last executing test programs: 39m15.071903784s ago: executing program 32 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 39m1.132466314s ago: executing program 33 (id=296): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000001e40)='./file1\x00', 0x1000c01, &(0x7f0000000000)=ANY=[], 0x2, 0x21a, &(0x7f00000006c0)="$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") mkdir(&(0x7f0000000000)='./file1\x00', 0x119) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r0, 0x0, 0x0) 36m26.853677046s ago: executing program 34 (id=1029): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, r2, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x9, 0x8e, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x2, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) 36m6.738164075s ago: executing program 35 (id=1104): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x8, 0x4, 0x4, 0x7}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000001c0), &(0x7f00000002c0)=r1}, 0x20) 33m30.407425257s ago: executing program 36 (id=2024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100), &(0x7f0000000240)=0x5a) 33m23.252692625s ago: executing program 37 (id=2063): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ni={0x94578a1f8aecba02, 0x0, 0x0, 0xffff, 0x1, 0x596}}}}}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) 33m4.650881817s ago: executing program 38 (id=2136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 32m18.852639973s ago: executing program 39 (id=2374): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/72, 0x48) 31m43.113780876s ago: executing program 40 (id=2552): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r0) 30m56.368790337s ago: executing program 41 (id=2787): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 30m47.391319499s ago: executing program 42 (id=2825): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29m56.308255358s ago: executing program 43 (id=3092): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500), &(0x7f0000000580)=0x8) 29m12.396779792s ago: executing program 44 (id=3284): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x430, @empty, 0x1009}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 25m37.949479569s ago: executing program 45 (id=4726): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 24m31.24139607s ago: executing program 46 (id=5068): timer_create(0x0, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 22m22.35789587s ago: executing program 47 (id=5724): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000206"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 21m4.495615257s ago: executing program 48 (id=6102): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 20m33.730696276s ago: executing program 49 (id=6257): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0xd6b, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) 18m39.579765937s ago: executing program 50 (id=6857): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, 0x3, 0x4, 0x3, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8004) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4010) 15m12.021184314s ago: executing program 51 (id=7863): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 14m19.726658266s ago: executing program 52 (id=8110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x0, 0x3) 13m57.099454382s ago: executing program 53 (id=8202): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) 13m27.904786737s ago: executing program 54 (id=8331): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 11m35.994462525s ago: executing program 55 (id=8821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000001f80)=""/4082, 0xff2) 11m31.011052454s ago: executing program 56 (id=8837): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000002600)=[{&(0x7f0000000300)="d88b2da57872c5", 0x7}, {&(0x7f0000002500)="e05015", 0x3}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) 10m39.587857941s ago: executing program 57 (id=9064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) timer_delete(0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 10m29.393406341s ago: executing program 58 (id=9105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010101, @multicast2}, "0018630100000003"}}}}}, 0x0) 10m7.398540282s ago: executing program 59 (id=9187): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000940)=""/230, 0xe6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, 0x0) 9m11.423954756s ago: executing program 60 (id=9427): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='5', 0xfffd, 0x2000f103, 0x0, 0x0) 8m48.256448415s ago: executing program 61 (id=9508): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x4, '\x00', @d}) 7m6.958957228s ago: executing program 8 (id=10006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701002400128009000100626f6e6400000000140002800800070002000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) 7m6.389463044s ago: executing program 8 (id=10008): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="186a000013000000000000000310"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) 7m5.408018278s ago: executing program 8 (id=10009): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000000c0)) listen(0xffffffffffffffff, 0x5) listen(0xffffffffffffffff, 0x0) 7m4.089527802s ago: executing program 8 (id=10017): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x19) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0, 0x944000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 7m3.677982347s ago: executing program 8 (id=10020): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000004080)='a', 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) write$P9_RMKNOD(r0, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) 7m1.599868207s ago: executing program 8 (id=10025): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) 6m58.751858563s ago: executing program 62 (id=10025): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) 6m56.287608856s ago: executing program 9 (id=10035): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0) 6m52.534401667s ago: executing program 9 (id=10053): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f00005d8000/0x3000)=nil, 0x3000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 6m51.691870554s ago: executing program 9 (id=10056): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_pwait2(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m50.820224819s ago: executing program 9 (id=10058): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000580)={[{@fat=@quiet}, {@numtail}, {@uni_xlate}, {@fat=@usefree}, {@shortname_lower}, {@shortname_mixed}, {@numtail}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x81}}, {@shortname_lower}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@utf8no}]}, 0x0, 0x2a5, &(0x7f0000000640)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 6m49.990853027s ago: executing program 9 (id=10063): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r0, r2, 0x2f, 0x30, 0x4, @void, @void, @void, @value=r3}, 0x20) 6m49.307361518s ago: executing program 9 (id=10066): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x5, r1, 0x0, &(0x7f0000000300)='V', 0x1, 0x100000001}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x101}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000000100)="fc", 0x1, 0x80000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000740)={0x28, 0x4, r1, 0x0, &(0x7f00000003c0)='\r', 0x1, 0xd372}) 6m47.635693552s ago: executing program 63 (id=10066): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x5, r1, 0x0, &(0x7f0000000300)='V', 0x1, 0x100000001}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x101}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000000100)="fc", 0x1, 0x80000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000740)={0x28, 0x4, r1, 0x0, &(0x7f00000003c0)='\r', 0x1, 0xd372}) 5m32.671186712s ago: executing program 3 (id=10472): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 5m31.572609065s ago: executing program 3 (id=10477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002000128008000100677265001400028006000000ff070000060011"], 0x40}}, 0x0) 5m31.001392352s ago: executing program 3 (id=10479): io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x1, 0x1, 0x2c2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m30.152663751s ago: executing program 7 (id=10481): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000346fc8)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 5m29.881179827s ago: executing program 3 (id=10482): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {}, {@utf8no}, {@fat=@flush}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@nfs}, {@shortname_mixed}, {@fat=@quiet}, {@numtail}]}, 0x0, 0x29f, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 5m29.160229482s ago: executing program 3 (id=10485): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) flock(r1, 0x1) flock(r0, 0x5) 5m28.567911765s ago: executing program 3 (id=10489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m27.654573583s ago: executing program 64 (id=10489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m27.640602014s ago: executing program 7 (id=10492): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x462a, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 5m26.993970048s ago: executing program 7 (id=10496): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0x10000) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x9000000c}) 5m26.529443889s ago: executing program 7 (id=10498): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x0, 0x6, 0x5, 0x0, 'ext4\x00'}}, 0x2e) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0x8000000000000001, 0x0, 0xffff5310, 0x8001, {0x5, 0x4, 0x80000000, 0x286ad0f7, 0xdf, 0x4, 0xdf5, 0xae, 0x6, 0x5000, 0x0, 0x0, 0x0, 0x8, 0x6}}, {0x0, 0x4}}}, 0xa0) 5m25.517360371s ago: executing program 7 (id=10503): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 5m24.432200547s ago: executing program 7 (id=10509): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) fsmount(0xffffffffffffffff, 0x0, 0x9) 5m22.95727162s ago: executing program 65 (id=10509): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) fsmount(0xffffffffffffffff, 0x0, 0x9) 2m3.980494s ago: executing program 6 (id=11631): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="b6037ffa812b3ecd8841e207ab6520d213f96743912e748ff531880c75a4f3d593f5e4beeec4d4483d6fd2c76ecf38da35ec336846317c6543a626832bd4c94e37866990c376663ad8cd43517b7079ddc8c7291ef89ea4557c86cd03a430c5dbc368c715d314f57cfb4993cd91945377b48effab441750d2a46cff7f25ecce4e0003710078031f6bad468ef3add7048efb8516479adcb953d529ba3b7c1d1004a2df16f7ae09a743d99d7cb758c32bf30e341063db704c9267dd29db6213697807fdf8ab4006e44f14438ce005a7663ebd5a65aa0669a069c35c3cd8", 0xdc}], 0x1}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c13ad3fa7e3a8a9bfe4b8bd4a30ff136001b125d672f402474b3d4284693e01b8cd8d92008674d46b4d873a274bd2aeec93157b0c9049bdb947149d4729bb6fd749cbc87e3aeb00"/162, 0xffffffffffffffac, 0x14008885, 0x0, 0x0) 2m2.618495386s ago: executing program 6 (id=11641): socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0}, 0x50) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2m1.888181868s ago: executing program 6 (id=11647): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 2m0.41750707s ago: executing program 6 (id=11657): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 1m59.803956629s ago: executing program 6 (id=11661): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, &(0x7f0000000140)=ANY=[], 0xfb, 0x6a8, &(0x7f0000001100)="$eJzs3c1vHGcdB/DvrDd2NikhSZM2oEq1GgkQEYkTKy3mQkAI5VBVVTlwthKnseKkxXGRWyHi8HrtoX9AOeSCOCFx4hKpcOBCb70hH5GQuJQD6YVFMztrr73rzbpJvA58PtHs88zzPPPMb34zs29WtAH+b10+k+b9FLl85tXVcn393uzS+r3Zm536a80kU0nWkrLaSFL8u91uf5RcSoqNaYptZZ8PFufe+OTT9b931pr1Uo1vDNtum3rc2rbmtW7bdJKJunwEW+a78sjzFRuRX0pyui5h7A4kaW/xo788s9HTozVo64N7EiPwZBWd180+R5ND9Y1evg/ovvI29ja60U2NOG77OwgAAAB42lSfgZt9zVtavvggD7JaHNnDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCptrb5+/9FvTS69ekU3d//n6zbUtf3lxd3N/z+k4oDAAAAAAAAAPbQiw/yIKs50l1vF9Xf/F+qVk5Uj4fzTm5nIcs5m9XMZyUrWc75JEd7JppcnV9ZmequDdvywqAtly88JNDu1K3HcNAAAAAAAAAA8L/nZ7m8+fd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYD4pkolOkuNvTfDSNZpKDSSbLhrXk4279aXZ/3AEAAADAHphKHmQ1R7rr7SInkjxXfQdwMO/kVlaymJUsZSFXq+8FOp/6G+v3ZpfW783eLJf+eb/zz12FUc2YzncPg/d8qhrRyrUsVi1ncyVvZSlX06i2LJ2q4+nOui2uu2VMxbdrr4wW2dW6LI/8/brsc2dXB7uTXX6ZcrTKyIFORiaSmTq2MhvHumdm8Bna5dnZsqcs5HwaG8Ge2Lanya0HszXnm1M2hu3vUF2Wx/OrnXI+Fp1M/KfdsZALPVffc8Nznnz1D7/74Uxd3z+HNJqJumxXj63+a2K2JxPPj5KJ60u3bly/dvvM05aJPjNVJk5urF/O9/ODnMl0Xs9yFvPjzGclC5nO96rafH3yi55bfodMXdqy9vrDIpmsr9DOydpdTC9V2x7JYl7LW7mahbxc/buQ83klF3Mxcz1n+OTwM1zd9Y3+u77S/sLA4E9/ra60ksO/7pQP81l9Iz585CMp83qsJ6+bV/1Mle9jW1o2s3R8hCwNeG4cpvnlulLu4+cPeyLdU9szcb4nE88Oz8RvqjN4e+nWjeXr82+Ptrvj79eV8j76ZTK9f55IyuvleHmyqrWpLVdH2ffsRt/WfJV9Jzb6Gn19J/PHNJvdvSxmbcc7dbJ+D9c/04Wq7/mBfbNV36mevkHvtwDY9w59/dBk6x+tv7Y+bP2idb316sHvTn1z6oXJHPjTgW81Zya+0nih+H0+zE83P/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf3+1337sxv7S0sLyt0m6373w8uGvESvf3aj7n5tsr3V+FGmFwpv92uBw6oGsi7Ts7dD2pypeeSfZqX/u38lm73a5bih3G/PbP2xM1lTGlrv55sfa+SN2YKmN7SgL2yLmVm2+fu/3ue99YvDn/5sKbC7fmLl6cm5m7+PLsuWuLSwszncdxRwk8CZsv+uOOBAAAAAAAAAAAABjVY/4/A2uDusZ9jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDT7fKZNO+nyPmZszPl+vq92aVy6dY3RzaTNJIUP0mKj5JL6Sw52jNdsdN+Plice+OTT9f/1e6o56vGN4ZtN5q1esl0kolOefdxzXelLocqhh1CsXGEZcJOdxMH4/bfAAAA//+RexgY") r0 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x28, 0x1, 0x0, "732283ef1acb5aa7abe50000000009be908100"}) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000740)={0x1, @raw_data="1ebbc3ae3a3d0f0bdd30e5164edb1dab5fe81f95251f6a96ece9a6594acf2487b0c99d7ff487cb88b4e45448fb996682efc75e066253ab789e46233a5fb4646db614adfe07f46dec35ee7bdaf3bf46edc79484066b1450005fbdf2e81ebea3ad5618ae11a6b34052c3c205b078c511afc12a016134fc278132c64ec66ba08e26ebbb4079e5e4681228a1716857a8a2e10725d7d1d271905904778b06fd53ee75f849481ddb29caa1e74f227a363992bb22488302bf3d350e9c76eecabd952969e6d9212c96e37b17"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), 0x10042, 0x0) 1m57.763751886s ago: executing program 6 (id=11667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 1m56.361961905s ago: executing program 66 (id=11667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 36.482388085s ago: executing program 1 (id=12118): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 35.782114841s ago: executing program 1 (id=12124): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef6f, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x400000000000195, 0x0) 34.587705037s ago: executing program 1 (id=12131): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x20400, &(0x7f0000000400)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x7b52e4aff0f1e2e6, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 34.119480184s ago: executing program 1 (id=12136): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 33.500180875s ago: executing program 1 (id=12143): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000000c0)=ANY=[], 0x0, 0x1cc, &(0x7f00000006c0)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) 32.78827852s ago: executing program 1 (id=12148): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = getpid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000002c0)=r0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 17.204780586s ago: executing program 67 (id=12148): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = getpid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000002c0)=r0) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 8.640167058s ago: executing program 4 (id=12276): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x25, 0x55a8, &(0x7f00000014c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x91) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000000)) creat(&(0x7f0000000100)='./file2\x00', 0x133) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 8.111837597s ago: executing program 5 (id=12277): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) sendto$inet(r2, &(0x7f00000000c0)="5219", 0x2, 0x4004000, 0x0, 0x0) 6.899361412s ago: executing program 4 (id=12279): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) waitid(0x0, 0x0, 0x0, 0xe, 0x0) socket$inet(0x2, 0x2, 0x0) syz_pidfd_open(r0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x18800000000000, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x2800000000000, 0x9, 0x3, 0x0, 0x7fffffff}, 0x0, 0x0) 6.783609721s ago: executing program 5 (id=12280): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x13, 0xa) gettid() timer_create(0x0, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r0, 0x0, 0xeffd) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.205917413s ago: executing program 0 (id=12285): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8d40, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) semget$private(0x0, 0x4000, 0x0) syz_open_dev$video4linux(0x0, 0x401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) 5.057764374s ago: executing program 5 (id=12286): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = semget$private(0x0, 0x5, 0x134) semop(r1, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r1, &(0x7f0000000200)=[{0x3, 0x3, 0x800}, {0x3, 0x6}], 0x2) 4.295509763s ago: executing program 5 (id=12287): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x9, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.238560727s ago: executing program 0 (id=12288): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec80fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xcc000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a4, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.227333688s ago: executing program 2 (id=12289): socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000001d00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x60}}, 0x8000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) 2.932114591s ago: executing program 0 (id=12290): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48eb, 0x1158, 0x2, 0x0, 0x0) 2.931722553s ago: executing program 5 (id=12291): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffd}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xb, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.931358553s ago: executing program 2 (id=12292): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r2, 0x3, 0x1) 2.44502493s ago: executing program 4 (id=12293): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x147bfe28ad63f17, 0x14}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.24639927s ago: executing program 5 (id=12294): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.246202715s ago: executing program 2 (id=12295): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) read(r4, &(0x7f0000000040)=""/5, 0x5) splice(r3, 0x0, r5, 0x0, 0xf3c, 0x4) splice(r0, 0x0, r5, 0x0, 0x80, 0x6) write$P9_RCREATE(r5, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x10, 0x0, 0x2}, 0x8}}, 0x18) write(r2, 0x0, 0x0) 2.239691019s ago: executing program 0 (id=12296): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) sendto(0xffffffffffffffff, 0x0, 0x0, 0xc0c4, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) 1.791883681s ago: executing program 4 (id=12297): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.678738249s ago: executing program 2 (id=12298): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="476d0000eafb", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @multicast1}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.407659963s ago: executing program 0 (id=12299): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) shmctl$SHM_STAT_ANY(0x0, 0x20, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.096061218s ago: executing program 4 (id=12300): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 476.076942ms ago: executing program 2 (id=12301): socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 375.555862ms ago: executing program 0 (id=12302): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r0, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x10, 0x73fd61d548e2b590, @ib={0x1b, 0x8, 0x101, {"b73e81344d07000000aaea34471c79b0"}, 0x18, 0xfb, 0x8}}}, 0xa0) 203.812062ms ago: executing program 2 (id=12303): socket$alg(0x26, 0x5, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x4, 0x0, 0x4e) 0s ago: executing program 4 (id=12304): pipe2(&(0x7f0000000040), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x48, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r0 = syz_io_uring_setup(0x81e, &(0x7f0000000480)={0x0, 0x40, 0x10, 0xfffffffe, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) kernel console output (not intermixed with test programs): ip=0x7f426238efc9 code=0x7ffc0000 [ 2370.556199][ T30] audit: type=1326 audit(1761472458.398:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4195 comm="syz.4.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2370.579816][ T30] audit: type=1326 audit(1761472458.398:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4195 comm="syz.4.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2370.603009][ T30] audit: type=1326 audit(1761472458.398:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4195 comm="syz.4.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2370.625917][ T30] audit: type=1326 audit(1761472458.398:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4195 comm="syz.4.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2370.648795][ T30] audit: type=1326 audit(1761472458.398:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4195 comm="syz.4.11068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2374.191187][ T4258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11093'. [ 2374.898049][ T4269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11098'. [ 2376.250735][ T4290] loop4: detected capacity change from 0 to 1024 [ 2376.687967][T19735] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2376.748663][ T4306] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2378.617287][ T4343] loop4: detected capacity change from 0 to 128 [ 2378.632194][ T4343] msdos: Bad value for 'tz' [ 2381.058999][ T4368] loop4: detected capacity change from 0 to 65536 [ 2381.139900][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2381.340698][ T4368] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 2381.521112][ T4368] XFS (loop4): Ending clean mount [ 2381.666698][ T4368] XFS (loop4): Quotacheck needed: Please wait. [ 2381.760920][ T4368] XFS (loop4): Quotacheck: Done. [ 2381.816005][ T4374] overlayfs: failed to clone upperpath [ 2381.950705][ T2398] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 2384.250230][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11157'. [ 2384.928987][ T4444] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 2385.704745][ T4463] overlayfs: failed to clone upperpath [ 2386.129743][T24534] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2386.453734][T24534] usb 7-1: config 0 has no interfaces? [ 2386.485524][T24534] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2386.496197][T24534] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.505705][T24534] usb 7-1: Product: syz [ 2386.513402][T24534] usb 7-1: Manufacturer: syz [ 2386.519811][T24534] usb 7-1: SerialNumber: syz [ 2386.843236][T24534] usb 7-1: config 0 descriptor?? [ 2387.084216][ T2399] Bluetooth: hci3: command 0x0406 tx timeout [ 2387.204267][ T4468] netlink: 'syz.6.11172': attribute type 8 has an invalid length. [ 2387.212629][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11172'. [ 2387.236900][ T4468] bond0: entered promiscuous mode [ 2387.242702][ T4468] bond_slave_0: entered promiscuous mode [ 2387.249722][ T4468] bond_slave_1: entered promiscuous mode [ 2387.274939][ T4481] loop4: detected capacity change from 0 to 40427 [ 2387.400058][ T4468] bond0: left promiscuous mode [ 2387.405040][ T4468] bond_slave_0: left promiscuous mode [ 2387.411970][ T4468] bond_slave_1: left promiscuous mode [ 2387.968220][ T4481] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2387.979862][ T4481] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2388.328236][ T4481] F2FS-fs (loop4): invalid crc value [ 2388.625828][T16914] usb 7-1: USB disconnect, device number 32 [ 2388.841020][ T4481] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2389.055476][ T4481] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2389.065358][ T4481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2389.255110][ T4481] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 2390.025528][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2390.992948][ T4539] loop0: detected capacity change from 0 to 32768 [ 2391.032651][ T4539] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11182 (4539) [ 2391.099041][ T4539] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2391.112834][ T4539] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 2391.121864][ T4539] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2391.449636][ T4539] BTRFS info (device loop0): rebuilding free space tree [ 2391.481155][ T4539] BTRFS info (device loop0): disabling free space tree [ 2391.488306][ T4539] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2391.498440][ T4539] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2391.530971][ T4539] BTRFS info (device loop0): checking UUID tree [ 2391.538566][ T4539] BTRFS info (device loop0): enabling ssd optimizations [ 2391.548873][ T4539] BTRFS info (device loop0): turning off barriers [ 2391.555678][ T4539] BTRFS info (device loop0): disabling tree log [ 2391.565298][ T4539] BTRFS info (device loop0): turning on flush-on-commit [ 2391.575100][ T4539] BTRFS info (device loop0): enabling disk space caching [ 2391.582502][ T4539] BTRFS info (device loop0): force clearing of disk cache [ 2391.589939][ T4539] BTRFS info (device loop0): use zstd compression, level 3 [ 2391.597322][ T4539] BTRFS info (device loop0): max_inline set to 0 [ 2392.014488][ T1128] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2392.106303][ T2399] Bluetooth: hci0: command 0x0406 tx timeout [ 2392.885777][ T4584] sd 0:0:1:0: PR command failed: 1026 [ 2392.892705][ T4584] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2392.900321][ T4584] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2393.562984][ T4597] loop4: detected capacity change from 0 to 1024 [ 2395.038460][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 2395.038534][ T30] audit: type=1326 audit(1761472483.308:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2395.165748][ T30] audit: type=1326 audit(1761472483.368:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2395.190011][ T30] audit: type=1326 audit(1761472483.368:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2395.213211][ T30] audit: type=1326 audit(1761472483.368:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2395.236339][ T30] audit: type=1326 audit(1761472483.378:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2395.260101][ T30] audit: type=1326 audit(1761472483.378:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2395.284006][ T30] audit: type=1326 audit(1761472483.378:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2395.307785][ T30] audit: type=1326 audit(1761472483.378:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2395.330761][ T30] audit: type=1326 audit(1761472483.378:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2395.354394][ T30] audit: type=1326 audit(1761472483.378:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4620 comm="syz.1.11209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2397.687400][ T4664] loop6: detected capacity change from 0 to 2048 [ 2397.785958][ T4664] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 2398.531588][ T2495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 2398.888353][ T4689] loop6: detected capacity change from 0 to 2048 [ 2398.930408][ T4692] sch_fq: defrate 9 ignored. [ 2398.949965][ T4689] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 2398.957789][ T4689] UDF-fs: Scanning with blocksize 512 failed [ 2399.132516][ T4689] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2400.512370][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11247'. [ 2400.522118][ T4718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11247'. [ 2402.695410][ T4748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11259'. [ 2402.718879][ T4748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11259'. [ 2404.158812][ T4776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2404.212677][ T4776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2405.032007][ T4770] loop4: detected capacity change from 0 to 65536 [ 2405.172963][ T4770] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 2405.244839][ T4770] XFS (loop4): Ending clean mount [ 2405.331967][ T2398] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 2407.433286][ T5863] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 2407.946831][ T5863] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 2407.955835][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2407.966692][ T5863] usb 1-1: config 1 has no interface number 0 [ 2407.973067][ T5863] usb 1-1: config 1 interface 105 has no altsetting 0 [ 2408.065839][ T4815] loop1: detected capacity change from 0 to 256 [ 2408.296010][ T5863] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2408.308330][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.316790][ T5863] usb 1-1: Product: syz [ 2408.321264][ T5863] usb 1-1: Manufacturer: syz [ 2408.326038][ T5863] usb 1-1: SerialNumber: syz [ 2408.473768][ T4815] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 2408.558795][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2408.558875][ T30] audit: type=1800 audit(1761472496.828:547): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11282" name="file1" dev="loop1" ino=1049160 res=0 errno=0 [ 2409.176379][ T4827] loop6: detected capacity change from 0 to 64 [ 2409.262437][ T5863] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2409.284035][ T4827] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 2409.290161][ T5863] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2409.365896][ T5863] aqc111 1-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 2409.544457][T24534] usb 1-1: USB disconnect, device number 37 [ 2409.622864][T24534] aqc111 1-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2409.712564][T24534] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2409.723137][T24534] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2409.733451][T24534] aqc111 1-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2409.819410][ T5863] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2409.979923][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 2409.998608][ T5863] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2410.011199][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.031203][ T5863] usb 5-1: config 0 descriptor?? [ 2410.050826][ T5863] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2410.831250][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11298'. [ 2411.732049][ T5863] gspca_sunplus: reg_w_riv err -71 [ 2411.738202][ T5863] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 2411.793718][ T5863] usb 5-1: USB disconnect, device number 40 [ 2412.689595][T24534] libceph: connect (1)[c::]:6789 error -101 [ 2412.695947][T24534] libceph: mon0 (1)[c::]:6789 connect error [ 2412.767335][ T4886] ceph: No mds server is up or the cluster is laggy [ 2412.963153][T24534] libceph: connect (1)[c::]:6789 error -101 [ 2412.969813][T24534] libceph: mon0 (1)[c::]:6789 connect error [ 2412.984903][ T4892] loop4: detected capacity change from 0 to 256 [ 2413.096501][ T4892] exFAT-fs (loop4): error, invalid access to FAT bad cluster (entry 0x00000005) [ 2413.106355][ T4892] exFAT-fs (loop4): Filesystem has been set read-only [ 2413.113490][ T4892] exFAT-fs (loop4): failed to count the number of clusters in root [ 2413.121887][ T4892] exFAT-fs (loop4): failed to recognize exfat type [ 2413.578282][ T4900] loop1: detected capacity change from 0 to 2048 [ 2413.625834][ T4900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2413.810162][ T4906] overlayfs: failed to clone upperpath [ 2414.137065][ T4911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11319'. [ 