last executing test programs: 1m32.530957934s ago: executing program 3 (id=186): r0 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) mmap(&(0x7f0000839000/0xe000)=nil, 0xe000, 0x2, 0x12, r0, 0x6097000) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x623, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x80) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x1a, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) 1m32.074090582s ago: executing program 0 (id=190): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) read$FUSE(r2, &(0x7f000000b080)={0x2020}, 0x2020) 1m31.962627784s ago: executing program 3 (id=191): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x0, 0x0) 1m31.751075358s ago: executing program 0 (id=192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd27, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 1m31.366273266s ago: executing program 0 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101}, 0x94) 1m31.065984052s ago: executing program 0 (id=196): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@fat=@showexec}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@shortname_winnt}]}, 0x0, 0x280, &(0x7f0000000800)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1m30.847775676s ago: executing program 3 (id=197): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000cc0)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x72, 0x20000}, 0x20) 1m30.837914606s ago: executing program 0 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m30.495207372s ago: executing program 3 (id=201): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x8) 1m30.252845057s ago: executing program 0 (id=203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 1m29.793753986s ago: executing program 32 (id=203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 1m28.132117537s ago: executing program 3 (id=212): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@usrquota}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc0000484) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(&(0x7f0000000680)='./file0\x00', &(0x7f0000000300)='./file1\x00') 1m25.831799051s ago: executing program 3 (id=222): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmsg$alg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=';', 0x1}], 0x1, 0x0, 0x0, 0x400}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) 1m25.113114015s ago: executing program 33 (id=222): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmsg$alg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=';', 0x1}], 0x1, 0x0, 0x0, 0x400}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) 35.728448592s ago: executing program 2 (id=480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 34.78578925s ago: executing program 2 (id=493): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x19) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0xffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 34.693536942s ago: executing program 2 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 34.608679683s ago: executing program 2 (id=497): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./bus\x00', 0x8000, &(0x7f0000004380)=ANY=[@ANYRESOCT=r1, @ANYBLOB="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", @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES32=r1, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES8=r0, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 34.28367156s ago: executing program 2 (id=500): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x10000011}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 33.76227932s ago: executing program 1 (id=504): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000002c0)=[@release], 0x0, 0x0, 0x0}) 33.634183202s ago: executing program 1 (id=506): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) timerfd_create(0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) 33.425164076s ago: executing program 1 (id=516): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmsg$inet(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f00000000c0)="b3", 0x1, 0x24000084, 0x0, 0x0) 33.246346929s ago: executing program 1 (id=509): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}]}, 0x48}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.976712384s ago: executing program 1 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 32.662532s ago: executing program 1 (id=511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 31.709518168s ago: executing program 2 (id=514): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r1], 0x38}}, 0x0) 31.153434679s ago: executing program 34 (id=514): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r1], 0x38}}, 0x0) 17.345190841s ago: executing program 35 (id=511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 5.976593817s ago: executing program 5 (id=622): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000400)=@v2={0x5, 0x1, 0x16, 0x6, 0x2a, "5a4b8751fb4bd120d8f2caece59b0b67f35c4a1bc9748908871d2248dd3e5b2a71909780997fa47d7dd5"}, 0x33, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 5.720525182s ago: executing program 4 (id=623): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 5.662084932s ago: executing program 5 (id=624): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000180)={[{@ref_verify}, {@nodatasum}, {@compress_force}, {@nossd_spread}, {@ssd}, {}, {@datacow}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c42, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) 5.364858268s ago: executing program 4 (id=626): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r3}) 5.195578442s ago: executing program 4 (id=627): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 4.564502754s ago: executing program 5 (id=629): unshare(0xc040400) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@gquota}, {@nolazytime}, {@dax}]}, 0x1, 0x97a6, &(0x7f0000012f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0c0586d, &(0x7f0000000180)={0x0, 0x5, 0x4}) 4.032293644s ago: executing program 6 (id=630): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) 3.917334926s ago: executing program 6 (id=631): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.413149296s ago: executing program 7 (id=633): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e00cdc2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.368366976s ago: executing program 4 (id=634): r0 = syz_open_procfs(0x0, &(0x7f0000019080)='mountinfo\x00') r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 3.332469017s ago: executing program 6 (id=635): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000a600)={0x60000000}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3.057251242s ago: executing program 7 (id=636): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="ff41", 0x2}], 0x1, 0x5405, 0x7ff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x181042, 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r1, 0x10, 0x63a, 0x8000) 2.707869919s ago: executing program 7 (id=637): mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 2.707643869s ago: executing program 5 (id=638): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) close_range(r0, 0xffffffffffffffff, 0x0) 2.185308569s ago: executing program 4 (id=639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x3f, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 2.183793489s ago: executing program 6 (id=640): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 1.947693523s ago: executing program 6 (id=641): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x6, r2, 0x334, 0x20000, 0x0, 0x8, 0x7de95, 0x2c35dd, 0xffffffffffffff7b}) 1.264932087s ago: executing program 6 (id=642): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a18f6913026bbc8e195ec033d173c59594e", 0x13) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 1.264067407s ago: executing program 4 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) 503.759761ms ago: executing program 7 (id=643): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 459.382332ms ago: executing program 5 (id=644): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 312.213744ms ago: executing program 7 (id=645): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 37.13926ms ago: executing program 7 (id=646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x47, &(0x7f0000003fc0)}, 0x3c) 0s ago: executing program 5 (id=647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd27, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) kernel console output (not intermixed with test programs): n dev nbd0, logical block 0, async page read [ 93.281708][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.290818][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.298824][ T5803] ldm_validate_partition_table(): Disk read failed. [ 93.306269][ T310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.307645][ T5803] Dev nbd0: unable to read RDB block 0 [ 93.319874][ T5803] nbd0: unable to read partition table [ 93.327127][ T5803] nbd0: partition table beyond EOD, truncated [ 93.368367][ T310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.414360][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.485033][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.568122][ T5884] syz.3.4[5884]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.849470][ T5884] loop3: detected capacity change from 0 to 8192 [ 93.869053][ T5884] ======================================================= [ 93.869053][ T5884] WARNING: The mand mount option has been deprecated and [ 93.869053][ T5884] and is ignored by this kernel. Remove the mand [ 93.869053][ T5884] option from the mount to silence this warning. [ 93.869053][ T5884] ======================================================= [ 94.117454][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.322476][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 94.343952][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.362178][ T23] usb 3-1: config 0 has no interface number 0 [ 94.373069][ T23] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 94.389357][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.420984][ T23] usb 3-1: Product: syz [ 94.437271][ T23] usb 3-1: Manufacturer: syz [ 94.456324][ T23] usb 3-1: SerialNumber: syz [ 94.498059][ T23] usb 3-1: config 0 descriptor?? [ 94.556360][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 94.986242][ T5875] usb 3-1: USB disconnect, device number 2 [ 95.076866][ T5910] loop3: detected capacity change from 0 to 128 [ 95.090701][ T5910] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 95.119456][ T5910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.261333][ T5794] Bluetooth: hci1: command tx timeout [ 95.266890][ T50] Bluetooth: hci0: command tx timeout [ 95.266906][ T5802] Bluetooth: hci2: command tx timeout [ 95.344286][ T5794] Bluetooth: hci3: command tx timeout [ 95.368871][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 95.391025][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 95.398171][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.406090][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.414083][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.422402][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.430361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.438275][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.446299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.454220][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.462204][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.470149][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.478207][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.486088][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.494071][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.501963][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.509879][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.517753][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.521428][ T786] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 95.525727][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.541070][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.549770][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.557685][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.565678][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.573591][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.581737][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.589600][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.597609][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.605504][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.613499][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.621461][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.629558][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.638557][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.646955][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.655266][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.664124][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.674502][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.685744][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.695174][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.704602][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 95.715389][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 95.765496][ T786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.808064][ T786] usb 2-1: not running at top speed; connect to a high speed hub [ 95.832742][ T5918] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16'. [ 95.833734][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.885673][ T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.922950][ T786] usb 2-1: string descriptor 0 read error: -22 [ 95.929376][ T786] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.952235][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.995120][ T786] usb 2-1: 0:2 : does not exist [ 96.251425][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.431201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 96.478399][ T23] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.521902][ T23] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 96.532844][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.543601][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.598107][ T5920] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 97.207385][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 97.227551][ T5931] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.392163][ T5936] loop0: detected capacity change from 0 to 1024 [ 97.565778][ T5936] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.577388][ T5936] EXT4-fs: test_dummy_encryption requires encrypt feature [ 97.684210][ T786] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 97.712740][ T786] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 97.801033][ T23] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 97.805780][ T786] usb 2-1: USB disconnect, device number 2 [ 97.933874][ T23] usb 3-1: USB disconnect, device number 3 [ 99.178288][ T5976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.369589][ T5982] mmap: syz.1.41 (5982) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.620060][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.692372][ T5988] netlink: 220 bytes leftover after parsing attributes in process `syz.3.43'. [ 99.719395][ T5988] netlink: 220 bytes leftover after parsing attributes in process `syz.3.43'. [ 99.729552][ T5988] netlink: 32 bytes leftover after parsing attributes in process `syz.3.43'. [ 100.087920][ T5998] loop3: detected capacity change from 0 to 1024 [ 100.257403][ T6002] trusted_key: syz.2.50 sent an empty control message without MSG_MORE. [ 100.488882][ T39] hfsplus: b-tree write err: -5, ino 3 [ 100.796183][ T6018] syzkaller0: entered promiscuous mode [ 100.802627][ T6018] syzkaller0: entered allmulticast mode [ 101.391800][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.491254][ T5844] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.581375][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 101.608986][ T23] usb 4-1: config 107 has 0 interfaces, different from the descriptor's value: 1 [ 101.644164][ T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 101.666613][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.680393][ T5844] usb 1-1: Using ep0 maxpacket: 8 [ 101.706887][ T5844] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 101.719037][ T23] usb 4-1: Product: syz [ 101.725251][ T5844] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.750474][ T23] usb 4-1: Manufacturer: syz [ 101.765596][ T23] usb 4-1: SerialNumber: syz [ 101.770990][ T5844] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.822995][ T5844] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.871390][ T5844] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.930820][ T5844] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.960209][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.043146][ T23] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 102.261877][ T5844] usb 1-1: usb_control_msg returned -32 [ 102.277736][ T5844] usbtmc 1-1:16.0: can't read capabilities [ 102.278432][ T6026] loop2: detected capacity change from 0 to 131072 [ 102.322354][ T6026] F2FS-fs (loop2): invalid crc value [ 102.336699][ T5775] usb 4-1: USB disconnect, device number 2 [ 102.349448][ T6026] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.433978][ T6026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 103.074459][ T6051] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 103.276223][ T5837] usb 1-1: USB disconnect, device number 2 [ 103.427724][ T6059] lo: Caught tx_queue_len zero misconfig [ 103.867072][ T6071] veth0: entered promiscuous mode [ 103.886104][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 104.578313][ T6088] loop0: detected capacity change from 0 to 32768 [ 104.600098][ T6088] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.81 (6088) [ 104.650828][ T6088] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.664153][ T6088] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 104.673550][ T6088] BTRFS info (device loop0): enabling disk space caching [ 104.682010][ T6088] BTRFS info (device loop0): enabling auto defrag [ 104.689300][ T6088] BTRFS info (device loop0): doing ref verification [ 104.698430][ T6088] BTRFS info (device loop0): force clearing of disk cache [ 104.706299][ T6088] BTRFS info (device loop0): setting nodatasum [ 104.712941][ T6088] BTRFS info (device loop0): disk space caching is enabled [ 104.858977][ T6088] BTRFS info (device loop0): enabling ssd optimizations [ 104.866296][ T6088] BTRFS info (device loop0): auto enabling async discard [ 104.888825][ T6088] BTRFS info (device loop0): rebuilding free space tree [ 104.961874][ T6088] BTRFS info (device loop0): disabling free space tree [ 104.969041][ T6088] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.979356][ T6088] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.001608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.896734][ T6120] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 106.011805][ T6093] loop2: detected capacity change from 0 to 32768 [ 106.125115][ T5790] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.199178][ T6093] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 106.380453][ T6126] loop1: detected capacity change from 0 to 128 [ 106.454788][ T6126] EXT4-fs (loop1): Test dummy encryption mode enabled [ 106.593273][ T6126] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.705950][ T6126] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.914369][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 107.409503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.523256][ T6126] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 107.807477][ T6126] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 107.865487][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 107.878377][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 107.889693][ T6166] Zero length message leads to an empty skb [ 108.064690][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.838624][ T6170] loop0: detected capacity change from 0 to 32768 [ 108.859993][ T6172] loop3: detected capacity change from 0 to 32768 [ 108.957474][ T6172] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 109.017768][ T28] audit: type=1800 audit(1759333035.583:2): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.101" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 109.059660][ T6172] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 109.619918][ T6181] loop1: detected capacity change from 0 to 32768 [ 109.640308][ T6181] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.106 (6181) [ 109.668632][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 109.725720][ T6181] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.749105][ T6168] loop2: detected capacity change from 0 to 65536 [ 109.756691][ T6181] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 109.777947][ T6181] BTRFS info (device loop1): using free space tree [ 109.892891][ T6168] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 109.954345][ T6181] BTRFS info (device loop1): enabling ssd optimizations [ 109.999036][ T6181] BTRFS info (device loop1): auto enabling async discard [ 110.114535][ T6168] XFS (loop2): Ending clean mount [ 110.364467][ T6181] loop1: detected capacity change from 32768 to 64 [ 110.376924][ T5787] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 110.417682][ T6216] syz.1.106: attempt to access beyond end of device [ 110.417682][ T6216] loop1: rw=6145, sector=10464, nr_sectors = 8 limit=64 [ 110.457118][ T6216] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 110.470519][ T6216] syz.1.106: attempt to access beyond end of device [ 110.470519][ T6216] loop1: rw=6145, sector=10456, nr_sectors = 8 limit=64 [ 110.487393][ T6216] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 110.639153][ T6216] BTRFS error (device loop1: state AL): Transaction aborted (error -5) [ 110.699364][ T6216] BTRFS: error (device loop1: state AL) in free_log_tree:3321: errno=-5 IO failure [ 110.759283][ T6216] BTRFS info (device loop1: state EAL): forced readonly [ 110.784064][ T6216] BTRFS: error (device loop1: state EAL) in free_log_tree:3321: errno=-5 IO failure [ 110.821986][ T6216] BTRFS warning (device loop1: state EAL): Skipping commit of aborted transaction. [ 110.833089][ T6216] BTRFS: error (device loop1: state EAL) in cleanup_transaction:2004: errno=-5 IO failure [ 110.952177][ T5788] BTRFS info (device loop1: state EAL): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.263366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 111.268181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 111.322965][ T6232] loop3: detected capacity change from 0 to 256 [ 111.479416][ T6232] FAT-fs (loop3): Directory bread(block 64) failed [ 111.507809][ T6232] FAT-fs (loop3): Directory bread(block 65) failed [ 111.541627][ T6232] FAT-fs (loop3): Directory bread(block 66) failed [ 111.570401][ T6232] FAT-fs (loop3): Directory bread(block 67) failed [ 111.587288][ T6232] FAT-fs (loop3): Directory bread(block 68) failed [ 111.631669][ T6232] FAT-fs (loop3): Directory bread(block 69) failed [ 111.638459][ T6232] FAT-fs (loop3): Directory bread(block 70) failed [ 111.708059][ T6232] FAT-fs (loop3): Directory bread(block 71) failed [ 111.720744][ T6232] FAT-fs (loop3): Directory bread(block 72) failed [ 111.733470][ T6232] FAT-fs (loop3): Directory bread(block 73) failed [ 111.842583][ T6237] Bluetooth: MGMT ver 1.22 [ 111.869036][ T6237] Bluetooth: hci0: too big key_count value 32768 [ 112.311385][ T5844] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.538438][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.575396][ T5844] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.607097][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.629627][ T5844] usb 2-1: config 0 descriptor?? [ 112.635330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.800364][ T6252] loop2: detected capacity change from 0 to 2048 [ 112.825720][ T6252] UDF-fs: bad mount option "uid=¯ü7aˆ¹Tþ¯“C»ãièü ú>•¦æš³Î`S´u¨XÀQÍclüÀ»X8X‰˜>É|¿_‡°ùÒcgm-?jHÖrUM÷üÓy$L!°£rƒÀd½F<ïS¸¶ð‡•–Ó»’¿Åô" or missing value [ 112.881368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 112.901559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 112.915054][ T5844] usbhid 2-1:0.0: can't add hid device: -71 [ 112.937470][ T5844] usbhid: probe of 2-1:0.0 failed with error -71 [ 112.944817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.978397][ T5844] usb 2-1: USB disconnect, device number 3 [ 113.254495][ T6257] UBIFS error (pid: 6257): cannot open "./file0", error -22 [ 113.551305][ T5844] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.781360][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 113.789743][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.808003][ T5844] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 113.818737][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.839072][ T5844] usb 2-1: config 0 descriptor?? [ 113.851046][ T5844] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 113.870173][ T5844] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 114.062459][ T6263] loop3: detected capacity change from 0 to 40427 [ 114.092409][ T6263] F2FS-fs (loop3): Image doesn't support compression [ 114.107701][ T6263] F2FS-fs (loop3): heap/no_heap options were deprecated [ 114.202243][ T6263] F2FS-fs (loop3): invalid crc value [ 114.236005][ T6263] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.252308][ T6279] Illegal XDP return value 36 on prog (id 25) dev syz_tun, expect packet loss! [ 114.398960][ T786] usb 2-1: USB disconnect, device number 4 [ 114.422645][ T6263] F2FS-fs (loop3): Start checkpoint disabled! [ 114.441600][ T786] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 114.451440][ T6263] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 114.594630][ T28] audit: type=1800 audit(1759333041.163:3): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.128" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 114.638095][ T6263] syz.3.128: attempt to access beyond end of device [ 114.638095][ T6263] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 114.683467][ T6263] syz.3.128: attempt to access beyond end of device [ 114.683467][ T6263] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 114.747928][ T6263] syz.3.128: attempt to access beyond end of device [ 114.747928][ T6263] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 114.908674][ T39] kworker/u4:2: attempt to access beyond end of device [ 114.908674][ T39] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 114.933835][ T39] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 114.946034][ T39] kworker/u4:2: attempt to access beyond end of device [ 114.946034][ T39] loop3: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 114.975569][ T39] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 115.001302][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.195946][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 115.234445][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.254908][ T786] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.277346][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.317646][ T786] usb 3-1: config 0 descriptor?? [ 115.547995][ T786] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.830737][ T23] usb 3-1: USB disconnect, device number 4 [ 115.830820][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 116.053988][ T6306] loop0: detected capacity change from 0 to 40427 [ 116.075543][ T6306] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 116.092860][ T6306] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 116.106347][ T6306] F2FS-fs (loop0): invalid crc value [ 116.156779][ T6306] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.293280][ T6310] loop3: detected capacity change from 0 to 32768 [ 116.310563][ T6306] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 116.334199][ T6306] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.381555][ T6310] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 116.493373][ T6310] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.842622][ T58] kworker/u4:4: attempt to access beyond end of device [ 116.842622][ T58] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 117.103421][ T6310] syz.3.147 (6310) used greatest stack depth: 19376 bytes left [ 117.736574][ T6339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 118.062922][ T6349] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.182762][ T6347] loop1: detected capacity change from 0 to 8192 [ 118.213393][ T6347] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.227934][ T6347] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 118.237819][ T6347] REISERFS (device loop1): using ordered data mode [ 118.245313][ T6347] reiserfs: using flush barriers [ 118.254804][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 118.261345][ T6347] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.297082][ T6347] REISERFS (device loop1): checking transaction log (loop1) [ 118.623724][ T6347] REISERFS (device loop1): Using tea hash to sort names [ 118.638286][ T6347] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 119.206735][ T5775] kernel write not supported for file /adsp1 (pid: 5775 comm: kworker/1:3) [ 119.360888][ T6370] warning: `syz.3.168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.596445][ T6360] loop2: detected capacity change from 0 to 40427 [ 119.644058][ T6360] F2FS-fs (loop2): heap/no_heap options were deprecated [ 119.671351][ T6360] F2FS-fs (loop2): Image doesn't support compression [ 119.678335][ T6360] F2FS-fs (loop2): heap/no_heap options were deprecated [ 119.732560][ T6360] F2FS-fs (loop2): invalid crc value [ 119.771251][ T6360] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.932842][ T6360] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.166220][ T5787] syz-executor: attempt to access beyond end of device [ 120.166220][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 120.207311][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 120.222028][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 120.351452][ T5837] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.552968][ T5837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.587454][ T5837] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.627251][ T5837] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.649247][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.666842][ T5837] usb 1-1: SerialNumber: syz [ 120.914712][ T5837] usb 1-1: 0:2 : does not exist [ 120.953499][ T5837] usb 1-1: unit 78 not found! [ 121.031339][ T5837] usb 1-1: USB disconnect, device number 3 [ 121.105535][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.291988][ T6393] netlink: 'syz.3.176': attribute type 13 has an invalid length. [ 121.305471][ T6393] netlink: 'syz.3.176': attribute type 17 has an invalid length. [ 121.332425][ T6393] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.084158][ T6408] loop3: detected capacity change from 0 to 32768 [ 122.097411][ T6408] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.181 (6408) [ 122.117426][ T6408] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 122.127753][ T6408] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 122.137539][ T6408] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 122.147596][ T6408] BTRFS info (device loop3): use zstd compression, level 3 [ 122.155432][ T6408] BTRFS info (device loop3): using free space tree [ 122.296696][ T6408] BTRFS info (device loop3): enabling ssd optimizations [ 122.304037][ T6408] BTRFS info (device loop3): auto enabling async discard [ 122.421941][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 122.913341][ T5789] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 123.068969][ T5906] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5906) [ 123.296982][ T6445] loop1: detected capacity change from 0 to 2048 [ 123.304575][ T6445] EXT4-fs: Ignoring removed nobh option [ 123.405376][ T6445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.550959][ T6445] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.188: bg 0: block 408: padding at end of block bitmap is not set [ 123.583065][ T6445] EXT4-fs (loop1): Remounting filesystem read-only [ 123.972894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.158927][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.329565][ T6465] loop0: detected capacity change from 0 to 128 [ 124.909846][ T6478] loop3: detected capacity change from 0 to 512 [ 124.931028][ T6478] EXT4-fs: Ignoring removed nobh option [ 124.984603][ T6478] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.120104][ T6478] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.201: corrupted inode contents [ 125.219461][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.246525][ T6478] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #3: comm syz.3.201: mark_inode_dirty error [ 125.292303][ T6478] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #3: comm syz.3.201: corrupted inode contents [ 125.328134][ T6478] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.201: mark_inode_dirty error [ 125.379593][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.392213][ T6478] Quota error (device loop3): write_blk: dquota write failed [ 125.407219][ T6478] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 125.455748][ T6478] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.201: Failed to acquire dquot type 0 [ 125.469855][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.622545][ T6478] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.201: corrupted inode contents [ 125.654033][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.715892][ T6478] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #16: comm syz.3.201: mark_inode_dirty error [ 125.821625][ T6478] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.201: corrupted inode contents [ 125.939234][ T6478] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.201: mark_inode_dirty error [ 126.008404][ T6478] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.201: corrupted inode contents [ 126.113344][ T6478] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 126.171497][ T6478] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.201: corrupted inode contents [ 126.220328][ T6478] EXT4-fs error (device loop3): ext4_truncate:4288: inode #16: comm syz.3.201: mark_inode_dirty error [ 126.268643][ T6478] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 126.364596][ T6478] EXT4-fs (loop3): 1 truncate cleaned up [ 126.421302][ T6478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.504592][ T6478] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.520482][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.532613][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.544902][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.555353][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.565876][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.574175][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.876829][ T6506] loop2: detected capacity change from 0 to 1024 [ 127.238124][ T6510] loop1: detected capacity change from 0 to 4096 [ 127.297613][ T6510] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 127.413913][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.585383][ T6519] loop2: detected capacity change from 0 to 1024 [ 127.758834][ T6519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.624762][ T5794] Bluetooth: hci3: command tx timeout [ 128.846380][ T6500] chnl_net:caif_netlink_parms(): no params data found [ 129.666441][ T6555] netlink: 36 bytes leftover after parsing attributes in process `syz.2.223'. [ 129.718823][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.764072][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.795393][ T6500] bridge_slave_0: entered allmulticast mode [ 129.833149][ T6500] bridge_slave_0: entered promiscuous mode [ 129.849199][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.877989][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.900345][ T6500] bridge_slave_1: entered allmulticast mode [ 129.922582][ T6500] bridge_slave_1: entered promiscuous mode [ 129.977735][ T11] hsr_slave_0: left promiscuous mode [ 130.007280][ T11] hsr_slave_1: left promiscuous mode [ 130.021552][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.042262][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.064335][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.079230][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.095546][ T11] bridge_slave_1: left allmulticast mode [ 130.111320][ T11] bridge_slave_1: left promiscuous mode [ 130.124718][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.163788][ T11] bridge_slave_0: left allmulticast mode [ 130.169512][ T11] bridge_slave_0: left promiscuous mode [ 130.181222][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.254318][ T11] veth1_macvtap: left promiscuous mode [ 130.267661][ T11] veth0_macvtap: left promiscuous mode [ 130.281988][ T11] veth1_vlan: left promiscuous mode [ 130.293398][ T11] veth0_vlan: left promiscuous mode [ 130.711443][ T5794] Bluetooth: hci3: command tx timeout [ 130.975568][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.991019][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.008222][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.038355][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.066510][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 131.074144][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.683196][ T11] team0 (unregistering): Port device team_slave_1 removed [ 131.739184][ T11] team0 (unregistering): Port device team_slave_0 removed [ 131.794505][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.850876][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.525687][ T11] bond0 (unregistering): Released all slaves [ 132.648772][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 132.669888][ T6580] erspan0: entered promiscuous mode [ 132.676571][ T6580] macvtap1: entered promiscuous mode [ 132.682131][ T6580] macvtap1: entered allmulticast mode [ 132.687559][ T6580] erspan0: entered allmulticast mode [ 132.700487][ T6581] erspan0: left allmulticast mode [ 132.706496][ T6581] erspan0: left promiscuous mode [ 132.739579][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.759664][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.781499][ T5802] Bluetooth: hci3: command tx timeout [ 133.014108][ T6500] team0: Port device team_slave_0 added [ 133.073676][ T6500] team0: Port device team_slave_1 added [ 133.113997][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.121274][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.185110][ T5802] Bluetooth: hci1: command tx timeout [ 133.199723][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.227668][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.287710][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.397902][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.424984][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.526530][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.579524][ T6590] loop1: detected capacity change from 0 to 40427 [ 133.586476][ T6601] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 133.595329][ T6601] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 133.614292][ T6590] F2FS-fs (loop1): invalid crc value [ 133.622540][ T6590] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.666560][ T6604] netlink: 'syz.2.234': attribute type 10 has an invalid length. [ 133.742924][ T6604] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 133.749702][ T6604] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 133.763465][ T6590] F2FS-fs (loop1): Start checkpoint disabled! [ 133.788501][ T6604] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 133.807585][ T6590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 134.107581][ T6613] loop2: detected capacity change from 0 to 512 [ 134.121383][ T6500] hsr_slave_0: entered promiscuous mode [ 134.144634][ T6613] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.161986][ T6500] hsr_slave_1: entered promiscuous mode [ 134.417956][ T48] kworker/u4:3: attempt to access beyond end of device [ 134.417956][ T48] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 134.431862][ T6573] chnl_net:caif_netlink_parms(): no params data found [ 134.454903][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 134.630158][ T6619] loop2: detected capacity change from 0 to 1024 [ 134.687394][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.765082][ T6619] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.861332][ T5802] Bluetooth: hci3: command tx timeout [ 134.894508][ T6619] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 134.917479][ T6619] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 134.932060][ T6619] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.932060][ T6619] [ 134.942070][ T6619] EXT4-fs (loop2): Total free blocks count 0 [ 134.948099][ T6619] EXT4-fs (loop2): Free/Dirty block details [ 134.970114][ T6619] EXT4-fs (loop2): free_blocks=4293918720 [ 134.983760][ T6619] EXT4-fs (loop2): dirty_blocks=16 [ 134.988961][ T6619] EXT4-fs (loop2): Block reservation details [ 134.997080][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.998773][ T6619] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 135.082468][ T1321] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: comm kworker/u4:7: lblock 32 mapped to illegal pblock 0 (length 1) [ 135.118834][ T1321] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 135.150179][ T5802] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 135.233882][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.257621][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.261714][ T5802] Bluetooth: hci1: command tx timeout [ 135.270581][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.278018][ T6573] bridge_slave_0: entered allmulticast mode [ 135.287404][ T6573] bridge_slave_0: entered promiscuous mode [ 135.296940][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.309010][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.316492][ T6573] bridge_slave_1: entered allmulticast mode [ 135.323978][ T6573] bridge_slave_1: entered promiscuous mode [ 135.378831][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.492494][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.518508][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.558506][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.790745][ T6641] kvm: pic: non byte write [ 135.798795][ T6573] team0: Port device team_slave_0 added [ 135.810720][ T6573] team0: Port device team_slave_1 added [ 135.922854][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.931577][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.963601][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.976475][ T6500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.026878][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.052521][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.111374][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.147859][ T6500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.269326][ T6500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.315650][ T6500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.498618][ T6573] hsr_slave_0: entered promiscuous mode [ 136.518530][ T6573] hsr_slave_1: entered promiscuous mode [ 136.557304][ T6573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.584320][ T6573] Cannot create hsr debugfs directory [ 136.950882][ T6652] loop2: detected capacity change from 0 to 32768 [ 137.001714][ T6652] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.025982][ T28] audit: type=1326 audit(1759333063.593:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.1.245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f778198eec9 code=0x0 [ 137.160311][ T6652] XFS (loop2): Ending clean mount [ 137.237680][ T6652] XFS (loop2): Quotacheck needed: Please wait. [ 137.341916][ T5802] Bluetooth: hci1: command tx timeout [ 137.359489][ T6652] XFS (loop2): Quotacheck: Done. [ 137.568825][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.641008][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.778601][ T6573] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.796134][ T6573] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.815537][ T6500] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.869489][ T6573] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.911279][ T6573] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.942949][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.952980][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.075113][ T6698] loop1: detected capacity change from 0 to 512 [ 138.086735][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.094043][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.174300][ T6698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.222516][ T11] hsr_slave_0: left promiscuous mode [ 138.239688][ T6698] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.250710][ T11] hsr_slave_1: left promiscuous mode [ 138.262474][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.269948][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.280715][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.288431][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.297600][ T11] bridge_slave_1: left allmulticast mode [ 138.303542][ T11] bridge_slave_1: left promiscuous mode [ 138.309343][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.322044][ T11] bridge_slave_0: left allmulticast mode [ 138.327746][ T11] bridge_slave_0: left promiscuous mode [ 138.334608][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.377353][ T11] veth1_macvtap: left promiscuous mode [ 138.384454][ T11] veth0_macvtap: left promiscuous mode [ 138.390176][ T11] veth1_vlan: left promiscuous mode [ 138.397592][ T11] veth0_vlan: left promiscuous mode [ 138.447791][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.431787][ T5802] Bluetooth: hci1: command tx timeout [ 139.582476][ T11] team0 (unregistering): Port device team_slave_1 removed [ 139.665380][ T11] team0 (unregistering): Port device team_slave_0 removed [ 139.748581][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.818657][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.430703][ T11] bond0 (unregistering): Released all slaves [ 140.507511][ T6706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.249'. [ 140.558630][ T6706] team0: Port device team_slave_1 removed [ 141.063030][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.170494][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.189301][ T6731] netlink: 'syz.1.256': attribute type 1 has an invalid length. [ 141.286111][ T6731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.308871][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.316117][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.353371][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.360650][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.468935][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.239854][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.328983][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 142.395445][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 142.469994][ T6768] ceph: No mds server is up or the cluster is laggy [ 142.479178][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 142.561408][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 142.602146][ T6500] veth0_vlan: entered promiscuous mode [ 142.684768][ T6500] veth1_vlan: entered promiscuous mode [ 142.898478][ T6500] veth0_macvtap: entered promiscuous mode [ 142.920203][ T6500] veth1_macvtap: entered promiscuous mode [ 142.925384][ T6785] loop1: detected capacity change from 0 to 64 [ 143.015536][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.056752][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.090494][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.121366][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.126984][ T6785] syz.1.260: attempt to access beyond end of device [ 143.126984][ T6785] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 143.149370][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.175844][ T6785] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 143.191021][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.226865][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.261516][ T6785] syz.1.260: attempt to access beyond end of device [ 143.261516][ T6785] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 143.276081][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.311581][ T6785] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 143.316488][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.343963][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.353666][ T6785] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 143.388496][ T6500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.408470][ T6793] syz.1.260: attempt to access beyond end of device [ 143.408470][ T6793] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 143.408965][ T6785] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 143.436801][ T6500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.466591][ T6500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.487096][ T6500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.503791][ T6793] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 143.508686][ T6785] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null. [ 143.544138][ T6793] syz.1.260: attempt to access beyond end of device [ 143.544138][ T6793] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 143.641402][ T6793] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 143.838012][ T6573] veth0_vlan: entered promiscuous mode [ 143.890920][ T6573] veth1_vlan: entered promiscuous mode [ 143.972450][ T5788] syz-executor: attempt to access beyond end of device [ 143.972450][ T5788] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 144.058794][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.083112][ T5788] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 144.092465][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.111900][ T5788] syz-executor: attempt to access beyond end of device [ 144.111900][ T5788] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 144.153997][ T5788] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 144.181819][ T6573] veth0_macvtap: entered promiscuous mode [ 144.226503][ T5788] Trying to free block not in datazone [ 144.285008][ T6573] veth1_macvtap: entered promiscuous mode [ 144.300539][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.329494][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.388838][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.414971][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.455968][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.469629][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.484485][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.498167][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.518288][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.559020][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.576025][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.602486][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.617976][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.647585][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.662566][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.726406][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.779277][ T6573] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.815897][ T6573] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.837883][ T6573] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.861498][ T6573] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.193236][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.221320][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.302993][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.310881][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.129721][ T6861] policy can only be matched on NF_INET_PRE_ROUTING [ 147.129745][ T6861] unable to load match [ 147.148344][ T6852] loop5: detected capacity change from 0 to 32768 [ 147.222471][ T6852] JBD2: Ignoring recovery information on journal [ 147.331905][ T6852] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 147.494432][ T6869] OCFS2: ERROR (device loop5): int ocfs2_change_extent_flag(handle_t *, struct ocfs2_extent_tree *, u32, u32, u32, struct ocfs2_alloc_context *, struct ocfs2_cached_dealloc_ctxt *, int, int): Owner 17058 has an extent at cpos 0 which can no longer be found [ 147.543566][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.277'. [ 147.565273][ T6869] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 147.594841][ T6869] OCFS2: File system is now read-only. [ 147.611676][ T6869] (syz.5.273,6869,1):ocfs2_mark_extent_refcounted:2359 ERROR: status = -30 [ 147.626271][ T6869] (syz.5.273,6869,1):ocfs2_add_refcount_flag:3706 ERROR: status = -30 [ 147.677956][ T6869] (syz.5.273,6869,1):ocfs2_reflink_remap_extent:4570 ERROR: status = -30 [ 147.694510][ T6869] (syz.5.273,6869,1):ocfs2_reflink_remap_blocks:4694 ERROR: status = -30 [ 147.707632][ T6869] (syz.5.273,6869,1):ocfs2_remap_file_range:2746 ERROR: status = -30 [ 147.896757][ T6573] ocfs2: Unmounting device (7,5) on (node local) [ 147.960696][ T6881] tipc: Failed to remove unknown binding: 66,1,1/0:2904779308/2904779310 [ 148.010659][ T6881] tipc: Failed to remove unknown binding: 66,1,1/0:2904779308/2904779310 [ 148.693878][ T786] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 148.825165][ T5802] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 148.897389][ T786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.913843][ T786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.941256][ T786] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.972428][ T786] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.998144][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.029312][ T786] usb 6-1: config 0 descriptor?? [ 149.497422][ T786] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 149.524459][ T6923] loop2: detected capacity change from 0 to 1024 [ 149.544169][ T786] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 149.664194][ T786] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 149.801542][ T5844] IPVS: starting estimator thread 0... [ 149.892092][ T6933] IPVS: using max 17 ests per chain, 40800 per kthread [ 149.908673][ T786] usb 6-1: USB disconnect, device number 2 [ 149.964897][ T6930] fido_id[6930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 150.399670][ T6942] loop4: detected capacity change from 0 to 2048 [ 150.455262][ T6942] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 150.487381][ T6942] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 150.496845][ T6942] UDF-fs: Scanning with blocksize 512 failed [ 150.526754][ T6942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.901390][ T786] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.982563][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 151.083191][ T58] IPVS: stop unused estimator thread 0... [ 151.101445][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 151.119958][ T786] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.137578][ T786] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 151.163682][ T6962] process 'syz.4.299' launched './file2' with NULL argv: empty string added [ 151.172778][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 151.188193][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.222232][ T786] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.262806][ T786] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.302635][ T786] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.334266][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.362745][ T786] usb 2-1: config 0 descriptor?? [ 151.595627][ T786] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 151.866733][ T786] usb 2-1: USB disconnect, device number 5 [ 151.913567][ T786] usblp0: removed [ 152.913544][ T9] libceph: connect (1)[c::]:6789 error -101 [ 152.929963][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 153.226606][ T9] libceph: connect (1)[c::]:6789 error -101 [ 153.242451][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 153.503862][ T7040] pim6reg1: entered promiscuous mode [ 153.523640][ T7040] pim6reg1: entered allmulticast mode [ 153.705271][ T7045] hub 1-0:1.0: USB hub found [ 153.717176][ T7045] hub 1-0:1.0: 1 port detected [ 153.731955][ T7015] ceph: No mds server is up or the cluster is laggy [ 153.751986][ T9] libceph: connect (1)[c::]:6789 error -101 [ 153.770860][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 154.083263][ T7057] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 154.111445][ T5858] IPVS: starting estimator thread 0... [ 154.216926][ T7058] IPVS: using max 20 ests per chain, 48000 per kthread [ 155.346594][ T7094] IPVS: Scheduler module ip_vs_sip not found [ 156.022088][ T7116] batadv_slave_0: entered promiscuous mode [ 156.048177][ T7115] batadv_slave_0: left promiscuous mode [ 157.546391][ T7136] loop5: detected capacity change from 0 to 32768 [ 157.637248][ T7136] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.943874][ T7176] team0: Device gre1 is of different type [ 158.008303][ T7136] XFS (loop5): Ending clean mount [ 158.059577][ T7136] XFS (loop5): Quotacheck needed: Please wait. [ 158.241759][ T7136] XFS (loop5): Quotacheck: Done. [ 158.298119][ T7185] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.746040][ T6573] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.079801][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'. [ 160.204455][ T5875] kernel read not supported for file /adsp1 (pid: 5875 comm: kworker/0:5) [ 160.898583][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.369'. [ 160.924965][ T7228] netlink: 'syz.5.369': attribute type 18 has an invalid length. [ 160.959911][ T7228] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.971704][ T7228] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.980592][ T7228] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.991532][ T7228] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.015535][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.369'. [ 161.036780][ T7228] netlink: 'syz.5.369': attribute type 18 has an invalid length. [ 162.210617][ T7256] loop2: detected capacity change from 0 to 16 [ 162.260954][ T7256] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 78a00, please upgrade kernel [ 162.377213][ T5906] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.431834][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 162.622873][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 162.661833][ T5875] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 162.671656][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 162.701739][ T5875] usb 5-1: config 0 has no interface number 0 [ 162.720097][ T5875] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 162.734616][ T5875] usb 5-1: config 0 interface 196 has no altsetting 0 [ 162.752050][ T5875] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 162.772444][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.791297][ T5875] usb 5-1: Product: syz [ 162.804622][ T5875] usb 5-1: Manufacturer: syz [ 162.820574][ T5875] usb 5-1: SerialNumber: syz [ 162.853443][ T5875] usb 5-1: config 0 descriptor?? [ 162.879171][ T7254] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.897209][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.918903][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.939887][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.960051][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.996274][ T9] usb 3-1: Product: syz [ 163.000576][ T9] usb 3-1: Manufacturer: syz [ 163.032045][ T9] usb 3-1: SerialNumber: syz [ 163.281823][ T9] usb 3-1: 0:2 : does not exist [ 163.309089][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 163.336955][ T5875] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 163.371534][ T5875] ipheth: probe of 5-1:0.196 failed with error -71 [ 163.404312][ T9] usb 3-1: USB disconnect, device number 5 [ 163.425663][ T5875] usb 5-1: USB disconnect, device number 2 [ 163.528815][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.815690][ T7296] loop1: detected capacity change from 0 to 256 [ 163.856102][ T7296] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.874809][ T7296] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 163.905641][ T7296] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 164.435089][ T7293] loop5: detected capacity change from 0 to 