last executing test programs: 3m9.405990722s ago: executing program 3 (id=879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getrlimit(0xb, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x234) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x9c, 0x23b) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000180)={0x0, @reserved}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x9}}, @common=@unspec=@state={{0x28}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x20}, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b3) 3m7.878878523s ago: executing program 3 (id=881): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$proc_mixer(r1, &(0x7f0000000000)=[{'PHONEIN', @void}, {'MONITOR', @val={' \'', 'Line'}}, {'VOLUME', @val={' \'', 'Master Capture Switch'}}, {'LINE', @void}, {'LINE3', @val={' \'', 'Master Playback Switch'}}], 0x99) 3m6.4014859s ago: executing program 3 (id=884): r0 = syz_open_dev$media(&(0x7f0000000040), 0x310, 0x2001) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x249249249249269, 0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m6.108709228s ago: executing program 3 (id=887): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f00000005c0)=r0}, 0x20) syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x20000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 3m5.0833279s ago: executing program 3 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) alarm(0x2) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x110, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003b0007010000000000000000017c00000400fc80080001800400e2800800028004007280080070aa", @ANYRES32=r0, @ANYBLOB], 0x30}}, 0xc000) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f00000002c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000006605,errors=remount-ro,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp936,namecase=1,keep_last_dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00ae5a637b4cdf7db6ca2f1ee004696a9f8eba64f9abbe6ed336b9977b9f7da99c5f427d615381f8cc01febda6eacc"], 0x2, 0x152f, &(0x7f00000037c0)="$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") syz_genetlink_get_family_id$ipvs(0x0, r0) socket$nl_route(0x10, 0x3, 0x0) 3m4.343774733s ago: executing program 3 (id=891): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) syz_socket_connect_nvme_tcp() socket$packet(0x11, 0x3, 0x300) timerfd_create(0x1, 0x80000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x7, 0x1, 0x16, 0x5, 0x5, 0x8, 0x3, 0xa, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x80009, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x3, 0x20001e58, 0xb, 0xe66, 0x3, 0x995d000, 0x4085, 0x0, 0xfffffff8]}) preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) 2m49.298746243s ago: executing program 32 (id=891): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) syz_socket_connect_nvme_tcp() socket$packet(0x11, 0x3, 0x300) timerfd_create(0x1, 0x80000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x7, 0x1, 0x16, 0x5, 0x5, 0x8, 0x3, 0xa, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x80009, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x3, 0x20001e58, 0xb, 0xe66, 0x3, 0x995d000, 0x4085, 0x0, 0xfffffff8]}) preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) 14.892900095s ago: executing program 2 (id=1306): socket$inet(0x2, 0x4000000000000001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fadvise64(0xffffffffffffffff, 0x9, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 14.106124873s ago: executing program 2 (id=1309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getrlimit(0xb, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="340200007d00000005f3000000000000002000000000000000000000000000000000000000000000000000000000000000001b0004ff000000767b65766f6f7e05c60005000037d93a8bcd325792003800704a86020002007cfa673effeb09b57b8200b500012b595fcb14034354b9fd9ed696a51cd5157adc8103b494e100000000000000000000001800cfc29c69ab9de64cd85f2a70f5e9930e3c5db45a000000005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7189528fd1739e1c2d87fff00"/552, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x234) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x9c, 0x23b) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000180)={0x0, @reserved}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x9}}, @common=@unspec=@state={{0x28}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x20}, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b3) 12.212831501s ago: executing program 2 (id=1315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000200)=0x1ff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000340)=""/17, &(0x7f00000003c0)=0x11) 11.897296032s ago: executing program 2 (id=1316): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0xff, 0x2, 0xc, 0x6966, 0x10, 0x0, 0xfffff051, {0x0, @in={{0x2, 0x4e22, @local}}, 0x7, 0x9, 0x3, 0x8, 0x5}}, &(0x7f0000000100)=0xb0) 10.682924942s ago: executing program 2 (id=1318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@flag='rw'}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc4009420, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003280), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r3, 0x0, 0x808) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x43) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000000)={0x2f01, 0x0}) 6.843388503s ago: executing program 0 (id=1328): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, 0x0}, 0x40408c0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 6.794954297s ago: executing program 5 (id=1330): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000600)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc000000000000800100000020000000040000000000000078581acb6cc5dcfa094eb3a410545b99935500ffffffff000000530133c2", 0x4b}], 0x1) 5.745521251s ago: executing program 2 (id=1331): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001f6c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) syz_open_procfs$userns(r0, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000a40)=0x6, 0x4) socket$kcm(0x29, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r4, 0x80047437, 0x10000000000006) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r6 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff8000", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) preadv(r5, 0x0, 0x0, 0xd, 0x0) 5.738152772s ago: executing program 5 (id=1332): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8, 0x2, 0x0, 0x9915, 0x2, 0x3e, 0x5c, 0xfe, 0x40, 0x2, 0x7ff, 0x4, 0x38, 0x1, 0x9, 0xf33, 0x2}, [{0x6474e551, 0x8, 0x9, 0x7, 0x2a2, 0x1, 0x2, 0x100}]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.swap.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) 5.581516238s ago: executing program 5 (id=1333): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) close_range(0xffffffffffffffff, r1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.515598324s ago: executing program 1 (id=1334): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) socket$inet(0x2, 0x4000000805, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 5.462870819s ago: executing program 0 (id=1335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f00000005c0)=r0}, 0x20) syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 5.428177903s ago: executing program 1 (id=1336): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'syz_tun\x00'}) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3999}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f14889c2ad234ad6f0a71da72859c7c1e176134eff431253493482c723f8633d838bf127adff9f48a8854702b889321dfefd5644a03e0e41fb1cd1e442ac39d59aa0370071b34de016c447989af4c7d374e269dcbc1ce5f7083363d5bb2641018094b1721358f7a6c82f35dd9ed03c7be3fc46e5ef7b1fde49376ecde0494076cbe41c8292de99cc323303fda797e0704d3143999a0f53c8c056f2d7c2614c1bd977cc3e42e07548870d6bf096bf0369ee6a3f85cb27ec069f135e88005eb6147c3c08e1c787c9b5f9579653b876d44f3eb55573068fd1355b6fb755d1a72cb8eddfb7928f40f81e88e4", 0xea}], 0x1}, 0x20000044) 5.300438655s ago: executing program 0 (id=1337): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r2 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r2, 0x0, 0x0, 0x24064044) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xf6, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) r9 = socket$l2tp6(0xa, 0x2, 0x73) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8000) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r6, 0xcb0bc000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4.254726599s ago: executing program 1 (id=1338): socket(0x10, 0x803, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000001000000240000002b0000000000000718"], 0x30}, 0x4000010) 4.151616209s ago: executing program 1 (id=1339): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) keyctl$session_to_parent(0x12) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7c0}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb}) r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000f7ffffdc0a0000100000007301370000000000957a000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x54, '\x00', 0x0, @fallback=0x30, r7, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.833114831s ago: executing program 1 (id=1340): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) open(0x0, 0x1c1882, 0x12) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x5421, &(0x7f0000000000)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) syz_extract_tcp_res(0x0, 0x6, 0x51) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.832331721s ago: executing program 0 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@flag='rw'}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc4009420, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003280), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r3, 0x0, 0x808) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x43) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000000)={0x2f01, 0x0}) 3.634280371s ago: executing program 4 (id=1342): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) alarm(0x2) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x110, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4}}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003b0007010000000000000000017c00000400fc80080001800400e2800800028004007280080070aa", @ANYRES32=r0, @ANYBLOB], 0x30}}, 0xc000) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f00000002c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000006605,errors=remount-ro,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp936,namecase=1,keep_last_dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00ae5a637b4cdf7db6ca2f1ee004696a9f8eba64f9abbe6ed336b9977b9f7da99c5f427d615381f8cc01febda6eacc"], 0x2, 0x152f, &(0x7f00000037c0)="$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") syz_genetlink_get_family_id$ipvs(0x0, r0) socket$nl_route(0x10, 0x3, 0x0) 3.565601657s ago: executing program 5 (id=1343): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000000c0)={[{@jqfmt_vfsv1}]}, 0x1, 0x559, &(0x7f0000000100)="$eJzs3U9vI2cZAPBnHDu76QYSoIeC1D+ilbIV1N50aRtxaIuEuFUClfsSZb1RtE68ip2yiVaw+wFQJYSg4tYTFyQ+ABLqjStCqgQXThwQqMAuHCoEHTTjyQZnx43Tje3F/v2kN/N/nue1PePxzJuZAGbWMxHxekTMRcTzEbFUjK8UJW73Sjbfvbu3NrKSRJq++bckkmJcNltSlMyFYrHzvU6pzv7B9fVWq7lbDDe62zcanf2DF7a21zebm82dy5dXX157Ze2ltUslS1eHqNmdvqGsXq9+/U8/fvtn33j1V1/+7h+v/OXi97J8F4vph/UodXGIcAP0XpNa9lrcl2W/+8lX+UiZK+pTO3HOhbHkAwDAx8uO8T8bEV/Mj/+XYm6oY+ueZKSZAQAAAGclfW0x/p1EpAAAAMDUquRtYJNKvWgLsBiVSr3ea8P7eDxWabU73S9da+/tXO21lV2OWuXaVqt5ab7XpnY5akk2vJr3Hw2/eH846WsD/KOlhXx6faPdujq50x4AAAAwUy4c+/3/z6Xe7/+PcSdN03RsCQIAAABnY3nSCQAAAAAj9+Dv/3cnkgcAAAAwOq7/AwAAwFT75htvZCW9d/fWxlxEXH1rf+96+61fR7Nzvb69t1HfaO/eqG+225ut9FzE9knra7XbN74SO3s3G91mp9vo7B9c2W7v7XSvbPU9AhsAAAAYo888/d7vk4i4/dWFvGTmsz9zAxbotRWojC9DYFSG35Bt8jBtBn3NP6g60jyA8bNVw+yq9TrJyXP+yz3/YUqdtAMY2HjnNw8V1oNEAABgjFY+X379v3p0bgCYUq7qw+wqvf5vpwAzwfV/mF21U7QABKbPwhDznO9vAnDUXGDo6/+Hl/rn3QgEAAAmZDEvSaVenPZfjMqHaU8sRy25ttVqXoqIT0fE75Zq57Lh1XzJZJh/GgAAAAAAAAAAAAAAAAAAAAAAAAAA8rtyJ5ECAAAAUy2i8uekeKDXytJzi8fPD8wnHy7l3fzpAG/+5OZ6t7u7mo3/ezE+ovtOMf7F05x58JBhAAAAGJX8d/oPiu7qpLMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNrcu3tr47CMM+4HX4uI5bL41Tifd89HLSIe+0cS1cOFno5IImLuDOLfvhMRT5TFT7K0YrnIoi9+RFQiYiHPYuTxn0zTtDT+hYeODrPtvWz/83rZ9leJZ/Ju+fZfLcrDGrz/q9zf/82VxM/2PJ8aMsYX3v9Fo3zKud70avn+5zB+MiD+s2WrLHlRvvPtg4NBuaXvRqyUfv8kfbEa3e0bjc7+wQtb2+ubzc3mzuXLqy+vvbL20tqlxrWtVrP4Wxrjh0/+8qNB8fPvlgHxl/vrv368/s8druAE/3n/5t3PHYX731XEB3ciLj4bH6Xpg+//E/3x+17aufh+MVdvRSsRb/+1mLZyLP5TP//tU4Nyy+JfHVD/k97/iydXPff8t+73pkMuAgCMUGf/4Pp6q9XcPX3PwumWeidN008c65Q92RHzgEl/+Gmv4mcQKzs+OoOcHx+U6qPc89ppZk7PlX3YzuIt+P/sqT78x6Yy+BN+Rj0T3S0BAAAjcHTQP+lMAAAAAAAAAAAAAAAAAAAAYHaN44Znx2Pe7nXmJ1BdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICB/hsAAP//Nj3bgA==") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@remote, 0x40, 0x2, 0xff, 0x6, 0x0, 0x3}, 0x20) sendmsg$key(r4, &(0x7f0000000740)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x8001, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r7, r6, &(0x7f0000002700)=0x23, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 3.165346517s ago: executing program 4 (id=1344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_CHANINFO(r4, 0x80306403, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x0}) 1.71929621s ago: executing program 5 (id=1345): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x440, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) 1.601183732s ago: executing program 1 (id=1346): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, 0x0}, 0x40408c0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.263899305s ago: executing program 0 (id=1347): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f00000005c0)=r0}, 0x20) syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 441.554866ms ago: executing program 5 (id=1348): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0xa, 0x1, 0x4, 0x8, '\x00', 0x1}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002080)={0x2c, &(0x7f00000020c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) getpid() r2 = fsopen(0x0, 0x0) fsmount(r2, 0x0, 0x18) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 430.954738ms ago: executing program 0 (id=1349): mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x102172, 0xffffffffffffffff, 0xde585000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x3, 0x4000}, 0x80, 0x0, 0x4, 0x0, 0x9, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x4}}}}]}, 0x78}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x100400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'adq12b\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc5, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x8, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]}) 331.691248ms ago: executing program 4 (id=1350): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4080) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x77774002, 0x1b000, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x8000000, 0x10000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xdddd0000}) 137.195707ms ago: executing program 4 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 102.65028ms ago: executing program 4 (id=1352): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1353): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) close_range(0xffffffffffffffff, r1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): xattr,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,nodiscard,,errors=continue. Quota mode: none. [ 176.339475][ T5230] loop2: detected capacity change from 0 to 32768 [ 176.448207][ T5230] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 176.498492][ T5230] BTRFS error (device loop2): unrecognized mount option 'rw' [ 176.537807][ T5230] BTRFS error (device loop2): open_ctree failed: -22 [ 177.381184][ T4195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4195) [ 177.760618][ T5261] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 179.319758][ T5269] loop1: detected capacity change from 0 to 128 [ 179.461316][ T5269] qnx6: invalid mount options. [ 181.314482][ T5279] loop1: detected capacity change from 0 to 2048 [ 184.621188][ T5305] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 184.627291][ T5294] loop0: detected capacity change from 0 to 32768 [ 185.162974][ T5294] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 185.215645][ T5294] BTRFS error (device