last executing test programs: 2m54.93095962s ago: executing program 2 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m54.553905167s ago: executing program 2 (id=47): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 2m54.298730552s ago: executing program 2 (id=49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4, &(0x7f0000000100)=[@cr4={0x1, 0x40000}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000280)="b9800000c00f323500010000f349974747f3f30f01d144f4c744240058000000c744240211726bd0c7442406000000004c0fc71ff30f1effc443b5fc2e440fc71c1ab1b1470f0f749f3c1d0f40f466ba610026420f017a020fb04200", 0x5c}], 0x1, 0x27, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m53.985540558s ago: executing program 2 (id=53): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x204885, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0x0, 0x29f, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 2m53.703301603s ago: executing program 2 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2m53.169718653s ago: executing program 2 (id=61): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x24, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="00c7662fcf1f6e36b7", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1) 2m52.871815299s ago: executing program 32 (id=61): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x24, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="00c7662fcf1f6e36b7", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1) 2m24.575439032s ago: executing program 3 (id=207): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000400)=0xc3e, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080)=0x2, 0x4) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 2m23.562725021s ago: executing program 3 (id=214): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x1e) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000400)='M', 0x1, r1) keyctl$link(0x8, r3, r0) keyctl$unlink(0x9, r3, r0) 2m23.492829583s ago: executing program 3 (id=215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 2m23.282348487s ago: executing program 3 (id=216): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x3000050, &(0x7f0000000440)=ANY=[], 0x1, 0x150a, &(0x7f00000017c0)="$eJzs3Au0j9XWOP4511oPm9A3yX3NNR++yWWRJLkkJJIkSZLcEpIkSUJik1sSkpB7kntIbiG532+5h+RIkiQkJFn/odP5e8/bed/O+Z1+r9949/yMscZecz/fOZ+19tzj+32eZ4y9v+0wqEq9qpXqMDP8W/CvX1IBIAUA+gLAtQAQAUDJrCWzAg6FDBpT/72TiD/Xw1Ov9grE1ST9T9uk/2mb9D9tk/6nbdL/tE36n7ZJ/9M26b8QadnWabmuk5F2x//c83+Q5///z5HP//9FjhQd/eX6ojd0/BdSpP9pm/Q/bZP+p23S/7RN+p+2Sf//l4sAKv43h6X/aZv0X4i07Go/f5ZxdcfV/v0TQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJE2nA9