2414.615264][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11325'. [ 2415.183800][ T4938] loop0: detected capacity change from 0 to 128 [ 2415.232802][ T4938] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2415.283303][ T4938] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2415.365222][ T4945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11331'. [ 2415.793341][ T1128] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2416.275579][ T4964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2419.447751][ T5012] loop1: detected capacity change from 0 to 4096 [ 2419.485567][ T5012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2419.583548][ T5012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2419.644670][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11361'. [ 2420.937150][ T1245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2421.171415][ T5038] overlayfs: failed to clone upperpath [ 2421.272963][ T5040] Invalid ELF header magic: != ELF [ 2421.839039][ T5055] veth1_to_bond: entered allmulticast mode [ 2421.853976][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11373'. [ 2421.965832][ T5055] bond0: (slave bond_slave_1): Releasing backup interface [ 2422.071804][ T5055] veth1_to_bond (unregistering): left allmulticast mode [ 2422.655702][ T5065] gretap0: entered promiscuous mode [ 2422.784901][ T5069] loop6: detected capacity change from 0 to 512 [ 2422.856192][ T5069] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2422.887084][ T5069] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.11377: corrupted in-inode xattr: invalid size in ea xattr [ 2422.930863][ T5069] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.11377: couldn't read orphan inode 15 (err -117) [ 2422.987988][ T5069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2423.465962][ T2495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2426.060964][ T30] audit: type=1326 audit(1761472514.328:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5123 comm="syz.2.11398" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effad38efc9 code=0x0 [ 2426.532527][ T5087] loop6: detected capacity change from 0 to 32768 [ 2426.544449][ T5087] BTRFS warning: excessive commit interval 2147483648, use with care [ 2426.553599][ T5087] btrfs: Deprecated parameter 'usebackuproot' [ 2426.563245][ T5087] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2426.598689][ T5087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.11385 (5087) [ 2426.652699][ T5087] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2426.664050][ T5087] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 2426.804743][ T5087] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 2426.901419][ T5087] BTRFS error (device loop6): open_ctree failed: -12 [ 2428.019461][ T414] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2428.253877][ T414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2428.267704][ T414] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2428.277839][ T414] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2428.287448][ T414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.295872][ T5171] netlink: 'syz.1.11411': attribute type 1 has an invalid length. [ 2428.295965][ T5171] netlink: 'syz.1.11411': attribute type 4 has an invalid length. [ 2428.296059][ T5171] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11411'. [ 2428.543368][ T414] usb 1-1: config 0 descriptor?? [ 2429.035697][ T414] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2429.047014][ T414] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2429.057914][ T414] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2429.065322][ T414] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2429.072989][ T414] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2429.082763][ T414] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2429.090147][ T414] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 2429.153829][ T414] cp2112 0003:10C4:EA90.0048: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 2429.233211][ T414] cp2112 0003:10C4:EA90.0048: Part Number: 0x00 Device Version: 0x00 [ 2429.868856][ T414] cp2112 0003:10C4:EA90.0048: error reading lock byte: -71 [ 2429.900582][ T414] usb 1-1: USB disconnect, device number 38 [ 2430.239926][ T5207] input: syz1 as /devices/virtual/input/input79 [ 2430.633542][ T5211] loop6: detected capacity change from 0 to 2048 [ 2430.655597][ T5211] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2431.037025][ T5217] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2431.451208][ T5221] syz.1.11431 (5221) used greatest stack depth: 2048 bytes left [ 2433.486634][ T5243] netem: incorrect gi model size [ 2433.493394][ T5243] netem: change failed [ 2433.943004][T24534] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2434.181093][T24534] usb 1-1: Using ep0 maxpacket: 32 [ 2434.304110][T24534] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 2434.314564][T24534] usb 1-1: config 0 has no interface number 0 [ 2434.321165][T24534] usb 1-1: config 0 interface 12 has no altsetting 0 [ 2434.384473][T24534] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2434.394194][T24534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.402707][T24534] usb 1-1: Product: syz [ 2434.407050][T24534] usb 1-1: Manufacturer: syz [ 2434.411968][T24534] usb 1-1: SerialNumber: syz [ 2434.474232][T24534] usb 1-1: config 0 descriptor?? [ 2434.761549][ T5264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11451'. [ 2435.064772][ T5267] erspan1: entered allmulticast mode [ 2436.432404][T24534] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 2436.441415][T24534] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 2436.449015][T24534] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2436.457127][T24534] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 2436.672490][T24534] usb 1-1: USB disconnect, device number 39 [ 2438.605529][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11466'. [ 2438.793825][ T5308] team0: Port device dummy0 removed [ 2438.852152][ T5308] bond0: (slave bond_slave_0): Releasing backup interface [ 2438.942700][ T5308] bond0: (slave bond_slave_1): Releasing backup interface [ 2439.064004][ T5308] team0: Port device team_slave_0 removed [ 2439.133081][ T5308] team0: Port device team_slave_1 removed [ 2439.144551][ T5308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2439.152302][ T5308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2439.201102][ T5308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2439.208661][ T5308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2439.258123][ T5308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2440.956800][ T5325] loop4: detected capacity change from 0 to 4096 [ 2441.343078][ T5323] atm:sigd_send: bad message type 9384 [ 2442.353747][ T5352] bridge_slave_0: left allmulticast mode [ 2442.359790][ T5352] bridge_slave_0: left promiscuous mode [ 2442.366609][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 2442.428071][ T5352] bridge_slave_1: left allmulticast mode [ 2442.437288][ T5352] bridge_slave_1: left promiscuous mode [ 2442.444087][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 2442.495318][ T5354] overlayfs: failed to clone upperpath [ 2442.654853][ T5352] team0: Port device team_slave_0 removed [ 2442.818084][ T5352] team0: Port device team_slave_1 removed [ 2442.826602][ T5352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2442.867682][ T5352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2442.943921][ T5352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2443.139891][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2446.786009][ T5408] tipc: Failed to remove unknown binding: 66,1,1/0:1298582663/1298582665 [ 2446.795216][ T5408] tipc: Failed to remove unknown binding: 66,1,1/0:1298582663/1298582665 [ 2447.414852][ T414] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 2447.703359][ T414] usb 1-1: config 0 has no interfaces? [ 2447.709246][ T414] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2447.718580][ T414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.749021][ T414] usb 1-1: config 0 descriptor?? [ 2448.013437][ T414] usb 1-1: USB disconnect, device number 40 [ 2449.571664][ T5461] overlayfs: invalid redirect ((null)) [ 2449.971156][ T5463] Invalid ELF header magic: != ELF [ 2452.248020][ T30] audit: type=1326 audit(1761472540.518:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2452.272063][ T30] audit: type=1326 audit(1761472540.518:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2452.295082][ T30] audit: type=1326 audit(1761472540.558:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f549338da7f code=0x7ffc0000 [ 2452.317962][ T30] audit: type=1326 audit(1761472540.578:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2452.341966][ T30] audit: type=1326 audit(1761472540.578:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2452.364806][ T30] audit: type=1326 audit(1761472540.578:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2452.387881][ T30] audit: type=1326 audit(1761472540.578:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2452.411520][ T30] audit: type=1326 audit(1761472540.578:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2452.434386][ T30] audit: type=1326 audit(1761472540.578:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2452.457339][ T30] audit: type=1326 audit(1761472540.578:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2452.574909][ T5510] loop6: detected capacity change from 0 to 1024 [ 2452.834849][ T5510] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2452.847878][ T5510] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2453.134990][ T5524] loop0: detected capacity change from 0 to 128 [ 2453.142510][ T5510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2454.369539][ T414] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2454.564878][ T414] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2454.574362][ T414] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2454.587587][ T414] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2454.596961][ T414] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2454.608530][ T414] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2454.776727][ T414] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2454.786524][ T414] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2454.794837][ T414] usb 5-1: Product: syz [ 2454.801892][ T414] usb 5-1: Manufacturer: syz [ 2454.817594][ T414] cdc_wdm 5-1:1.0: skipping garbage [ 2454.823128][ T414] cdc_wdm 5-1:1.0: skipping garbage [ 2454.834194][ T414] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2454.840680][ T414] cdc_wdm 5-1:1.0: Unknown control protocol [ 2455.030439][ T414] usb 5-1: USB disconnect, device number 41 [ 2455.690678][ T414] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2455.797053][T24541] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2455.909506][ T414] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2455.918341][ T414] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2455.931833][ T414] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2455.941250][ T414] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2455.952819][ T414] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2455.995765][ T414] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2456.005407][ T414] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2456.013972][ T414] usb 5-1: Product: syz [ 2456.018346][ T414] usb 5-1: Manufacturer: syz [ 2456.054341][ T414] cdc_wdm 5-1:1.0: skipping garbage [ 2456.059968][ T414] cdc_wdm 5-1:1.0: skipping garbage [ 2456.067926][T24541] usb 1-1: Using ep0 maxpacket: 32 [ 2456.092341][T24541] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 2456.101263][T24541] usb 1-1: config 0 has no interface number 0 [ 2456.107548][T24541] usb 1-1: config 0 interface 89 has no altsetting 0 [ 2456.176652][T24541] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2456.186337][T24541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.195052][T24541] usb 1-1: Product: syz [ 2456.202177][T24541] usb 1-1: Manufacturer: syz [ 2456.206959][T24541] usb 1-1: SerialNumber: syz [ 2456.254425][ T414] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2456.264167][ T414] cdc_wdm 5-1:1.0: Unknown control protocol [ 2456.311769][T24541] usb 1-1: config 0 descriptor?? [ 2456.375010][T24541] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2456.390394][T24541] em28xx 1-1:0.89: Video interface 89 found: bulk [ 2457.051965][T24541] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 2457.413860][ T5582] x_tables: duplicate entry at hook 3 [ 2457.538016][ T5586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11575'. [ 2457.763992][ T5590] netlink: 45 bytes leftover after parsing attributes in process `syz.2.11578'. [ 2457.774537][T28618] usb 5-1: USB disconnect, device number 42 [ 2457.934346][T24541] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2457.943559][T24541] em28xx 1-1:0.89: board has no eeprom [ 2457.985981][ T5592] overlayfs: failed to clone upperpath [ 2458.035571][ T5592] overlayfs: failed to clone lowerpath [ 2458.036858][T24541] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 2458.048679][T24541] em28xx 1-1:0.89: analog set to bulk mode. [ 2458.057140][ T414] em28xx 1-1:0.89: Registering V4L2 extension [ 2458.116631][T24541] usb 1-1: USB disconnect, device number 41 [ 2458.128831][T24541] em28xx 1-1:0.89: Disconnecting em28xx [ 2458.440931][ T5603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11581'. [ 2458.487079][ T414] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 2458.496898][ T414] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 2458.506634][ T414] em28xx 1-1:0.89: No AC97 audio processor [ 2458.599841][ T414] usb 1-1: Decoder not found [ 2458.604630][ T414] em28xx 1-1:0.89: failed to create media graph [ 2458.611891][ T414] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 2458.672218][ T414] em28xx 1-1:0.89: Registering snapshot button... [ 2458.681942][ T5605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11585'. [ 2458.684551][ T414] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input80 [ 2458.727167][ T414] em28xx 1-1:0.89: Remote control support is not available for this card. [ 2458.769952][T24541] em28xx 1-1:0.89: Closing input extension [ 2458.776102][T24541] em28xx 1-1:0.89: Deregistering snapshot button [ 2458.834039][T24541] em28xx 1-1:0.89: Freeing device [ 2458.988277][ T5612] overlayfs: failed to clone upperpath [ 2459.007273][ T5612] overlayfs: failed to clone upperpath [ 2459.455312][ T5622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11591'. [ 2459.516737][ T5622] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2459.545920][ T5625] bond10: (slave wlan0): Enslaving as an active interface with an up link [ 2460.553153][ T5642] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2460.559512][ T5642] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2460.621258][ T5642] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2460.627528][ T5642] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2465.960291][ T5711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11626'. [ 2466.468194][ T5717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11629'. [ 2466.790618][ T5728] Bluetooth: hci0: unsupported parameter 512 [ 2466.797443][ T5728] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 2466.798733][ T5724] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2466.879446][ T2506] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2466.894126][ T2506] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.032119][ T2506] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2467.045443][ T2506] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.276258][ T2506] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2467.287655][ T2506] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.425155][ T2506] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2467.439029][ T2506] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2467.724361][ T2506] bridge_slave_1: left allmulticast mode [ 2467.730414][ T2506] bridge_slave_1: left promiscuous mode [ 2467.737140][ T2506] bridge0: port 2(bridge_slave_1) entered disabled state [ 2467.753574][ T2506] bridge_slave_0: left allmulticast mode [ 2467.759781][ T2506] bridge_slave_0: left promiscuous mode [ 2467.766396][ T2506] bridge0: port 1(bridge_slave_0) entered disabled state [ 2468.410888][ T2506] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 2468.795751][ T2506] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 2468.808007][ T2506] bridge1 (unregistering): left promiscuous mode [ 2468.953182][ T2506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2469.033688][ T2506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2469.096542][ T2506] bond0 (unregistering): Released all slaves [ 2469.123032][ T2506] bond1 (unregistering): Released all slaves [ 2469.148531][ T2506] bond2 (unregistering): Released all slaves [ 2469.275316][ T5777] overlayfs: failed to resolve './file0': -2 [ 2469.901864][ T5773] loop0: detected capacity change from 0 to 32768 [ 2469.913734][ T5773] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11649 (5773) [ 2469.943631][ T5773] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2469.954240][ T5773] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 2470.163637][ T5773] BTRFS info (device loop0): enabling ssd optimizations [ 2470.171072][ T5773] BTRFS info (device loop0): turning on async discard [ 2470.178021][ T5773] BTRFS info (device loop0): enabling free space tree [ 2470.274540][ T5773] fs-verity (loop0, inode 261): fs-verity keyring is empty, rejecting signed file! [ 2470.463791][ T1128] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2470.538497][ T2506] hsr_slave_0: left promiscuous mode [ 2470.554581][ T2506] hsr_slave_1: left promiscuous mode [ 2470.566486][ T2506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2470.578439][ T2506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2470.739942][ T2506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2470.747630][ T2506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2470.823490][ T2506] veth1_macvtap: left promiscuous mode [ 2470.829932][ T2506] veth0_macvtap: left promiscuous mode [ 2470.835989][ T2506] veth1_vlan: left promiscuous mode [ 2470.841954][ T2506] veth0_vlan: left promiscuous mode [ 2471.883073][ T2506] team0 (unregistering): Port device team_slave_1 removed [ 2471.963445][ T2506] team0 (unregistering): Port device team_slave_0 removed [ 2472.405008][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11659'. [ 2472.910063][ T2506] IPVS: stop unused estimator thread 0... [ 2473.098617][ T2506] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2473.381529][ T2506] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2473.487542][ T2506] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2473.580801][ T2506] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2473.789671][ T2506] bridge_slave_1: left allmulticast mode [ 2473.795522][ T2506] bridge_slave_1: left promiscuous mode [ 2473.804852][ T2506] bridge0: port 2(bridge_slave_1) entered disabled state [ 2473.819489][ T2506] bridge_slave_0: left allmulticast mode [ 2473.825320][ T2506] bridge_slave_0: left promiscuous mode [ 2473.834624][ T2506] bridge0: port 1(bridge_slave_0) entered disabled state [ 2474.431870][ T2506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2474.532303][ T2506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2474.593062][ T2506] bond0 (unregistering): Released all slaves [ 2475.052377][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11676'. [ 2475.134845][ T2506] hsr_slave_0: left promiscuous mode [ 2475.163908][ T5858] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11677'. [ 2475.175098][ T2506] hsr_slave_1: left promiscuous mode [ 2475.184128][ T2506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2475.191981][ T2506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2475.226416][ T2506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2475.234350][ T2506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2475.265691][T20486] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2475.286211][T20486] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2475.297084][T20486] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2475.343391][T20486] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2475.355141][T20486] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2475.363636][ T2506] veth1_macvtap: left promiscuous mode [ 2475.372357][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88812d27b600: rx timeout, send abort [ 2475.381494][ T2506] veth0_macvtap: left promiscuous mode [ 2475.387356][ T2506] veth1_vlan: left promiscuous mode [ 2475.393033][ T2506] veth0_vlan: left promiscuous mode [ 2475.425503][ T2399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2475.438757][ T2399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2475.502029][ T2399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2475.523341][ T2399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2475.536010][ T2399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2475.882467][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88812d27b600: abort rx timeout. Force session deactivation [ 2476.335350][ T2506] team0 (unregistering): Port device team_slave_1 removed [ 2476.464791][ T2506] team0 (unregistering): Port device team_slave_0 removed [ 2477.531777][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11684'. [ 2477.650076][T20486] Bluetooth: hci0: command tx timeout [ 2477.672777][ T5878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11682'. [ 2477.809628][ T5878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2478.112625][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 2478.723725][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11687'. [ 2479.532018][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 2479.551541][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 2479.559849][ T5859] bridge_slave_0: entered allmulticast mode [ 2479.574749][ T5859] bridge_slave_0: entered promiscuous mode [ 2479.700825][T20486] Bluetooth: hci0: command tx timeout [ 2479.730334][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 2479.737916][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 2479.748661][ T5859] bridge_slave_1: entered allmulticast mode [ 2479.758332][ T5859] bridge_slave_1: entered promiscuous mode [ 2480.389651][ T5903] loop0: detected capacity change from 0 to 32768 [ 2480.426499][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2480.482038][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2480.615025][ T5859] team0: Port device team_slave_0 added [ 2480.779706][ T5859] team0: Port device team_slave_1 added [ 2480.911794][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2480.918902][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2480.949527][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2481.058706][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2481.075880][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2481.103811][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2481.388658][ T5859] hsr_slave_0: entered promiscuous mode [ 2481.399309][ T5859] hsr_slave_1: entered promiscuous mode [ 2481.779465][T20486] Bluetooth: hci0: command tx timeout [ 2481.911561][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11703'. [ 2482.156572][ T5934] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2482.201097][ T5933] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2482.598891][ T5938] tipc: Enabling of bearer rejected, failed to enable media [ 2482.738513][ T5120] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2482.747178][ T5120] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2482.757630][ T5120] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2482.768525][ T5120] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2482.776124][ T5120] rtc rtc0: __rtc_set_alarm: err=-22 [ 2482.848275][ T5952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11711'. [ 2482.875944][ T5951] loop1: detected capacity change from 0 to 1024 [ 2482.919431][ T5863] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2482.946965][ T5951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2483.047327][ T5859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2483.079678][ T5859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2483.109469][ T5951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2483.151349][ T5859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2483.185403][ T5859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2483.185543][ T5863] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2483.203713][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2483.292481][ T5863] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2483.305447][ T5863] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2483.313826][ T5863] usb 1-1: Manufacturer: syz [ 2483.418377][ T5863] usb 1-1: config 0 descriptor?? [ 2483.537745][ T1245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2483.811069][ T5863] rc_core: IR keymap rc-hauppauge not found [ 2483.817169][ T5863] Registered IR keymap rc-empty [ 2483.827936][ T5863] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2483.840747][ T5863] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input81 [ 2483.865629][T20486] Bluetooth: hci0: command tx timeout [ 2483.938668][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 2484.068516][ T5863] usb 1-1: USB disconnect, device number 42 [ 2484.391823][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2484.561215][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 2484.663079][ T2506] bridge0: port 1(bridge_slave_0) entered blocking state [ 2484.670678][ T2506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2484.741010][ T2506] bridge0: port 2(bridge_slave_1) entered blocking state [ 2484.748463][ T2506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2484.786109][ T5983] loop1: detected capacity change from 0 to 1024 [ 2484.995458][ T5983] hfsplus: xattr search failed [ 2485.090090][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2485.281763][ T2521] hfsplus: b-tree write err: -5, ino 3 [ 2486.244752][ T6013] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2486.255179][ T6013] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.350442][ T6013] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2486.360659][ T6013] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.398601][ T6005] loop4: detected capacity change from 0 to 4096 [ 2486.442161][ T6013] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2486.452409][ T6013] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.510520][ T6005] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2486.544568][ T6005] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 2486.553780][ T6005] System zones: 0-5 [ 2486.563862][ T6013] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2486.566348][ T6005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2486.574040][ T6013] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2486.672291][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2486.770849][T19709] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2486.779613][T19709] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2486.816042][T19709] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2486.825333][T19709] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2486.865587][T19709] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2486.867311][ T5120] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2486.874536][T19709] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2486.945387][ T2398] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2487.007925][T19709] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2487.016806][T19709] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2487.109780][ T5120] usb 1-1: Using ep0 maxpacket: 16 [ 2487.128290][ T5120] usb 1-1: config 0 has no interfaces? [ 2487.150297][ T5120] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2487.162646][ T5120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2487.171085][ T5120] usb 1-1: SerialNumber: syz [ 2487.182378][ T5120] usb 1-1: config 0 descriptor?? [ 2487.636840][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2487.647115][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2487.677597][ T3696] usb 1-1: USB disconnect, device number 43 [ 2488.646355][ T5859] veth0_vlan: entered promiscuous mode [ 2488.704501][ T6050] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2488.716314][ T6050] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2488.792785][ T6050] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2488.803520][ T6050] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2488.890876][ T6050] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2488.901553][ T6050] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2488.933238][ T5859] veth1_vlan: entered promiscuous mode [ 2488.994399][ T6050] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2489.004821][ T6050] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2489.258397][ T5859] veth0_macvtap: entered promiscuous mode [ 2489.307450][ T5859] veth1_macvtap: entered promiscuous mode [ 2489.415725][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2489.460910][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2489.521191][ T2508] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2489.593809][ T2508] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2489.631921][ T2508] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2489.689837][ T2508] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2489.898884][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11750'. [ 2491.572005][ T6075] loop1: detected capacity change from 0 to 32768 [ 2491.588695][ T2508] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2491.597413][ T2508] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2491.606989][ T6075] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11754 (6075) [ 2491.618014][ T3223] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2491.632098][ T3223] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2491.682468][ T6075] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2491.693413][ T6075] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 2491.711022][ T2519] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2491.722403][ T2519] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2491.850504][ T2519] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2491.858953][ T2519] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2492.044326][ T6075] BTRFS info (device loop1): enabling ssd optimizations [ 2492.051841][ T6075] BTRFS info (device loop1): turning on async discard [ 2492.058812][ T6075] BTRFS info (device loop1): enabling free space tree [ 2492.249998][ T5120] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2492.462511][ T1245] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2493.369794][ T5120] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2493.380342][ T5120] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2493.392268][ T5120] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 2493.401906][ T5120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2493.821853][ T5120] usb 5-1: config 0 descriptor?? [ 2496.064936][ T2519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2496.074181][ T2519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2496.223943][ T2519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2496.232520][ T2519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2496.813986][ T5120] usb 5-1: USB disconnect, device number 43 [ 2498.131910][ T6164] team0 (unregistering): Port device team_slave_0 removed [ 2498.253927][ T6164] team0 (unregistering): Port device team_slave_1 removed [ 2499.242955][ T6188] loop4: detected capacity change from 0 to 4096 [ 2499.303261][ T6188] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2499.347645][ T6188] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 2499.444554][ T6179] loop0: detected capacity change from 0 to 4096 [ 2499.466858][ T6199] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2499.520681][ T6194] syz.1.11786 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2499.529503][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2499.529582][ T30] audit: type=1800 audit(1761472587.798:567): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11782" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 2499.565115][ T6188] syz.4.11782: attempt to access beyond end of device [ 2499.565115][ T6188] loop4: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 2499.608177][ T6188] syz.4.11782: attempt to access beyond end of device [ 2499.608177][ T6188] loop4: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 2499.643618][ T6188] syz.4.11782: attempt to access beyond end of device [ 2499.643618][ T6188] loop4: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 2499.661956][T24541] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2499.709329][ T6188] syz.4.11782: attempt to access beyond end of device [ 2499.709329][ T6188] loop4: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 2499.726285][ T6188] syz.4.11782: attempt to access beyond end of device [ 2499.726285][ T6188] loop4: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 2499.760264][ T6188] syz.4.11782: attempt to access beyond end of device [ 2499.760264][ T6188] loop4: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 2499.818755][ T6200] loop4: detected capacity change from 4096 to 0 [ 2499.852017][T24541] usb 6-1: Using ep0 maxpacket: 32 [ 2499.905862][T24541] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2499.916240][T24541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2499.924841][T24541] usb 6-1: Product: syz [ 2499.931751][T24541] usb 6-1: Manufacturer: syz [ 2499.936613][T24541] usb 6-1: SerialNumber: syz [ 2500.001956][T24541] usb 6-1: config 0 descriptor?? [ 2500.157097][T24541] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2500.264683][ T6206] NILFS (loop4): I/O error reading meta-data file (ino=3, block-offset=0) [ 2500.618365][ T2398] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 2500.628415][ T2398] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 2500.640707][ T2398] Buffer I/O error on dev loop4, logical block 511, lost sync page write [ 2500.649552][ T2398] NILFS (loop4): unable to write superblock: err=-5 [ 2500.656352][ T2398] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 2500.665048][ T2398] NILFS (loop4): unable to write superblock: err=-5 [ 2500.674354][ T2398] Remounting filesystem read-only [ 2500.679829][ T2398] NILFS (loop4): error -5 truncating bmap (ino=12) [ 2500.860472][ T2398] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 2501.637664][T24541] gspca_ov534_9: reg_r err -71 [ 2501.697265][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11797'. [ 2501.800328][ T6225] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 2501.814205][ T6225] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 2501.909406][T24541] gspca_ov534_9: Unknown sensor 0000 [ 2501.909730][T24541] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 2502.010606][T24541] usb 6-1: USB disconnect, device number 18 [ 2502.727424][ T6246] Invalid ELF header magic: != ELF [ 2504.222677][ T6281] netlink: 'syz.1.11820': attribute type 10 has an invalid length. [ 2504.257471][ T6281] bond0: (slave dummy0): Releasing backup interface [ 2504.346556][ T6282] netlink: 'syz.1.11820': attribute type 10 has an invalid length. [ 2504.410682][ T6281] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2504.420681][ T6281] team0: Failed to send options change via netlink (err -105) [ 2504.428317][ T6281] team0: Port device dummy0 added [ 2504.456753][ T6282] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2504.531368][ T6282] team0: Failed to send options change via netlink (err -105) [ 2504.540626][ T6282] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 2504.551520][ T6282] team0: Port device dummy0 removed [ 2504.572726][ T6282] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2505.878272][ T6312] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2505.885973][ T6312] overlayfs: failed to set xattr on upper [ 2505.892070][ T6312] overlayfs: ...falling back to redirect_dir=nofollow. [ 2505.899326][ T6312] overlayfs: ...falling back to index=off. [ 2505.905271][ T6312] overlayfs: ...falling back to uuid=null. [ 2505.911415][ T6312] overlayfs: ...falling back to xino=off. [ 2505.917432][ T6312] overlayfs: conflicting lowerdir path [ 2506.577844][ T6322] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 2506.906607][ T6326] syz_tun: entered promiscuous mode [ 2506.912293][ T6326] vlan3: entered promiscuous mode [ 2507.642376][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11845'. [ 2507.753959][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11846'. [ 2508.490152][ T6353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2508.528916][ T6357] bridge0: entered promiscuous mode [ 2508.532463][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11850'. [ 2509.037977][ T6366] sctp: [Deprecated]: syz.2.11857 (pid 6366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2509.037977][ T6366] Use struct sctp_sack_info instead [ 2510.215570][ T6387] loop5: detected capacity change from 0 to 256 [ 2510.333081][ T6387] exfat: Deprecated parameter 'utf8' [ 2510.641478][ T6379] loop0: detected capacity change from 0 to 32768 [ 2510.702637][ T6379] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 2510.711890][ T6379] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 2510.757792][ T6379] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 2510.850122][ T6387] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 2510.951589][ T6379] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 2511.833962][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11874'. [ 2511.913124][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11874'. [ 2513.015659][ T30] audit: type=1804 audit(1761472609.270:568): pid=6436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.11884" name="file1" dev="ramfs" ino=162667 res=1 errno=0 [ 2513.495376][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11886'. [ 2513.606652][ T6447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11887'. [ 2513.762594][ T6451] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 2514.603278][ T6457] macvlan2: entered promiscuous mode [ 2514.613234][ T6457] team_slave_0: entered promiscuous mode [ 2514.619303][ T6457] team_slave_1: entered promiscuous mode [ 2514.625309][ T6457] team0: entered promiscuous mode [ 2514.635684][ T6457] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2514.654680][ T6457] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 2514.762458][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11891'. [ 2514.906553][ T6461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2515.020316][ T6461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2515.110353][ T6461] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2515.228874][ T6461] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 2515.276105][ T6461] team0: left promiscuous mode [ 2515.284532][ T6461] team_slave_0: left promiscuous mode [ 2515.290279][ T6461] team_slave_1: left promiscuous mode [ 2515.426036][ T6461] bond0 (unregistering): Released all slaves [ 2516.773799][ T6465] loop0: detected capacity change from 0 to 65536 [ 2516.875592][ T6465] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 2517.154934][ T6465] XFS (loop0): Ending clean mount [ 2517.772420][ T30] audit: type=1800 audit(1761472614.040:569): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11902" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=162710 res=0 errno=0 [ 2518.037946][ T3223] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x1b0/0x2f0, xfs_agfl block 0x3 [ 2518.049829][ T3223] XFS (loop0): Unmount and run xfs_repair [ 2518.055728][ T3223] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2518.063671][ T3223] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 2518.073339][ T3223] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 2518.082775][ T3223] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 2518.091947][ T3223] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 2518.101934][ T3223] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 2518.111802][ T3223] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 2518.121031][ T3223] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 2518.132347][ T3223] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 2518.142468][ T3223] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x242/0x460" at daddr 0x3 len 1 error 74 [ 2518.153953][ T3223] XFS (loop0): page discard on page ffffea0002b04c10, inode 0x46, pos 1024. [ 2518.163301][ T3223] loop0: writeback error on inode 70, offset 0, sector 22 [ 2518.543808][ T6507] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2518.562218][ T6507] bridge0: port 1(bond11) entered blocking state [ 2518.568988][ T6507] bridge0: port 1(bond11) entered disabled state [ 2518.576519][ T6507] bond11: entered allmulticast mode [ 2518.588654][ T6507] bond11: entered promiscuous mode [ 2518.601261][ T6507] bridge0: port 1(bond11) entered blocking state [ 2518.608032][ T6507] bridge0: port 1(bond11) entered forwarding state [ 2518.653951][ T6505] sd 0:0:1:0: PR command failed: 1026 [ 2518.661153][ T6505] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2518.668169][ T6505] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2518.683149][ T2506] bridge0: port 1(bond11) entered disabled state [ 2518.922873][ T6515] overlayfs: failed to clone upperpath [ 2518.934207][ T6515] overlayfs: failed to clone lowerpath [ 2519.184204][ T1128] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 2519.218694][ T1128] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 2520.205358][ T6537] overlayfs: failed to clone upperpath [ 2521.311139][ T30] audit: type=1326 audit(1761472617.580:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.5.11925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2521.336963][ T30] audit: type=1326 audit(1761472617.580:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.5.11925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2521.385803][ T30] audit: type=1326 audit(1761472617.650:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.5.11925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2521.411296][ T30] audit: type=1326 audit(1761472617.660:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.5.11925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2521.434081][ T30] audit: type=1326 audit(1761472617.660:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.5.11925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2521.442312][ T6563] fuse: Bad value for 'fd' [ 2521.459526][ T30] audit: type=1326 audit(1761472617.660:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.5.11925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2521.486905][ T30] audit: type=1326 audit(1761472617.660:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.5.11925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2521.512173][ T30] audit: type=1326 audit(1761472617.660:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.5.11925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2521.534967][ T30] audit: type=1326 audit(1761472617.660:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.5.11925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2521.552563][ T6562] vlan2: entered allmulticast mode [ 2521.560078][ T30] audit: type=1326 audit(1761472617.660:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.5.11925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2521.562900][ T6562] dummy0: entered allmulticast mode [ 2521.873635][ T6562] vlan2: entered allmulticast mode [ 2523.039862][T24541] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2523.300521][T24541] usb 1-1: Using ep0 maxpacket: 16 [ 2523.314885][T24541] usb 1-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 2523.327842][T24541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.425171][T24541] usb 1-1: config 0 descriptor?? [ 2523.590874][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11939'. [ 2523.785515][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11941'. [ 2524.169480][ T2506] bridge_slave_1: left allmulticast mode [ 2524.175653][ T2506] bridge_slave_1: left promiscuous mode [ 2524.183268][ T2506] bridge0: port 2(bridge_slave_1) entered disabled state [ 2524.288686][ T2506] bridge_slave_0: left allmulticast mode [ 2524.295635][ T2506] bridge_slave_0: left promiscuous mode [ 2524.302841][ T2506] bridge0: port 1(bridge_slave_0) entered disabled state [ 2524.945825][ T2506] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2525.076672][ T2506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2525.126053][ T2506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2525.154563][ T2506] bond0 (unregistering): Released all slaves [ 2525.197279][T24541] pegasus 1-1:0.0: can't locate MII phy, using default [ 2525.210530][ T2506] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 2525.256777][ T2506] bond1 (unregistering): Released all slaves [ 2526.726458][ T6631] loop0: detected capacity change from 0 to 32768 [ 2526.740048][ T6631] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11953 (6631) [ 2526.775657][T24541] pegasus 1-1:0.0: eth21, D-Link DSB-650TX, 9a:09:89:c1:ca:2f [ 2526.787667][T24541] usb 1-1: USB disconnect, device number 44 [ 2526.801144][ T6631] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2526.811887][ T6631] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 2526.999443][ T6631] BTRFS info (device loop0): enabling ssd optimizations [ 2527.006616][ T6631] BTRFS info (device loop0): turning on async discard [ 2527.019894][ T6631] BTRFS info (device loop0): enabling free space tree [ 2527.330043][ T2506] hsr_slave_0: left promiscuous mode [ 2527.393999][ T2506] hsr_slave_1: left promiscuous mode [ 2527.402481][ T2506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2527.552436][ T2506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2528.067475][ T1128] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2528.207728][ T2506] team0 (unregistering): Port device team_slave_1 removed [ 2528.239288][ T2506] team0 (unregistering): Port device team_slave_0 removed [ 2529.259534][ T2506] IPVS: stop unused estimator thread 0... [ 2529.507252][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11970'. [ 2529.517359][ T6689] bridge_slave_1: left allmulticast mode [ 2529.523465][ T6689] bridge_slave_1: left promiscuous mode [ 2529.530242][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 2529.732865][ T6689] bridge_slave_0: left allmulticast mode [ 2529.738723][ T6689] bridge_slave_0: left promiscuous mode [ 2529.746197][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 2529.911436][ T6692] loop5: detected capacity change from 0 to 256 [ 2530.314129][ T6692] FAT-fs (loop5): Directory bread(block 64) failed [ 2530.321139][ T6692] FAT-fs (loop5): Directory bread(block 65) failed [ 2530.328086][ T6692] FAT-fs (loop5): Directory bread(block 66) failed [ 2530.335191][ T6692] FAT-fs (loop5): Directory bread(block 67) failed [ 2530.343149][ T6692] FAT-fs (loop5): Directory bread(block 68) failed [ 2530.350090][ T6692] FAT-fs (loop5): Directory bread(block 69) failed [ 2530.356908][ T6692] FAT-fs (loop5): Directory bread(block 70) failed [ 2530.363862][ T6692] FAT-fs (loop5): Directory bread(block 71) failed [ 2530.371128][ T6692] FAT-fs (loop5): Directory bread(block 72) failed [ 2530.377815][ T6692] FAT-fs (loop5): Directory bread(block 73) failed [ 2531.367348][ T6719] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.11980'. [ 2531.376984][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11980'. [ 2532.218517][ T6731] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11986'. [ 2532.274679][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11986'. [ 2532.673165][ T6729] ref_ctr_offset mismatch. inode: 0xe7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 2533.115174][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 2533.115250][ T30] audit: type=1326 audit(1761472629.380:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.1.