loop0): unrecognized mount option 'rw' [ 185.257354][ T5294] BTRFS error (device loop0): open_ctree failed: -22 [ 185.317021][ T4195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4195) [ 186.182759][ T5327] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.482756][ T5342] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 188.516107][ T5342] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 188.543143][ T5342] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 188.580219][ T5342] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 188.629966][ T5342] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 188.642766][ T5342] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 188.654800][ T5342] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 188.664018][ T5328] loop3: detected capacity change from 0 to 32768 [ 188.673655][ T5342] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 188.687840][ T5342] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 188.701619][ T5342] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 188.712017][ T5328] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.277 (5328) [ 188.728460][ T5342] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 188.783380][ T5328] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 188.813020][ T5328] BTRFS info (device loop3): enabling auto defrag [ 188.833246][ T5342] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 188.842213][ T5328] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 188.856674][ T5342] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 188.866046][ T5342] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 188.891514][ T5342] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 188.893914][ T5328] BTRFS info (device loop3): trying to use backup root at mount time [ 188.942250][ T5328] BTRFS info (device loop3): max_inline at 9 [ 188.956783][ T5328] BTRFS info (device loop3): force clearing of disk cache [ 188.985542][ T5328] BTRFS info (device loop3): turning on sync discard [ 189.005336][ T5328] BTRFS info (device loop3): disabling free space tree [ 189.012358][ T5328] BTRFS info (device loop3): has skinny extents [ 189.049843][ T5342] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 189.171618][ T5342] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 189.189837][ T5342] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 189.204852][ T5342] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 189.213289][ T5342] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 189.220509][ T5342] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 189.227559][ T5342] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 189.236676][ T5342] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 189.243890][ T5342] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 189.266520][ T5342] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 189.389514][ T5328] BTRFS error (device loop3): open_ctree failed: -12 [ 189.720902][ T5345] loop1: detected capacity change from 0 to 32768 [ 190.402713][ T4195] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4195) [ 190.437748][ T5345] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 190.477596][ T5345] BTRFS error (device loop1): unrecognized mount option 'rw' [ 190.514399][ T5345] BTRFS error (device loop1): open_ctree failed: -22 [ 190.707371][ T4174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4174) [ 194.320998][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.330273][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.385207][ T4868] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.589130][ T5407] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 194.625331][ T4868] usb 4-1: Using ep0 maxpacket: 16 [ 194.633225][ T5407] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 194.640249][ T5407] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 194.648663][ T5407] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 194.655561][ T5407] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 194.668328][ T5407] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 194.679846][ T5407] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 194.690058][ T5407] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 194.704564][ T5407] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 194.719026][ T5407] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 194.733692][ T5407] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 194.775433][ T4868] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 194.791995][ T4868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.821968][ T5407] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 194.826045][ T4868] usb 4-1: config 0 descriptor?? [ 194.838080][ T5407] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 194.855256][ T5407] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 194.868288][ T5410] loop4: detected capacity change from 0 to 512 [ 194.902420][ T4868] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 194.947682][ T5407] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 194.961160][ T5407] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 194.973170][ T5407] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 194.984546][ T5407] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 194.996093][ T5407] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 195.012590][ T5407] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 195.038807][ T5407] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 195.053427][ T5407] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 195.144028][ T5407] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 195.151711][ T5407] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 195.159634][ T5407] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 195.210951][ T5410] EXT4-fs (loop4): Test dummy encryption mode enabled [ 195.225510][ T5410] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 195.250885][ T5410] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.294149][ T5410] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.294: bad orphan inode 131083 [ 195.332607][ T5410] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 196.403339][ T4868] Bluetooth: hci2: command 0x0406 tx timeout [ 196.411240][ T4296] Bluetooth: hci0: command 0x0406 tx timeout [ 196.417997][ T4296] Bluetooth: hci4: command 0x0406 tx timeout [ 196.507176][ T5431] loop2: detected capacity change from 0 to 512 [ 196.594303][ T4868] Bluetooth: hci1: command 0x0406 tx timeout [ 196.631242][ T5431] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 196.645972][ T4868] usb 4-1: USB disconnect, device number 11 [ 196.955588][ T5431] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.299: iget: bogus i_mode (5) [ 196.995480][ T5431] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.299: couldn't read orphan inode 15 (err -117) [ 197.170275][ T5431] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 197.328306][ T5431] ext2 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.927878][ T5451] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 199.973429][ T5461] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 200.889617][ T5461] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 200.899295][ T5461] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 200.906766][ T5461] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 200.914690][ T5461] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 200.928353][ T5461] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 200.937656][ T5461] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 200.947757][ T5461] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 201.192644][ T5470] loop0: detected capacity change from 0 to 512 [ 201.238153][ T5461] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 201.267724][ T5461] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 201.276969][ T5461] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 201.416320][ T5470] EXT4-fs (loop0): Test dummy encryption mode enabled [ 201.436762][ T5470] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 201.755338][ T5479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.311'. [ 202.065294][ T5479] process 'syz.4.311' launched './file0' with NULL argv: empty string added [ 202.793666][ T5470] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.308: bad orphan inode 131083 [ 203.075678][ T5470] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 203.259915][ T5461] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 203.292509][ T5461] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 203.438315][ T5461] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 203.461663][ T5461] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 203.490956][ T5461] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 203.509667][ T5461] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 203.522653][ T5461] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 203.532593][ T5461] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 203.547869][ T5461] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 203.554778][ T5461] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 203.568637][ T5461] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 203.581383][ T5461] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 203.591596][ T5470] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 203.602986][ T5461] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 203.617723][ T5461] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 204.847168][ T5499] loop0: detected capacity change from 0 to 2048 [ 204.869374][ T5501] loop3: detected capacity change from 0 to 2048 [ 206.815351][ T4506] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 207.045262][ T4506] usb 3-1: device descriptor read/64, error -71 [ 207.325290][ T4506] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 207.535344][ T4506] usb 3-1: device descriptor read/64, error -71 [ 207.665502][ T4506] usb usb3-port1: attempt power cycle [ 211.114355][ T5538] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 211.217658][ T5538] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 211.227548][ T5538] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 211.244011][ T5538] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 211.263993][ T5538] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 211.271045][ T5538] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 211.316964][ T5538] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 211.463351][ T5538] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 211.472414][ T5538] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 211.493883][ T5538] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 211.527787][ T5538] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 211.588050][ T5538] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 211.599476][ T5538] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 211.608419][ T5538] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 211.619686][ T5538] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 211.629742][ T5538] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 211.642026][ T5538] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 211.650131][ T5538] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 211.657875][ T5538] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 211.667167][ T5538] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 211.673934][ T5538] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 211.680921][ T5538] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 211.690229][ T5538] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 211.698071][ T5538] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 211.705459][ T5538] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 212.267626][ T5552] loop1: detected capacity change from 0 to 512 [ 212.312097][ T5552] EXT4-fs (loop1): Ignoring removed orlov option [ 212.345272][ T5552] EXT4-fs (loop1): Ignoring removed bh option [ 212.351776][ T5552] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 212.859642][ T5554] loop4: detected capacity change from 0 to 2048 [ 216.847703][ T5584] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 216.854587][ T5584] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 216.917784][ T5584] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 216.924585][ T5584] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 216.972213][ T5584] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 216.986537][ T5584] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 216.994560][ T5584] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 217.003642][ T5584] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 217.012555][ T5584] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 217.024780][ T5584] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 217.043539][ T5584] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 217.073513][ T5584] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 217.112928][ T5584] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 217.120603][ T5584] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 217.412839][ T5584] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 217.507877][ T5584] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 217.608382][ T5584] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 217.651029][ T5584] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 217.697623][ T5584] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 217.753205][ T5584] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 217.777407][ T5584] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 217.804413][ T5584] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 217.824686][ T5584] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 217.865883][ T5584] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 217.883143][ T5584] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 218.523621][ T5597] loop0: detected capacity change from 0 to 2048 [ 218.578227][ T5603] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 220.427667][ T5617] binder: 5609:5617 ioctl 40182103 0 returned -22 [ 220.445242][ T5617] binder: 5609:5617 ioctl c0306201 200000000240 returned -14 [ 221.052056][ T4755] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 222.445521][ T4755] usb 3-1: device descriptor read/64, error -71 [ 223.020645][ T5632] loop2: detected capacity change from 0 to 512 [ 223.128021][ T5632] EXT4-fs (loop2): Ignoring removed orlov option [ 223.134689][ T5632] EXT4-fs (loop2): Ignoring removed bh option [ 223.193334][ T5632] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 228.169399][ T5668] binder: 5658:5668 ioctl 40182103 0 returned -22 [ 228.185363][ T5668] binder: 5658:5668 ioctl c0306201 200000000240 returned -14 [ 228.395210][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 228.423746][ T5670] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 228.441721][ T5670] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 228.452846][ T5670] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 228.463991][ T5670] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 228.476828][ T5670] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 228.483585][ T5670] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 228.491355][ T5670] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 228.499027][ T5670] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 228.673717][ T5670] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 228.696581][ T1108] usb 2-1: device descriptor read/64, error -71 [ 228.707408][ T5670] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 228.714656][ T5670] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 228.734939][ T5670] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 228.751850][ T5670] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 228.761104][ T5670] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 228.771152][ T5670] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 228.778840][ T5670] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 228.788561][ T5670] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 228.798609][ T5670] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 228.805646][ T5670] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 