribute type 1 has an invalid length. [ 1437.622114][T20701] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1437.636266][T20713] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4205'. [ 1437.835500][T20718] loop3: detected capacity change from 0 to 64 [ 1437.933114][T20701] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1438.404684][ T28] audit: type=1804 audit(1750163777.988:47): pid=20719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4203" name="/newroot/64/file1/file0" dev="loop7" ino=12 res=1 errno=0 [ 1438.452866][T20708] veth3: entered promiscuous mode [ 1438.490605][T20708] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1438.650900][T20724] loop4: detected capacity change from 0 to 256 [ 1438.694988][T20724] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1438.705876][T20724] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1438.889073][T20724] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1439.209924][T19471] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1439.839250][T20735] loop5: detected capacity change from 0 to 2048 [ 1439.868163][T20738] bio_check_eod: 14 callbacks suppressed [ 1439.868182][T20738] syz.3.4213: attempt to access beyond end of device [ 1439.868182][T20738] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1439.927958][T20738] syz.3.4213: attempt to access beyond end of device [ 1439.927958][T20738] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1439.947574][T20735] loop5: p1 < > p4 [ 1439.955512][T20735] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1440.020170][T20738] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1440.079796][T20738] syz.3.4213: attempt to access beyond end of device [ 1440.079796][T20738] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1440.157335][T20738] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1440.207149][T20738] syz.3.4213: attempt to access beyond end of device [ 1440.207149][T20738] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1440.279763][T20738] syz.3.4213: attempt to access beyond end of device [ 1440.279763][T20738] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1440.317890][T20747] loop7: detected capacity change from 0 to 512 [ 1440.334916][T20751] loop5: detected capacity change from 0 to 16 [ 1440.341893][T20747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1440.351888][T20738] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1440.373127][T20747] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1440.386101][T20751] erofs: (device loop5): mounted with root inode @ nid 36. [ 1440.413941][T20738] syz.3.4213: attempt to access beyond end of device [ 1440.413941][T20738] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1440.477674][T20747] EXT4-fs (loop7): 1 truncate cleaned up [ 1440.485442][T20738] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1440.529134][T20747] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1440.543117][T20738] syz.3.4213: attempt to access beyond end of device [ 1440.543117][T20738] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1440.576649][T20738] syz.3.4213: attempt to access beyond end of device [ 1440.576649][T20738] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1440.641886][T20738] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1440.650662][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1440.709853][T20738] syz.3.4213: attempt to access beyond end of device [ 1440.709853][T20738] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1440.766632][T20738] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1440.786388][T20738] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1440.912899][T20762] loop4: detected capacity change from 0 to 256 [ 1440.922184][T20762] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1440.933056][T20762] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1440.947001][T20762] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1441.163298][T19471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.509265][T20780] loop5: detected capacity change from 0 to 16 [ 1441.536337][T20780] erofs: (device loop5): mounted with root inode @ nid 36. [ 1441.550132][T20779] loop4: detected capacity change from 0 to 2048 [ 1441.657591][T20779] loop4: p1 < > p4 [ 1441.672080][T20779] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1441.680123][T20783] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1441.797566][ T23] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1442.027541][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1442.043430][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.069522][T20790] loop7: detected capacity change from 0 to 256 [ 