last executing test programs: 19.958892166s ago: executing program 0 (id=218): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x4b00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="10010000", @ANYRES16=r8, @ANYBLOB="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"/268], 0x110}, 0x1, 0x0, 0x0, 0x4000001}, 0x44) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x4, 0x5, 0xd8, 0x83f, 0x4, "3eccd25569e20900"}) 18.832403474s ago: executing program 0 (id=219): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setpriority(0x2, 0x0, 0x7) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) pread64(r0, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd7) 17.563985085s ago: executing program 0 (id=221): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6d3, &(0x7f00000014c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 14.638032912s ago: executing program 0 (id=234): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)) sendmsg$nl_route(r0, 0x0, 0x8) write$dsp(0xffffffffffffffff, &(0x7f0000000440)="024922acde319b3a7cac20447312ad1f7c62000000090000c83b899897a7ef9ccb3e45e10e93ded8367d55f030e634d42bc8b951c7b7fcbb7ef4041ad10b0b", 0x3f) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 13.656379138s ago: executing program 3 (id=227): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x4b00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="10010000", @ANYRES16=r8, @ANYBLOB="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"/268], 0x110}, 0x1, 0x0, 0x0, 0x4000001}, 0x44) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x4, 0x5, 0xd8, 0x83f, 0x4, "3eccd25569e20900"}) 12.653505334s ago: executing program 2 (id=229): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fremovexattr(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x20000) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x54) recvfrom$packet(r0, 0x0, 0x0, 0x40000061, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(0x0, 0x3000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) fallocate(r5, 0x8, 0x4000, 0x4000) 12.416281158s ago: executing program 0 (id=230): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 12.415681788s ago: executing program 3 (id=231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r1, 0x0, 0x216) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000780)='netlink_extack\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(r5, 0x0, 0x27, 0x0, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x3c, r9, 0x1, 0x70bd2a, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB="74726170733d66642c7266646e6f3dc4b88d0ea626626e361e20a5ffb3eed5b6d203dd27f9", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',privport,obj_type=\x00,obj_type=syzkaller\x00,subj_user=\x00,func=FIRMWARE_CHECK,obj_type=@)!^]\',uid=', @ANYRESDEC, @ANYBLOB]) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000280)={'veth1_to_bond\x00', &(0x7f00000004c0)=@ethtool_gstrings={0x1b, 0x1, 0x3b, "02c8e74444f6a734468a7f808d1aefa7ac8a5f58f6afea936e6ef51f501da9420b962b8ff7d9ec9b674642840fff20b40d48968b31408af0000000"}}) socket$can_raw(0x1d, 0x3, 0x1) 8.849017706s ago: executing program 3 (id=232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r0, 0x0, 0x0, 'syz0\x00', 0x0}) 8.818523936s ago: executing program 1 (id=233): socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) setpriority(0x2, r0, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 7.633385486s ago: executing program 1 (id=235): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x24040012) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) sendfile(r5, r5, 0x0, 0x200) syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x18) connect$pptp(r6, &(0x7f0000000380)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0x13) 7.590507506s ago: executing program 3 (id=236): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a010200"], 0x44}}, 0x0) 7.486313378s ago: executing program 2 (id=237): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x454680) 6.448674315s ago: executing program 3 (id=238): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)={0x0, 0x18, 0x4, "a7c3ad4c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x0, 0xb, 0x9, "fca276088f170fa478"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000100)={0x0, 0x8, 0x4, "8e8fd697"}, 0x0, 0x0}) 6.312285337s ago: executing program 2 (id=239): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)) sendmsg$nl_route(r0, 0x0, 0x8) write$dsp(0xffffffffffffffff, &(0x7f0000000440)="024922acde319b3a7cac20447312ad1f7c62000000090000c83b899897a7ef9ccb3e45e10e93ded8367d55f030e634d42bc8b951c7b7fcbb7ef4041ad10b0b", 0x3f) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 6.294087277s ago: executing program 1 (id=240): creat(&(0x7f0000000040)='./file0\x00', 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 5.319660653s ago: executing program 2 (id=241): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r1, 0x0, 0x216) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000780)='netlink_extack\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_mreqn(r5, 0x0, 0x27, 0x0, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x3c, r9, 0x1, 0x70bd2a, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB="74726170733d66642c7266646e6f3dc4b88d0ea626626e361e20a5ffb3eed5b6d203dd27f9", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',privport,obj_type=\x00,obj_type=syzkaller\x00,subj_user=\x00,func=FIRMWARE_CHECK,obj_type=@)!^]\',uid=', @ANYRESDEC, @ANYBLOB]) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000280)={'veth1_to_bond\x00', &(0x7f00000004c0)=@ethtool_gstrings={0x1b, 0x1, 0x3b, "02c8e74444f6a734468a7f808d1aefa7ac8a5f58f6afea936e6ef51f501da9420b962b8ff7d9ec9b674642840fff20b40d48968b31408af0000000"}}) socket$can_raw(0x1d, 0x3, 0x1) 5.219123125s ago: executing program 1 (id=242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) socket$kcm(0x2, 0x3, 0x84) 4.135286073s ago: executing program 2 (id=243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x200}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) 4.074866354s ago: executing program 1 (id=244): socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) setpriority(0x2, r0, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 2.649773267s ago: executing program 2 (id=245): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fremovexattr(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x20000) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x54) recvfrom$packet(r0, 0x0, 0x0, 0x40000061, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(0x0, 0x3000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) fallocate(r5, 0x8, 0x4000, 0x4000) 2.499985409s ago: executing program 1 (id=246): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) syz_open_dev$dri(0x0, 0x2d1, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000900)={0x7, 0xa}) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200001, &(0x7f0000000040)={[{@gid}, {@codepage={'codepage', 0x3d, 'macromanian'}}, {}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x2, 0x33c, &(0x7f0000001f80)="$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") r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x89, 0xe6, 0x20, 0x12d1, 0xf5c3, 0xa51e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x2, 0xff, 0x5, 0x3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x18}}]}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x1a8, 0x0, 0xffffffff, 0x0, 0x110, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff, 'batadv0\x00', 'veth1\x00', {0xff}, {}, 0x2, 0x2, 0x22}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key=0x800}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x250}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r4 