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2533.151038][ T30] audit: type=1326 audit(1761472629.380:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.1.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2533.176488][ T30] audit: type=1326 audit(1761472629.390:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.1.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2533.201834][ T30] audit: type=1326 audit(1761472629.390:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.1.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2533.225019][ T30] audit: type=1326 audit(1761472629.390:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.1.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2533.250302][ T30] audit: type=1326 audit(1761472629.390:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.1.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2533.486039][ T30] audit: type=1326 audit(1761472629.560:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.1.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2533.511701][ T30] audit: type=1326 audit(1761472629.560:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.1.11991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2533.534544][ T30] audit: type=1326 audit(1761472629.590:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.5.11992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2533.560406][ T30] audit: type=1326 audit(1761472629.590:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6749 comm="syz.5.11992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2533.891667][ T6759] loop1: detected capacity change from 0 to 64 [ 2534.086815][ T6759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11995'. [ 2535.212499][ T6769] loop0: detected capacity change from 0 to 40427 [ 2535.260827][ T6769] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2535.268778][ T6769] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2535.294355][ T6769] F2FS-fs (loop0): invalid crc value [ 2535.586624][ T6769] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2535.692992][ T6769] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2535.700647][ T6769] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2535.792270][ T6769] Invalid ELF header magic: != ELF [ 2536.735660][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12006'. [ 2537.984397][ T6806] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12012'. [ 2540.541129][ T6852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2540.558056][ T6852] bond0: (slave bond1): Enslaving as an active interface with an up link [ 2540.656522][ T6854] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12029'. [ 2541.471397][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2541.471475][ T30] audit: type=1326 audit(1761472637.750:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.2.12036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2541.812663][ T30] audit: type=1326 audit(1761472637.790:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.2.12036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2541.835793][ T30] audit: type=1326 audit(1761472637.790:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.2.12036" exe="/root/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 2541.861736][ T30] audit: type=1326 audit(1761472637.790:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.2.12036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2541.884934][ T30] audit: type=1326 audit(1761472637.790:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.2.12036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2542.003426][ T6863] loop5: detected capacity change from 0 to 4096 [ 2542.066972][ T6863] ntfs3(loop5): Primary boot: invalid sectors per cluster 4294967274. [ 2542.128517][ T6863] ntfs3(loop5): try to read out of volume at offset 0x1ffe00 [ 2542.303774][ T30] audit: type=1326 audit(1761472638.300:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2542.329587][ T30] audit: type=1326 audit(1761472638.320:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2542.356305][ T30] audit: type=1326 audit(1761472638.320:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2542.379625][ T30] audit: type=1326 audit(1761472638.320:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2542.405229][ T30] audit: type=1326 audit(1761472638.330:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.0.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2542.537758][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12041'. [ 2542.632352][ T6883] bond12: (slave vti0): The slave device specified does not support setting the MAC address [ 2542.647734][ T6883] bond12: (slave vti0): Error -95 calling set_mac_address [ 2542.886515][ T6888] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12045'. [ 2542.899826][ T6885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2543.135644][ T6894] xt_hashlimit: max too large, truncated to 1048576 [ 2545.322349][ T6933] loop0: detected capacity change from 0 to 2048 [ 2545.731377][ T6941] loop5: detected capacity change from 0 to 512 [ 2545.771040][ T6941] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2545.843154][ T6941] EXT4-fs (loop5): 1 truncate cleaned up [ 2545.851292][ T6941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2546.294768][ T6950] overlayfs: failed to clone upperpath [ 2546.456585][ T6952] loop0: detected capacity change from 0 to 256 [ 2546.553827][ T6952] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2546.561663][ T5859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2546.593493][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 2546.593567][ T30] audit: type=1326 audit(1761472642.870:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.12068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2546.624301][ T6952] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 2546.647079][ T30] audit: type=1326 audit(1761472642.920:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.12068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2546.674883][ T30] audit: type=1326 audit(1761472642.920:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.12068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2546.698219][ T30] audit: type=1326 audit(1761472642.920:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.12068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2546.725073][ T30] audit: type=1326 audit(1761472642.920:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.12068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2546.748483][ T30] audit: type=1326 audit(1761472642.920:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.12068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2546.774820][ T30] audit: type=1326 audit(1761472643.010:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.12068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2546.798183][ T30] audit: type=1326 audit(1761472643.010:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.12068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2546.823666][ T30] audit: type=1326 audit(1761472643.010:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.12068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2546.846481][ T30] audit: type=1326 audit(1761472643.030:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.2.12068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2548.178540][ T6978] overlayfs: failed to clone upperpath [ 2548.213389][ T6978] overlayfs: failed to clone upperpath [ 2548.518755][ T6987] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2548.525488][ T6987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2548.536384][ T6987] vhci_hcd vhci_hcd.0: Device attached [ 2548.711401][ T6996] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12081'. [ 2548.784572][ T6738] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 2548.879959][ T3696] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2549.053252][ T3696] usb 2-1: Using ep0 maxpacket: 16 [ 2549.088757][ T3696] usb 2-1: config 0 has no interfaces? [ 2549.097930][ T3696] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2549.107484][ T3696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2549.134603][ T3696] usb 2-1: config 0 descriptor?? [ 2549.359577][ T6990] usb 35-1: recv xbuf, 0 [ 2549.366840][ T2508] vhci_hcd: stop threads [ 2549.371986][ T2508] vhci_hcd: release socket [ 2549.376723][ T2508] vhci_hcd: disconnect device [ 2549.393252][ T3696] usb 2-1: USB disconnect, device number 21 [ 2549.440130][ T6738] vhci_hcd: vhci_device speed not set [ 2549.467919][ T7011] netlink: 'syz.4.12086': attribute type 1 has an invalid length. [ 2549.476309][ T7011] netlink: 260 bytes leftover after parsing attributes in process `syz.4.12086'. [ 2549.757012][ T7013] overlayfs: failed to resolve './file0': -2 [ 2551.326054][ T7036] loop5: detected capacity change from 0 to 64 [ 2552.615826][ T7063] batman_adv: batadv0: Adding interface: dummy0 [ 2552.622552][ T7063] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2552.650221][ T7063] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 2552.891211][ T7063] netlink: 'syz.1.12107': attribute type 10 has an invalid length. [ 2554.140813][ T7088] overlayfs: failed to clone upperpath [ 2554.333483][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2554.333565][ T30] audit: type=1326 audit(1761472650.580:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.1.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2554.365315][ T30] audit: type=1326 audit(1761472650.580:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.1.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2554.388105][ T30] audit: type=1326 audit(1761472650.590:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.1.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2554.413837][ T30] audit: type=1326 audit(1761472650.590:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.1.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2554.436820][ T30] audit: type=1326 audit(1761472650.590:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.1.12118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=246 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 2554.462136][ T30] audit: type=1326 audit(1761472650.590:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.1.12118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549338efc9 code=0x7ffc0000 [ 2554.770394][ T7102] loop5: detected capacity change from 0 to 128 [ 2555.080082][ T7106] netlink: 'syz.0.12125': attribute type 1 has an invalid length. [ 2555.092733][ T7102] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2555.133090][ T7102] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2555.733288][ T5859] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2556.588343][ T30] audit: type=1326 audit(1761472652.860:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2556.613991][ T30] audit: type=1326 audit(1761472652.860:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2556.762247][ T30] audit: type=1326 audit(1761472652.920:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2556.788485][ T30] audit: type=1326 audit(1761472652.950:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7139 comm="syz.2.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effad38efc9 code=0x7ffc0000 [ 2556.802363][ T7144] syz_tun: entered allmulticast mode [ 2557.012143][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12142'. [ 2557.103251][ T7153] loop1: detected capacity change from 0 to 16 [ 2557.114030][ T7153] erofs (device loop1): mounted with root inode @ nid 36. [ 2557.593513][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.623589][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.633366][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.646700][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.664153][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.695752][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.735068][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.766686][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.812234][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.822614][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.831457][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.841470][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.852246][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.874849][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.892474][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.916832][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.959682][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2557.994738][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.042640][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.075166][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.108078][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.139515][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.161580][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.198380][ T7175] loop0: detected capacity change from 0 to 256 [ 2558.201748][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.234502][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.242835][ T7175] FAT-fs (loop0): Directory bread(block 1285) failed [ 2558.276948][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.302643][ T7175] FAT-fs (loop0): Directory bread(block 1285) failed [ 2558.310446][ T7175] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 2558.312456][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.318853][ T7175] FAT-fs (loop0): Directory bread(block 1285) failed [ 2558.334722][ T7175] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 2558.345731][ T7175] FAT-fs (loop0): Directory bread(block 1285) failed [ 2558.350420][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.353319][ T7175] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 2558.371855][ T7175] FAT-fs (loop0): Directory bread(block 1285) failed [ 2558.374864][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.379304][ T7175] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 2558.399450][ T7175] FAT-fs (loop0): Directory bread(block 1285) failed [ 