1442.081182][T20790] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1442.091951][T20790] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1442.115956][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1442.129546][T20790] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1442.154658][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1442.175851][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1442.202811][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1442.219241][ T23] usb 4-1: SerialNumber: syz [ 1442.307067][T20778] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1442.358790][ T23] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1442.428775][T20794] loop5: detected capacity change from 0 to 4096 [ 1442.592805][ T23] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1442.625763][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1442.659312][T20699] udevd[20699]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1442.700937][T20794] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1442.710244][ T23] usb 4-1: USB disconnect, device number 53 [ 1443.390164][T20821] loop3: detected capacity change from 0 to 16 [ 1443.416299][T20824] loop4: detected capacity change from 0 to 2048 [ 1443.439338][T20821] erofs: (device loop3): mounted with root inode @ nid 36. [ 1443.491977][T20824] loop4: p1 < > p4 [ 1443.508650][T20824] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1443.720925][T19145] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1443.731506][T19145] Bluetooth: hci4: Injecting HCI hardware error event [ 1443.742393][T10814] Bluetooth: hci4: hardware error 0x00 [ 1443.885450][T20833] loop5: detected capacity change from 0 to 8192 [ 1443.974249][T20834] loop3: detected capacity change from 0 to 256 [ 1443.989394][T20834] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1444.000096][T20834] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1444.037839][T20834] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1444.099373][T20833] syz.5.4243: attempt to access beyond end of device [ 1444.099373][T20833] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1444.127287][T20833] Buffer I/O error on dev loop5, logical block 57847, async page read [ 1444.155926][T20840] loop4: detected capacity change from 0 to 128 [ 1444.196672][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1444.207853][T20833] Buffer I/O error on dev loop5, logical block 57847, async page read [ 1444.266472][ T28] audit: type=1800 audit(1750163783.818:48): pid=20833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4243" name="file2" dev="loop5" ino=1048691 res=0 errno=0 [ 1444.807574][T19981] udevd[19981]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1445.596718][T20843] loop7: detected capacity change from 0 to 2048 [ 1445.682180][T20843] NILFS (loop7): error -116 while loading last checkpoint (checkpoint number=2) [ 1445.877596][T10814] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1446.334959][T19982] udevd[19982]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1446.415574][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1446.627407][T10814] Bluetooth: hci1: command 0x0406 tx timeout [ 1446.949349][T20872] loop5: detected capacity change from 0 to 2048 [ 1447.127726][T20872] loop5: p1 < > p4 [ 1447.143875][T20872] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1447.172930][T20880] loop4: detected capacity change from 0 to 128 [ 1447.251681][T20882] loop7: detected capacity change from 0 to 256 [ 1447.269206][T20882] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1447.279990][T20882] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1447.307702][T20882] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1447.636255][T20888] loop4: detected capacity change from 0 to 64 [ 1448.353914][T20614] udevd[20614]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1448.354166][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1448.889079][T20907] loop4: detected capacity change from 0 to 2048 [ 1448.954962][T20907] loop4: p1 < > p4 [ 1448.967699][T20907] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1449.052376][T20910] loop3: detected capacity change from 0 to 256 [ 1449.070201][T20910] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1449.092851][T20910] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1449.156680][T20910] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1449.557399][T10814] Bluetooth: hci1: command 0x0406 tx timeout [ 1449.778551][T20928] loop3: detected capacity change from 0 to 256 [ 1449.803099][T20928] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1449.829641][T20928] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1449.860539][T20928] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1449.873723][T20930] loop5: detected capacity change from 0 to 2048 [ 1449.947650][T20930] loop5: p1 < > p4 [ 1449.967557][T20930] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1450.348997][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1450.475499][T20926] loop4: detected capacity change from 0 to 40427 [ 1450.508890][T20926] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1450.519173][T20926] F2FS-fs (loop4): Image doesn't support compression [ 1450.526201][T20926] F2FS-fs (loop4): Image doesn't support compression [ 1450.533533][ T23] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1450.563693][T20926] F2FS-fs (loop4): invalid crc value [ 1450.612639][T20926] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1450.722011][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1450.745993][T20926] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1450.762579][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.797479][ T23] usb 6-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 1450.813094][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.832960][ T23] usb 6-1: config 0 descriptor?? [ 1450.899334][T19143] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 1450.912458][T19143] F2FS-fs (loop4): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 1451.075861][T20951] loop3: detected capacity change from 0 to 256 [ 1451.087839][T20951] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1451.105030][T20951] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1451.165428][T20951] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1451.264867][ T23] thrustmaster 0003:044F:B324.0006: item fetching failed at offset 4/5 [ 1451.298380][ T23] thrustmaster 0003:044F:B324.0006: parse failed [ 1451.319622][ T23] thrustmaster: probe of 0003:044F:B324.0006 failed with error -22 [ 1451.416571][T20955] loop3: detected capacity change from 0 to 2048 [ 1451.460387][T20955] loop3: p1 < > p4 [ 1451.490308][T20955] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1451.891934][T20800] udevd[20800]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1451.907411][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1452.088854][T20971] loop3: detected capacity change from 0 to 256 [ 1452.127998][T20971] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1452.168010][T20971] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1452.204336][T20971] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1452.253644][ T5839] usb 6-1: USB disconnect, device number 8 [ 1452.507500][ T23] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1452.627834][T20967] loop7: detected capacity change from 0 to 40427 [ 1452.650326][T20967] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff [ 1452.654706][T20980] loop3: detected capacity change from 0 to 2048 [ 1452.670299][T20967] F2FS-fs (loop7): Image doesn't support compression [ 1452.678408][T20967] F2FS-fs (loop7): Image doesn't support compression [ 1452.689482][T20967] F2FS-fs (loop7): invalid crc value [ 1452.699771][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1452.707799][ T23] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1452.714641][T20967] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1452.716492][ T23] usb 5-1: config 0 has no interface number 0 [ 1452.730137][ T23] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1452.740714][T20980] loop3: p1 < > p4 [ 1452.746657][T20980] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1452.774315][ T23] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1452.832483][ T23] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1452.856728][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.907661][ T23] usb 5-1: Product: syz [ 1452.928408][ T23] usb 5-1: Manufacturer: syz [ 1452.929493][T20967] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1452.933053][ T23] usb 5-1: SerialNumber: syz [ 1452.967370][ T23] usb 5-1: config 0 descriptor?? [ 1452.973267][T20974] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1452.982132][T20974] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1453.163919][T19471] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 1453.176349][T20614] udevd[20614]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1453.197088][T19982] udevd[19982]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1453.210827][T19471] F2FS-fs (loop7): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 1453.234197][T20974] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1453.247532][T20974] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1453.643987][T16715] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1453.678387][ T23] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1453.705676][ T23] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1453.719586][ T23] asix: probe of 5-1:0.251 failed with error -71 [ 1453.730847][ T23] usb 5-1: USB disconnect, device number 16 [ 1453.777262][ T786] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1453.792782][T20996] loop7: detected capacity change from 0 to 256 [ 1453.885529][T16715] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1454.020205][T16715] usb 4-1: config 0 has no interface number 0 [ 1454.036667][T16715] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1454.046333][ T786] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1454.062617][ T786] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1454.073208][ T786] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1454.083199][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.095390][T16715] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1454.106238][T16715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.114780][T16715] usb 4-1: Product: syz [ 1454.123615][T16715] usb 4-1: Manufacturer: syz [ 1454.128673][T16715] usb 4-1: SerialNumber: syz [ 1454.148829][T16715] usb 4-1: config 0 descriptor?? [ 1454.371762][T16715] CoreChips: probe of 4-1:0.41 failed with error -71 [ 1454.410081][T16715] usb 4-1: USB disconnect, device number 54 [ 1454.436109][T21002] loop7: detected capacity change from 0 to 2048 [ 1454.520969][T21002] loop7: p1 < > p4 [ 1454.531890][T21002] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1454.808480][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1454.820907][T20800] udevd[20800]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1454.938280][ T786] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1455.015536][T21009] loop7: detected capacity change from 0 to 256 [ 1455.056105][T21009] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1455.067130][T21009] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1455.249599][T21009] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1455.919305][ T786] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input12 [ 1456.035235][ T786] input: failed to attach handler kbd to device input12, error: -5 [ 1456.174636][T21015] loop5: detected capacity change from 0 to 256 [ 1456.187361][ T786] usb 6-1: USB disconnect, device number 9 [ 1456.198975][T21004] loop4: detected capacity change from 0 to 40427 [ 1456.261405][T21004] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1456.340426][T21004] F2FS-fs (loop4): Image doesn't support compression [ 1456.396034][T21004] F2FS-fs (loop4): Image doesn't support compression [ 1456.459228][T21004] F2FS-fs (loop4): invalid crc value [ 1456.475454][T21004] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1456.667033][T21028] loop7: detected capacity change from 0 to 2048 [ 1456.686114][T21004] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1456.730696][T21028] loop7: p1 < > p4 [ 1456.753054][T21028] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1456.887892][T19143] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 1456.911443][T19143] F2FS-fs (loop4): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 1456.925771][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1456.931575][T20800] udevd[20800]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1456.951105][T21034] loop3: detected capacity change from 0 to 128 [ 1457.036298][T20800] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1457.323736][T21039] netlink: 'syz.7.4326': attribute type 1 has an invalid length. [ 1457.516813][T21042] loop3: detected capacity change from 0 to 64 [ 1458.076008][T21043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1458.391716][T21051] loop5: detected capacity change from 0 to 256 [ 1459.086689][T21060] loop4: detected capacity change from 0 to 2048 [ 1459.127109][T21060] loop4: p1 < > p4 [ 1459.182085][T21060] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1459.466628][T21067] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1459.511613][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1459.540971][T20800] udevd[20800]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1459.702380][T21073] netlink: 'syz.5.4338': attribute type 1 has an invalid length. [ 1459.779293][T21057] loop3: detected capacity change from 0 to 40427 [ 1459.789326][T21075] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1459.817394][T21057] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 1459.825878][T21057] F2FS-fs (loop3): Image doesn't support compression [ 1459.833147][T21057] F2FS-fs (loop3): Image doesn't support compression [ 1459.844277][T21057] F2FS-fs (loop3): invalid crc value [ 1459.864365][T11043] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1459.887776][T21073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1459.911632][T21057] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1460.028678][ T48] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1460.089609][T21057] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1460.145519][ T28] audit: type=1800 audit(1750163799.728:49): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4331" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1460.166035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.182487][T14441] bio_check_eod: 1 callbacks suppressed [ 1460.182504][T14441] syz-executor: attempt to access beyond end of device [ 1460.182504][T14441] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1460.247519][T14441] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1460.329048][T21082] loop5: detected capacity change from 0 to 8192 [ 1460.408714][T21082] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1460.439594][ T28] audit: type=1800 audit(1750163800.028:50): pid=21082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4340" name="bus" dev="loop5" ino=1048710 res=0 errno=0 [ 1460.536029][T21088] loop7: detected capacity change from 0 to 2048 [ 1460.620580][T21088] loop7: p1 < > p4 [ 1460.647971][T21088] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1461.062594][T21093] loop4: detected capacity change from 0 to 2048 [ 1461.180052][T21093] NILFS (loop4): error -116 while loading last checkpoint (checkpoint number=2) [ 1462.047672][ T5759] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1462.237550][ T5759] usb 5-1: Using ep0 maxpacket: 8 [ 1462.251775][ T5759] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1462.265525][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.278731][ T5759] usb 5-1: Product: syz [ 1462.291323][ T5759] usb 5-1: Manufacturer: syz [ 1462.295993][ T5759] usb 5-1: SerialNumber: syz [ 1462.310720][ T5759] usb 5-1: config 0 descriptor?? [ 1462.320498][ T5759] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1462.328917][ T5759] usb 5-1: setting power ON [ 1462.334021][ T5759] dvb-usb: bulk message failed: -22 (2/0) [ 1462.348575][ T5759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1462.368240][ T5759] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1462.376782][ T5759] usb 5-1: media controller created [ 1462.387869][ T9854] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1462.415217][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1462.456382][ T5759] usb 5-1: selecting invalid altsetting 6 [ 1462.466516][ T5759] usb 5-1: digital interface selection failed (-22) [ 1462.476483][ T5759] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1462.486627][ T5759] usb 5-1: setting power OFF [ 1462.494495][ T5759] dvb-usb: bulk message failed: -22 (2/0) [ 1462.500762][ T5759] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1462.505012][T21113] loop3: detected capacity change from 0 to 2048 [ 1462.511168][ T5759] (NULL device *): no alternate interface [ 1462.559801][ T5759] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1462.572982][T21113] loop3: p1 < > p4 [ 1462.586242][T21113] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1462.596597][ T5759] usb 5-1: USB disconnect, device number 17 [ 1462.603904][ T9854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1462.649290][ T9854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.663997][ T5140] loop3: p1 < > p4 [ 1462.667291][ T9854] usb 6-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 1462.675036][ T5140] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1462.693141][ T9854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.720005][ T9854] usb 6-1: config 0 descriptor?? [ 1463.031629][T21116] loop3: detected capacity change from 0 to 2048 [ 1463.203998][T21116] NILFS (loop3): error -116 while loading last checkpoint (checkpoint number=2) [ 1463.381214][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1463.428551][T20800] udevd[20800]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1463.447138][ T9854] thrustmaster 0003:044F:B324.0007: item fetching failed at offset 4/5 [ 1463.596310][ T9854] thrustmaster 0003:044F:B324.0007: parse failed [ 1463.711228][ T9854] thrustmaster: probe of 0003:044F:B324.0007 failed with error -22 [ 1463.783023][T20800] udevd[20800]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1463.819923][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1464.176856][ T5759] usb 6-1: USB disconnect, device number 10 [ 1464.247627][ T5839] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1464.457630][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 1464.536973][ T5839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.584738][ T5839] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1464.647120][ T5839] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1464.692199][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.748833][ T5839] usb 5-1: Product: syz [ 1464.868160][ T5839] usb 5-1: Manufacturer: syz [ 1464.872871][ T5839] usb 5-1: SerialNumber: syz [ 1464.905635][ T5839] usb 5-1: config 0 descriptor?? [ 1465.384979][T21136] loop7: detected capacity change from 0 to 256 [ 1467.763057][T21134] binder: 21133:21134 ioctl c0306201 200000000540 returned -14 [ 1467.830174][T21135] loop3: detected capacity change from 0 to 2048 [ 1467.900905][T21136] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1467.929923][T21135] loop3: p1 < > p4 [ 1467.937787][ T5838] usb 5-1: USB disconnect, device number 18 [ 1467.958843][T21136] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1467.973461][T21135] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1468.005572][T21136] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1468.055643][T21140] loop5: detected capacity change from 0 to 128 [ 1468.643009][T21148] loop5: detected capacity change from 0 to 64 [ 1470.293724][T21142] loop4: detected capacity change from 0 to 2048 [ 1470.346245][ T5839] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1470.588197][T21142] NILFS (loop4): error -116 while loading last checkpoint (checkpoint number=2) [ 1470.607308][T10814] Bluetooth: hci2: command tx timeout [ 1471.212233][T19982] udevd[19982]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1471.243813][T20800] udevd[20800]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1472.049667][T19982] udevd[19982]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1472.060652][T20800] udevd[20800]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1472.137479][ T5839] usb 4-1: device descriptor read/all, error -71 [ 1472.353446][T21165] binder: 21164:21165 ioctl c0306201 200000000540 returned -14 [ 1472.519378][T21170] loop3: detected capacity change from 0 to 2048 [ 1472.585691][T21170] loop3: p1 < > p4 [ 1472.658706][T21170] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1472.718218][T21177] loop7: detected capacity change from 0 to 2048 [ 1472.781167][T21177] NILFS (loop7): error -116 while loading last checkpoint (checkpoint number=2) [ 1473.269453][ T23] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1473.547271][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 1473.555222][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.604659][ T23] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1473.646755][ T23] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1473.708250][ T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1473.732634][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1473.747508][ T23] usb 6-1: SerialNumber: syz [ 1473.762507][T21180] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1473.812386][ T23] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1473.854871][T19982] udevd[19982]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1473.872441][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1473.997513][ T9967] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1474.018732][ T23] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1474.036917][ T23] usb 6-1: USB disconnect, device number 11 [ 1474.047461][ T9854] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1474.199795][ T9967] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1474.214006][ T9967] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1474.227299][ T9967] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1474.230042][ T9854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1474.236370][ T9967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.267322][ T9854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.280548][ T9854] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 1474.299410][ T9854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.318000][ T9854] usb 4-1: config 0 descriptor?? [ 1474.777786][T21203] loop7: detected capacity change from 0 to 2048 [ 1474.789748][ T9854] thrustmaster 0003:044F:B324.0008: item fetching failed at offset 4/5 [ 1474.900408][T21203] NILFS (loop7): error -116 while loading last checkpoint (checkpoint number=2) [ 1475.144413][ T9967] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1475.307466][ T23] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1475.370554][ T9967] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input13 [ 1475.488620][ T9854] thrustmaster 0003:044F:B324.0008: parse failed [ 1475.495099][ T9854] thrustmaster: probe of 0003:044F:B324.0008 failed with error -22 [ 1475.587416][ T9967] input: failed to attach handler kbd to device input13, error: -5 [ 1475.638010][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 1475.638931][T21208] loop7: detected capacity change from 0 to 2048 [ 1475.668206][ T23] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1475.689361][ T9967] usb 5-1: USB disconnect, device number 19 [ 1475.697334][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.720814][T21208] loop7: p1 < > p4 [ 1475.730698][ T23] usb 6-1: config 0 has no interface number 0 [ 1475.736866][ T23] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1475.739223][T21208] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1475.778980][T19982] udevd[19982]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1475.794550][ T23] usb 6-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1475.845612][ T23] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1475.875728][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.887847][ T23] usb 6-1: Product: syz [ 1475.897537][ T23] usb 6-1: Manufacturer: syz [ 1475.902897][ T23] usb 6-1: SerialNumber: syz [ 1475.920707][ T23] usb 6-1: config 0 descriptor?? [ 1475.927103][T21205] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1475.963580][ T23] asix: probe of 6-1:0.251 failed with error -22 [ 1476.195524][T20800] udevd[20800]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1476.206602][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1476.325857][ T9854] usb 4-1: USB disconnect, device number 57 [ 1476.543984][T21225] loop4: detected capacity change from 0 to 256 [ 1476.558652][T21225] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1476.569824][T21225] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1476.669722][T21225] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1477.580098][T21229] loop7: detected capacity change from 0 to 2048 [ 1478.381701][T21229] NILFS (loop7): error -116 while loading last checkpoint (checkpoint number=2) [ 1478.626570][ T786] usb 6-1: USB disconnect, device number 12 [ 1478.895805][T21238] loop5: detected capacity change from 0 to 2048 [ 1478.983696][T21238] loop5: p1 < > p4 [ 1479.008221][T21238] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1479.137272][ T23] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1479.484085][ T23] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1479.617207][T21255] loop3: detected capacity change from 0 to 64 [ 1480.890464][T19979] udevd[19979]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1480.901797][ T23] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1480.912547][ T23] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1480.922445][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.575049][T20800] udevd[20800]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1481.671166][T21257] ------------[ cut here ]------------ [ 1481.677375][T21257] WARNING: CPU: 1 PID: 21257 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 1481.686461][T21257] Modules linked in: [ 1481.690526][T21257] CPU: 1 PID: 21257 Comm: syz.7.4407 Not tainted 6.6.93-syzkaller #0 [ 1481.698722][T21257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1481.709271][T21257] RIP: 0010:__alloc_pages+0x2de/0x460 [ 1481.714760][T21257] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 34 ef 61 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 1481.734764][T21257] RSP: 0018:ffffc90004bffa80 EFLAGS: 00010246 [ 1481.741331][T21257] RAX: ffffc90004bffa00 RBX: 1ffff9200097ff54 RCX: 0000000000000000 [ 1481.749466][T21257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004bffae8 [ 1481.757709][T21257] RBP: ffffc90004bffb80 R08: ffffc90004bffae7 R09: 0000000000000000 [ 1481.766213][T21257] R10: ffffc90004bffac0 R11: fffff5200097ff5d R12: 000000000000002a [ 1481.775214][T21257] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 1481.783649][T21257] FS: 00007f93459ef6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1481.793572][T21257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1481.800735][T21257] CR2: 000020000010a000 CR3: 000000002c5a2000 CR4: 00000000003506e0 [ 1481.809253][T21257] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1481.817656][T21257] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1481.825692][T21257] Call Trace: [ 1481.829179][T21257] [ 1481.832144][T21257] ? zone_statistics+0x170/0x170 [ 1481.837103][T21257] ? v9fs_fid_find+0x270/0x270 [ 1481.841949][T21257] __kmalloc_large_node+0x8c/0x1e0 [ 1481.847086][T21257] ? v9fs_fid_get_acl+0x4f/0xf0 [ 1481.852103][T21257] __kmalloc+0x111/0x240 [ 1481.856372][T21257] v9fs_fid_get_acl+0x4f/0xf0 [ 1481.861135][T21257] v9fs_get_acl+0x9a/0x350 [ 1481.865580][T21257] v9fs_mount+0x862/0xb40 [ 1481.870306][T21257] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 1481.875714][T21257] legacy_get_tree+0xea/0x180 [ 1481.880688][T21257] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 