32768 [ 164.444888][ T7293] XFS: noikeep mount option is deprecated. [ 164.461424][ T5775] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 164.474029][ T7293] XFS: noikeep mount option is deprecated. [ 164.515837][ T7293] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.633102][ T7293] XFS (loop5): Ending clean mount [ 164.646792][ T7293] XFS (loop5): Quotacheck needed: Please wait. [ 164.653397][ T5775] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 164.653429][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.667327][ T5775] usb 5-1: config 0 descriptor?? [ 164.707676][ T5775] cp210x 5-1:0.0: cp210x converter detected [ 164.775563][ T7293] XFS (loop5): Quotacheck: Done. [ 164.830102][ T7324] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.391'. [ 165.024172][ T6573] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.134671][ T5775] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 165.147069][ T7302] loop4: detected capacity change from 0 to 128 [ 165.246063][ T7332] all: renamed from lo (while UP) [ 165.254231][ T5775] usb 5-1: cp210x converter now attached to ttyUSB0 [ 165.487157][ T5875] usb 5-1: USB disconnect, device number 3 [ 165.517156][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 165.561586][ T5875] cp210x 5-1:0.0: device disconnected [ 165.797254][ T7351] loop2: detected capacity change from 0 to 64 [ 166.747192][ T7377] loop1: detected capacity change from 0 to 128 [ 166.813006][ T7377] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.864604][ T7377] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.040193][ T7377] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 167.106569][ T5906] udevd[5906]: incorrect jbd checksum on /dev/loop1 [ 167.187284][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.215751][ T5906] udevd[5906]: incorrect jbd checksum on /dev/loop1 [ 167.982869][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 168.171510][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 168.201511][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.256818][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.290121][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 168.331178][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.362461][ T9] usb 6-1: config 0 descriptor?? [ 168.426554][ T7409] loop2: detected capacity change from 0 to 32768 [ 168.474095][ T7409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.414 (7409) [ 168.579143][ T7409] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.592169][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 168.601793][ T5802] CPU: 0 PID: 5802 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 168.609550][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.619632][ T5802] Workqueue: hci2 hci_rx_work [ 168.624356][ T5802] Call Trace: [ 168.628139][ T5802] [ 168.631186][ T5802] dump_stack_lvl+0x16c/0x230 [ 168.636262][ T5802] ? show_regs_print_info+0x20/0x20 [ 168.643439][ T5802] ? load_image+0x3b0/0x3b0 [ 168.648292][ T5802] sysfs_create_dir_ns+0x256/0x280 [ 168.653835][ T5802] ? hci_rx_work+0x43a/0xd80 [ 168.658561][ T5802] ? sysfs_warn_dup+0xa0/0xa0 [ 168.663270][ T5802] ? do_raw_spin_unlock+0x121/0x230 [ 168.668536][ T5802] kobject_add_internal+0x6b8/0xc70 [ 168.674070][ T5802] kobject_add+0x156/0x220 [ 168.678573][ T5802] ? __rwlock_init+0x150/0x150 [ 168.683399][ T5802] ? kobject_init+0x1e0/0x1e0 [ 168.688138][ T5802] ? _raw_spin_unlock+0x28/0x40 [ 168.693035][ T5802] ? get_device_parent+0x366/0x390 [ 168.698267][ T5802] device_add+0x408/0xc20 [ 168.702941][ T5802] hci_conn_add_sysfs+0xd5/0x1e0 [ 168.707932][ T5802] le_conn_complete_evt+0xc37/0x1220 [ 168.713399][ T5802] ? hci_event_packet+0x4a7/0x1210 [ 168.718847][ T5802] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 168.725925][ T5802] ? __copy_skb_header+0xa7/0x550 [ 168.731093][ T5802] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 168.737006][ T5802] ? skb_pull_data+0xfb/0x200 [ 168.741920][ T5802] hci_le_conn_complete_evt+0x187/0x440 [ 168.747614][ T5802] ? hci_remote_host_features_evt+0x160/0x160 [ 168.754667][ T5802] hci_event_packet+0x795/0x1210 [ 168.759642][ T5802] ? bis_list+0x290/0x290 [ 168.764025][ T5802] ? kcov_remote_start+0x2b/0x7f0 [ 168.769102][ T5802] ? hci_send_to_monitor+0xd7/0x4f0 [ 168.774340][ T5802] hci_rx_work+0x43a/0xd80 [ 168.778833][ T5802] ? process_scheduled_works+0x957/0x15b0 [ 168.784606][ T5802] process_scheduled_works+0xa45/0x15b0 [ 168.790350][ T5802] ? assign_work+0x400/0x400 [ 168.795059][ T5802] ? assign_work+0x39e/0x400 [ 168.799692][ T5802] worker_thread+0xa55/0xfc0 [ 168.804334][ T5802] kthread+0x2fa/0x390 [ 168.808636][ T5802] ? pr_cont_work+0x560/0x560 [ 168.813447][ T5802] ? kthread_blkcg+0xd0/0xd0 [ 168.818117][ T5802] ret_from_fork+0x48/0x80 [ 168.822568][ T5802] ? kthread_blkcg+0xd0/0xd0 [ 168.827179][ T5802] ret_from_fork_asm+0x11/0x20 [ 168.831981][ T5802] [ 168.840950][ T5802] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 168.841361][ T7409] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 168.856581][ T5802] Bluetooth: hci2: failed to register connection device [ 168.890208][ T9] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 168.917494][ T7409] BTRFS info (device loop2): using free space tree [ 169.062063][ T7409] BTRFS info (device loop2): enabling ssd optimizations [ 169.069142][ T7409] BTRFS info (device loop2): auto enabling async discard [ 169.134740][ T9] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 169.210535][ T7426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.335727][ T9] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 169.373871][ T5787] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.556351][ T9] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 169.576790][ T9] ft260 0003:0403:6030.0002: i2c bus error: 0xb6 [ 169.786474][ T9] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 169.848129][ T9] usb 6-1: USB disconnect, device number 3 [ 170.053350][ T7464] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.062504][ T7464] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.071492][ T7464] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.081323][ T7464] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.324463][ T7471] loop4: detected capacity change from 0 to 512 [ 170.342118][ T7471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.368754][ T7471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.381550][ T7471] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.433648][ T7471] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.422: Allocating blocks 41-42 which overlap fs metadata [ 170.456002][ T7471] EXT4-fs (loop4): Remounting filesystem read-only [ 170.463569][ T7471] Quota error (device loop4): write_blk: dquota write failed [ 170.471037][ T7471] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 170.481686][ T7471] Quota error (device loop4): write_blk: dquota write failed [ 170.489626][ T7471] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 170.500780][ T7471] EXT4-fs (loop4): 1 truncate cleaned up [ 170.508389][ T7471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.613758][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.338545][ T7501] loop4: detected capacity change from 0 to 1024 [ 171.347005][ T7501] EXT4-fs: Ignoring removed oldalloc option [ 171.353044][ T7501] EXT4-fs: Ignoring removed bh option [ 171.367362][ T7501] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.561684][ T7501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.779586][ T28] audit: type=1804 audit(1759333098.343:5): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.432" name="/newroot/37/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 171.890586][ T7511] loop5: detected capacity change from 0 to 2368 [ 171.922520][ T7511] ISOFS: Unable to identify CD-ROM format. [ 172.065585][ T7518] loop1: detected capacity change from 0 to 512 [ 172.121755][ T7518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.179263][ T7518] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.526637][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.575545][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.880048][ T7525] loop1: detected capacity change from 0 to 1024 [ 172.908068][ T7525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.972810][ T7525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.325871][ T5875] IPVS: starting estimator thread 0... [ 173.461445][ T7534] IPVS: using max 19 ests per chain, 45600 per kthread [ 173.507481][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.707716][ T786] IPVS: starting estimator thread 0... [ 174.811347][ T7572] IPVS: using max 18 ests per chain, 43200 per kthread [ 174.821844][ T7569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.882375][ T7569] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.024505][ T7569] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.145114][ T7569] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 175.633267][ T7569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.682931][ T7569] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.725531][ T7569] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.756392][ T7569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.775012][ T7569] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 175.812069][ T7569] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 175.897656][ T7569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.921947][ T7569] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 176.781379][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.465057][ T7607] loop5: detected capacity change from 0 to 256 [ 177.479896][ T7607] exfat: Deprecated parameter 'namecase' [ 177.490873][ T7607] exfat: Deprecated parameter 'utf8' [ 177.522813][ T7607] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 177.671348][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.824807][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.881279][ T5858] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 177.911400][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.075822][ T5858] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 178.089453][ T5858] usb 6-1: config 0 has no interface number 0 [ 178.095950][ T5858] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 178.111173][ T5858] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 178.126776][ T5858] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 178.140149][ T5858] usb 6-1: config 0 interface 2 has no altsetting 0 [ 178.158491][ T5858] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 178.170982][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.182182][ T5858] usb 6-1: Product: syz [ 178.186473][ T5858] usb 6-1: Manufacturer: syz [ 178.201385][ T5858] usb 6-1: SerialNumber: syz [ 178.220577][ T7615] loop1: detected capacity change from 0 to 32768 [ 178.232664][ T5858] usb 6-1: config 0 descriptor?? [ 178.234010][ T7615] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.467 (7615) [ 178.242694][ T7612] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 178.258298][ T7612] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 178.284920][ T7615] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.297647][ T7615] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 178.306859][ T7615] BTRFS info (device loop1): metadata ratio 2 [ 178.313239][ T7615] BTRFS info (device loop1): allowing degraded mounts [ 178.320145][ T7615] BTRFS info (device loop1): force zlib compression, level 3 [ 178.328285][ T7615] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 178.338078][ T7615] BTRFS info (device loop1): use zstd compression, level 3 [ 178.345652][ T7615] BTRFS info (device loop1): force clearing of disk cache [ 178.353015][ T7615] BTRFS info (device loop1): max_inline at 0 [ 178.359148][ T7615] BTRFS info (device loop1): using free space tree [ 178.411346][ T7615] BTRFS info (device loop1): enabling ssd optimizations [ 178.423862][ T7615] BTRFS info (device loop1): rebuilding free space tree [ 178.495673][ T5858] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 178.503282][ T28] audit: type=1800 audit(1759333105.073:6): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.467" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 178.503319][ T7641] veth0_to_bridge: entered promiscuous mode [ 178.571899][ T7640] veth0_to_bridge: left promiscuous mode [ 178.714259][ T5788] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.774095][ T7646] loop2: detected capacity change from 0 to 512 [ 178.858775][ T7646] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.474: bad orphan inode 13 [ 178.882404][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.890023][ T9] usb 6-1: USB disconnect, device number 4 [ 178.899333][ T7646] ext4_test_bit(bit=12, block=4) = 1 [ 178.924465][ T7646] is_bad_inode(inode)=0 [ 178.948675][ T7646] NEXT_ORPHAN(inode)=0 [ 178.957330][ T7646] max_ino=32 [ 178.965043][ T7646] i_nlink=1 [ 178.970015][ T7646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.025371][ T7646] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.474: Unrecognised inode hash code 20 [ 179.076739][ T7646] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.474: Corrupt directory, running e2fsck is recommended [ 179.131782][ T7650] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.474: Unrecognised inode hash code 20 [ 179.156217][ T7650] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.474: Corrupt directory, running e2fsck is recommended [ 179.182571][ T7650] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz.2.474: iget: bad i_size value: 880468304680 [ 179.196328][ T7646] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.474: Unrecognised inode hash code 20 [ 179.211270][ T7646] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.474: Corrupt directory, running e2fsck is recommended [ 179.225863][ T7646] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz.2.474: iget: bad i_size value: 880468304680 [ 179.247396][ T7650] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.474: Unrecognised inode hash code 20 [ 179.276576][ T7650] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.474: Corrupt directory, running e2fsck is recommended [ 179.301495][ T7650] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.474: Unrecognised inode hash code 20 [ 179.317549][ T7650] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.474: Corrupt directory, running e2fsck is recommended [ 179.330812][ T7650] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 13: comm syz.2.474: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 179.394183][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.751452][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.883292][ T7681] loop1: detected capacity change from 0 to 1024 [ 179.891013][ T7681] EXT4-fs: Ignoring removed nobh option [ 179.897513][ T7681] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.911409][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.927150][ T7681] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0102] [ 179.942933][ T7681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.981693][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.019458][ T7681] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.486: Allocating blocks 