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) ftruncate(r4, 0x30) 2.318776682s ago: executing program 3 (id=247): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0xff}, 0x14) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 0s ago: executing program 0 (id=248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000020000000fad413ec50000000f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) pivot_root(&(0x7f0000000100)='./file0\x00', 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8985b0808aa78", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 88.411100][ T5778] cgroup: Unknown subsys name 'net' [ 88.552261][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.337278][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.692619][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.706535][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.714557][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.723440][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.731316][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.740242][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.748174][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.755850][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.805473][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.813881][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.821580][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.829300][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.837006][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.845560][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.847052][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.854220][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.860198][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.875434][ T5806] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.875909][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.889970][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.892396][ T5808] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.904851][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.904883][ T5805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.919876][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.324301][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 93.514036][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 93.537548][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.554227][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.561714][ T5789] bridge_slave_0: entered allmulticast mode [ 93.571817][ T5789] bridge_slave_0: entered promiscuous mode [ 93.607650][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.615022][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.622228][ T5789] bridge_slave_1: entered allmulticast mode [ 93.629631][ T5789] bridge_slave_1: entered promiscuous mode [ 93.669169][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 93.686272][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 93.700186][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.712466][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.818051][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.825553][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.832742][ T5790] bridge_slave_0: entered allmulticast mode [ 93.841140][ T5790] bridge_slave_0: entered promiscuous mode [ 93.864775][ T5789] team0: Port device team_slave_0 added [ 93.892287][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.899672][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.906988][ T5790] bridge_slave_1: entered allmulticast mode [ 93.914255][ T5790] bridge_slave_1: entered promiscuous mode [ 93.924090][ T5789] team0: Port device team_slave_1 added [ 93.991456][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.999089][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.025235][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.064418][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.078391][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.088320][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.096145][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.122207][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.196760][ T5790] team0: Port device team_slave_0 added [ 94.204501][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.211722][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.219433][ T5791] bridge_slave_0: entered allmulticast mode [ 94.227334][ T5791] bridge_slave_0: entered promiscuous mode [ 94.235351][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.242499][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.249811][ T5792] bridge_slave_0: entered allmulticast mode [ 94.257409][ T5792] bridge_slave_0: entered promiscuous mode [ 94.273497][ T5790] team0: Port device team_slave_1 added [ 94.280114][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.287403][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.295085][ T5791] bridge_slave_1: entered allmulticast mode [ 94.302068][ T5791] bridge_slave_1: entered promiscuous mode [ 94.323900][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.331054][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.338443][ T5792] bridge_slave_1: entered allmulticast mode [ 94.345462][ T5792] bridge_slave_1: entered promiscuous mode [ 94.422877][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.429881][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.456459][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.470336][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.477940][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.504807][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.533532][ T5789] hsr_slave_0: entered promiscuous mode [ 94.540195][ T5789] hsr_slave_1: entered promiscuous mode [ 94.567798][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.580878][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.594961][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.634988][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.719512][ T5792] team0: Port device team_slave_0 added [ 94.730167][ T5790] hsr_slave_0: entered promiscuous mode [ 94.737670][ T5790] hsr_slave_1: entered promiscuous mode [ 94.744259][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.752131][ T5790] Cannot create hsr debugfs directory [ 94.781280][ T5791] team0: Port device team_slave_0 added [ 94.789188][ T5792] team0: Port device team_slave_1 added [ 94.829891][ T5791] team0: Port device team_slave_1 added [ 94.843693][ T5805] Bluetooth: hci0: command tx timeout [ 94.851939][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.859943][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.885969][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.902639][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.909700][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.935955][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.935993][ T5805] Bluetooth: hci2: command tx timeout [ 94.966100][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.973185][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.999480][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.010203][ T5805] Bluetooth: hci1: command tx timeout [ 95.013732][ T5805] Bluetooth: hci3: command tx timeout [ 95.064008][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.071034][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.097494][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.213597][ T5792] hsr_slave_0: entered promiscuous mode [ 95.220625][ T5792] hsr_slave_1: entered promiscuous mode [ 95.226862][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.234617][ T5792] Cannot create hsr debugfs directory [ 95.266686][ T5791] hsr_slave_0: entered promiscuous mode [ 95.273658][ T5791] hsr_slave_1: entered promiscuous mode [ 95.280185][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.288210][ T5791] Cannot create hsr debugfs directory [ 95.529757][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.569694][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.581519][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.617313][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.720894][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.744041][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.754627][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.765664][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.855111][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.877381][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.906594][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.917232][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.996648][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.016434][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.029283][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.056968][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.156254][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.202152][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.232096][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.239912][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.271851][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.297016][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.304225][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.375554][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.390377][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.427167][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.434386][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.472572][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.482598][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.489877][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.519474][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.526747][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.551343][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.558566][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.633386][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.706918][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.730149][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.737481][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.781873][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.789173][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.928352][ T5805] Bluetooth: hci0: command tx timeout [ 96.947086][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.003970][ T5805] Bluetooth: hci2: command tx timeout [ 97.084529][ T5805] Bluetooth: hci3: command tx timeout [ 97.090022][ T5805] Bluetooth: hci1: command tx timeout [ 97.145102][ T5789] veth0_vlan: entered promiscuous mode [ 97.173415][ T5789] veth1_vlan: entered promiscuous mode [ 97.292594][ T5789] veth0_macvtap: entered promiscuous mode [ 97.316337][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.342692][ T5789] veth1_macvtap: entered promiscuous mode [ 97.366528][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.415343][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.431338][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.444918][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.454118][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.463960][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.472704][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.534243][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.568511][ T786] cfg80211: failed to load regulatory.db [ 97.595103][ T5790] veth0_vlan: entered promiscuous mode [ 97.608514][ T5791] veth0_vlan: entered promiscuous mode [ 97.635202][ T5791] veth1_vlan: entered promiscuous mode [ 97.680686][ T5790] veth1_vlan: entered promiscuous mode [ 97.747459][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.761433][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.787361][ T5791] veth0_macvtap: entered promiscuous mode [ 97.837651][ T5791] veth1_macvtap: entered promiscuous mode [ 97.856707][ T5792] veth0_vlan: entered promiscuous mode [ 97.871942][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.880672][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.890449][ T5792] veth1_vlan: entered promiscuous mode [ 97.907450][ T5790] veth0_macvtap: entered promiscuous mode [ 97.936328][ T5790] veth1_macvtap: entered promiscuous mode [ 97.962424][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.980412][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.994707][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.034193][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.049856][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.061253][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.084829][ T5792] veth0_macvtap: entered promiscuous mode [ 98.096173][ T5792] veth1_macvtap: entered promiscuous mode [ 98.116311][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.127630][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.143500][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.159736][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.191463][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.219339][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.239640][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.250820][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.267868][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.352378][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.370897][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.390854][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.407603][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.419761][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.499084][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.508226][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.517424][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.527426][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.928287][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.007881][ T5805] Bluetooth: hci0: command tx timeout [ 99.100456][ T5805] Bluetooth: hci2: command tx timeout [ 99.111730][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.131308][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.142422][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.157984][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.169108][ T5805] Bluetooth: hci1: command tx timeout [ 99.174740][ T5808] Bluetooth: hci3: command tx timeout [ 