228.813205][ T5670] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 228.820703][ T5670] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 228.831550][ T5670] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 228.841676][ T5670] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 228.848627][ T5670] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 228.856504][ T5670] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 229.125202][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 229.315296][ T1108] usb 2-1: device descriptor read/64, error -71 [ 229.435464][ T1108] usb usb2-port1: attempt power cycle [ 229.845420][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 230.124325][ T1108] usb 2-1: device descriptor read/8, error -71 [ 230.369180][ T5693] loop0: detected capacity change from 0 to 512 [ 230.473901][ T5693] EXT4-fs (loop0): Ignoring removed orlov option [ 231.335233][ T5693] EXT4-fs (loop0): Ignoring removed bh option [ 231.344786][ T5693] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 231.448546][ T5695] loop1: detected capacity change from 0 to 32768 [ 231.638588][ T5695] XFS (loop1): Mounting V5 Filesystem [ 232.689986][ T5695] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 232.701838][ T5695] XFS (loop1): Unmount and run xfs_repair [ 232.708100][ T5695] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 232.716052][ T5695] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 232.725220][ T5695] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 232.734670][ T5695] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 232.743778][ T5695] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 232.753112][ T5695] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 232.762220][ T5695] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 232.856491][ T5695] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 232.865523][ T5695] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 232.875859][ T5695] XFS (loop1): failed to read RT inodes [ 233.471998][ T5721] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 235.298247][ T5733] binder: 5727:5733 ioctl 40182103 200000000300 returned -22 [ 235.310414][ T5733] binder: 5727:5733 ioctl c0306201 0 returned -14 [ 235.320005][ T5733] binder: 5727:5733 ioctl c0306201 200000000240 returned -14 [ 236.629960][ T5750] loop2: detected capacity change from 0 to 512 [ 236.865835][ T4755] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 237.249907][ T5750] EXT4-fs (loop2): Ignoring removed orlov option [ 237.440273][ T5750] EXT4-fs (loop2): Ignoring removed bh option [ 237.469142][ T5750] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 237.577411][ T4755] usb 5-1: device descriptor read/64, error -71 [ 237.683792][ T5757] loop3: detected capacity change from 0 to 40427 [ 237.750307][ T5757] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 237.757460][ T5757] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 237.780352][ T5757] F2FS-fs (loop3): invalid crc value [ 237.791757][ T5757] F2FS-fs (loop3): Found nat_bits in checkpoint [ 237.833803][ T5757] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 237.841094][ T5757] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 238.543054][ T4755] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 239.455260][ T4755] usb 5-1: device descriptor read/64, error -71 [ 239.666721][ T4755] usb usb5-port1: attempt power cycle [ 240.849508][ T5784] loop3: detected capacity change from 0 to 32768 [ 243.218267][ T5793] overlayfs: failed to resolve './file0': -2 [ 243.919580][ T5805] binder: BINDER_SET_CONTEXT_MGR already set [ 244.039800][ T5805] binder: 5796:5805 ioctl 4018620d 200000000040 returned -16 [ 244.128347][ T5805] binder: 5796:5805 ioctl 40182103 200000000300 returned -22 [ 244.137339][ T5805] binder: 5796:5805 ioctl c0306201 0 returned -14 [ 244.148577][ T5805] binder: 5796:5805 ioctl c0306201 200000000240 returned -14 [ 244.776701][ T5812] loop2: detected capacity change from 0 to 512 [ 244.927539][ T5816] loop3: detected capacity change from 0 to 2048 [ 244.967043][ T5812] EXT4-fs (loop2): Ignoring removed orlov option [ 245.005352][ T5812] EXT4-fs (loop2): Ignoring removed bh option [ 245.011734][ T5812] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 247.739782][ T4755] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 247.967601][ T4755] usb 3-1: device descriptor read/64, error -71 [ 248.245479][ T4755] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 248.471773][ T4755] usb 3-1: device descriptor read/64, error -71 [ 248.615596][ T4755] usb usb3-port1: attempt power cycle [ 249.275315][ T4755] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 249.348531][ T5844] netlink: 256 bytes leftover after parsing attributes in process `syz.3.401'. [ 250.338126][ T4755] usb 3-1: device not accepting address 9, error -71 [ 250.487314][ T5849] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 250.493887][ T5849] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 251.318294][ T5849] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 251.325595][ T5849] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 251.332467][ T5849] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 251.339738][ T5849] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 251.346638][ T5849] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 251.353409][ T5849] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 251.360511][ T5849] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 251.390168][ T5849] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 251.411742][ T5849] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 251.430186][ T5849] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 251.452570][ T5849] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 251.657686][ T5858] binder: 5852:5858 ioctl 40182103 200000000300 returned -22 [ 251.667259][ T5858] binder: 5852:5858 ioctl c0306201 0 returned -14 [ 251.676774][ T5858] binder: 5852:5858 ioctl c0306201 200000000240 returned -14 [ 252.336957][ T5849] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 252.381627][ T5860] loop3: detected capacity change from 0 to 512 [ 252.391945][ T5849] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 252.399756][ T5849] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 252.407977][ T5849] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 252.416187][ T5849] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 252.422827][ T5849] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 252.430783][ T5849] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 252.439514][ T5849] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 252.446364][ T5849] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 252.639784][ T5849] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 252.654076][ T5860] EXT4-fs (loop3): Ignoring removed orlov option [ 252.667931][ T5849] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 253.165120][ C1] hrtimer: interrupt took 50921 ns [ 253.433534][ T5860] EXT4-fs (loop3): Ignoring removed bh option [ 253.532278][ T5860] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 253.551041][ T5849] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 255.616811][ T5885] netlink: 256 bytes leftover after parsing attributes in process `syz.3.414'. [ 255.758237][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.768894][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.882807][ T5893] loop3: detected capacity change from 0 to 40427 [ 256.929068][ T5893] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 256.936276][ T5893] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 256.947472][ T5893] F2FS-fs (loop3): invalid crc value [ 256.979362][ T5893] F2FS-fs (loop3): Found nat_bits in checkpoint [ 257.048722][ T5893] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 257.056283][ T5893] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 257.344361][ T5905] tmpfs: Unknown parameter 'noswap' [ 257.833350][ T5906] binder: 5900:5906 ioctl 40182103 200000000300 returned -22 [ 257.846783][ T5906] binder: 5900:5906 ioctl c0306201 200000000240 returned -14 [ 259.123840][ T5921] loop4: detected capacity change from 0 to 512 [ 259.304764][ T5921] EXT4-fs (loop4): Ignoring removed orlov option [ 259.472683][ T5921] EXT4-fs (loop4): Ignoring removed bh option [ 259.611850][ T5919] loop2: detected capacity change from 0 to 2048 [ 259.662155][ T5921] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 264.415817][ T4868] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 264.568338][ T5954] netlink: 256 bytes leftover after parsing attributes in process `syz.3.433'. [ 265.413065][ T4868] usb 1-1: device descriptor read/64, error -71 [ 265.701016][ T5957] loop2: detected capacity change from 0 to 40427 [ 266.337313][ T5957] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 266.344328][ T5957] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 267.265800][ T5957] F2FS-fs (loop2): invalid crc value [ 267.302994][ T5958] binder: 5956:5958 ioctl 40182103 200000000300 returned -22 [ 267.314243][ T5958] binder: 5956:5958 ioctl c0306201 200000000240 returned -14 [ 267.371534][ T5957] F2FS-fs (loop2): Found nat_bits in checkpoint [ 267.439025][ T5957] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 267.446335][ T5957] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 267.829256][ T5972] tmpfs: Unknown parameter 'noswap' [ 270.657761][ T5988] loop4: detected capacity change from 0 to 512 [ 270.804215][ T5990] loop0: detected capacity change from 0 to 2048 [ 271.386380][ T5988] EXT4-fs (loop4): Ignoring removed orlov option [ 271.403330][ T5988] EXT4-fs (loop4): Ignoring removed bh option [ 271.485450][ T5988] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 271.524800][ T5996] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.061786][ T6003] netlink: 256 bytes leftover after parsing attributes in process `syz.3.444'. [ 275.717107][ T4277] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 275.925285][ T4277] usb 1-1: device descriptor read/64, error -71 [ 275.944429][ T6029] binder: 6026:6029 ioctl 40182103 200000000300 returned -22 [ 275.957122][ T6029] binder: 6026:6029 ioctl c0306201 200000000240 returned -14 [ 278.781197][ T6052] loop2: detected capacity change from 0 to 2048 [ 281.716743][ T6080] loop2: detected capacity change from 0 to 64 [ 283.474562][ T6090] loop3: detected capacity change from 0 to 40427 [ 283.732704][ T6092] loop2: detected capacity change from 0 to 32768 [ 283.934365][ T6090] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 283.941495][ T6090] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 283.972598][ T6090] F2FS-fs (loop3): invalid crc value [ 284.263012][ T6090] F2FS-fs (loop3): Found nat_bits in checkpoint [ 284.357590][ T6092] XFS (loop2): Mounting V5 Filesystem [ 284.408634][ T6090] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 284.415977][ T6090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 284.735795][ T6109] tmpfs: Unknown parameter 'noswap' [ 285.170193][ T6092] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 285.181760][ T6092] XFS (loop2): Unmount and run xfs_repair [ 285.187827][ T6092] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 285.195662][ T6092] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 285.204939][ T6092] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 285.213923][ T6092] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 285.223245][ T6092] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 285.232285][ T6092] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 285.241510][ T6092] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 285.250657][ T6092] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 285.259863][ T6092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 285.269076][ T6092] XFS (loop2): failed to read RT inodes [ 285.602896][ T6116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 286.284991][ T6126] netlink: 256 bytes leftover after parsing attributes in process `syz.4.470'. [ 289.071190][ T6140] loop1: detected capacity change from 0 to 64 [ 290.474189][ T6150] loop4: detected capacity change from 0 to 40427 [ 290.646922][ T6150] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 290.653977][ T6150] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 290.693487][ T6150] F2FS-fs (loop4): invalid crc value [ 290.782960][ T6150] F2FS-fs (loop4): Found nat_bits in checkpoint [ 290.917278][ T6150] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 290.924777][ T6150] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 291.777368][ T6160] tmpfs: Unknown parameter 'noswap' [ 295.302154][ T6177] loop2: detected capacity change from 0 to 2048 [ 299.500155][ T6214] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 301.066578][ T6221] loop2: detected capacity change from 0 to 32768 [ 301.358541][ T6221] XFS (loop2): Mounting V5 Filesystem [ 301.914323][ T6221] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 301.925505][ T6221] XFS (loop2): Unmount and run xfs_repair [ 301.931350][ T6221] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 301.938937][ T6221] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 301.947865][ T6221] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 301.956795][ T6221] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 301.965726][ T6221] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 301.975130][ T6221] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 301.984163][ T6221] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 301.993291][ T6221] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 302.002286][ T6221] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 302.011263][ T6221] XFS (loop2): failed to read RT inodes [ 302.249717][ T6236] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 302.687567][ T6239] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 302.707626][ T6239] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 303.926011][ T6239] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 303.932715][ T6239] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 303.939387][ T6239] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 303.945910][ T6239] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 303.952378][ T6239] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 303.958896][ T6239] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 303.965395][ T6239] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 303.971952][ T6239] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 303.997330][ T6239] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 304.020565][ T6239] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 304.039027][ T6239] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 304.078928][ T6239] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 304.088605][ T6239] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 304.097044][ T6239] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 304.647002][ T6239] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 304.654059][ T6239] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 304.800640][ T6239] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 304.863683][ T6239] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 305.005938][ T6239] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 305.012846][ T6239] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 305.021040][ T6239] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 305.028348][ T6239] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 305.035019][ T6239] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 306.241036][ T6282] netlink: 256 bytes leftover after parsing attributes in process `syz.2.504'. [ 308.980625][ T6292] loop2: detected capacity change from 0 to 32768 [ 309.115400][ T6290] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 309.611194][ T6292] XFS (loop2): Mounting V5 Filesystem [ 309.763814][ T6292] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 309.774731][ T6292] XFS (loop2): Unmount and run xfs_repair [ 309.780694][ T6292] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 309.788262][ T6292] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 309.797354][ T6292] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.806296][ T6292] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 