465-513 which overlap fs metadata [ 180.086248][ T7680] EXT4-fs (loop1): pa ffff888076974000: logic 80, phys. 209, len 19 [ 180.095517][ T7680] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 3 [ 180.199694][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.210771][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 180.729933][ T7709] loop2: detected capacity change from 0 to 1024 [ 180.738049][ T7709] EXT4-fs: Ignoring removed orlov option [ 180.744883][ T7709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.771584][ T7709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.845476][ T7709] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:427: inode #2: comm syz.2.497: No space for directory leaf checksum. Please run e2fsck -D. [ 180.869429][ T7709] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:427: inode #2: comm syz.2.497: No space for directory leaf checksum. Please run e2fsck -D. [ 180.886380][ T7709] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm syz.2.497: bg 0: bad block bitmap checksum [ 180.922247][ T7709] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 180.943376][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.977851][ T7715] veth0: entered promiscuous mode [ 180.987271][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 181.008610][ T5787] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 181.030403][ T5787] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /137/file1/lost+found: directory fails checksum at offset 0 [ 181.052937][ T5787] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 181.070844][ T5787] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /137/file1/lost+found: directory fails checksum at offset 1024 [ 181.093818][ T5787] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 181.117043][ T5787] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /137/file1/lost+found: directory fails checksum at offset 2048 [ 181.142369][ T5787] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 181.158689][ T5787] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /137/file1/lost+found: directory fails checksum at offset 3072 [ 181.181259][ T5787] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 181.201200][ T5787] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /137/file1/lost+found: directory fails checksum at offset 4096 [ 181.223679][ T5787] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 181.246253][ T5787] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /137/file1/lost+found: directory fails checksum at offset 5120 [ 181.268449][ T5787] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 181.290757][ T5787] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /137/file1/lost+found: directory fails checksum at offset 6144 [ 181.311038][ T5787] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /137/file1/lost+found: directory fails checksum at offset 7168 [ 181.328612][ T5787] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /137/file1/lost+found: directory fails checksum at offset 8192 [ 181.463231][ T7722] netlink: 156 bytes leftover after parsing attributes in process `syz.4.502'. [ 181.825206][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.981400][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.280041][ T7732] loop4: detected capacity change from 0 to 32768 [ 182.404896][ T7732] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 182.908180][ T6500] ocfs2: Unmounting device (7,4) on (node local) [ 183.021653][ T5802] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.472485][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.531034][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.689199][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.806870][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.925271][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.618552][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.631439][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.652940][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.661643][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.670609][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.678766][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.952814][ T7763] chnl_net:caif_netlink_parms(): no params data found [ 185.079227][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.089546][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.096868][ T7763] bridge_slave_0: entered allmulticast mode [ 185.103942][ T12] IPVS: stopping master sync thread 7057 ... [ 185.111863][ T7763] bridge_slave_0: entered promiscuous mode [ 185.144865][ T12] bond0: (slave wlan1): Releasing backup interface [ 185.169589][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.177887][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.192278][ T7763] bridge_slave_1: entered allmulticast mode [ 185.199954][ T7763] bridge_slave_1: entered promiscuous mode [ 185.326311][ T7763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.354964][ T7763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.465385][ T12] hsr_slave_0: left promiscuous mode [ 185.480792][ T12] hsr_slave_1: left promiscuous mode [ 185.493883][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.521239][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.532754][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.545544][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.556016][ T12] bridge_slave_1: left allmulticast mode [ 185.562230][ T12] bridge_slave_1: left promiscuous mode [ 185.569332][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.601601][ T12] bridge_slave_0: left allmulticast mode [ 185.607716][ T12] bridge_slave_0: left promiscuous mode [ 185.614187][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.876991][ T12] veth1_macvtap: left promiscuous mode [ 185.901394][ T12] veth0_macvtap: left promiscuous mode [ 185.973353][ T12] veth1_vlan: left promiscuous mode [ 185.986443][ T12] veth0_vlan: left promiscuous mode [ 186.462734][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.791401][ T5802] Bluetooth: hci0: command tx timeout [ 187.324412][ T12] team0 (unregistering): Port device team_slave_1 removed [ 187.399363][ T12] team0 (unregistering): Port device team_slave_0 removed [ 187.480136][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.570318][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.309342][ T12] bond0 (unregistering): Released all slaves [ 188.423496][ T7763] team0: Port device team_slave_0 added [ 188.484624][ T7763] team0: Port device team_slave_1 added [ 188.552949][ T7792] loop5: detected capacity change from 0 to 512 [ 188.560255][ T7792] EXT4-fs: Ignoring removed orlov option [ 188.592988][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.596536][ T7792] EXT4-fs (loop5): orphan cleanup on readonly fs [ 188.600211][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.617335][ T7792] EXT4-fs error (device loop5): ext4_find_extent:936: inode #4: comm syz.5.529: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 188.665526][ T7792] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 188.668389][ T7763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.675711][ T7792] EXT4-fs warning (device loop5): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 188.705977][ T7792] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 188.715425][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.726253][ T7792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.739909][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.767218][ T7763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.861482][ T5802] Bluetooth: hci0: command tx timeout [ 188.921907][ T6573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.020233][ T7763] hsr_slave_0: entered promiscuous mode [ 189.038682][ T7763] hsr_slave_1: entered promiscuous mode [ 189.061258][ T7763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.070742][ T7763] Cannot create hsr debugfs directory [ 189.266648][ T12] IPVS: stop unused estimator thread 0... [ 189.825619][ T7763] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 189.864144][ T7763] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 189.897741][ T7763] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 189.935027][ T7763] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.081153][ C1] sched: RT throttling activated [ 190.224785][ T7763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.287939][ T7763] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.346151][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.353471][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.401944][ T7797] loop5: detected capacity change from 0 to 131072 [ 190.419265][ T7797] F2FS-fs (loop5): invalid crc value [ 190.426643][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.433949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.463422][ T7795] loop4: detected capacity change from 0 to 65536 [ 190.472831][ T7797] F2FS-fs (loop5): Found nat_bits in checkpoint [ 190.523590][ T7797] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 190.571639][ T7795] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 190.656997][ T7795] XFS (loop4): Ending clean mount [ 190.811774][ T6500] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 190.904960][ T7763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.942019][ T5802] Bluetooth: hci0: command tx timeout [ 191.465139][ T7827] loop4: detected capacity change from 0 to 64 [ 191.513721][ T7763] veth0_vlan: entered promiscuous mode [ 191.566319][ T7763] veth1_vlan: entered promiscuous mode [ 191.636627][ T7763] veth0_macvtap: entered promiscuous mode [ 191.667317][ T7763] veth1_macvtap: entered promiscuous mode [ 191.710454][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.732343][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.765895][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.789700][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.812298][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.841175][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.863877][ T7763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.893511][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.921244][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.941191][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.960362][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.970472][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.987961][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.000144][ T7763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.041097][ T7763] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.060401][ T7763] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.080797][ T7763] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.097344][ T7763] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.268205][ T7784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.282134][ T7784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.333151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.344358][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.615143][ T7829] loop5: detected capacity change from 0 to 32768 [ 192.652633][ T28] audit: type=1800 audit(1759333119.223:7): pid=7829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.532" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 192.993609][ T5858] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 193.021451][ T5802] Bluetooth: hci0: command tx timeout [ 193.193861][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.209274][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.219147][ T5858] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 193.228800][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.241456][ T5858] usb 5-1: config 0 descriptor?? [ 193.664867][ T5858] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 193.672604][ T5858] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 193.683696][ T5858] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0003/input/input7 [ 193.726781][ T5858] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 193.918093][ T9] usb 5-1: USB disconnect, device number 4 [ 194.551674][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.558806][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.875943][ T7868] UBIFS error (pid: 7868): cannot open "./file0", error -22 [ 195.508863][ T7879] loop5: detected capacity change from 0 to 2048 [ 195.537249][ T7879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.698384][ T7877] loop6: detected capacity change from 0 to 40427 [ 195.712657][ T7877] F2FS-fs (loop6): Image doesn't support compression [ 195.722101][ T7877] F2FS-fs (loop6): heap/no_heap options were deprecated [ 195.733947][ T7877] F2FS-fs (loop6): invalid crc value [ 195.742541][ T7877] F2FS-fs (loop6): Found nat_bits in checkpoint [ 195.820938][ T7877] F2FS-fs (loop6): Start checkpoint disabled! [ 195.861054][ T7877] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 195.961081][ T28] audit: type=1800 audit(1759333122.523:8): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.550" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 195.999072][ T7877] syz.6.550: attempt to access beyond end of device [ 195.999072][ T7877] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 196.021808][ T7877] syz.6.550: attempt to access beyond end of device [ 196.021808][ T7877] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 196.038183][ T7877] syz.6.550: attempt to access beyond end of device [ 196.038183][ T7877] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 196.107155][ T7892] nbd5: detected capacity change from 0 to 8 [ 196.133366][ T1321] kworker/u4:7: attempt to access beyond end of device [ 196.133366][ T1321] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 196.148379][ T1321] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 196.155755][ T1321] kworker/u4:7: attempt to access beyond end of device [ 196.155755][ T1321] loop6: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 196.170035][ T1321] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 196.174605][ T7893] block nbd5: shutting down sockets [ 196.271695][ T5844] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 196.471383][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 196.482639][ T5844] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.490700][ T5844] usb 5-1: config 0 has no interface number 0 [ 196.501831][ T5844] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 196.512639][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.520702][ T5844] usb 5-1: Product: syz [ 196.525192][ T5844] usb 5-1: Manufacturer: syz [ 196.529840][ T5844] usb 5-1: SerialNumber: syz [ 196.540312][ T5844] usb 5-1: config 0 descriptor?? [ 196.550484][ T5844] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 196.829770][ T5844] usb 5-1: USB disconnect, device number 5 [ 197.247209][ T7923] loop6: detected capacity change from 0 to 8192 [ 197.256523][ T7923] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 197.275054][ T7923] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 197.284557][ T7923] REISERFS (device loop6): using ordered data mode [ 197.296223][ T7923] reiserfs: using flush barriers [ 197.303554][ T7923] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.328174][ T7923] REISERFS (device loop6): checking transaction log (loop6) [ 197.338414][ T7923] REISERFS (device loop6): Using r5 hash to sort names [ 197.344411][ T7919] loop5: detected capacity change from 0 to 32768 [ 197.357671][ T7923] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 197.390218][ T7919] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 197.434947][ T7919] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 198.450900][ T7937] loop6: detected capacity change from 0 to 64 [ 198.499494][ T7933] syz.4.572 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 198.813515][ T12] kworker/u4:1: attempt to access beyond end of device [ 198.813515][ T12] loop6: rw=1, sector=65, nr_sectors = 1 limit=64 [ 198.847352][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.863851][ T12] Buffer I/O error on dev loop6, logical block 65, lost async page write [ 198.876650][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.885818][ T12] kworker/u4:1: attempt to access beyond end of device [ 198.885818][ T12] loop6: rw=1, sector=66, nr_sectors = 1 limit=64 [ 198.899450][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.906797][ T12] Buffer I/O error on dev loop6, logical block 66, lost async page write [ 198.915584][ T12] kworker/u4:1: attempt to access beyond end of device [ 198.915584][ T12] loop6: rw=1, sector=67, nr_sectors = 1 limit=64 [ 198.929064][ T12] Buffer I/O error on dev loop6, logical block 67, lost async page write [ 198.937741][ T12] kworker/u4:1: attempt to access beyond end of device [ 198.937741][ T12] loop6: rw=1, sector=68, nr_sectors = 1 limit=64 [ 198.951450][ T12] Buffer I/O error on dev loop6, logical block 68, lost async page write [ 198.960391][ T12] kworker/u4:1: attempt to access beyond end of device [ 198.960391][ T12] loop6: rw=1, sector=72, nr_sectors = 1 limit=64 [ 198.974652][ T12] Buffer I/O error on dev loop6, logical block 72, lost async page write [ 198.983473][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.990628][ T12] Buffer I/O error on dev loop6, logical block 73, lost async page write [ 198.999256][ T12] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 199.007950][ T12] Buffer I/O error on dev loop6, logical block 77, lost async page write [ 199.018566][ T5794] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 199.026919][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.438625][ T6573] ocfs2: Unmounting device (7,5) on (node local) [ 199.998979][ T1321] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.010402][ T1321] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.212487][ T1321] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.223479][ T1321] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.368621][ T1321] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.379544][ T1321] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.414208][ T7938] chnl_net:caif_netlink_parms(): no params data found [ 200.472281][ T786] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 200.484770][ T1321] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.496845][ T1321] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.875556][ T786] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 201.074515][ T786] usb 6-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.106831][ T5802] Bluetooth: hci4: command tx timeout [ 201.131561][ T786] usb 6-1: config 1 interface 0 has no altsetting 0 [ 201.150191][ T786] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.168792][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.188982][ T786] usb 6-1: SerialNumber: syz [ 201.212963][ T7962] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 201.307423][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.329704][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.337671][ T7938] bridge_slave_0: entered allmulticast mode [ 201.346049][ T7938] bridge_slave_0: entered promiscuous mode [ 201.361487][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.368710][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.376359][ T7938] bridge_slave_1: entered allmulticast mode [ 201.385986][ T7938] bridge_slave_1: entered promiscuous mode [ 201.480295][ T786] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 201.502034][ T786] usb 6-1: USB disconnect, device number 5 [ 201.539206][ T7938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.584811][ T7938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.694738][ T7938] team0: Port device team_slave_0 added [ 201.730592][ T7938] team0: Port device team_slave_1 added [ 201.737933][ T7976] netlink: 24 bytes leftover after parsing attributes in process `syz.6.585'. [ 201.846966][ T7938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.863779][ T7938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.916794][ T7938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.028254][ T7938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.037323][ T7938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.063849][ T7938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.438775][ T7938] hsr_slave_0: entered promiscuous mode [ 202.446384][ T7938] hsr_slave_1: entered promiscuous mode [ 202.464555][ T7938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.478631][ T7938] Cannot create hsr debugfs directory [ 202.616681][ T7997] kvm: pic: non byte write [ 203.181518][ T5802] Bluetooth: hci4: command tx timeout [ 203.380716][ T8007] loop4: detected capacity change from 0 to 4096 [ 203.387608][ T7938] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 203.409809][ T8007] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 203.428155][ T7938] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 203.478978][ T8011] loop5: detected capacity change from 0 to 2048 [ 203.488293][ T8011] EXT4-fs: Ignoring removed nobh option [ 203.498111][ T1321] hsr_slave_0: left promiscuous mode [ 203.518115][ T1321] hsr_slave_1: left promiscuous mode [ 203.534840][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.541514][ T8011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.544373][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.589098][ T1321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.598840][ T1321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.609353][ T1321] bridge_slave_1: left allmulticast mode [ 203.681002][ T8011] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.600: bg 0: block 408: padding at end of block bitmap is not set [ 203.697676][ T8011] EXT4-fs (loop5): Remounting filesystem read-only [ 203.701259][ T1321] bridge_slave_1: left promiscuous mode [ 203.734266][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.745919][ T1321] bridge_slave_0: left allmulticast mode [ 203.754379][ T1321] bridge_slave_0: left promiscuous mode [ 203.760215][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.837055][ T1321] veth1_macvtap: left promiscuous mode [ 203.842818][ T1321] veth0_macvtap: left promiscuous mode [ 203.856232][ T1321] veth1_vlan: left promiscuous mode [ 203.861820][ T1321] veth0_vlan: left promiscuous mode [ 204.016683][ T6573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.278146][ T1321] bond1 (unregistering): Released all slaves [ 205.126400][ T1321] team0 (unregistering): Port device team_slave_0 removed [ 205.220110][ T1321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.261456][ T5802] Bluetooth: hci4: command tx timeout [ 205.407238][ T1321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.666605][ T8031] loop5: detected capacity change from 0 to 4096 [ 205.680151][ T8031] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 205.765889][ T8031] ntfs3: loop5: Inode r=19 is not in use! [ 205.778112][ T8031] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 205.968579][ T28] audit: type=1800 audit(1759333132.533:9): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.606" name="file2" dev="loop5" ino=31 res=0 errno=0 [ 206.363288][ T1321] bond0 (unregistering): Released all slaves [ 206.457596][ T7938] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 206.468639][ T8020] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 206.476171][ T8020] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 206.488842][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.601'. [ 206.544376][ T8022] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 206.575046][ T8022] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 206.587327][ T8022] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 206.629223][ T8022] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.635955][ T8034] loop5: detected capacity change from 0 to 8 [ 206.655707][ T7938] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 206.741888][ T8036] nbd6: detected capacity change from 0 to 8 [ 206.815548][ T8045] block nbd6: shutting down sockets [ 206.965459][ T7938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.046353][ T7938] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.132129][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.139353][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.178189][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.185445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.246820][ T1321] IPVS: stop unused estimator thread 0... [ 207.343481][ T5802] Bluetooth: hci4: command tx timeout [ 207.714875][ T8064] loop4: detected capacity change from 0 to 4096 [ 207.784613][ T8064] EXT4-fs (loop4): Test dummy encryption mode enabled [ 207.852538][ T8064] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c018, mo2=0003] [ 207.878178][ T7938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.904634][ T8064] System zones: 0-5 [ 207.917942][ T8064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.023468][ T8067] loop5: detected capacity change from 0 to 32768 [ 208.077953][ T8067] JBD2: Ignoring recovery information on journal [ 208.121789][ T5851] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 208.137170][ T8067] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 208.154624][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.254503][ T8067] OCFS2: ERROR (device loop5): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 208.280219][ T8067] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 208.290210][ T8067] OCFS2: File system is now read-only. [ 208.295870][ T8067] (syz.5.616,8067,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 208.304910][ T8067] (syz.5.616,8067,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 208.313129][ T8067] (syz.5.616,8067,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 208.321305][ T8067] (syz.5.616,8067,1):ocfs2_add_clusters_in_btree:4831 ERROR: status = -30 [ 208.329866][ T8067] (syz.5.616,8067,1):ocfs2_write_cluster:1153 ERROR: status = -30 [ 208.337803][ T8067] (syz.5.616,8067,1):ocfs2_write_cluster_by_desc:1248 ERROR: status = -30 [ 208.346442][ T8067] (syz.5.616,8067,1):ocfs2_write_begin_nolock:1820 ERROR: status = -30 [ 208.355562][ T8067] (syz.5.616,8067,1):ocfs2_write_begin:1907 ERROR: status = -30 [ 208.383586][ T5851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 208.396057][ T5851] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 208.421894][ T5851] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.475566][ T5851] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 208.495701][ T6573] ocfs2: Unmounting device (7,5) on (node local) [ 208.502343][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.502372][ T5851] usb 7-1: Product: syz [ 208.502389][ T5851] usb 7-1: Manufacturer: syz [ 208.502404][ T5851] usb 7-1: SerialNumber: syz [ 208.511008][ T5851] hub 7-1:1.0: bad descriptor, ignoring hub [ 208.554427][ T5851] hub: probe of 7-1:1.0 failed with error -5 [ 208.600530][ T7938] veth0_vlan: entered promiscuous mode [ 208.630591][ T7938] veth1_vlan: entered promiscuous mode [ 208.698491][ T7938] veth0_macvtap: entered promiscuous mode [ 208.725498][ T7938] veth1_macvtap: entered promiscuous mode [ 208.744149][ T5851] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 208.759354][ T7938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.776253][ T7938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.787458][ T7938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.814474][ T7938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.836242][ T7938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.855149][ T7938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.867893][ T7938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.896275][ T7938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.898464][ T8085] loop5: detected capacity change from 0 to 256 [ 208.908281][ T7938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.927287][ T7938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.938867][ T7938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.946442][ T8085] exFAT-fs (loop5): error, The cluster chain has a loop [ 208.970686][ T8085] exFAT-fs (loop5): Filesystem has been set read-only [ 208.970759][ T7938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.988587][ T8085] exFAT-fs (loop5): failed to count the number of clusters in root [ 208.988947][ T7938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.009087][ T7938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.014747][ T8085] exFAT-fs (loop5): failed to recognize exfat type [ 209.032258][ T7938] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.041068][ T7938] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.052489][ T7938] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.061495][ T7938] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.106718][ T8088] loop4: detected capacity change from 0 to 1024 [ 209.113509][ T5851] usb 7-1: USB disconnect, device number 2 [ 209.139610][ T8088] EXT4-fs: Ignoring removed nobh option [ 209.139784][ T5851] usblp0: removed [ 209.149126][ T8088] EXT4-fs: Ignoring removed bh option [ 209.209805][ T8088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.240258][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.249139][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.283344][ T6535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.306447][ T6535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.354572][ T8088] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4031: comm syz.4.621: Allocating blocks 497-513 which overlap fs metadata [ 209.393786][ T8094] loop5: detected capacity change from 0 to 1024 [ 209.401996][ T8094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.412376][ T8088] EXT4-fs (loop4): pa ffff888076974cb0: logic 256, phys. 385, len 8 [ 209.420883][ T8088] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 209.462734][ T8094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.512094][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 209.628636][ T6573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.630773][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.711698][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 209.719303][ T9] usb 7-1: config 0 has no interfaces? [ 209.724982][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 209.735997][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.746609][ T9] usb 7-1: config 0 descriptor?? [ 209.806945][ T8104] loop4: detected capacity