99.189767][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.202287][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.301814][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.318179][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.332552][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.343592][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.353799][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.364741][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.377149][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.434728][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.434862][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.444336][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.465875][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.472839][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.489289][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.540766][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.552055][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.648728][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.652714][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.683873][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.697374][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.929833][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.951597][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.122127][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.131170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.157311][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.084107][ T5805] Bluetooth: hci0: command tx timeout [ 101.162953][ T5805] Bluetooth: hci2: command tx timeout [ 101.243491][ T5805] Bluetooth: hci1: command tx timeout [ 101.244460][ T5808] Bluetooth: hci3: command tx timeout [ 101.320366][ T5906] syz.3.8[5906]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 101.401981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.471071][ T5906] loop3: detected capacity change from 0 to 1024 [ 101.577735][ T5906] ======================================================= [ 101.577735][ T5906] WARNING: The mand mount option has been deprecated and [ 101.577735][ T5906] and is ignored by this kernel. Remove the mand [ 101.577735][ T5906] option from the mount to silence this warning. [ 101.577735][ T5906] ======================================================= [ 102.100422][ T5906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.146791][ T5906] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.218457][ T5906] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 3: comm syz.3.8: lblock 3 mapped to illegal pblock 3 (length 13) [ 102.251456][ T5906] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 102.268145][ T5906] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.268145][ T5906] [ 102.295698][ T5918] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: block 3: comm syz.3.8: lblock 3 mapped to illegal pblock 3 (length 1) [ 102.320604][ T5918] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: block 3: comm syz.3.8: lblock 3 mapped to illegal pblock 3 (length 1) [ 102.364656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 102.383028][ T5918] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: block 3: comm syz.3.8: lblock 3 mapped to illegal pblock 3 (length 1) [ 102.403130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.425962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.426286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.529582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.035891][ T5918] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: block 3: comm syz.3.8: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.051332][ T5918] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: block 3: comm syz.3.8: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.114898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 103.145810][ T5918] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: block 3: comm syz.3.8: lblock 3 mapped to illegal pblock 3 (length 1) [ 103.243320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.252681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.381464][ T5924] Illegal XDP return value 725130752 on prog (id 5) dev N/A, expect packet loss! [ 103.438643][ T5924] loop2: detected capacity change from 0 to 512 [ 103.453587][ T5924] EXT4-fs: inline encryption not supported [ 103.459554][ T5924] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.854626][ T5915] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 108.207838][ T5924] fscrypt: Error allocating hmac(sha512): -2 [ 108.660405][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.343317][ T5943] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 111.356902][ T5943] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 111.438772][ T5943] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 111.470394][ T5943] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 111.493807][ T5943] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 111.506157][ T5943] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 111.527757][ T5943] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 111.536343][ T5943] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 111.555524][ T5943] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 111.593465][ T5943] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 111.618518][ T5943] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 111.626902][ T5943] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 111.652877][ T5943] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 111.660982][ T5943] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 112.573474][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 114.185571][ T5948] sched: RT throttling activated [ 114.753138][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 114.798567][ T5959] loop0: detected capacity change from 0 to 2048 [ 114.895903][ T5960] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.432002][ T5955] loop3: detected capacity change from 0 to 40427 [ 116.496743][ T5955] F2FS-fs (loop3): invalid crc value [ 116.504155][ T5972] loop2: detected capacity change from 0 to 512 [ 116.511544][ T5972] EXT4-fs: Ignoring removed bh option [ 116.540861][ T5972] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 116.552719][ T5955] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.554453][ T5960] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 116.601439][ T5972] EXT4-fs (loop2): 1 truncate cleaned up [ 116.621160][ T5960] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 116.635397][ T5972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.660289][ T5960] Remounting filesystem read-only [ 116.682682][ T3527] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 116.692166][ T3527] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 116.710207][ T5955] F2FS-fs (loop3): Start checkpoint disabled! [ 116.745493][ T3527] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 116.745822][ T5955] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 116.791301][ T3527] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 116.834284][ T3527] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 116.923295][ T28] audit: type=1800 audit(1753616677.891:2): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.23" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 117.022860][ T3527] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 117.142076][ T3527] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 117.276544][ T3527] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.406722][ T3527] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.515493][ T3527] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.607145][ T3527] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 117.614019][ T3527] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 117.621342][ T3527] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.632377][ T3527] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.641430][ T3527] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.683029][ T5792] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 