309.815438][ T6292] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 309.824466][ T6292] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.833883][ T6292] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.843351][ T6292] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 309.852609][ T6292] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 309.862750][ T6292] XFS (loop2): failed to read RT inodes [ 312.831759][ T6322] loop2: detected capacity change from 0 to 512 [ 312.979073][ T6322] EXT4-fs (loop2): Test dummy encryption mode enabled [ 313.015780][ T6322] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 313.040369][ T6328] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 313.101078][ T6328] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 313.126782][ T6328] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 313.136630][ T6322] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.514: bad orphan inode 131083 [ 313.163475][ T6328] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 313.170353][ T6328] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 313.177848][ T6328] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 313.184486][ T6328] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 313.191200][ T6328] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 313.199879][ T6328] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 313.206018][ T6322] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 313.232266][ T6328] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 313.240952][ T6328] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 313.248349][ T6328] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 313.255603][ T6328] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 313.262433][ T6328] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 313.270706][ T6328] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 313.285116][ T6328] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 313.459358][ T6328] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 313.976896][ T6328] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 313.984419][ T6328] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 314.085287][ T6328] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 314.102371][ T6328] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 314.137122][ T6328] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 314.421627][ T6328] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 316.387306][ T6328] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 316.393783][ T6328] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 317.199019][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.206398][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.425403][ T6352] netlink: 256 bytes leftover after parsing attributes in process `syz.3.522'. [ 318.075417][ T6356] loop0: detected capacity change from 0 to 32768 [ 318.928698][ T6360] loop3: detected capacity change from 0 to 2048 [ 319.389876][ T6356] XFS (loop0): Mounting V5 Filesystem [ 320.379657][ T6356] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 320.390634][ T6356] XFS (loop0): Unmount and run xfs_repair [ 320.396555][ T6356] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 320.404592][ T6356] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 320.413514][ T6356] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 320.422567][ T6356] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 320.431624][ T6356] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 320.440751][ T6356] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 320.449667][ T6356] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 320.458673][ T6356] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 320.467580][ T6356] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 320.477061][ T6356] XFS (loop0): failed to read RT inodes [ 322.319496][ T4868] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 323.315150][ T4868] usb 3-1: Using ep0 maxpacket: 16 [ 323.445807][ T4868] usb 3-1: config 81 has an invalid interface number: 59 but max is 0 [ 323.465679][ T4868] usb 3-1: config 81 has no interface number 0 [ 323.515383][ T4868] usb 3-1: config 81 interface 59 has no altsetting 0 [ 323.700983][ T4868] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=fc.ba [ 323.723103][ T4868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.747554][ T4868] usb 3-1: Product: syz [ 323.789260][ T4868] usb 3-1: Manufacturer: syz [ 323.814682][ T4868] usb 3-1: SerialNumber: syz [ 324.327361][ T4868] legousbtower 3-1:81.59: interrupt endpoints not found [ 324.359509][ T4868] usb 3-1: USB disconnect, device number 11 [ 324.546858][ T6407] openvswitch: netlink: Key type 226 is out of range max 29 [ 324.594200][ T6407] loop4: detected capacity change from 0 to 256 [ 325.827423][ T6407] exfat: Deprecated parameter 'namecase' [ 325.834015][ T6407] exfat: Unknown parameter 'keep_last_dots' [ 328.965327][ T6438] loop1: detected capacity change from 0 to 32768 [ 329.294113][ T6438] XFS (loop1): Mounting V5 Filesystem [ 329.389886][ T6438] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 329.400970][ T6438] XFS (loop1): Unmount and run xfs_repair [ 329.406881][ T6438] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 329.414315][ T6438] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 329.424390][ T6438] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 329.433510][ T6438] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 329.442713][ T6438] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 329.451836][ T6438] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 329.461092][ T6438] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 329.470281][ T6438] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 329.479588][ T6438] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 329.489133][ T6438] XFS (loop1): failed to read RT inodes [ 330.256677][ T6428] loop4: detected capacity change from 0 to 32768 [ 330.329034][ T6457] netlink: 256 bytes leftover after parsing attributes in process `syz.1.545'. [ 334.950574][ T6493] loop1: detected capacity change from 0 to 512 [ 335.041852][ T6493] EXT4-fs (loop1): Test dummy encryption mode enabled [ 335.058099][ T6496] binder: 6489:6496 ioctl 40182103 200000000300 returned -22 [ 335.072511][ T6496] binder: 6489:6496 ioctl c0306201 200000000240 returned -14 [ 335.290058][ T6493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 335.552749][ T6493] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.557: bad orphan inode 131083 [ 335.739761][ T6493] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 336.477091][ T6505] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 339.818655][ T6546] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 340.331488][ T6550] binder: 6544:6550 ioctl 40182103 200000000300 returned -22 [ 340.478609][ T6548] binder: 6544:6548 ioctl c0306201 0 returned -14 [ 341.262821][ T6549] loop4: detected capacity change from 0 to 40427 [ 341.321093][ T6549] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 341.337552][ T6549] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 341.360492][ T6549] F2FS-fs (loop4): invalid crc value [ 341.487531][ T6549] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.493602][ T6581] loop0: detected capacity change from 0 to 512 [ 342.587202][ T6549] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 342.609326][ T6581] EXT4-fs (loop0): Ignoring removed orlov option [ 342.623345][ T6581] EXT4-fs (loop0): Ignoring removed bh option [ 342.640152][ T6581] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 342.655743][ T6549] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 347.014600][ T6603] binder: 6594:6603 ioctl 40182103 200000000300 returned -22 [ 347.026541][ T6603] binder: 6594:6603 ioctl c0306201 0 returned -14 [ 347.381251][ T6600] loop1: detected capacity change from 0 to 2048 [ 348.591210][ T6611] loop4: detected capacity change from 0 to 32768 [ 348.694401][ T6611] XFS (loop4): Mounting V5 Filesystem [ 349.001738][ T6611] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 349.012890][ T6611] XFS (loop4): Unmount and run xfs_repair [ 349.018758][ T6611] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 349.026321][ T6611] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 349.035426][ T6611] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 349.044539][ T6611] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 349.054506][ T6611] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 349.063679][ T6611] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 349.072865][ T6611] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 349.082364][ T6611] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 349.091925][ T6611] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 349.101157][ T6611] XFS (loop4): failed to read RT inodes [ 352.834994][ T6635] loop0: detected capacity change from 0 to 40427 [ 352.902836][ T6639] netlink: 256 bytes leftover after parsing attributes in process `syz.1.594'. [ 353.536410][ T6635] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 353.544002][ T6635] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 353.569869][ T6635] F2FS-fs (loop0): invalid crc value [ 353.623562][ T6635] F2FS-fs (loop0): Found nat_bits in checkpoint [ 353.680077][ T6648] loop1: detected capacity change from 0 to 512 [ 353.697144][ T6635] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 353.704330][ T6635] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 353.713950][ T6646] team0: Port device vlan2 added [ 353.944912][ T6648] EXT4-fs (loop1): Ignoring removed orlov option [ 354.467603][ T6648] EXT4-fs (loop1): Ignoring removed bh option [ 354.474142][ T6648] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 356.693503][ T6674] loop2: detected capacity change from 0 to 2048 [ 358.344506][ T6694] netlink: 256 bytes leftover after parsing attributes in process `syz.0.608'. [ 364.031838][ T6718] loop3: detected capacity change from 0 to 512 [ 364.101156][ T6723] loop2: detected capacity change from 0 to 512 [ 364.117198][ T6723] EXT4-fs (loop2): Test dummy encryption mode enabled [ 364.129523][ T6723] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 364.146899][ T6718] EXT4-fs (loop3): Ignoring removed orlov option [ 364.176989][ T6718] EXT4-fs (loop3): Ignoring removed bh option [ 364.183288][ T6718] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 364.198338][ T6723] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.615: bad orphan inode 131083 [ 364.222599][ T6723] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 364.288357][ T6720] hpfs: Bad magic ... probably not HPFS [ 365.337303][ T6730] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 366.990219][ T6751] loop1: detected capacity change from 0 to 40427 [ 367.002632][ T6751] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 367.009852][ T6751] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 367.020670][ T6751] F2FS-fs (loop1): invalid crc value [ 367.158989][ T6751] F2FS-fs (loop1): Found nat_bits in checkpoint [ 367.225979][ T6758] loop3: detected capacity change from 0 to 2048 [ 367.234464][ T6751] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 367.241906][ T6751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 367.524076][ T6763] tmpfs: Unknown parameter 'noswap' [ 374.365151][ T4277] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 375.093250][ T6801] loop4: detected capacity change from 0 to 40427 [ 375.102314][ T4277] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.115136][ T4277] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 375.145895][ T4277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.155005][ T4277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 375.185178][ T4277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 375.215194][ T6801] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 375.222214][ T6801] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 375.233282][ T6801] F2FS-fs (loop4): invalid crc value [ 375.279084][ T6801] F2FS-fs (loop4): Found nat_bits in checkpoint [ 375.332510][ T6801] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 375.340001][ T6801] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 375.526876][ T4277] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.536909][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.545977][ T4277] usb 4-1: Product: syz [ 375.550240][ T4277] usb 4-1: Manufacturer: syz [ 375.994104][ T6811] openvswitch: netlink: Key type 226 is out of range max 29 [ 376.123080][ T6813] loop1: detected capacity change from 0 to 2048 [ 376.137522][ T4277] cdc_wdm 4-1:1.0: skipping garbage [ 376.145581][ T4277] cdc_wdm 4-1:1.0: skipping garbage [ 376.168705][ T4277] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 376.175664][ T4277] cdc_wdm 4-1:1.0: Unknown control protocol [ 376.184120][ T4277] usb 4-1: USB disconnect, device number 12 [ 377.954650][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 377.964944][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 378.848285][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.855096][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.482956][ T6848] openvswitch: netlink: Key type 226 is out of range max 29 [ 379.970219][ T6852] hub 9-0:1.0: USB hub found [ 379.979918][ T6852] hub 9-0:1.0: 1 port detected [ 381.524427][ T6857] overlayfs: failed to clone lowerpath [ 381.535261][ T6857] overlayfs: failed to clone upperpath [ 384.014180][ T6870] crypto_alloc_aead failed rc=-2 [ 384.489463][ T6895] openvswitch: netlink: Key type 226 is out of range max 29 [ 385.800067][ T6912] loop1: detected capacity change from 0 to 512 [ 385.993394][ T6912] EXT4-fs (loop1): Test dummy encryption mode enabled [ 386.214051][ T6912] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 386.229445][ T6917] loop4: detected capacity change from 0 to 512 [ 386.257411][ T6918] overlayfs: failed to clone lowerpath [ 386.270518][ T6918] overlayfs: failed to clone upperpath [ 386.311947][ T6917] EXT4-fs (loop4): Ignoring removed orlov option [ 386.334433][ T6917] EXT4-fs (loop4): Ignoring removed bh option [ 386.341501][ T6917] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 386.354240][ T6912] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.668: bad orphan inode 131083 [ 386.399877][ T6912] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 386.886338][ T6924] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 387.760644][ T6945] openvswitch: netlink: Key type 226 is out of range max 29 [ 387.793844][ T6945] loop1: detected capacity change from 0 to 256 [ 388.435771][ T6945] exfat: Deprecated parameter 'namecase' [ 388.441720][ T6945] exfat: Unknown parameter 'keep_last_dots' [ 389.153275][ T6951] netlink: 'syz.1.678': attribute type 12 has an invalid length. [ 391.389000][ T6958] syz.1.680 (6958): drop_caches: 4 [ 393.806614][ T6974] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 394.463964][ T6989] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 394.471108][ T6989] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.083088][ T5359] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 395.114966][ T6989] vhci_hcd vhci_hcd.0: Device attached [ 395.315430][ T5359] usb 4-1: Using ep0 maxpacket: 16 [ 395.435310][ T1108] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 395.577086][ T5359] usb 4-1: config 0 has no interfaces? [ 395.583140][ T5359] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 395.793653][ T5359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.815548][ T5359] usb 4-1: config 0 descriptor?? [ 396.112085][ T7009] loop1: detected capacity change from 0 to 64 [ 396.147000][ T7010] openvswitch: netlink: Key type 226 is out of range max 29 [ 396.179705][ T7010] loop0: detected capacity change from 0 to 256 [ 396.826200][ T7010] exfat: Deprecated parameter 'namecase' [ 396.831948][ T7010] exfat: Unknown parameter 'keep_last_dots' [ 396.883440][ T7012] loop4: detected capacity change from 0 to 512 [ 396.922886][ T4506] usb 4-1: USB disconnect, device number 13 [ 396.931541][ T6995] vhci_hcd: connection closed [ 396.938921][ T4330] vhci_hcd: stop threads [ 396.974681][ T7012] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 397.119475][ T4330] vhci_hcd: release socket [ 397.145175][ T1108] usb 39-1: device