change from 0 to 64 [ 209.988725][ T23] usb 7-1: USB disconnect, device number 3 [ 210.161451][ T5858] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 210.191914][ T8101] loop5: detected capacity change from 0 to 32768 [ 210.203715][ T8101] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.624 (8101) [ 210.237231][ T8101] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.249468][ T8101] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 210.265228][ T8101] BTRFS info (device loop5): doing ref verification [ 210.272120][ T8101] BTRFS info (device loop5): setting nodatasum [ 210.278323][ T8101] BTRFS info (device loop5): force zlib compression, level 3 [ 210.290863][ T8101] BTRFS info (device loop5): enabling ssd optimizations [ 210.298093][ T8101] BTRFS info (device loop5): allowing degraded mounts [ 210.310978][ T8101] BTRFS info (device loop5): using free space tree [ 210.369842][ T5858] usb 8-1: config 0 has no interfaces? [ 210.380426][ T5858] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 210.394054][ T5858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.402207][ T5858] usb 8-1: Product: syz [ 210.406490][ T5858] usb 8-1: Manufacturer: syz [ 210.411309][ T5858] usb 8-1: SerialNumber: syz [ 210.422566][ T5858] usb 8-1: config 0 descriptor?? [ 210.709160][ T8130] loop6: detected capacity change from 0 to 512 [ 210.727038][ T8130] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 210.747376][ T8130] EXT4-fs (loop6): mount failed [ 210.822762][ T6573] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.996305][ T5858] usb 8-1: USB disconnect, device number 2 [ 211.437773][ T8138] netlink: 'syz.6.631': attribute type 1 has an invalid length. [ 211.569861][ T8140] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 211.621174][ T8140] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 211.671273][ T8140] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 211.690462][ T8140] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 211.735860][ T8140] bond1: (slave geneve2): making interface the new active one [ 211.765407][ T8140] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 211.876534][ T8134] loop5: detected capacity change from 0 to 32768 [ 211.961707][ T8134] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 211.978848][ T8134] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 212.094214][ T8134] XFS (loop5): Ending clean mount [ 212.119615][ T8134] XFS (loop5): Quotacheck needed: Please wait. [ 212.186113][ T8134] XFS (loop5): Quotacheck: Done. [ 212.285796][ T8160] loop7: detected capacity change from 0 to 1024 [ 212.293708][ T8160] EXT4-fs: Ignoring removed nobh option [ 212.299377][ T8160] EXT4-fs: Ignoring removed bh option [ 212.304977][ T28] audit: type=1804 audit(1759333138.863:10): pid=8134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.629" name="/newroot/100/file0/file1" dev="loop5" ino=6150 res=1 errno=0 [ 212.383161][ T6573] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 212.387721][ T8160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.475482][ T8160] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4031: comm syz.7.636: Allocating blocks 497-513 which overlap fs metadata [ 212.490863][ T8160] EXT4-fs (loop7): pa ffff88805c4790e8: logic 256, phys. 385, len 8 [ 212.499363][ T8160] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 212.604233][ T7938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.246379][ T8170] netlink: 220 bytes leftover after parsing attributes in process `syz.4.639'. [ 213.269938][ T8170] netlink: 220 bytes leftover after parsing attributes in process `syz.4.639'. [ 213.295118][ T8170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.639'. [ 214.659398][ T8180] loop6: detected capacity change from 0 to 1024 [ 214.712355][ T8180] EXT4-fs: Ignoring removed oldalloc option [ 214.718707][ T8180] EXT4-fs: Ignoring removed bh option [ 214.720456][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 214.739140][ T8180] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.805254][ T8180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.874702][ T8188] netlink: 'syz.5.644': attribute type 1 has an invalid length. [ 214.887364][ T28] audit: type=1804 audit(1759333141.453:11): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.642" name="/newroot/42/file1/bus" dev="loop6" ino=18 res=1 errno=0 [ 214.945762][ T8190] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.949375][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.973875][ T8190] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.975188][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.988623][ T8190] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.000607][ T9] usb 5-1: Product: syz [ 215.006058][ T9] usb 5-1: Manufacturer: syz [ 215.014664][ T9] usb 5-1: SerialNumber: syz [ 215.019981][ T8190] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.034286][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 215.086816][ T5851] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 215.090401][ T8190] bond1: (slave geneve2): making interface the new active one [ 215.125301][ T8190] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 322.558483][ C0] ------------[ cut here ]------------ [ 322.565755][ C0] WARNING: CPU: 0 PID: 8178 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 322.576317][ C0] Modules linked in: [ 322.580220][ C0] CPU: 0 PID: 8178 Comm: syz.4.650 Not tainted syzkaller #0 [ 322.587529][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.597594][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 322.603947][ C0] Code: ff ff ff 48 c7 c7 a0 f4 ee 96 be 04 00 00 00 e8 ba ac 6c 00 48 89 df b8 01 00 00 00 87 05 ac bc 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 50 d3 8c 74 47 48 c7 c0 9c b4 4a 8e 48 c1 e8 03 [ 322.623559][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 322.629629][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35080 RCX: ffffffff817037e6 [ 322.637691][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35080 [ 322.645666][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 322.653636][ C0] R10: dffffc0000000000 R11: fffffbfff2ddde94 R12: 0000000000002904 [ 322.661609][ C0] R13: 1ffff110171c7a22 R14: 0000000000000a02 R15: dffffc0000000000 [ 322.669581][ C0] FS: 000055556ee5b500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 322.678622][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.685222][ C0] CR2: 00007f3c44db8558 CR3: 0000000077467000 CR4: 00000000003506f0 [ 322.693220][ C0] Call Trace: [ 322.696615][ C0] [ 322.699482][ C0] rcu_core+0x612/0x1720 [ 322.703745][ C0] ? lock_chain_count+0x20/0x20 [ 322.708624][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 322.713852][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 322.719095][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.725278][ C0] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 322.731181][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 322.737079][ C0] ? _raw_spin_unlock+0x40/0x40 [ 322.741940][ C0] handle_softirqs+0x280/0x820 [ 322.746709][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 322.751478][ C0] ? do_softirq+0x180/0x180 [ 322.755979][ C0] ? irq_work_single+0x199/0x230 [ 322.760941][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 322.766164][ C0] __irq_exit_rcu+0xc7/0x190 [ 322.770796][ C0] ? irq_exit_rcu+0x20/0x20 [ 322.775314][ C0] ? rcu_is_watching+0x15/0xb0 [ 322.780086][ C0] irq_exit_rcu+0x9/0x20 [ 322.784329][ C0] sysvec_irq_work+0xa1/0xc0 [ 322.788931][ C0] [ 322.791860][ C0] [ 322.794806][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 322.799746][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 322.805640][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 f3 0f 1e fa 89 f6 31 d2 e9 e7 e7 18 03 0f 1f 80 00 00 00 [ 322.825356][ C0] RSP: 0018:ffffc900046cfcd8 EFLAGS: 00000246 [ 322.831544][ C0] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 322.839623][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 322.847594][ C0] RBP: 0000000000000000 R08: ffffc900046cfc47 R09: 1ffff920008d9f88 [ 322.856003][ C0] R10: dffffc0000000000 R11: fffff520008d9f89 R12: ffff8880b8e35001 [ 322.863995][ C0] R13: dffffc0000000000 R14: ffff8880b8e35050 R15: 0000000000000020 [ 322.872003][ C0] arch_irq_work_raise+0x68/0x70 [ 322.876960][ C0] irq_work_queue+0x99/0x140 [ 322.881554][ C0] bpf_send_signal_common+0x2b6/0x420 [ 322.886957][ C0] ? __set_printk_clr_event+0x80/0x80 [ 322.892335][ C0] ? __cant_sleep+0x210/0x210 [ 322.897019][ C0] ? arch_do_signal_or_restart+0x492/0x780 [ 322.902834][ C0] ? unwind_next_frame+0x1823/0x2970 [ 322.908138][ C0] bpf_send_signal+0x19/0x20 [ 322.912737][ C0] bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 322.918205][ C0] bpf_trace_run2+0x1d1/0x3c0 [ 322.922889][ C0] ? bpf_trace_run2+0xde/0x3c0 [ 322.927656][ C0] ? bpf_trace_run1+0x3b0/0x3b0 [ 322.932523][ C0] ? lock_chain_count+0x20/0x20 [ 322.937385][ C0] trace_sys_enter+0x69/0x80 [ 322.941995][ C0] syscall_trace_enter+0xf0/0x150 [ 322.947031][ C0] do_syscall_64+0x28/0xb0 [ 322.951539][ C0] ? clear_bhb_loop+0x40/0x90 [ 322.956217][ C0] ? clear_bhb_loop+0x40/0x90 [ 322.960894][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.966818][ C0] RIP: 0033:0x7f3c44b2af79 [ 322.971234][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 322.990927][ C0] RSP: 002b:00007ffcf9561880 EFLAGS: 00000a87 ORIG_RAX: 000000000000000f [ 322.999428][ C0] RAX: ffffffffffffffda RBX: 00007f3c45915720 RCX: 00007f3c44b2af79 [ 323.007405][ C0] RDX: 00007ffcf9561880 RSI: 00007ffcf95619b0 RDI: 0000000000000011 [ 323.015376][ C0] RBP: 00000000a390fb60 R08: 00007f3c44de5f40 R09: 00007f3c44dd2000 [ 323.023399][ C0] R10: 00007f3c435f9008 R11: 0000000000000a87 R12: 00000000000000ff [ 323.031380][ C0] R13: 000000000000002a R14: ffffffff813abfe4 R15: 000000000007e6eb [ 323.039359][ C0] ? unwind_next_frame+0x1d24/0x2970 [ 323.044668][ C0] [ 323.047692][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 323.054987][ C0] CPU: 0 PID: 8178 Comm: syz.4.650 Not tainted syzkaller #0 [ 323.062282][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 323.072344][ C0] Call Trace: [ 323.075626][ C0] [ 323.078489][ C0] dump_stack_lvl+0x16c/0x230 [ 323.083194][ C0] ? show_regs_print_info+0x20/0x20 [ 323.088408][ C0] ? load_image+0x3b0/0x3b0 [ 323.092957][ C0] panic+0x2c0/0x710 [ 323.096916][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 323.101481][ C0] __warn+0x2e0/0x470 [ 323.105473][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 323.111204][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 323.116926][ C0] report_bug+0x2be/0x4f0 [ 323.121265][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 323.126993][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 323.132724][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 323.138464][ C0] handle_bug+0xcf/0x120 [ 323.142708][ C0] exc_invalid_op+0x1a/0x50 [ 323.147213][ C0] asm_exc_invalid_op+0x1a/0x20 [ 323.152063][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 323.158409][ C0] Code: ff ff ff 48 c7 c7 a0 f4 ee 96 be 04 00 00 00 e8 ba ac 6c 00 48 89 df b8 01 00 00 00 87 05 ac bc 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 80 50 d3 8c 74 47 48 c7 c0 9c b4 4a 8e 48 c1 e8 03 [ 323.178028][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 323.184106][ C0] RAX: 0000000000000000 RBX: ffffffff8cd35080 RCX: ffffffff817037e6 [ 323.192099][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35080 [ 323.200093][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 323.208063][ C0] R10: dffffc0000000000 R11: fffffbfff2ddde94 R12: 0000000000002904 [ 323.216045][ C0] R13: 1ffff110171c7a22 R14: 0000000000000a02 R15: dffffc0000000000 [ 323.224028][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 323.229868][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 323.235614][ C0] rcu_core+0x612/0x1720 [ 323.240287][ C0] ? lock_chain_count+0x20/0x20 [ 323.245180][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 323.250510][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 323.255758][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.261935][ C0] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 323.267953][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 323.273955][ C0] ? _raw_spin_unlock+0x40/0x40 [ 323.278834][ C0] handle_softirqs+0x280/0x820 [ 323.283627][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 323.288420][ C0] ? do_softirq+0x180/0x180 [ 323.292931][ C0] ? irq_work_single+0x199/0x230 [ 323.297884][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 323.303109][ C0] __irq_exit_rcu+0xc7/0x190 [ 323.307719][ C0] ? irq_exit_rcu+0x20/0x20 [ 323.312225][ C0] ? rcu_is_watching+0x15/0xb0 [ 323.316991][ C0] irq_exit_rcu+0x9/0x20 [ 323.321247][ C0] sysvec_irq_work+0xa1/0xc0 [ 323.325844][ C0] [ 323.328771][ C0] [ 323.331701][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 323.336639][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 323.342536][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 f3 0f 1e fa 89 f6 31 d2 e9 e7 e7 18 03 0f 1f 80 00 00 00 [ 323.362141][ C0] RSP: 0018:ffffc900046cfcd8 EFLAGS: 00000246 [ 323.368212][ C0] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 323.376204][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 323.384192][ C0] RBP: 0000000000000000 R08: ffffc900046cfc47 R09: 1ffff920008d9f88 [ 323.392171][ C0] R10: dffffc0000000000 R11: fffff520008d9f89 R12: ffff8880b8e35001 [ 323.400169][ C0] R13: dffffc0000000000 R14: ffff8880b8e35050 R15: 0000000000000020 [ 323.408184][ C0] arch_irq_work_raise+0x68/0x70 [ 323.413153][ C0] irq_work_queue+0x99/0x140 [ 323.417785][ C0] bpf_send_signal_common+0x2b6/0x420 [ 323.423180][ C0] ? __set_printk_clr_event+0x80/0x80 [ 323.428592][ C0] ? __cant_sleep+0x210/0x210 [ 323.433295][ C0] ? arch_do_signal_or_restart+0x492/0x780 [ 323.439129][ C0] ? unwind_next_frame+0x1823/0x2970 [ 323.444491][ C0] bpf_send_signal+0x19/0x20 [ 323.449103][ C0] bpf_prog_7ba5217f62dcd359+0x40/0x44 [ 323.454566][ C0] bpf_trace_run2+0x1d1/0x3c0 [ 323.459246][ C0] ? bpf_trace_run2+0xde/0x3c0 [ 323.464025][ C0] ? bpf_trace_run1+0x3b0/0x3b0 [ 323.468911][ C0] ? lock_chain_count+0x20/0x20 [ 323.473792][ C0] trace_sys_enter+0x69/0x80 [ 323.478410][ C0] syscall_trace_enter+0xf0/0x150 [ 323.483441][ C0] do_syscall_64+0x28/0xb0 [ 323.487880][ C0] ? clear_bhb_loop+0x40/0x90 [ 323.492554][ C0] ? clear_bhb_loop+0x40/0x90 [ 323.497248][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.503148][ C0] RIP: 0033:0x7f3c44b2af79 [ 323.507565][ C0] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 323.527190][ C0] RSP: 002b:00007ffcf9561880 EFLAGS: 00000a87 ORIG_RAX: 000000000000000f [ 323.535798][ C0] RAX: ffffffffffffffda RBX: 00007f3c45915720 RCX: 00007f3c44b2af79 [ 323.543772][ C0] RDX: 00007ffcf9561880 RSI: 00007ffcf95619b0 RDI: 0000000000000011 [ 323.551744][ C0] RBP: 00000000a390fb60 R08: 00007f3c44de5f40 R09: 00007f3c44dd2000 [ 323.559753][ C0] R10: 00007f3c435f9008 R11: 0000000000000a87 R12: 00000000000000ff [ 323.567867][ C0] R13: 000000000000002a R14: ffffffff813abfe4 R15: 000000000007e6eb [ 323.580380][ C0] ? unwind_next_frame+0x1d24/0x2970 [ 323.587372][ C0] [ 324.717165][ C0] Shutting down cpus with NMI [ 324.722342][ C0] Kernel Offset: disabled [ 324.727410][ C0] Rebooting in 86400 seconds..