117.730296][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 117.772311][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.784086][ T5792] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 117.792019][ T5792] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 117.825323][ T5792] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 117.835036][ T5792] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 117.847846][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 117.873306][ T5792] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 117.880945][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.934348][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.971108][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 117.971386][ T5970] loop1: detected capacity change from 0 to 32768 [ 118.016613][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 118.029264][ T5792] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 118.055055][ T5792] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 118.135655][ T5792] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 118.171688][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.227672][ T5792] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 118.251764][ T5982] loop3: detected capacity change from 0 to 1024 [ 118.279670][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.343406][ T5970] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 118.357104][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 118.459041][ T5792] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 118.588043][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.302203][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 122.452226][ T6007] loop0: detected capacity change from 0 to 4096 [ 122.549433][ T6007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.554885][ T6003] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 123.090897][ T6010] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 123.104139][ T6010] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 123.115244][ T6010] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.30: Failed to acquire dquot type 0 [ 123.839297][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.869727][ T6012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 124.233362][ T5779] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.534505][ T5779] usb 3-1: Using ep0 maxpacket: 8 [ 124.644142][ T5779] usb 3-1: config 0 has no interfaces? [ 124.710922][ T5779] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.009403][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.025729][ T5779] usb 3-1: config 0 descriptor?? [ 125.208651][ T6019] loop0: detected capacity change from 0 to 32768 [ 125.273055][ T2179] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.279453][ T5779] usb 3-1: USB disconnect, device number 2 [ 125.320873][ T6019] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 125.424068][ T28] audit: type=1800 audit(1753616686.441:3): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.33" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 125.482944][ T2179] usb 4-1: Using ep0 maxpacket: 16 [ 125.498668][ T2179] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 125.518070][ T2179] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 125.537634][ T6030] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 125.560578][ T6030] loop1: detected capacity change from 0 to 512 [ 125.592731][ T2179] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 125.621893][ T6030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.634695][ T6030] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.670722][ T2179] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 125.711208][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.739067][ T2179] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.774723][ T2179] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.791960][ T2179] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.808687][ T6019] syz.0.33 (6019) used greatest stack depth: 18544 bytes left [ 125.816655][ T2179] usb 4-1: SerialNumber: syz [ 125.846804][ T6012] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 125.872700][ T2179] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 126.064721][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 126.507683][ T6043] input: syz1 as /devices/virtual/input/input5 [ 126.941031][ T2179] usb 4-1: USB disconnect, device number 2 [ 127.178525][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'. [ 129.381040][ T6069] loop3: detected capacity change from 0 to 256 [ 129.389991][ T6069] FAT-fs (loop3): Unrecognized mount option "utf(ô—!ÂXhr¶ÁÙTr" or missing value [ 130.944549][ T6075] loop3: detected capacity change from 0 to 1024 [ 131.000976][ T6075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.021485][ T6077] nbd: must specify an index to disconnect [ 131.329220][ T6084] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 131.388443][ T6084] loop0: detected capacity change from 0 to 512 [ 131.425736][ T6084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.438435][ T6084] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.476607][ T6089] o2cb: This node has not been configured. [ 131.485996][ T6089] o2cb: Cluster check failed. Fix errors before retrying. [ 131.493396][ T6089] (syz.3.45,6089,0):user_dlm_register:674 ERROR: status = -22 [ 131.500900][ T6089] (syz.3.45,6089,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 131.759160][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.836541][ T6091] loop2: detected capacity change from 0 to 1024 [ 131.932449][ T6091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.012401][ T6091] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.111634][ T6091] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 13) [ 132.193096][ T6091] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 132.232219][ T6085] loop1: detected capacity change from 0 to 32768 [ 132.243312][ T6091] EXT4-fs (loop2): This should not happen!! Data will be lost [ 132.243312][ T6091] [ 132.287025][ T6096] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1) [ 132.320222][ T6085] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 132.325643][ T6096] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1) [ 132.472931][ T6096] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1) [ 132.517848][ T28] audit: type=1800 audit(1753616693.521:4): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.48" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 132.581855][ T6096] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.50: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.107653][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.417139][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.429307][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.459410][ T6085] syz.1.48 (6085) used greatest stack depth: 18320 bytes left [ 133.489442][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.780744][ T6110] loop0: detected capacity change from 0 to 512 [ 133.790371][ T6110] EXT4-fs: inline encryption not supported [ 133.796558][ T6110] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.642298][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 138.446978][ T6110] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.459367][ T6110] EXT4-fs (loop0): Test dummy encryption mode enabled [ 138.472011][ T6110] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 138.472307][ T6110] EXT4-fs: failed to create workqueue [ 138.495275][ T6110] EXT4-fs (loop0): mount failed [ 