2558.439716][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.455092][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.475815][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.526951][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.556298][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.574687][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.591926][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.602523][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.623364][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.642709][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.714292][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.726303][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.737124][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.797492][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.807565][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.840888][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.850874][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.868270][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.877781][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.893613][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.903990][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.914506][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.924662][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.935277][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.945367][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.955359][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.966144][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.976299][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2558.993006][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.003169][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.013332][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.031208][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.053257][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.104786][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.114902][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.125064][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.151413][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.161511][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.190858][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.204754][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.237646][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.250499][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.264417][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.273687][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.284602][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.304850][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.320355][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.330092][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.339856][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.348990][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.361839][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.371428][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.385306][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.414479][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.429970][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.442253][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.457225][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.480510][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.490288][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.502830][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.516764][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.527961][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.537645][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.547865][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.557717][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.568221][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.577838][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.600257][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.615202][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.692054][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.732608][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.764410][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.774869][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.792028][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.804918][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.814479][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.876360][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.946187][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.970403][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2559.998674][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.018177][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.083363][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.121824][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.180857][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.220525][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.228957][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.303608][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.331308][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.433641][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.455992][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.475314][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.491618][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.501271][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.510370][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.522170][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.585614][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.642690][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.702222][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.780883][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.814819][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.864364][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.886572][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.911134][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2560.918902][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.053593][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.105945][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.135743][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.195552][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.256169][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.273847][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.295046][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.341411][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.367146][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.438920][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.483493][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.519903][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.549860][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.596139][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.634610][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.658696][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.670348][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.678998][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.693679][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.792640][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.882033][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2561.981898][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.070262][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.198463][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.290334][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.400053][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.416287][ T7235] loop5: detected capacity change from 0 to 32768 [ 2562.425402][ T7235] BTRFS warning: excessive commit interval 2147483648, use with care [ 2562.436595][ T7235] btrfs: Deprecated parameter 'usebackuproot' [ 2562.443235][ T7235] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2562.455041][ T7235] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12174 (7235) [ 2562.470436][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.501628][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.519556][ T7235] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2562.530117][ T7235] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 2562.531118][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.623191][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.653654][ T2508] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2562.667766][ T7235] BTRFS error (device loop5): failed to load root extent [ 2562.677718][ T7235] BTRFS warning (device loop5): try to load backup roots slot 1 [ 2562.705723][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.712604][T19709] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2562.726281][ T7235] BTRFS warning (device loop5): couldn't read tree root [ 2562.735871][ T7235] BTRFS warning (device loop5): try to load backup roots slot 2 [ 2562.821428][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.832369][T19709] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2562.844127][ T7235] BTRFS warning (device loop5): couldn't read tree root [ 2562.853182][ T7235] BTRFS warning (device loop5): try to load backup roots slot 3 [ 2562.866796][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.892349][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.901798][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.911097][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.922176][ T7235] BTRFS info (device loop5): rebuilding free space tree [ 2562.951837][ T7235] BTRFS info (device loop5): checking UUID tree [ 2562.962420][ T7235] BTRFS info (device loop5): setting nodatasum [ 2562.968873][ T7235] BTRFS info (device loop5): enabling ssd optimizations [ 2562.976161][ T7235] BTRFS info (device loop5): turning off barriers [ 2562.985405][ T7235] BTRFS info (device loop5): turning on flush-on-commit [ 2562.992649][ T7235] BTRFS info (device loop5): turning on async discard [ 2562.994250][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2562.999631][ T7235] BTRFS info (device loop5): enabling free space tree [ 2562.999729][ T7235] BTRFS info (device loop5): force clearing of disk cache [ 2562.999825][ T7235] BTRFS info (device loop5): enabling auto defrag [ 2562.999921][ T7235] BTRFS info (device loop5): trying to use backup root at mount time [ 2563.044127][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.057102][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.082394][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.091240][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.166854][ T7265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12182'. [ 2563.176434][ T7265] netlink: 'syz.2.12182': attribute type 7 has an invalid length. [ 2563.186293][ T7265] netlink: 'syz.2.12182': attribute type 8 has an invalid length. [ 2563.194985][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12182'. [ 2563.200132][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.243922][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.256479][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.265826][ T5859] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2563.334186][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.398162][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.422992][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 2563.423071][ T30] audit: type=1326 audit(1761472659.700:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2563.464837][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.473613][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.482679][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.493122][ T30] audit: type=1326 audit(1761472659.730:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2563.515899][ T30] audit: type=1326 audit(1761472659.730:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2563.542323][ T30] audit: type=1326 audit(1761472659.730:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2563.565169][ T30] audit: type=1326 audit(1761472659.740:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2563.590668][ T30] audit: type=1326 audit(1761472659.740:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2563.623600][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.633972][ T30] audit: type=1326 audit(1761472659.910:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2563.659683][ T30] audit: type=1326 audit(1761472659.910:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2563.682471][ T30] audit: type=1326 audit(1761472659.910:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2563.707829][ T30] audit: type=1326 audit(1761472659.920:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.12183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f426238efc9 code=0x7ffc0000 [ 2563.736353][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.753166][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.767504][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.776247][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.785031][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.796281][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.816333][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.828250][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.837675][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.847438][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.858893][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.869948][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.883716][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.892375][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.901217][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.912556][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.921326][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.931076][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2563.985011][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.005519][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.054426][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.086886][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.125134][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.134991][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.162804][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.185453][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.197037][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.227720][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.252724][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.284535][ T7275] loop4: detected capacity change from 0 to 16 [ 2564.291650][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.313561][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.325769][ T7275] erofs (device loop4): mounted with root inode @ nid 36. [ 2564.332995][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.335353][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.375947][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.384602][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.393327][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.404374][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.414295][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.451579][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.473942][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.496138][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.505731][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.518220][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.547142][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.578647][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.609696][ T3696] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2564.611561][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.655501][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.691291][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.714478][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.725146][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.734432][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.750823][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.771909][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.793729][ T1245] erofs (device loop1): bogus dirent @ nid 36 [ 2564.817121][ T3696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2564.829453][ T3696] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2564.863558][ T3696] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2564.873234][ T3696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2564.881594][ T3696] usb 5-1: SerialNumber: syz [ 2564.939618][T24534] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2565.062639][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12192'. [ 2565.135099][ T3696] usb 5-1: 0:2 : does not exist [ 2565.140587][ T3696] usb 5-1: unit 5: unexpected type 0x0a [ 2565.179535][T24534] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2565.191706][T24534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2565.202975][T24534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2565.213281][T24534] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2565.227166][T24534] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2565.238095][T24534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.290768][ T3696] usb 5-1: USB disconnect, device number 44 [ 2565.353952][T24534] usb 6-1: config 0 descriptor?? [ 2565.982664][T24534] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2566.027946][ T7297] overlayfs: failed to clone upperpath [ 2566.187947][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12198'. [ 2566.200587][ T7299] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12198'. [ 2568.060456][ T6738] usb 6-1: USB disconnect, device number 19 [ 2569.213233][ T7344] netlink: 'syz.5.12216': attribute type 1 has an invalid length. [ 2569.297832][ T7344] bond1: entered promiscuous mode [ 2569.304457][ T7344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2569.406729][ T7349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2569.416293][ T7349] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 2569.428625][ T7349] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 2569.453072][ T7349] bond1: (slave gre1): making interface the new active one [ 2569.466461][ T7349] gre1: entered promiscuous mode [ 2569.480231][ T7349] bond1: (slave gre1): Enslaving as an active interface with an up link [ 2570.950337][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12227'. [ 2572.092713][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 2572.092793][ T30] audit: type=1326 audit(1761472668.340:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.12235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2572.229881][ T30] audit: type=1326 audit(1761472668.410:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.12235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2572.253650][ T30] audit: type=1326 audit(1761472668.410:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.12235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2572.276565][ T30] audit: type=1326 audit(1761472668.410:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.12235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2572.300926][ T30] audit: type=1326 audit(1761472668.420:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.12235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2572.324758][ T30] audit: type=1326 audit(1761472668.430:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.12235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2572.348282][ T30] audit: type=1326 audit(1761472668.430:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.12235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2572.371690][ T30] audit: type=1326 audit(1761472668.470:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.12235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2572.394454][ T30] audit: type=1326 audit(1761472668.470:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.12235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2572.418783][ T30] audit: type=1326 audit(1761472668.480:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.0.12235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8efc9 code=0x7ffc0000 [ 2573.256573][ T7401] overlayfs: failed to clone upperpath [ 2573.424470][ T7401] overlayfs: failed to clone lowerpath [ 2574.221345][ T7408] fuse: Bad value for 'fd' [ 2575.445688][ T7421] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2575.454899][ T7421] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2575.464714][ T7421] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2575.480581][ T7421] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2575.497638][ T7421] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2575.815298][ T7427] loop5: detected capacity change from 0 to 512 [ 2576.045424][ T7427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2576.059517][ T7427] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 2576.250749][ T7435] overlayfs: failed to clone upperpath [ 2577.074374][ T5859] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2577.413237][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2577.413309][ T30] audit: type=1326 audit(1761472673.690:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.5.12256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2577.539907][T20486] Bluetooth: hci5: command tx timeout [ 2577.572073][ T30] audit: type=1326 audit(1761472673.790:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.5.12256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2577.595257][ T30] audit: type=1326 audit(1761472673.790:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.5.12256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2577.618238][ T30] audit: type=1326 audit(1761472673.790:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.5.12256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2577.645587][ T30] audit: type=1326 audit(1761472673.790:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.5.12256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2577.668236][ T30] audit: type=1326 audit(1761472673.800:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.5.12256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2577.691203][ T30] audit: type=1326 audit(1761472673.800:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.5.12256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2577.713997][ T30] audit: type=1326 audit(1761472673.800:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.5.12256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2577.738185][ T30] audit: type=1326 audit(1761472673.810:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.5.12256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2577.761849][ T30] audit: type=1326 audit(1761472673.810:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.5.12256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2577.978736][ T7420] chnl_net:caif_netlink_parms(): no params data found [ 2578.383076][ T2519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2578.947663][ T2519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2579.246430][ T2519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2579.570168][ T2519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2579.641102][T20486] Bluetooth: hci5: command tx timeout [ 2580.336605][ T2519] bridge_slave_1: left allmulticast mode [ 2580.342849][ T2519] bridge_slave_1: left promiscuous mode [ 2580.349495][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 2580.450388][ T2519] bridge_slave_0: left allmulticast mode [ 2580.456231][ T2519] bridge_slave_0: left promiscuous mode [ 2580.465489][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state [ 2580.743206][ T2519] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 2581.769695][T20486] Bluetooth: hci5: command tx timeout [ 2581.785054][ T2519] batman_adv: batadv0: Removing interface: ip6gretap1 [ 2582.747271][ T7501] loop4: detected capacity change from 0 to 40427 [ 2582.759580][ T2519] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2582.833462][ T7501] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2582.843804][ T7501] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2582.885078][ T7501] F2FS-fs (loop4): invalid crc value [ 2583.169510][ T7501] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2583.200334][ T7501] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2583.207615][ T7501] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2583.296487][ T2519] bond1 (unregistering): Released all slaves [ 2583.808635][T20486] Bluetooth: hci5: command tx timeout [ 2584.004443][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 2584.014793][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 2584.022957][ T7420] bridge_slave_0: entered allmulticast mode [ 2584.032992][ T7420] bridge_slave_0: entered promiscuous mode [ 2584.087182][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 2584.095266][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 2584.104293][ T7420] bridge_slave_1: entered allmulticast mode [ 2584.114239][ T7420] bridge_slave_1: entered promiscuous mode [ 2584.123130][ T2519] tipc: Left network mode [ 2584.136511][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2584.136575][ T30] audit: type=1326 audit(1761472680.410:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.5.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2584.172207][ T30] audit: type=1326 audit(1761472680.410:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.5.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2584.195458][ T30] audit: type=1326 audit(1761472680.450:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.5.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2584.220967][ T30] audit: type=1326 audit(1761472680.450:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.5.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2584.243842][ T30] audit: type=1326 audit(1761472680.450:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.5.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2584.269384][ T30] audit: type=1326 audit(1761472680.510:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.5.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2584.294615][ T30] audit: type=1326 audit(1761472680.510:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.5.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2584.317362][ T30] audit: type=1326 audit(1761472680.510:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.5.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2584.342702][ T30] audit: type=1326 audit(1761472680.510:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.5.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2584.365469][ T30] audit: type=1326 audit(1761472680.510:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.5.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c2778efc9 code=0x7ffc0000 [ 2584.651465][ T7420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2584.806418][ T2519] hsr_slave_0: left promiscuous mode [ 2584.855252][ T2519] hsr_slave_1: left promiscuous mode [ 2584.863661][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2584.871444][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2584.974610][ T2519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2584.982472][ T2519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2585.058182][ T2519] batman_adv: batadv0: Removing interface: dummy0 [ 2585.221269][ T2519] veth1_macvtap: left promiscuous mode [ 2585.227053][ T2519] veth0_macvtap: left promiscuous mode [ 2585.233067][ T2519] veth1_vlan: left promiscuous mode [ 2585.238599][ T2519] veth0_vlan: left promiscuous mode [ 2586.612397][ T2519] team0 (unregistering): Port device team_slave_1 removed [ 2586.646361][ T2519] team0 (unregistering): Port device team_slave_0 removed [ 2586.952709][ T7420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2587.484249][ T7420] team0: Port device team_slave_0 added [ 2587.572853][ T7420] team0: Port device team_slave_1 added [ 2588.011932][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2588.021709][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2588.048127][ T7420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2588.263778][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2588.272856][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2588.300303][ T7420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2588.953208][ T7420] hsr_slave_0: entered promiscuous mode [ 2588.963799][ T7420] hsr_slave_1: entered promiscuous mode [ 2588.977223][ T7420] debugfs: 'hsr0' already exists in 'hsr' [ 2588.984363][ T7420] Cannot create hsr debugfs directory [ 2589.420185][ T7565] netlink: 'syz.0.12299': attribute type 10 has an invalid length. [ 2589.874861][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12300'. [ 2590.358058][ T7577] Dead loop on virtual device ipvlan1, fix it urgently! [ 2590.368282][ T7577] Dead loop on virtual device ipvlan1, fix it urgently! [ 2590.378341][ T7577] Dead loop on virtual device ipvlan1, fix it urgently! [ 2590.388527][ T7577] Dead loop on virtual device ipvlan1, fix it urgently! [ 2590.398671][ T7577] Dead loop on virtual device ipvlan1, fix it urgently! [ 2590.408724][ T7577] Dead loop on virtual device ipvlan1, fix it urgently! [ 2590.418757][ T7577] Dead loop on virtual device ipvlan1, fix it urgently! [ 2590.442002][ T7577] ===================================================== [ 2590.449416][ T7577] BUG: KMSAN: uninit-value in __schedule+0x828/0x7790 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2590.456330][ T7577] __schedule+0x828/0x7790 [ 2590.461080][ T7577] schedule+0x17d/0x3c0 [ 2590.465393][ T7577] exit_to_user_mode_loop+0x6c/0x370 [ 2590.473329][ T7577] do_syscall_64+0x1e3/0xfa0 [ 2590.478093][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2590.484297][ T7577] [ 2590.486693][ T7577] Local variable acpar created at: [ 2590.491987][ T7577] ip6t_do_table+0x70/0x2280 [ 2590.496746][ T7577] nf_hook_slow+0xe1/0x3d0 [ 2590.504536][ T7577] [ 2590.506976][ T7577] CPU: 0 UID: 0 PID: 7577 Comm: syz.2.12303 Tainted: G W syzkaller #0 PREEMPT(none) [ 2590.518207][ T7577] Tainted: [W]=WARN [ 2590.522211][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2590.535026][ T7577] ===================================================== [ 2590.542157][ T7577] Disabling lock debugging due to kernel taint [ 2590.548411][ T7577] Kernel panic - not syncing: kmsan.panic set ... [ 2590.554942][ T7577] CPU: 0 UID: 0 PID: 7577 Comm: syz.2.12303 Tainted: G B W syzkaller #0 PREEMPT(none) [ 2590.566068][ T7577] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2590.571165][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2590.581322][ T7577] Call Trace: [ 2590.584681][ T7577] [ 2590.587676][ T7577] __dump_stack+0x26/0x30 [ 2590.592247][ T7577] dump_stack_lvl+0x53/0x270 [ 2590.596983][ T7577] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2590.602940][ T7577] dump_stack+0x1e/0x25 [ 2590.607233][ T7577] vpanic+0x435/0xd30 [ 2590.611376][ T7577] panic+0x15d/0x160 [ 2590.615478][ T7577] kmsan_report+0x31c/0x320 [ 2590.620140][ T7577] ? __msan_warning+0x1b/0x30 [ 2590.624942][ T7577] ? __schedule+0x828/0x7790 [ 2590.629665][ T7577] ? schedule+0x17d/0x3c0 [ 2590.634124][ T7577] ? exit_to_user_mode_loop+0x6c/0x370 [ 2590.639729][ T7577] ? do_syscall_64+0x1e3/0xfa0 [ 2590.644654][ T7577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2590.650881][ T7577] ? kmsan_get_metadata+0xfb/0x160 [ 2590.656139][ T7577] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2590.662657][ T7577] ? kmsan_get_metadata+0xfb/0x160 [ 2590.667918][ T7577] ? schedule+0x17d/0x3c0 [ 2590.672373][ T7577] ? __msan_warning+0x1b/0x30 [ 2590.677164][ T7577] ? filter_irq_stacks+0x13f/0x190 [ 2590.682456][ T7577] ? stack_depot_save_flags+0x35/0x7b0 [ 2590.688052][ T7577] ? kmsan_get_metadata+0xfb/0x160 [ 2590.693310][ T7577] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2590.699841][ T7577] ? kmsan_get_metadata+0xfb/0x160 [ 2590.705098][ T7577] __msan_warning+0x1b/0x30 [ 2590.709718][ T7577] __schedule+0x828/0x7790 [ 2590.714275][ T7577] ? fput+0x113/0x160 [ 2590.718404][ T7577] ? __sys_sendto+0x63d/0x720 [ 2590.723236][ T7577] ? kmsan_get_metadata+0xfb/0x160 [ 2590.728496][ T7577] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2590.734469][ T7577] ? kmsan_get_metadata+0xfb/0x160 [ 2590.739730][ T7577] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2590.746250][ T7577] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2590.752505][ T7577] schedule+0x17d/0x3c0 [ 2590.756803][ T7577] exit_to_user_mode_loop+0x6c/0x370 [ 2590.762231][ T7577] do_syscall_64+0x1e3/0xfa0 [ 2590.766971][ T7577] ? irqentry_exit+0x16/0x60 [ 2590.771694][ T7577] ? clear_bhb_loop+0x40/0x90 [ 2590.776508][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2590.782642][ T7577] RIP: 0033:0x7effad38efc9 [ 2590.787154][ T7577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2590.807159][ T7577] RSP: 002b:00007effae185038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2590.815710][ T7577] RAX: 000000000000fc13 RBX: 00007effad5e5fa0 RCX: 00007effad38efc9 [ 2590.823795][ T7577] RDX: 000000000000fc13 RSI: 0000200000000280 RDI: 0000000000000005 [ 2590.831888][ T7577] RBP: 00007effad411f91 R08: 0000000000000000 R09: 000000000000004e [ 2590.839969][ T7577] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2590.848056][ T7577] R13: 00007effad5e6038 R14: 00007effad5e5fa0 R15: 00007fff02488108 [ 2590.856180][ T7577] [ 2590.859610][ T7577] Kernel Offset: disabled [ 2590.863976][ T7577] Rebooting in 86400 seconds..