1481.886110][T21257] vfs_get_tree+0x8c/0x280 [ 1481.890661][T21257] do_new_mount+0x24b/0xa40 [ 1481.895207][T21257] __se_sys_mount+0x2da/0x3c0 [ 1481.899958][T21257] ? __x64_sys_mount+0xc0/0xc0 [ 1481.904745][T21257] ? lockdep_hardirqs_on+0x98/0x150 [ 1481.910045][T21257] ? __x64_sys_mount+0x20/0xc0 [ 1481.914831][T21257] do_syscall_64+0x55/0xb0 [ 1481.919317][T21257] ? clear_bhb_loop+0x40/0x90 [ 1481.924092][T21257] ? clear_bhb_loop+0x40/0x90 [ 1481.928846][T21257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1481.934899][T21257] RIP: 0033:0x7f9344b8e929 [ 1481.939377][T21257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1481.959120][T21257] RSP: 002b:00007f93459ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1481.967641][T21257] RAX: ffffffffffffffda RBX: 00007f9344db5fa0 RCX: 00007f9344b8e929 [ 1481.975972][T21257] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1481.984139][T21257] RBP: 00007f9344c10b39 R08: 0000200000000580 R09: 0000000000000000 [ 1481.992168][T21257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1482.000203][T21257] R13: 0000000000000000 R14: 00007f9344db5fa0 R15: 00007ffc0001fe38 [ 1482.008254][T21257] [ 1482.011285][T21257] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1482.018579][T21257] CPU: 1 PID: 21257 Comm: syz.7.4407 Not tainted 6.6.93-syzkaller #0 [ 1482.026665][T21257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1482.036745][T21257] Call Trace: [ 1482.040040][T21257] [ 1482.042980][T21257] dump_stack_lvl+0x16c/0x230 [ 1482.047710][T21257] ? show_regs_print_info+0x20/0x20 [ 1482.052938][T21257] ? load_image+0x3b0/0x3b0 [ 1482.057487][T21257] panic+0x2c0/0x710 [ 1482.061397][T21257] ? bpf_jit_dump+0xd0/0xd0 [ 1482.065943][T21257] __warn+0x2e0/0x470 [ 1482.069946][T21257] ? __alloc_pages+0x2de/0x460 [ 1482.074739][T21257] ? __alloc_pages+0x2de/0x460 [ 1482.079516][T21257] report_bug+0x2be/0x4f0 [ 1482.083943][T21257] ? __alloc_pages+0x2de/0x460 [ 1482.088722][T21257] ? __alloc_pages+0x2de/0x460 [ 1482.093490][T21257] ? __alloc_pages+0x2e0/0x460 [ 1482.098260][T21257] handle_bug+0xcf/0x120 [ 1482.102531][T21257] exc_invalid_op+0x1a/0x50 [ 1482.107052][T21257] asm_exc_invalid_op+0x1a/0x20 [ 1482.111927][T21257] RIP: 0010:__alloc_pages+0x2de/0x460 [ 1482.117319][T21257] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 34 ef 61 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 1482.136963][T21257] RSP: 0018:ffffc90004bffa80 EFLAGS: 00010246 [ 1482.143061][T21257] RAX: ffffc90004bffa00 RBX: 1ffff9200097ff54 RCX: 0000000000000000 [ 1482.151058][T21257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004bffae8 [ 1482.159042][T21257] RBP: ffffc90004bffb80 R08: ffffc90004bffae7 R09: 0000000000000000 [ 1482.167026][T21257] R10: ffffc90004bffac0 R11: fffff5200097ff5d R12: 000000000000002a [ 1482.175016][T21257] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 1482.183019][T21257] ? zone_statistics+0x170/0x170 [ 1482.187974][T21257] ? v9fs_fid_find+0x270/0x270 [ 1482.192752][T21257] __kmalloc_large_node+0x8c/0x1e0 [ 1482.197874][T21257] ? v9fs_fid_get_acl+0x4f/0xf0 [ 1482.202761][T21257] __kmalloc+0x111/0x240 [ 1482.207025][T21257] v9fs_fid_get_acl+0x4f/0xf0 [ 1482.211754][T21257] v9fs_get_acl+0x9a/0x350 [ 1482.216189][T21257] v9fs_mount+0x862/0xb40 [ 1482.220541][T21257] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 1482.225941][T21257] legacy_get_tree+0xea/0x180 [ 1482.230629][T21257] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 1482.236024][T21257] vfs_get_tree+0x8c/0x280 [ 1482.240450][T21257] do_new_mount+0x24b/0xa40 [ 1482.244968][T21257] __se_sys_mount+0x2da/0x3c0 [ 1482.249755][T21257] ? __x64_sys_mount+0xc0/0xc0 [ 1482.254555][T21257] ? lockdep_hardirqs_on+0x98/0x150 [ 1482.259803][T21257] ? __x64_sys_mount+0x20/0xc0 [ 1482.264582][T21257] do_syscall_64+0x55/0xb0 [ 1482.269075][T21257] ? clear_bhb_loop+0x40/0x90 [ 1482.273758][T21257] ? clear_bhb_loop+0x40/0x90 [ 1482.278454][T21257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1482.284365][T21257] RIP: 0033:0x7f9344b8e929 [ 1482.288785][T21257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1482.308401][T21257] RSP: 002b:00007f93459ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1482.316820][T21257] RAX: ffffffffffffffda RBX: 00007f9344db5fa0 RCX: 00007f9344b8e929 [ 1482.324802][T21257] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1482.332784][T21257] RBP: 00007f9344c10b39 R08: 0000200000000580 R09: 0000000000000000 [ 1482.340770][T21257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1482.348743][T21257] R13: 0000000000000000 R14: 00007f9344db5fa0 R15: 00007ffc0001fe38 [ 1482.356744][T21257] [ 1482.360081][T21257] Kernel Offset: disabled [ 1482.364519][T21257] Rebooting in 86400 seconds..