139.312496][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.57'. [ 141.425421][ T6127] loop1: detected capacity change from 0 to 32768 [ 141.669887][ T6127] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 141.671025][ T6127] (syz.1.56,6127,0):ocfs2_initialize_super:2287 ERROR: status = -12 [ 141.757398][ T6127] (syz.1.56,6127,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 148.872867][ T6184] syz_tun: entered allmulticast mode [ 148.958571][ T6184] dvmrp1: entered allmulticast mode [ 148.972346][ T6188] loop1: detected capacity change from 0 to 1024 [ 149.005439][ T6183] syz_tun: left allmulticast mode [ 149.085696][ T6188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.894881][ T6202] o2cb: This node has not been configured. [ 149.901974][ T6202] o2cb: Cluster check failed. Fix errors before retrying. [ 149.909460][ T6202] (syz.1.71,6202,0):user_dlm_register:674 ERROR: status = -22 [ 149.917115][ T6202] (syz.1.71,6202,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 152.047784][ T6196] loop0: detected capacity change from 0 to 32768 [ 152.136107][ T6196] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 152.413726][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 153.607112][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 153.825155][ T6222] loop3: detected capacity change from 0 to 2048 [ 153.951173][ T6222] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 154.006907][ T6222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.055967][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.988598][ T6243] syz_tun: entered allmulticast mode [ 156.563327][ T6238] syz_tun: left allmulticast mode [ 158.269561][ T6260] loop3: detected capacity change from 0 to 128 [ 158.288803][ T6258] loop1: detected capacity change from 0 to 1024 [ 158.309552][ T6260] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.446405][ T6260] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.694526][ T6262] loop2: detected capacity change from 0 to 1024 [ 159.328177][ T6262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.433358][ T48] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.640644][ T6280] o2cb: This node has not been configured. [ 160.646816][ T6280] o2cb: Cluster check failed. Fix errors before retrying. [ 160.654986][ T6280] (syz.2.91,6280,0):user_dlm_register:674 ERROR: status = -22 [ 160.662508][ T6280] (syz.2.91,6280,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 160.883014][ T6073] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.098562][ T6073] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 161.122937][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.154456][ T6073] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 161.189673][ T6073] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 161.219291][ T6073] usb 4-1: Manufacturer: syz [ 161.232019][ T6073] usb 4-1: config 0 descriptor?? [ 162.624825][ T6073] rc_core: IR keymap rc-hauppauge not found [ 162.644901][ T6073] Registered IR keymap rc-empty [ 162.672255][ T6073] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 162.710925][ T6073] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 163.775429][ T5880] usb 4-1: USB disconnect, device number 3 [ 164.090782][ T6303] loop3: detected capacity change from 0 to 1024 [ 164.149818][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.153178][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 167.941354][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 168.046026][ T23] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 168.085409][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.134173][ T23] usb 1-1: config 0 has no interface number 0 [ 168.201370][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=0003, bcdDevice= 0.00 [ 168.222857][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.241210][ T23] usb 1-1: Product: syz [ 168.245894][ T23] usb 1-1: Manufacturer: syz [ 168.253051][ T23] usb 1-1: SerialNumber: syz [ 168.281597][ T23] usb 1-1: config 0 descriptor?? [ 168.316360][ T23] usb 1-1: Found UVC 0.00 device syz (046d:0003) [ 168.337335][ T23] usb 1-1: No valid video chain found. [ 168.343470][ T6337] loop1: detected capacity change from 0 to 1024 [ 168.367984][ T6337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.524548][ T5880] usb 1-1: USB disconnect, device number 2 [ 168.718728][ T6348] syz_tun: entered allmulticast mode [ 168.804214][ T6349] o2cb: This node has not been configured. [ 168.810143][ T6349] o2cb: Cluster check failed. Fix errors before retrying. [ 168.817548][ T6349] (syz.1.112,6349,1):user_dlm_register:674 ERROR: status = -22 [ 168.825396][ T6349] (syz.1.112,6349,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 168.867995][ T6324] syz_tun: left allmulticast mode [ 169.291346][ T6352] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.728015][ T6358] loop3: detected capacity change from 0 to 4096 [ 172.916240][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.262208][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 180.184265][ T6397] loop1: detected capacity change from 0 to 1024 [ 181.281578][ T6408] 9pnet_fd: Insufficient options for proto=fd [ 184.136207][ T6424] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 184.143136][ T6424] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 184.180556][ T6424] vhci_hcd vhci_hcd.0: Device attached [ 184.452352][ T5808] Bluetooth: hci3: ACL packet too small [ 184.842949][ T6425] vhci_hcd: connection closed [ 184.982827][ T12] vhci_hcd: stop threads [ 185.085091][ T12] vhci_hcd: release socket [ 185.104402][ T12] vhci_hcd: disconnect device [ 185.122900][ T5779] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 185.130599][ T5779] usb 37-1: enqueue for inactive port 0 [ 185.252913][ T5779] vhci_hcd: vhci_device speed not set [ 186.532070][ T6439] loop2: detected capacity change from 0 to 1024 [ 187.594060][ T6447] loop2: detected capacity change from 0 to 1024 [ 187.686763][ T6447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.703295][ T6447] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.781195][ T6447] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.142: lblock 3 mapped to illegal pblock 3 (length 13) [ 187.796028][ T6447] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 187.808582][ T6447] EXT4-fs (loop2): This should not happen!! Data will be lost [ 187.808582][ T6447] [ 187.897233][ T6447] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.142: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.009805][ T6454] loop0: detected capacity change from 0 to 512 [ 188.019464][ T6454] EXT4-fs: inline encryption not supported [ 188.025584][ T6454] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.062339][ T6454] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.075262][ T6454] EXT4-fs (loop0): Test dummy encryption mode enabled [ 188.233197][ T6447] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.142: lblock 3 mapped to illegal pblock 3 (length 1) [ 188.600414][ T6454] EXT4-fs (loop0): orphan cleanup on readonly fs [ 189.503275][ T6454] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.143: inode #13: comm syz.0.143: iget: illegal inode # [ 189.627529][ T6454] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.143: couldn't read orphan inode 13 (err -117) [ 189.743133][ T6454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 189.764635][ T6454] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.041728][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.644868][ T6487] loop1: detected capacity change from 0 to 1024 [ 193.142067][ T6493] loop0: detected capacity change from 0 to 2048 [ 193.591267][ T6493] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 193.614380][ T6493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.933836][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.951003][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.860012][ T6529] loop1: detected capacity change from 0 to 1024 [ 200.428946][ T6537] loop2: detected capacity change from 0 to 1024 [ 200.521437][ T6537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.555640][ T6537] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.795241][ T6537] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 13) [ 200.812457][ T6537] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 200.830344][ T6537] EXT4-fs (loop2): This should not happen!! Data will be lost [ 200.830344][ T6537] [ 200.911909][ T6537] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 200.998062][ T6537] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.065565][ T6537] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.104407][ T6543] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.485889][ T6536] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.664219][ T6536] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.685191][ T6537] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.733589][ T6536] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 201.768266][ T6543] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.163: lblock 3 mapped to illegal pblock 3 (length 1) [ 202.170425][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.664712][ T6575] loop1: detected capacity change from 0 to 512 [ 204.674100][ T6575] EXT4-fs: inline encryption not supported [ 204.680112][ T6575] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.715306][ T6575] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.728157][ T6575] EXT4-fs (loop1): Test dummy encryption mode enabled [ 204.999264][ T6575] EXT4-fs (loop1): orphan cleanup on readonly fs [ 205.012829][ T6575] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.170: inode #13: comm syz.1.170: iget: illegal inode # [ 205.237001][ T6575] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.170: couldn't read orphan inode 13 (err -117) [ 205.554942][ T6575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 205.573958][ T6575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.702553][ T6576] loop0: detected capacity change from 0 to 4096 [ 207.778944][ T6576] NILFS (loop0): error -4 creating segctord thread [ 208.445867][ T6588] loop2: detected capacity change from 0 to 1024 [ 208.494678][ T6588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.767917][ T6600] loop0: detected capacity change from 0 to 4096 [ 210.918319][ T6600] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 210.953918][ T6600] ntfs3: loop0: Failed to load $Extend (-22). [ 210.960413][ T6600] ntfs3: loop0: Failed to initialize $Extend. [ 211.193459][ T6617] o2cb: This node has not been configured. [ 211.199347][ T6617] o2cb: Cluster check failed. Fix errors before retrying. [ 211.250060][ T6617] (syz.2.174,6617,0):user_dlm_register:674 ERROR: status = -22 [ 211.301812][ T6614] loop1: detected capacity change from 0 to 4096 [ 211.406130][ T6617] (syz.2.174,6617,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 211.416092][ T6614] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 213.301155][ T6631] loop1: detected capacity change from 0 to 1024 [ 213.423981][ T6631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.472969][ T6631] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.635611][ T6631] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 13) [ 213.723303][ T6631] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 213.843192][ T6631] EXT4-fs (loop1): This should not happen!! Data will be lost [ 213.843192][ T6631] [ 213.896299][ T6635] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.954459][ T6630] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.993493][ T6630] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 1) [ 214.013870][ T6635] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 1) [ 214.048669][ T6630] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 1) [ 214.159297][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.187286][ T6630] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 1) [ 214.226386][ T6635] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 1) [ 214.274235][ T6630] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 1) [ 214.304182][ T6635] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #15: block 3: comm syz.1.186: lblock 3 mapped to illegal pblock 3 (length 1) [ 214.730453][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.449855][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 218.456648][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 218.464153][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 218.470443][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 219.058281][ T6676] loop2: detected capacity change from 0 to 1024 [ 219.081474][ T6680] 9pnet_fd: Insufficient options for proto=fd [ 219.127589][ T6676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.241018][ T6689] loop1: detected capacity change from 0 to 1024 [ 219.452580][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 219.655629][ T6690] loop3: detected capacity change from 0 to 2048 [ 219.748907][ T6690] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 219.799680][ T6690] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.864257][ T6700] o2cb: This node has not been configured. [ 220.902824][ T6700] o2cb: Cluster check failed. Fix errors before retrying. [ 221.023338][ T6700] (syz.2.196,6700,1):user_dlm_register:674 ERROR: status = -22 [ 221.031096][ T6700] (syz.2.196,6700,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 223.833745][ T6720] loop3: detected capacity change from 0 to 512 [ 223.842832][ T6720] EXT4-fs: inline encryption not supported [ 223.848895][ T6720] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.812398][ T6720] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 226.824146][ T6720] EXT4-fs (loop3): Test dummy encryption mode enabled [ 228.082156][ T6720] EXT4-fs (loop3): orphan cleanup on readonly fs [ 228.119855][ T6720] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.205: inode #13: comm syz.3.205: iget: illegal inode # [ 228.256189][ T6720] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.205: couldn't read orphan inode 13 (err -117) [ 228.279053][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.343183][ T6720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 228.543642][ T6720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.577591][ T6728] loop1: detected capacity change from 0 to 4096 [ 229.655324][ T6728] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 230.366502][ T6741] input: syz1 as /devices/virtual/input/input13 [ 230.822472][ T6753] netlink: 48 bytes leftover after parsing attributes in process `syz.0.213'. [ 231.596368][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 231.658172][ T6765] loop2: detected capacity change from 0 to 2048 [ 231.692680][ T6765] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 231.820767][ T6765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.039536][ T6785] loop0: detected capacity change from 0 to 1024 [ 235.609318][ T6791] input: syz1 as /devices/virtual/input/input14 [ 238.523765][ T6806] process 'syz.2.225' launched './file1' with NULL argv: empty string added [ 244.725986][ T6841] netlink: 48 bytes leftover after parsing attributes in process `syz.3.236'. [ 246.932826][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 