descriptor read/64, error -71 [ 397.160870][ T7016] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20001 [ 397.172174][ T7012] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.695: iget: bogus i_mode (5) [ 397.219490][ T4330] vhci_hcd: disconnect device [ 397.352383][ T7012] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.695: couldn't read orphan inode 15 (err -117) [ 397.440633][ T1108] vhci_hcd: vhci_device speed not set [ 397.484973][ T7012] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 397.580422][ T7012] ext2 filesystem being mounted at /128/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.175205][ T4755] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 399.545378][ T4755] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.560972][ T4755] usb 1-1: config 0 has no interface number 0 [ 399.765413][ T4755] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 399.821184][ T4755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.835106][ T4755] usb 1-1: Product: syz [ 399.867080][ T4755] usb 1-1: Manufacturer: syz [ 399.871748][ T4755] usb 1-1: SerialNumber: syz [ 399.919735][ T4755] usb 1-1: config 0 descriptor?? [ 400.185415][ T4755] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 400.237239][ T4755] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 400.294960][ T4755] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 400.306093][ T4755] usb 1-1: media controller created [ 400.351010][ T4755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.544444][ T7039] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 400.675524][ T4755] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 400.806475][ T4755] usb 1-1: USB disconnect, device number 7 [ 404.516841][ T7072] loop1: detected capacity change from 0 to 32768 [ 404.589307][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 404.604914][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.713'. [ 404.857588][ T7072] XFS (loop1): Mounting V5 Filesystem [ 405.540141][ T7072] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 405.551234][ T7072] XFS (loop1): Unmount and run xfs_repair [ 405.557143][ T7072] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 405.564576][ T7072] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 405.573767][ T7072] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 405.583049][ T7072] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 405.592035][ T7072] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 405.602379][ T7072] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 405.611531][ T7072] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 405.620599][ T7072] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 405.631920][ T7072] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 405.641264][ T7072] XFS (loop1): failed to read RT inodes [ 406.305503][ T7110] overlayfs: overlapping lowerdir path [ 406.979628][ T7121] loop3: detected capacity change from 0 to 2048 [ 407.466573][ T7128] netlink: 256 bytes leftover after parsing attributes in process `syz.1.724'. [ 410.737154][ T7143] openvswitch: netlink: Key type 226 is out of range max 29 [ 411.063487][ T7143] loop4: detected capacity change from 0 to 256 [ 411.666042][ T7143] exfat: Deprecated parameter 'namecase' [ 411.671796][ T7143] exfat: Unknown parameter 'keep_last_dots' [ 412.511698][ T7147] loop1: detected capacity change from 0 to 32768 [ 412.636900][ T7147] XFS (loop1): Mounting V5 Filesystem [ 412.946162][ T7147] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 412.957150][ T7147] XFS (loop1): Unmount and run xfs_repair [ 412.963042][ T7147] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 412.971095][ T7147] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 412.980887][ T7147] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 412.989989][ T7147] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 412.999254][ T7147] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 413.008238][ T7147] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 413.017381][ T7147] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 413.026786][ T7147] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 413.036036][ T7147] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 413.046122][ T7147] XFS (loop1): failed to read RT inodes [ 415.045264][ T4227] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 415.258169][ T7192] loop1: detected capacity change from 0 to 512 [ 416.016628][ T7192] EXT4-fs (loop1): Test dummy encryption mode enabled [ 416.074795][ T7192] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 416.269392][ T7192] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.743: bad orphan inode 131083 [ 416.314511][ T7192] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 416.628264][ T4227] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 416.716829][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.796692][ T7200] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 417.035997][ T4227] usb 4-1: config 0 descriptor?? [ 417.090549][ T4227] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 417.132516][ T7188] loop0: detected capacity change from 0 to 32768 [ 417.364111][ T7188] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 417.393862][ T7188] BTRFS error (device loop0): unrecognized mount option 'rw' [ 417.769285][ T7188] BTRFS error (device loop0): open_ctree failed: -22 [ 417.797865][ T4195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4195) [ 419.368212][ T7229] loop1: detected capacity change from 0 to 512 [ 420.048272][ T7229] EXT4-fs (loop1): Ignoring removed orlov option [ 420.082867][ T7229] EXT4-fs (loop1): Ignoring removed bh option [ 420.117923][ T7229] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 420.129883][ T4227] gspca_stv06xx: I2C: Read error writing address: -71 [ 420.169774][ T4227] usb 4-1: USB disconnect, device number 14 [ 420.574847][ T7248] loop0: detected capacity change from 0 to 512 [ 421.485592][ T7248] EXT4-fs (loop0): Test dummy encryption mode enabled [ 421.492447][ T7248] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 421.705379][ T4868] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 421.853754][ T7248] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.756: bad orphan inode 131083 [ 421.892203][ T7248] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 421.971630][ T7257] loop3: detected capacity change from 0 to 32768 [ 422.145421][ T4868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.401320][ T7261] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 422.495368][ T4868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.585495][ T4868] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 422.606246][ T4868] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 422.614400][ T4868] usb 5-1: Manufacturer: syz [ 422.806523][ T4868] usb 5-1: config 0 descriptor?? [ 422.825995][ T7257] XFS (loop3): Mounting V5 Filesystem [ 423.896310][ T7257] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 423.907306][ T7257] XFS (loop3): Unmount and run xfs_repair [ 423.913060][ T7257] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 423.920724][ T7257] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 423.930373][ T7257] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 423.939321][ T7257] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 423.948319][ T7257] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 423.957263][ T7257] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 423.966279][ T7257] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 423.975363][ T7257] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 423.984616][ T7257] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 423.993824][ T7257] XFS (loop3): failed to read RT inodes [ 424.173382][ T7285] loop0: detected capacity change from 0 to 2048 [ 424.395890][ T4868] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 424.722482][ T7290] openvswitch: netlink: Key type 226 is out of range max 29 [ 425.916161][ T4868] usb 5-1: USB disconnect, device number 8 [ 425.944519][ T7299] capability: warning: `syz.1.766' uses deprecated v2 capabilities in a way that may be insecure [ 426.008449][ T7303] overlayfs: failed to set xattr on upper [ 426.074218][ T7303] overlayfs: ...falling back to index=off,metacopy=off. [ 426.865320][ T4864] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 427.093672][ T7331] tmpfs: Unknown parameter 'grpquota' [ 427.271721][ T7327] loop4: detected capacity change from 0 to 32768 [ 427.315399][ T4864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 427.381009][ T7327] XFS (loop4): Mounting V5 Filesystem [ 427.399857][ T4864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.459975][ T7327] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 427.470737][ T7327] XFS (loop4): Unmount and run xfs_repair [ 427.474565][ T4864] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 427.476767][ T7327] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 427.493733][ T7327] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 427.502787][ T7327] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.511912][ T7327] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 427.521722][ T7327] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 427.531356][ T7327] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.540329][ T7327] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.549439][ T7327] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 427.558369][ T7327] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 427.567645][ T7327] XFS (loop4): failed to read RT inodes [ 427.638557][ T4864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.658301][ T4864] usb 4-1: config 0 descriptor?? [ 428.717638][ T4864] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 429.014308][ T4864] usb 4-1: USB disconnect, device number 15 [ 429.574752][ T7367] fido_id[7367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 430.460027][ T7385] loop1: detected capacity change from 0 to 32768 [ 430.529087][ T7387] hub 9-0:1.0: USB hub found [ 430.536546][ T7387] hub 9-0:1.0: 1 port detected [ 430.626693][ T7366] loop0: detected capacity change from 0 to 32768 [ 430.677313][ T7385] XFS (loop1): Mounting V5 Filesystem [ 430.787879][ T7385] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 430.799333][ T7385] XFS (loop1): Unmount and run xfs_repair [ 430.805226][ T7385] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 430.812716][ T7385] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 430.822081][ T7385] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 430.831226][ T7385] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 430.840354][ T7385] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 430.849351][ T7385] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 430.858484][ T7385] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 430.867905][ T7385] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 430.877229][ T7385] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 430.886492][ T7385] XFS (loop1): failed to read RT inodes [ 430.973488][ T7366] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 430.993721][ T7366] BTRFS error (device loop0): unrecognized mount option 'rw' [ 431.036462][ T7366] BTRFS error (device loop0): open_ctree failed: -22 [ 431.992334][ T4174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4174) [ 432.821655][ T7435] openvswitch: netlink: Key type 226 is out of range max 29 [ 435.601797][ T7444] crypto_alloc_aead failed rc=-2 [ 435.993152][ T7454] loop3: detected capacity change from 0 to 32768 [ 436.360149][ T7454] XFS (loop3): Mounting V5 Filesystem [ 436.548538][ T7454] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 436.559813][ T7454] XFS (loop3): Unmount and run xfs_repair [ 436.565968][ T7454] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 436.573594][ T7454] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 436.582543][ T7454] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 436.591586][ T7454] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 436.600526][ T7454] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 436.609475][ T7454] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 436.618527][ T7454] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 436.628238][ T7454] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 436.637521][ T7454] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 436.646654][ T7454] XFS (loop3): failed to read RT inodes [ 438.024740][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 438.134753][ T7462] loop1: detected capacity change from 0 to 32768 [ 438.238371][ T7462] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 438.429799][ T7462] BTRFS error (device loop1): unrecognized mount option 'rw' [ 438.452408][ T7462] BTRFS error (device loop1): open_ctree failed: -22 [ 438.469220][ T5916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5916) [ 440.087514][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.094063][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.562975][ T7530] loop4: detected capacity change from 0 to 32768 [ 443.056133][ T7530] XFS (loop4): Mounting V5 Filesystem [ 443.812531][ T7530] XFS (loop4): log mount failed [ 446.089084][ T7566] loop3: detected capacity change from 0 to 32768 [ 447.319528][ T7592] loop1: detected capacity change from 0 to 2048 [ 448.166800][ T7566] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 448.224501][ T7566] BTRFS error (device loop3): unrecognized mount option 'rw' [ 448.248746][ T7566] BTRFS error (device loop3): open_ctree failed: -22 [ 448.294386][ T26] audit: type=1326 audit(1760576542.700:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9256aec9 code=0x7ffc0000 [ 448.361293][ T26] audit: type=1326 audit(1760576542.730:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7601 comm="syz.2.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a9256aec9 code=0x7ffc0000 [ 449.861085][ T7623] loop1: detected capacity change from 0 to 512 [ 450.135249][ T7623] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 450.151236][ T7625] loop0: detected capacity change from 0 to 32768 [ 450.303025][ T7623] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.847: iget: bogus i_mode (5) [ 450.326552][ T7625] XFS (loop0): Mounting V5 Filesystem [ 450.896913][ T7623] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.847: couldn't read orphan inode 15 (err -117) [ 450.977050][ T7625] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 450.988155][ T7625] XFS (loop0): Unmount and run xfs_repair [ 450.994054][ T7625] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 451.001638][ T7625] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 451.010695][ T7625] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 451.020268][ T7625] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 451.030076][ T7625] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 451.032823][ T7623] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 451.039219][ T7625] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 451.039240][ T7625] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 451.039256][ T7625] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 451.079641][ T7625] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 451.089259][ T7625] XFS (loop0): failed to read RT inodes [ 451.165766][ T7623] ext2 filesystem being mounted at /166/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.215315][ T4868] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 453.525301][ T4868] usb 2-1: Using ep0 maxpacket: 16 [ 454.085396][ T4868] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 454.476005][ T4868] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 454.544063][ T4868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.660264][ T4868] usb 2-1: Product: syz [ 454.778307][ T4868] usb 2-1: Manufacturer: syz [ 454.824497][ T4868] usb 2-1: SerialNumber: syz [ 454.926370][ T4868] usb 2-1: config 0 descriptor?? [ 455.246943][ T7664] loop4: detected capacity change from 0 to 32768 [ 455.355364][ T7664] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.861 (7664) [ 455.400603][ T7664] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 455.409887][ T7664] BTRFS error (device loop4): unrecognized mount option 'rw' [ 455.422633][ T7664] BTRFS error (device loop4): open_ctree