247.292903][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 248.084060][ T23] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 248.092234][ T23] usb 4-1: config 0 has no interface number 0 [ 248.135750][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 248.152839][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.175427][ T23] usb 4-1: Product: syz [ 248.186798][ T23] usb 4-1: Manufacturer: syz [ 248.213631][ T23] usb 4-1: SerialNumber: syz [ 248.393053][ T23] usb 4-1: config 0 descriptor?? [ 248.404421][ T23] smsc95xx v2.0.0 [ 249.781686][ T23] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 249.816073][ T23] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 249.848500][ T23] usb 4-1: USB disconnect, device number 4 [ 252.185494][ T6882] ------------[ cut here ]------------ [ 252.191325][ T6882] WARNING: CPU: 0 PID: 6882 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 252.195533][ T6881] loop1: detected capacity change from 0 to 64 [ 252.200782][ T6882] Modules linked in: [ 252.210723][ T6882] CPU: 0 PID: 6882 Comm: syz.3.247 Not tainted 6.6.100-syzkaller #0 [ 252.218842][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.229051][ T6882] RIP: 0010:__alloc_pages+0x2de/0x460 [ 252.234623][ T6882] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 05 20 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 252.254836][ T6882] RSP: 0018:ffffc90003817a80 EFLAGS: 00010246 [ 252.261109][ T6882] RAX: ffffc90003817a00 RBX: 1ffff92000702f54 RCX: 0000000000000000 [ 252.269500][ T6882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003817ae8 [ 252.276609][ T6881] hfs: unable to open extent tree [ 252.277909][ T6882] RBP: ffffc90003817b80 R08: ffffc90003817ae7 R09: 0000000000000000 [ 252.291381][ T6882] R10: ffffc90003817ac0 R11: fffff52000702f5d R12: 0000000000000017 [ 252.292922][ T6881] hfs: can't find a HFS filesystem on dev loop1 [ 252.299488][ T6882] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 252.313956][ T6882] FS: 00007f47065136c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 252.323197][ T6882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.329933][ T6882] CR2: 0000200000001fa0 CR3: 000000002c5a0000 CR4: 00000000003506f0 [ 252.338041][ T6882] Call Trace: [ 252.341870][ T6882] [ 252.345131][ T6882] ? zone_statistics+0x170/0x170 [ 252.350141][ T6882] ? v9fs_fid_find+0x270/0x270 [ 252.355122][ T6882] __kmalloc_large_node+0x8c/0x1e0 [ 252.360400][ T6882] ? v9fs_fid_get_acl+0x4f/0xf0 [ 252.365518][ T6882] __kmalloc+0x111/0x240 [ 252.369929][ T6882] v9fs_fid_get_acl+0x4f/0xf0 [ 252.374832][ T6882] v9fs_get_acl+0x9a/0x350 [ 252.379385][ T6882] v9fs_mount+0x862/0xb40 [ 252.383887][ T6882] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 252.389418][ T6882] legacy_get_tree+0xea/0x180 [ 252.394267][ T6882] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 252.399731][ T6882] vfs_get_tree+0x8c/0x280 [ 252.404323][ T6882] do_new_mount+0x24b/0xa40 [ 252.409239][ T6882] __se_sys_mount+0x2da/0x3c0 [ 252.414215][ T6882] ? __x64_sys_mount+0xc0/0xc0 [ 252.419096][ T6882] ? lockdep_hardirqs_on+0x98/0x150 [ 252.424436][ T6882] ? __x64_sys_mount+0x20/0xc0 [ 252.428228][ T28] audit: type=1800 audit(1753616813.441:5): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.248" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 252.429255][ T6882] do_syscall_64+0x55/0xb0 [ 252.454772][ T6882] ? clear_bhb_loop+0x40/0x90 [ 252.459575][ T6882] ? clear_bhb_loop+0x40/0x90 [ 252.464381][ T6882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.470381][ T6882] RIP: 0033:0x7f470578e9a9 [ 252.474966][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.494762][ T6882] RSP: 002b:00007f4706513038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.503323][ T6882] RAX: ffffffffffffffda RBX: 00007f47059b5fa0 RCX: 00007f470578e9a9 [ 252.511435][ T6882] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 252.519595][ T6882] RBP: 00007f4705810d69 R08: 0000200000000580 R09: 0000000000000000 [ 252.527840][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.536042][ T6882] R13: 0000000000000000 R14: 00007f47059b5fa0 R15: 00007fff449b13c8 [ 252.544662][ T6882] [ 252.547730][ T6882] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.555038][ T6882] CPU: 0 PID: 6882 Comm: syz.3.247 Not tainted 6.6.100-syzkaller #0 [ 252.563150][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.573252][ T6882] Call Trace: [ 252.576573][ T6882] [ 252.579544][ T6882] dump_stack_lvl+0x16c/0x230 [ 252.584292][ T6882] ? show_regs_print_info+0x20/0x20 [ 252.589540][ T6882] ? load_image+0x3b0/0x3b0 [ 252.594110][ T6882] panic+0x2c0/0x710 [ 252.598059][ T6882] ? bpf_jit_dump+0xd0/0xd0 [ 252.602633][ T6882] __warn+0x2e0/0x470 [ 252.606667][ T6882] ? __alloc_pages+0x2de/0x460 [ 252.611485][ T6882] ? __alloc_pages+0x2de/0x460 [ 252.616310][ T6882] report_bug+0x2be/0x4f0 [ 252.620686][ T6882] ? __alloc_pages+0x2de/0x460 [ 252.625501][ T6882] ? __alloc_pages+0x2de/0x460 [ 252.630312][ T6882] ? __alloc_pages+0x2e0/0x460 [ 252.635100][ T6882] handle_bug+0xcf/0x120 [ 252.639366][ T6882] exc_invalid_op+0x1a/0x50 [ 252.643884][ T6882] asm_exc_invalid_op+0x1a/0x20 [ 252.648758][ T6882] RIP: 0010:__alloc_pages+0x2de/0x460 [ 252.654155][ T6882] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 05 20 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 252.673784][ T6882] RSP: 0018:ffffc90003817a80 EFLAGS: 00010246 [ 252.679870][ T6882] RAX: ffffc90003817a00 RBX: 1ffff92000702f54 RCX: 0000000000000000 [ 252.687861][ T6882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003817ae8 [ 252.695850][ T6882] RBP: ffffc90003817b80 R08: ffffc90003817ae7 R09: 0000000000000000 [ 252.703856][ T6882] R10: ffffc90003817ac0 R11: fffff52000702f5d R12: 0000000000000017 [ 252.711842][ T6882] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 252.719858][ T6882] ? zone_statistics+0x170/0x170 [ 252.724829][ T6882] ? v9fs_fid_find+0x270/0x270 [ 252.729623][ T6882] __kmalloc_large_node+0x8c/0x1e0 [ 252.734763][ T6882] ? v9fs_fid_get_acl+0x4f/0xf0 [ 252.739637][ T6882] __kmalloc+0x111/0x240 [ 252.743902][ T6882] v9fs_fid_get_acl+0x4f/0xf0 [ 252.748607][ T6882] v9fs_get_acl+0x9a/0x350 [ 252.753064][ T6882] v9fs_mount+0x862/0xb40 [ 252.757428][ T6882] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 252.762831][ T6882] legacy_get_tree+0xea/0x180 [ 252.767534][ T6882] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 252.772927][ T6882] vfs_get_tree+0x8c/0x280 [ 252.777361][ T6882] do_new_mount+0x24b/0xa40 [ 252.781883][ T6882] __se_sys_mount+0x2da/0x3c0 [ 252.786577][ T6882] ? __x64_sys_mount+0xc0/0xc0 [ 252.791354][ T6882] ? lockdep_hardirqs_on+0x98/0x150 [ 252.796570][ T6882] ? __x64_sys_mount+0x20/0xc0 [ 252.801351][ T6882] do_syscall_64+0x55/0xb0 [ 252.805784][ T6882] ? clear_bhb_loop+0x40/0x90 [ 252.810492][ T6882] ? clear_bhb_loop+0x40/0x90 [ 252.815201][ T6882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.821138][ T6882] RIP: 0033:0x7f470578e9a9 [ 252.825580][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.845208][ T6882] RSP: 002b:00007f4706513038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.853700][ T6882] RAX: ffffffffffffffda RBX: 00007f47059b5fa0 RCX: 00007f470578e9a9 [ 252.861708][ T6882] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 252.869695][ T6882] RBP: 00007f4705810d69 R08: 0000200000000580 R09: 0000000000000000 [ 252.877693][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.885674][ T6882] R13: 0000000000000000 R14: 00007f47059b5fa0 R15: 00007fff449b13c8 [ 252.893672][ T6882] [ 252.896987][ T6882] Kernel Offset: disabled [ 252.901393][ T6882] Rebooting in 86400 seconds..