failed: -22 [ 456.084527][ T5916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (5916) [ 456.686052][ T7706] netlink: 256 bytes leftover after parsing attributes in process `syz.4.868'. [ 457.374297][ T4277] usb 2-1: USB disconnect, device number 8 [ 457.755296][ T1108] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 458.064559][ T7721] overlayfs: missing 'lowerdir' [ 458.395695][ T1108] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 458.445204][ T1108] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 458.535216][ T1108] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 458.750480][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.785472][ T7708] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 460.403606][ T7739] sg_write: data in/out 172902689/107 bytes for SCSI command 0x30-- guessing data in; [ 460.403606][ T7739] program syz.3.881 not setting count and/or reply_len properly [ 460.785654][ T7744] netlink: 256 bytes leftover after parsing attributes in process `syz.2.882'. [ 461.910071][ T1108] usb 5-1: USB disconnect, device number 9 [ 462.052289][ T7754] loop0: detected capacity change from 0 to 512 [ 463.001672][ T7762] openvswitch: netlink: Key type 226 is out of range max 29 [ 463.035516][ T7762] loop3: detected capacity change from 0 to 256 [ 463.536369][ T7762] exfat: Deprecated parameter 'namecase' [ 463.542407][ T7762] exfat: Unknown parameter 'keep_last_dots' [ 463.565273][ T7754] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 463.632721][ T7754] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.886: iget: bogus i_mode (5) [ 463.696929][ T7754] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.886: couldn't read orphan inode 15 (err -117) [ 463.909304][ T7754] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 464.121435][ T7773] overlayfs: missing 'lowerdir' [ 465.065931][ T7754] ext2 filesystem being mounted at /168/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.249387][ T7775] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 465.257545][ T7775] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 465.264312][ T7775] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 465.271732][ T7775] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 465.278586][ T7775] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 465.286291][ T7775] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 465.426366][ T7775] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 466.085646][ T7775] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 466.097095][ T7775] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 466.215834][ T7775] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 466.228604][ T7775] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 466.235645][ T7775] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 466.251814][ T7775] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 466.273430][ T7775] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 466.285266][ T7775] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 466.293693][ T7775] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 466.304274][ T7775] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 466.311192][ T7775] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 466.320693][ T7775] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 466.329589][ T7775] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 466.385130][ T7775] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 466.395672][ T7775] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 466.404145][ T7775] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 466.415146][ T7775] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 466.422811][ T7775] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 466.771512][ T7805] loop1: detected capacity change from 0 to 512 [ 466.892510][ T7805] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 466.954295][ T7805] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.901: iget: bogus i_mode (5) [ 467.037543][ T7805] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.901: couldn't read orphan inode 15 (err -117) [ 467.101046][ T7805] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 467.114315][ T7805] ext2 filesystem being mounted at /172/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.950447][ T7825] overlayfs: missing 'lowerdir' [ 472.943472][ T7863] loop1: detected capacity change from 0 to 512 [ 472.966115][ T7867] netlink: 256 bytes leftover after parsing attributes in process `syz.0.915'. [ 473.113059][ T7863] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 473.229710][ T7863] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.918: iget: bogus i_mode (5) [ 473.511583][ T7863] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.918: couldn't read orphan inode 15 (err -117) [ 473.541491][ T7863] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 473.567256][ T7863] ext2 filesystem being mounted at /175/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.778173][ T7883] overlayfs: unrecognized mount option "/" or missing value [ 479.167480][ T7935] overlayfs: unrecognized mount option "/" or missing value [ 479.688466][ T7938] loop1: detected capacity change from 0 to 512 [ 479.867203][ T7938] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 480.097270][ T7938] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.936: iget: bogus i_mode (5) [ 480.162361][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 480.172142][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 480.370980][ T7938] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.936: couldn't read orphan inode 15 (err -117) [ 480.533535][ T7938] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 480.854388][ T7938] ext2 filesystem being mounted at /179/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.848751][ T7954] chnl_net:caif_netlink_parms(): no params data found [ 484.587877][ T7980] overlayfs: unrecognized mount option "/" or missing value [ 484.837136][ T4506] Bluetooth: hci5: command 0x0409 tx timeout [ 485.486029][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.949'. [ 485.497837][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.949'. [ 486.679436][ T8005] loop4: detected capacity change from 0 to 512 [ 486.735664][ T8005] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 486.875151][ T4506] Bluetooth: hci5: command 0x041b tx timeout [ 486.936408][ T8005] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.953: iget: bogus i_mode (5) [ 486.948288][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.955701][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.963349][ T8005] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.953: couldn't read orphan inode 15 (err -117) [ 486.979100][ T7954] device bridge_slave_0 entered promiscuous mode [ 486.989382][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.995573][ T8005] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 487.001000][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.017673][ T7954] device bridge_slave_1 entered promiscuous mode [ 487.102361][ T8005] ext2 filesystem being mounted at /175/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.889493][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.628439][ T8027] loop0: detected capacity change from 0 to 32768 [ 488.640055][ T8030] openvswitch: netlink: Key type 226 is out of range max 29 [ 488.675075][ T8030] loop1: detected capacity change from 0 to 256 [ 489.074561][ T4506] Bluetooth: hci5: command 0x040f tx timeout [ 489.137293][ T8030] exfat: Deprecated parameter 'namecase' [ 489.140893][ T7954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.143079][ T8030] exfat: Unknown parameter 'keep_last_dots' [ 489.256943][ T8027] XFS (loop0): Mounting V5 Filesystem [ 489.359436][ T8027] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 489.371123][ T8027] XFS (loop0): Unmount and run xfs_repair [ 489.376991][ T8027] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 489.384782][ T8027] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 489.393918][ T8027] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 489.402948][ T8027] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 489.412051][ T8027] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 489.421035][ T8027] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 489.436328][ T8027] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 489.446389][ T8027] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 489.456019][ T8027] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 489.466574][ T8027] XFS (loop0): failed to read RT inodes [ 489.526540][ T7954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.629742][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.976250][ T8046] overlayfs: overlapping lowerdir path [ 490.127167][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.250514][ T7954] team0: Port device team_slave_0 added [ 490.435521][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.500153][ T8055] netlink: 256 bytes leftover after parsing attributes in process `syz.0.960'. [ 491.194555][ T4506] Bluetooth: hci5: command 0x0419 tx timeout [ 491.345091][ T4868] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 491.816563][ T7954] team0: Port device team_slave_1 added [ 492.083243][ T8062] loop1: detected capacity change from 0 to 64 [ 492.135387][ T4868] usb 5-1: Using ep0 maxpacket: 8 [ 492.357781][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.382727][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.410034][ T7954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.431433][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.451535][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.515387][ T4868] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 492.538120][ T4868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.541301][ T7954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.579038][ T4868] usb 5-1: Product: syz [ 492.594769][ T4868] usb 5-1: Manufacturer: syz [ 492.630245][ T4868] usb 5-1: SerialNumber: syz [ 492.657674][ T4868] usb 5-1: config 0 descriptor?? [ 492.747572][ T4868] gspca_main: sq930x-2.14.0 probing 2770:930c [ 492.776383][ T7954] device hsr_slave_0 entered promiscuous mode [ 492.790858][ T7954] device hsr_slave_1 entered promiscuous mode [ 492.997251][ T4868] gspca_sq930x: reg_r 001f failed -71 [ 493.003036][ T7954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.009848][ T4868] sq930x: probe of 5-1:0.0 failed with error -71 [ 493.017746][ T7954] Cannot create hsr debugfs directory [ 493.107575][ T4868] usb 5-1: USB disconnect, device number 10 [ 494.914860][ T8099] tmpfs: Unknown parameter 'noswap' [ 495.458719][ T8100] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 496.150106][ T7954] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 496.215834][ T7954] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 496.251603][ T7954] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 496.310172][ T7954] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 497.116320][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.352245][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 497.369322][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 497.408428][ T7954] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.479110][ T155] device hsr_slave_0 left promiscuous mode [ 497.501333][ T155] device hsr_slave_1 left promiscuous mode [ 497.527558][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.550516][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.585426][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.615562][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.771960][ T155] device bridge_slave_1 left promiscuous mode [ 497.782377][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.832573][ T155] device bridge_slave_0 left promiscuous mode [ 497.855573][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.039450][ T155] device veth1_macvtap left promiscuous mode [ 498.071172][ T155] device veth0_macvtap left promiscuous mode [ 498.099277][ T155] device veth1_vlan left promiscuous mode [ 498.122262][ T155] device veth0_vlan left promiscuous mode [ 498.830994][ T8144] loop0: detected capacity change from 0 to 32768 [ 499.050632][ T8155] netlink: 256 bytes leftover after parsing attributes in process `syz.4.978'. [ 499.506653][ T8144] XFS (loop0): Mounting V5 Filesystem [ 499.533221][ T8167] loop4: detected capacity change from 0 to 512 [ 499.583251][ T8167] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 499.648289][ T8144] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 499.660288][ T8144] XFS (loop0): Unmount and run xfs_repair [ 499.666155][ T8144] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 499.673553][ T8144] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 499.682575][ T8144] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 499.691743][ T8144] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 499.700945][ T8144] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 499.710818][ T8144] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 499.720243][ T8144] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 499.729535][ T8144] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 499.738476][ T8144] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 499.747685][ T8144] XFS (loop0): failed to read RT inodes [ 499.845617][ T8167] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.980: iget: bogus i_mode (5) [ 499.887208][ T8167] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.980: couldn't read orphan inode 15 (err -117) [ 499.945452][ T8167] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 499.962834][ T155] team0 (unregistering): Port device team_slave_1 removed [ 499.978493][ T8167] ext2 filesystem being mounted at /180/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.009525][ T155] team0 (unregistering): Port device team_slave_0 removed [ 500.069357][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.144332][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.503078][ T155] bond0 (unregistering): Released all slaves [ 501.487948][ T8187] loop4: detected capacity change from 0 to 40427 [ 501.502563][ T8187] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 501.510045][ T8187] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 501.522766][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.529505][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.538411][ T8187] F2FS-fs (loop4): invalid crc value [ 501.600275][ T8187] F2FS-fs (loop4): Found nat_bits in checkpoint [ 501.641371][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 501.706045][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.757117][ T8187] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 501.764316][ T8187] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 501.825872][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.833097][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.868431][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 501.885891][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.894708][ T4452] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.901952][ T4452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.935827][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 501.964595][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.079617][ T8197] tmpfs: Unknown parameter 'noswap' [ 502.442550][ T7954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.485193][ T7954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.612307][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.628992][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.685191][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.701507][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.713895][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.826257][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.912699][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.984709][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.041248][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.096938][ T8209] loop4: detected capacity change from 0 to 512 [ 503.104575][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 503.126078][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.139746][ T8209] EXT4-fs (loop4): Ignoring removed orlov option [ 503.155695][ T8209] EXT4-fs (loop4): Ignoring removed bh option [ 503.161984][ T8209] EXT4-fs (loop4): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 504.611481][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.025512][ T8233] netlink: 256 bytes leftover after parsing attributes in process `syz.2.989'. [ 505.038720][ T8234] loop1: detected capacity change from 0 to 64 [ 505.206882][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 505.322785][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.899053][ T8247] netlink: 256 bytes leftover after parsing attributes in process `syz.1.991'. [ 508.627491][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 508.663158][ T8260] loop1: detected capacity change from 0 to 40427 [ 508.672910][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 508.721330][ T8260] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 508.728701][ T8260] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 508.781356][ T8260] F2FS-fs (loop1): invalid crc value [ 508.789409][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 508.810662][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 508.840069][ T8260] F2FS-fs (loop1): Found nat_bits in checkpoint [ 508.867600][ T7954] device veth0_vlan entered promiscuous mode [ 508.894446][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 508.912656][ T8260] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 508.919866][ T8260] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 509.070277][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.097388][ T7954] device veth1_vlan entered promiscuous mode [ 509.177166][ T8279] tmpfs: Unknown parameter 'noswap' [ 509.563371][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.608405][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.633358][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 509.893296][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 510.028866][ T7954] device veth0_macvtap entered promiscuous mode [ 510.064141][ T8288] loop0: detected capacity change from 0 to 512 [ 510.132098][ T8288] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 510.216592][ T8288] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1000: iget: bogus i_mode (5) [ 510.348328][ T8288] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1000: couldn't read orphan inode 15 (err -117) [ 510.395930][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 510.427465][ T8288] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 510.428490][ T7954] device veth1_macvtap entered promiscuous mode [ 510.460425][ T8288] ext2 filesystem being mounted at /194/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.492132][ T8301] overlayfs: missing 'lowerdir' [ 511.638060][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.649438][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.695028][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.720647][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.741000][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.793727][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.828960][ T8310] loop4: detected capacity change from 0 to 512 [ 511.845969][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.911470][ T8310] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 511.945023][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.014058][ T8310] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1004: iget: bogus i_mode (5) [ 512.055945][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.081269][ T8310] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1004: couldn't read orphan inode 15 (err -117) [ 512.097917][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 512.138202][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 512.166076][ T8310] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 512.191244][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.304950][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.318995][ T8310] ext2 filesystem being mounted at /185/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.338159][ T8318] openvswitch: netlink: Key type 226 is out of range max 29 [ 512.705661][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.094582][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.104869][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.130364][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.212871][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.515186][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.555921][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.596889][ T7954] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.624316][ T7954] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.643812][ T7954] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.684056][ T7954] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.205095][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 515.287632][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 515.354280][ T8331] tmpfs: Unknown parameter 'noswap' [ 515.522357][ T8333] loop0: detected capacity change from 0 to 512 [ 515.642192][ T8335] hpfs: Bad magic ... probably not HPFS [ 515.647995][ T8333] EXT4-fs (loop0): Ignoring removed orlov option [ 515.706698][ T8333] EXT4-fs (loop0): Ignoring removed bh option [ 515.771728][ T8333] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 515.907407][ T8329] loop1: detected capacity change from 0 to 32768 [ 517.255910][ T8329] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 517.352205][ T8347] overlayfs: missing 'lowerdir' [ 517.401851][ T8347] overlayfs: failed to clone upperpath [ 517.437395][ T8329] BTRFS error (device loop1): unrecognized mount option 'rw' [ 517.522259][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.544101][ T8329] BTRFS error (device loop1): open_ctree failed: -22 [ 517.568806][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.578107][ T8351] loop4: detected capacity change from 0 to 2048 [ 517.615941][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 517.794289][ T4195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4195) [ 517.882091][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.919429][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.022917][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 518.767974][ T8371] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1016'. [ 520.638387][ T8394] hpfs: Bad magic ... probably not HPFS [ 521.209597][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 521.220051][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 521.735198][ T8408] loop0: detected capacity change from 0 to 32768 [ 521.837104][ T8399] loop5: detected capacity change from 0 to 512 [ 521.902560][ T8408] XFS (loop0): Mounting V5 Filesystem [ 521.923350][ T8399] EXT4-fs (loop5): Ignoring removed orlov option [ 521.935218][ T8399] EXT4-fs (loop5): Ignoring removed bh option [ 521.966953][ T8399] EXT4-fs (loop5): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 522.446878][ T8408] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 522.457701][ T8408] XFS (loop0): Unmount and run xfs_repair [ 522.463527][ T8408] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 522.471130][ T8408] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 522.480929][ T8408] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 522.490130][ T8408] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 522.499196][ T8408] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 522.508239][ T8408] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 522.517253][ T8408] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 522.526460][ T8408] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 522.535638][ T8408] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 522.545180][ T8408] XFS (loop0): failed to read RT inodes [ 523.057229][ T8428] loop5: detected capacity change from 0 to 2048 [ 523.329214][ T8431] loop1: detected capacity change from 0 to 512 [ 523.380140][ T8431] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 523.471393][ T8431] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1028: iget: bogus i_mode (5) [ 523.485294][ T8431] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1028: couldn't read orphan inode 15 (err -117) [ 523.602321][ T8431] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 523.698176][ T8431] ext2 filesystem being mounted at /202/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.092919][ T8461] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1031'. [ 525.971707][ T8438] loop0: detected capacity change from 0 to 32768 [ 526.079277][ T8438] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 526.277716][ T8469] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1032'. [ 527.122545][ T8438] BTRFS error (device loop0): unrecognized mount option 'rw' [ 527.487128][ T8438] BTRFS error (device loop0): open_ctree failed: -22 [ 527.541581][ T8480] hub 9-0:1.0: USB hub found [ 527.555647][ T8480] hub 9-0:1.0: 1 port detected [ 528.382699][ T5916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (5916) [ 530.438844][ T8513] openvswitch: netlink: Key type 226 is out of range max 29 [ 530.450985][ T8513] loop5: detected capacity change from 0 to 256 [ 530.485875][ T8513] exfat: Deprecated parameter 'namecase' [ 530.491800][ T8513] exfat: Unknown parameter 'keep_last_dots' [ 530.977308][ T8518] loop1: detected capacity change from 0 to 2048 [ 534.309083][ T8568] loop4: detected capacity change from 0 to 512 [ 534.374730][ T8568] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 534.467150][ T8568] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1050: iget: bogus i_mode (5) [ 534.547897][ T8568] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1050: couldn't read orphan inode 15 (err -117) [ 534.623761][ T8546] loop5: detected capacity change from 0 to 32768 [ 534.652476][ T8568] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 534.733149][ T8546] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 534.765630][ T8568] ext2 filesystem being mounted at /193/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.776943][ T8546] BTRFS error (device loop5): unrecognized mount option 'rw' [ 534.788861][ T8546] BTRFS error (device loop5): open_ctree failed: -22 [ 535.258148][ T5916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (5916) [ 535.779874][ T8589] loop4: detected capacity change from 0 to 2048 [ 536.539314][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1056'. [ 536.555202][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1056'. [ 539.401961][ T8631] loop1: detected capacity change from 0 to 512 [ 539.756176][ T8631] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 540.360025][ T8631] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1064: iget: bogus i_mode (5) [ 540.454833][ T8631] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1064: couldn't read orphan inode 15 (err -117) [ 540.515578][ T8631] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 540.562973][ T8631] ext2 filesystem being mounted at /210/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.515688][ T8668] loop0: detected capacity change from 0 to 2048 [ 545.106567][ T8686] loop1: detected capacity change from 0 to 32768 [ 545.141249][ T8686] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 545.173758][ T8686] BTRFS error (device loop1): unrecognized mount option 'rw' [ 545.216619][ T8686] BTRFS error (device loop1): open_ctree failed: -22 [ 545.239383][ T5916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5916) [ 545.888355][ T8721] hub 9-0:1.0: USB hub found [ 545.895093][ T8721] hub 9-0:1.0: 1 port detected [ 547.904484][ T8746] loop4: detected capacity change from 0 to 2048 [ 549.782196][ T8781] loop1: detected capacity change from 0 to 512 [ 549.914007][ T8781] EXT4-fs (loop1): Ignoring removed orlov option [ 549.941756][ T8781] EXT4-fs (loop1): Ignoring removed bh option [ 549.975831][ T8781] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 550.200266][ T8792] loop0: detected capacity change from 0 to 512 [ 550.296961][ T8796] overlayfs: failed to clone lowerpath [ 550.669768][ T8778] loop5: detected capacity change from 0 to 32768 [ 550.813406][ T8792] EXT4-fs (loop0): Test dummy encryption mode enabled [ 550.865079][ T8792] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 551.038116][ T8792] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1093: bad orphan inode 131083 [ 551.055385][ T8778] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 551.106765][ T8778] BTRFS error (device loop5): unrecognized mount option 'rw' [ 551.172695][ T8792] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 551.261391][ T8778] BTRFS error (device loop5): open_ctree failed: -22 [ 551.444798][ T4195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4195) [ 551.877776][ T8823] loop4: detected capacity change from 0 to 512 [ 552.025901][ T8823] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 552.060108][ T8823] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1096: iget: bogus i_mode (5) [ 552.115958][ T8823] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1096: couldn't read orphan inode 15 (err -117) [ 552.197688][ T8823] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 552.241036][ T8823] ext2 filesystem being mounted at /201/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.647519][ T8845] hub 9-0:1.0: USB hub found [ 554.654518][ T8845] hub 9-0:1.0: 1 port detected [ 556.196945][ T8849] loop1: detected capacity change from 0 to 32768 [ 556.562079][ T8869] overlayfs: failed to resolve './file1': -2 [ 556.945486][ T8849] XFS (loop1): Mounting V5 Filesystem [ 557.123985][ T8849] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1802 dinode [ 557.211771][ T8849] XFS (loop1): Unmount and run xfs_repair [ 557.264016][ T8849] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 557.308556][ T8886] loop5: detected capacity change from 0 to 2048 [ 557.327869][ T8849] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 557.337243][ T8849] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 557.347372][ T8849] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 557.357539][ T8849] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 557.366767][ T8849] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 557.492484][ T8849] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 557.643777][ T8849] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 557.653023][ T8849] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 557.662604][ T8849] XFS (loop1): failed to read RT inodes [ 558.235572][ T8896] loop4: detected capacity change from 0 to 512 [ 558.298584][ T8900] loop0: detected capacity change from 0 to 512 [ 558.453328][ T8900] EXT4-fs (loop0): Ignoring removed orlov option [ 558.499149][ T8896] EXT4-fs (loop4): Test dummy encryption mode enabled [ 558.519479][ T8900] EXT4-fs (loop0): Ignoring removed bh option [ 558.554817][ T8896] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 558.631014][ T8900] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 558.637543][ T8896] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1108: bad orphan inode 131083 [ 558.921015][ T8896] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 560.048168][ T8936] mip6: mip6_rthdr_init_state: state's mode is not 2: 4 [ 560.968630][ T8941] loop0: detected capacity change from 0 to 512 [ 561.065298][ T8946] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1116'. [ 561.397709][ T8943] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 561.564517][ T8941] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 561.737034][ T8941] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1117: iget: bogus i_mode (5) [ 562.088224][ T8959] overlayfs: failed to clone lowerpath [ 562.107868][ T8941] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1117: couldn't read orphan inode 15 (err -117) [ 562.341447][ T8941] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 562.433102][ T8941] ext2 filesystem being mounted at /221/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.960278][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.960401][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.244325][ T8977] loop0: detected capacity change from 0 to 2048 [ 564.511428][ T8983] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1122'. [ 565.676881][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 565.690238][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 566.797485][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 566.865204][ T9019] overlayfs: failed to clone lowerpath [ 566.888754][ T9019] overlayfs: missing 'lowerdir' [ 569.941115][ T9043] loop4: detected capacity change from 0 to 512 [ 570.350266][ T9043] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 570.402797][ T9031] loop0: detected capacity change from 0 to 32768 [ 570.755285][ T9043] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1135: iget: bogus i_mode (5) [ 570.800185][ T9043] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1135: couldn't read orphan inode 15 (err -117) [ 570.812787][ T9043] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 570.866834][ T9043] ext2 filesystem being mounted at /210/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.975525][ T9060] hpfs: Bad magic ... probably not HPFS [ 573.424640][ T9081] tipc: Started in network mode [ 573.471410][ T9081] tipc: Node identity 0aaa9e1553c8, cluster identity 4711 [ 573.528811][ T9081] tipc: Enabled bearer , priority 0 [ 573.564670][ T9080] loop0: detected capacity change from 0 to 2048 [ 573.596032][ T9083] device syzkaller0 entered promiscuous mode [ 573.658858][ T9081] tipc: Resetting bearer [ 573.752930][ T9077] tipc: Resetting bearer [ 573.936860][ T9077] tipc: Disabling bearer [ 576.612542][ T9116] loop4: detected capacity change from 0 to 64 [ 579.360853][ T9144] overlayfs: missing 'lowerdir' [ 585.988085][ T9184] loop5: detected capacity change from 0 to 2048 [ 586.404709][ T9191] overlayfs: missing 'lowerdir' [ 588.979782][ T9225] loop0: detected capacity change from 0 to 512 [ 589.148379][ T9225] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 589.474458][ T9225] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1186: iget: bogus i_mode (5) [ 589.814613][ T9225] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1186: couldn't read orphan inode 15 (err -117) [ 589.885762][ T9225] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 589.963432][ T9225] ext2 filesystem being mounted at /239/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.901380][ T9248] overlayfs: missing 'lowerdir' [ 591.064881][ T9250] loop0: detected capacity change from 0 to 2048 [ 592.399745][ T9259] hub 9-0:1.0: USB hub found [ 592.405698][ T9259] hub 9-0:1.0: 1 port detected [ 595.701315][ T9285] loop4: detected capacity change from 0 to 512 [ 595.912270][ T9285] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 595.986296][ T9285] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1201: iget: bogus i_mode (5) [ 596.026489][ T9285] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1201: couldn't read orphan inode 15 (err -117) [ 596.141626][ T9285] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 596.224847][ T9285] ext2 filesystem being mounted at /219/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.633112][ T9339] openvswitch: netlink: Key type 226 is out of range max 29 [ 601.645300][ T9339] loop5: detected capacity change from 0 to 256 [ 601.689268][ T9339] exfat: Deprecated parameter 'namecase' [ 601.695041][ T9339] exfat: Unknown parameter 'keep_last_dots' [ 602.071264][ T9347] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 602.080230][ T9347] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 602.905299][ T4277] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 603.185190][ T4277] usb 6-1: Using ep0 maxpacket: 8 [ 603.477100][ T4277] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 603.497588][ T4277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.517578][ T4277] usb 6-1: Product: syz [ 603.532084][ T4277] usb 6-1: Manufacturer: syz [ 603.537208][ T9364] loop1: detected capacity change from 0 to 2048 [ 603.554678][ T4277] usb 6-1: SerialNumber: syz [ 603.585063][ T4277] usb 6-1: config 0 descriptor?? [ 603.778929][ T4277] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 606.235137][ T1108] Bluetooth: hci5: command 0x0406 tx timeout [ 606.241279][ T4277] gspca_sonixj: i2c_w8 err -71 [ 606.427470][ T4277] sonixj: probe of 6-1:0.0 failed with error -71 [ 606.462344][ T4277] usb 6-1: USB disconnect, device number 2 [ 607.319813][ T9393] hpfs: Bad magic ... probably not HPFS [ 608.537852][ T9407] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 608.723597][ T9407] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 609.113578][ T9411] loop1: detected capacity change from 0 to 2048 [ 609.705884][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1239'. [ 609.719439][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1239'. [ 610.825082][ T4277] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 610.957513][ T9429] loop1: detected capacity change from 0 to 40427 [ 611.015377][ T9429] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 611.022692][ T9429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 611.045692][ T9429] F2FS-fs (loop1): invalid crc value [ 611.206979][ T9429] F2FS-fs (loop1): Found nat_bits in checkpoint [ 611.263158][ T9429] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 611.270571][ T9429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 611.452654][ T4277] usb 6-1: unable to get BOS descriptor or descriptor too short [ 611.587396][ T9442] tmpfs: Unknown parameter 'noswap' [ 611.615651][ T4277] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 611.641949][ T4277] usb 6-1: can't read configurations, error -71 [ 612.012004][ T9446] hpfs: Bad magic ... probably not HPFS [ 612.858458][ T9458] overlayfs: missing 'lowerdir' [ 614.933198][ T9468] loop4: detected capacity change from 0 to 2048 [ 615.632421][ T9481] loop5: detected capacity change from 0 to 40427 [ 615.735424][ T9481] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 615.742451][ T9481] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 615.791689][ T9481] F2FS-fs (loop5): invalid crc value [ 615.843047][ T9481] F2FS-fs (loop5): Found nat_bits in checkpoint [ 615.897703][ T9481] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 615.905679][ T9481] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 616.403155][ T9496] loop0: detected capacity change from 0 to 64 [ 617.379916][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 617.389940][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 617.595572][ T9517] overlayfs: missing 'lowerdir' [ 618.451005][ T9532] loop5: detected capacity change from 0 to 512 [ 618.503552][ T9533] loop1: detected capacity change from 0 to 2048 [ 618.598386][ T9532] EXT4-fs (loop5): Ignoring removed orlov option [ 618.623617][ T9532] EXT4-fs (loop5): Ignoring removed bh option [ 618.805478][ T9536] loop4: detected capacity change from 0 to 40427 [ 618.822344][ T9536] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 618.830059][ T9536] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 618.838215][ T9532] EXT4-fs (loop5): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 618.842057][ T9536] F2FS-fs (loop4): invalid crc value [ 619.285073][ T26] audit: type=1326 audit(1760576713.690:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.0.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb1883ec9 code=0x7fc00000 [ 619.817974][ T9536] F2FS-fs (loop4): Found nat_bits in checkpoint [ 619.859702][ T9536] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 619.867267][ T9536] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 620.121142][ T9554] tmpfs: Unknown parameter 'noswap' [ 620.963532][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 620.973465][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 621.010101][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1274'. [ 621.573478][ T9573] overlayfs: missing 'lowerdir' [ 623.497642][ T9590] loop0: detected capacity change from 0 to 2048 [ 624.398859][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.405263][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.541689][ T9603] hpfs: Bad magic ... probably not HPFS [ 624.691110][ T9605] loop0: detected capacity change from 0 to 512 [ 624.780860][ T9605] EXT4-fs (loop0): Ignoring removed orlov option [ 624.824181][ T9605] EXT4-fs (loop0): Ignoring removed bh option [ 624.861967][ T9605] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 627.144763][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 627.154842][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 627.489539][ T9621] mmap: syz.1.1291 (9621) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 627.594330][ T9623] overlayfs: missing 'workdir' [ 628.000707][ T9628] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1292'. [ 628.673447][ T9635] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 629.996993][ T9646] loop0: detected capacity change from 0 to 512 [ 630.048997][ T9646] EXT4-fs (loop0): Ignoring removed orlov option [ 630.891690][ T9646] EXT4-fs (loop0): Ignoring removed bh option [ 630.929224][ T9646] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 633.271626][ T9656] loop1: detected capacity change from 0 to 32768 [ 633.355695][ T9653] loop4: detected capacity change from 0 to 40427 [ 633.489416][ T9680] overlayfs: missing 'workdir' [ 633.883556][ T9656] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 633.913062][ T9656] BTRFS error (device loop1): unrecognized mount option 'rw' [ 633.951763][ T9656] BTRFS error (device loop1): open_ctree failed: -22 [ 634.089114][ T9653] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 634.122094][ T9653] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 634.261338][ T9653] F2FS-fs (loop4): invalid crc value [ 634.270294][ T9653] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 634.483968][ T9692] overlayfs: missing 'lowerdir' [ 635.954876][ T9707] loop1: detected capacity change from 0 to 512 [ 636.015556][ T9707] EXT4-fs (loop1): Ignoring removed orlov option [ 636.022120][ T9707] EXT4-fs (loop1): Ignoring removed bh option [ 636.176780][ T9707] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 638.360757][ T9733] loop5: detected capacity change from 0 to 40427 [ 638.471621][ T9733] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 638.478916][ T9733] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 638.490204][ T9733] F2FS-fs (loop5): invalid crc value [ 638.570143][ T9733] F2FS-fs (loop5): Found nat_bits in checkpoint [ 638.799546][ T9733] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 638.806740][ T9733] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 642.791385][ T9786] MPTCP: addr_signal error, rm_addr=1 [ 643.017106][ T9791] genirq: Flags mismatch irq 5. 00000000 (pcl812) vs. 00000000 (at-a2150c) [ 644.715925][ T9811] loop5: detected capacity change from 0 to 512 [ 644.750950][ T9809] openvswitch: netlink: Key type 226 is out of range max 29 [ 644.763250][ T9809] loop4: detected capacity change from 0 to 256 [ 644.825798][ T9809] exfat: Deprecated parameter 'namecase' [ 644.831529][ T9809] exfat: Unknown parameter 'keep_last_dots' [ 644.859263][ T9811] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 645.083122][ T9811] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1343: iget: bogus i_mode (5) [ 645.135897][ T9811] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1343: couldn't read orphan inode 15 (err -117) [ 645.215408][ T9811] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 645.252476][ T9805] loop0: detected capacity change from 0 to 32768 [ 645.286234][ T9811] ext2 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.330662][ T9805] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1341 (9805) [ 646.341544][ T9805] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 646.399619][ T9805] BTRFS error (device loop0): unrecognized mount option 'rw' [ 646.456553][ T9805] BTRFS error (device loop0): open_ctree failed: -22 [ 648.049339][ T9838] 9pnet_virtio: no channels available for device syz [ 648.075321][ T1108] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 648.313420][ T9844] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 648.325479][ T9844] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 648.334052][ T9844] CPU: 0 PID: 9844 Comm: syz.0.1349 Not tainted syzkaller #0 [ 648.335030][ T1108] usb 6-1: Using ep0 maxpacket: 8 [ 648.341450][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 648.356572][ T9844] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 648.362163][ T9844] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3d dc 49 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 1c dc 49 fa 4d 8b 24 24 48 83 c3 [ 648.382061][ T9844] RSP: 0018:ffffc90003cafa80 EFLAGS: 00010206 [ 648.388163][ T9844] RAX: 0000000000000005 RBX: ffff88802a1aae00 RCX: 0000000000080000 [ 648.396422][ T9844] RDX: ffffc9000fbd1000 RSI: 000000000000043f RDI: 0000000000000440 [ 648.404425][ T9844] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10298aff26 [ 648.412513][ T9844] R10: ffffed10298aff26 R11: 1ffff110298aff25 R12: 0000000000000028 [ 648.420525][ T9844] R13: dffffc0000000000 R14: ffff88814c57f800 R15: dffffc0000000000 [ 648.428715][ T9844] FS: 00007f1fafaa96c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 648.437927][ T9844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.444539][ T9844] CR2: 000000110c349ccf CR3: 00000000266f6000 CR4: 00000000003506f0 [ 648.452717][ T9844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 648.460810][ T9844] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 648.468984][ T9844] Call Trace: [ 648.472300][ T9844] [ 648.475257][ T9844] pcl818_detach+0x62/0xd0 [ 648.479844][ T9844] comedi_device_detach_locked+0x16e/0x710 [ 648.485696][ T9844] comedi_unlocked_ioctl+0xd0b/0x1050 [ 648.491112][ T9844] ? comedi_poll+0x8b0/0x8b0 [ 648.495878][ T9844] ? bpf_lsm_file_ioctl+0x5/0x10 [ 648.500843][ T9844] ? security_file_ioctl+0x7c/0xa0 [ 648.505985][ T9844] ? comedi_poll+0x8b0/0x8b0 [ 648.510600][ T9844] __se_sys_ioctl+0xfa/0x170 [ 648.515223][ T9844] do_syscall_64+0x4c/0xa0 [ 648.519708][ T9844] ? clear_bhb_loop+0x30/0x80 [ 648.524442][ T9844] ? clear_bhb_loop+0x30/0x80 [ 648.529149][ T9844] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 648.535074][ T9844] RIP: 0033:0x7f1fb1883ec9 [ 648.539518][ T9844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.559259][ T9844] RSP: 002b:00007f1fafaa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.567720][ T9844] RAX: ffffffffffffffda RBX: 00007f1fb1adb180 RCX: 00007f1fb1883ec9 [ 648.575728][ T9844] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000005 [ 648.583736][ T9844] RBP: 00007f1fb1906f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.591843][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.599850][ T9844] R13: 00007f1fb1adb218 R14: 00007f1fb1adb180 R15: 00007ffc2063caf8 [ 648.607869][ T9844] [ 648.610929][ T9844] Modules linked in: [ 648.615442][ C0] vkms_vblank_simulate: vblank timer overrun [ 648.622554][ T9844] ---[ end trace e6355d689b8e91c2 ]--- [ 648.628369][ T9844] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 648.633956][ T9844] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3d dc 49 fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 1c dc 49 fa 4d 8b 24 24 48 83 c3 [ 648.645258][ T1108] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 648.653633][ T9844] RSP: 0018:ffffc90003cafa80 EFLAGS: 00010206 [ 648.669034][ T9844] RAX: 0000000000000005 RBX: ffff88802a1aae00 RCX: 0000000000080000 [ 648.677083][ T9844] RDX: ffffc9000fbd1000 RSI: 000000000000043f RDI: 0000000000000440 [ 648.685376][ T9844] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10298aff26 [ 648.693529][ T9844] R10: ffffed10298aff26 R11: 1ffff110298aff25 R12: 0000000000000028 [ 648.701579][ T9844] R13: dffffc0000000000 R14: ffff88814c57f800 R15: dffffc0000000000 [ 648.709616][ T9844] FS: 00007f1fafaa96c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 648.718658][ T9844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.725384][ T9844] CR2: 000000110c349ccf CR3: 00000000266f6000 CR4: 00000000003506f0 [ 648.731351][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.733410][ T9844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 648.749484][ T9844] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 648.757534][ T9844] Kernel panic - not syncing: Fatal exception [ 648.763855][ T9844] Kernel Offset: disabled [ 648.768195][ T9844] Rebooting in 86400 seconds..