XGAD42/xqr0sIIYQQQgghhBB/npD+aq9ACCGEEEIIIYQQ//chKNBgIIJ0kB5SIANkhGsgE2SGLHAtJOA6yArXQza4AbJDDsgJuSA35IG8YIHAAUMM+SA/JOFGKAA3QUEoBIWhCHgoCsXgZigOt0AJuBVKwm1QCm6H0lAGykI5uAPKw51QASpCJbgLKsPdUAWqwj1QDe6F6nAf1ID7oSY8ALXgQagND0EdeBjqwiNQDx6F+vAYNICG0AgaQ5P/o/yXoAu8DF2hG6RCd+gBr0BP6AW9oQ/0hVehH7wG/eF1GAADYRC8AYPhTRgCb8FQGAbD4W0YASNhFIyGMTAWxsE7MB7ehQnwHkyESTAZpsBUmAbT4X2YATNhFnwAs+FDmANzYR7MhwXwESyERbAYPoYl8AkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFT2EbbIcdsBN2wW7YA5/BXtgH++FzOABf/Iv55/5TfkcEBFSo0KDBdJgOUzAFM2JGzISZMAtmwQQmMCtmxWyYDbNjdsyJOTE35sa8mBcJCRkZ82E+TGISC2ABLIgFsTAWRo8ei2ExLI63YAksgSWxJJbCUlgay2AZLIflsDyWxwpYASthJayMlbEKVsF78B68F6tjdayBCAA1sRbWwtpYG+tgHayLdbEe1sP6WB8bYANshI2wCTbBptgUm2EzbIEtsCW2xFbYCltja2yDbbAttsV22A7bY3vsgB2wI3bCTvgSvoQv48vYDSur7tgDe2BP7Im9sQ/2wVexH76Gr+HrOAAH4iB8A9/AN3EInsWhOAyH43Asr0biKByNrMbiOByH43E8TsAJOBEn4SScglNxGk7H6TgDZ+JM/ABn44f4Ic7FuTgfF+ACXIiLcDEuxiV4DpfiMlyOK3AlrsKVuAbX4hpcjxtwPW7CTbgFt+Cn+Clux+24E3fibtyNn+FnuA/34QA8gAfwIB7EQ3gID+NhPIJH8CgexWN4DI/jcTyBJ/AknsLTeArP4Bk8i+fwPJ7HC3gBL+ILub+uu7vQugGgLjPKqHQqnUpRKSqjyqgyqUwqi8qiEiqhsqqsKpvKprKr7Cqnyqlyq9wqr8qrSJFiFat8Kp9KqqQqoAqogqqgKqwKK6+8KqaKqeKquCqhSqiS6jZVSt2uSqsyqrkvp8qp8qqFr6Aqqkqqkqqs7lZVVFVVVVVT1VR1VV3VUDVUTVVT1VIPqtqqO/bGh9XlztRTA7G+GoQNVEPVSDVWb+Ljqqkags1Uc9VCPamG4VBspZr61uoZ1UaNwrbqOTUan1ft1VjsoF5UHVUn1Vm9pLqoZr5rut/eAtUU7Kl6qd6qj8oMd6vLHauiXlcD1EA1SL2h5uObaoh6Sw1Vw9Rw9bYaoUaqUWq0GqPGqnHqHTVevasmqPfURDVJTVZT1FQ1TU1X76sZaqaapT5Qs9WHao6aq+ap+WqB+kgtVIvUYvWxWqI+UUvVMrVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVFb1adqm9qudqidapfarfaoz9RetU/tV5+rA+oLdVD9RR1SX6rD6it1RH2tjqpv1DH1rTquvlMn1PfqpDqlTqsf1Bn1ozqrzqnz6id1Qf2sLqpf1CUVFGjUSmttdKTT6fQ6RWfQGfU1OpPOrLPoa3VCX6ez6ut1Nn2Dzq5z6Jw6l86t8+i82mrSTrOOdT6dXyf1jbqAvkkX1IV0YV1Ee11UF9M36+L6Fl1C36pL6tt0KX27Lq3L6LK6nL5Dl9d36gq6oq6k79KV9d26iq6q79HV9L26ur5P19D365r6AV1LP6hr64d0Hf2wrqsf0fX0o7q+fkw30A11I91YN9GP66b6Cd1MN9ct9JO6pX5Kt9JP69b6Gd1GP6vb6ud0O/28bq9f0B30i7qj7qQ761/0JR10V91Np+ruuod+RffUvXRv3Uf31a/qfvo13V+/rgfogXqQfkMP1m/qIfotPVQP08P123qEHqlH6dF6jB6rx+l39Hj9rp6g39MT9SQ9WU/RU/U03fu3SrP+ifx3/0F+/1/PvkVv1Z/qbXq73qF36l16t96j9+i9eq/er/frA/qAPqgP6kP6kD6sD+sj+og+qo/qY/qYPq6P6xP6hD6pT+mf9A/6jP5Rn9Xn9Dn9k76gL+iLv/0MwKBRRhtjIpPOpDcpJoPJaK4xmUxmk8VcaxLmOpPVXG+ymRtMdpPD5DS5TG6Tx+Q11pBxhk1s8pn8JmluNAXMTaagKWQKmyLGm6KmmLn5387/o/U1MU1MU9PUNDPNTAvTwrQ0LU0r08q0Nq1NG9PGtDVtTTvTzrQ37U0H08F0NB1NZ9PZdDFdTFfT1aSaVNPDvGJ6ml6mt+lj+ppXTT/Tz/Q3/c0AM8AMMoPMYDPYDDFDzFAz1Aw3w80IM8KMMqPMGDPGjDPjzHgz3kwwE8xEM9FMNpPNVDPVTDfTzQwzw8wys8xsM9vMMXPMPDPPLDALzEKz0Cw2i80Ss8QsNcvMMrPCrDCrzCqzxqwx68w6s8FsMJvMJrPUbDVbzTazzewwO8wus8vsMXvMXrPX7Df7zQFzwBw0B80hc8gcNofNEXPEHDVHzTFzzBw3x80Jc8KcNCfNaXPanDFnzFlz1pw3580Fc8FcNBfNJXPp8mVfpCIVmchE6aJ0UUqUEmWMMkaZokxRlihLlIgSUdYoa5QtuiHKHuWIcka5otxRnigVbESRiziKo3xR/igZ3RgViG6KCkaFosJRkchHRaNi0c1R8eiWqER0a1Qyui0qFd0elY7KRGWjctEdUfnozqhCVDGqFN0VVY7ujqpEVaN7omrRvVH16L6oRnR/VDN6IKoVPRjVjh6K6kQPR3WjR6J60aNR/eixqEHUMGoUNY6a/Kn1Qzib4wnf1Xazqba77WFfsT1tL9vb9rF97au2n33N9rev2wF2oB1k37CD7Zt2iH3LDrXD7HD7th1hR9pRdrQdY8facfYdO96+ayfY9+xEO8lOtlPsVDvNTrfv2xl2pp1lP7Cz7Yd2jp1r59n5doH9yC60i+xi+7FdYj+xS+0yu9yusCvtKrvarrFr7Tq73m6wG+0mu9lusVvtp3ab3W532J12l91t99jP7F67z+63n9sD9gt70P7FHrJf2sP2K3vEfm2P2m/sMfutPW6/syfs9/akPWVP2x/sGfujPWvP2fP2J3vB/mwv2l/sJRsuX9xf/ngnQ4bSUTpKoRTKSBkpE2WiLJSFEpSgrJSVslE2yk7ZKSflpNyUm/JSXrqMiSkf5aMkJakAFaCCVJAKU2Hy5KkYFaPiVJxKUAkqSSWpFJWi0lSaylJZuoPuoDvpTqpIFekuuovuprupKlWlalSNqlN1qkE1qCbVpFpUi2pTbapDdagu1aV6VI/qU31qQA2oETWiJtSEmlJTakbNqAW1oJbUklpRK2pNrakNtaG21JbaUTtqT+2pA3WgjtSROlNn6kJdqCt1pVRKpR7Ug3pST+pNvakv9aV+1I/6U38aQANoEA2iwTSYhtAQGkrDaDi9TSNoJI2i0TSGxtI4GkfjaTxNoAk0kSbSZJpMU2kqTafpNINm0CyaRbNpNs2hOTSP5tECWkALaSEtpsW0hJbQUlpKy2k5raSVtJpW01paS+tpPW2kjbSZNtNW2krbaBvtoB20i3bRHtpDe2kv7af9dIAO0EE6SIfoEB2mw3SEjtBROkrH6Bgdp+N0gk7QSTpJp+k0naEzdJbO0nk6TxfoZ7pIv9AlCpTiFGR017hMLrPL4q51KS6Dy+j+esF0Oc7pcrncLo/L66zL7nL8XUzOuYKukCvsijjvirpi7ubfxaVdGVfWlXN3uPLuTlfhd3E1d6+r7u5zNdz9rqq75+/imu4BV8s96mq7x1wd19DVdY1dPfeoq+8ecw1cQ9fINXYt3VOulXvatXbPuDbu2d/FC90it9atc+vdBrfX7XPn3U/umPvWXXA/u66um+vrXnX93Guuv3vdDXADfxcPd2+7EW6kG+VGuzFu7O/iyW6Km+qmuenufTfDzfxdvMB95Ga7xW6Om+vmufm/xpfXtNh97Ja4T9xSt8wtdyvcSrfKrXZr/v+1rnCb3Ga3xe1xn7ltbrvb4Xa6XW73r/Hlfex3n7sD7gt31H3jDrkv3WF33B1xX/8aX97fcfedO+G+dyfdKXfa/eDOuB/dWXfu1/1f3vsP7hd3yQUHjKxYs+GI03F6TuEMnJGv4UycmbPwtZzg6zgrX8/Z+AbOzjk4J+fi3JyH87JlYsfMMefj/JzkG7kA38QFuRAX5iLsuSgX45u5ON/CJfhWLsm3cSm+nUtzGS7L5fgOLs93cgWuyJX4Lq4cAlfhqnwPV+N7uTrfxzX4fq7JD3AtfpBr80Nchx/muvwI1+NHuT4/xg24ITfixtyEH+em/AQ34+bcgp/klvwUt+KnuTU/w234WW7Lz3E7fp7b8wvcgV/kjtyJO/NL3IVf5q7cjVO5O/fgV7gn9+Le3If78qvcj1/j/vw6D+CBPIjf4MH8Jg/ht3goD+Ph/DaP4JE8ikfzGB7L4/gdHs/v8gR+jyfyJJ7MU3gqT+Pp/D7P4Jk8iz/g2fwhz+G5PI/n8wL+iBfyIl7MH/MS/oSX8jJezit4Ja/i1byG1/I6Xs8beCNv4s28hbfyp7yNt/MO3sm7eDfv4c94L+/j/fw5H+Av+CD/hQ/xl3yYv+Ij/DUf5W/4GH/Lx/k7PsHf80k+xaf5Bz7DP/JZPsfn+Se+wD/zRf6FL3FgiDFWsY5NHMXp4vRxSpwhzhhfE2eKM8dZ4mvjRHxdnDW+Ps4W3xBnj3PEOeNcce44T5w3tjHFLuY4jvPF+eNkfGNcIL4pLhgXigvHRWIfF42LxTfHxeNb4hLxrXHJ+La4VHx7XDouEz96f7n4jrh8fGdcIa4YV4rviivHd8dV4qrxPXG1+N64enxfXCO+Py4RPxDXih+Ma8cPxXXih+O68SNxvfjRuH78WNwgbhg3ihvHTeLH46bxE3GzuHncIn4ybhk/FbeKn45bx8/EbeJn//B4atw97hG/Er8Sh3Cfnpecn1yQ/Ci5MLkouTj5cXJJ8pPk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklmQIVdODR6+89sZHPp1P71N8Bp/RX+Mz+cw+i7/WJ/x1Pqu/3mfzN/jsPofP6XP53D6Pz+utJ+88+9jn8/l90t/oC/ibfEFfyBf2Rbz3RX0x39g38U18U/+Eb+ab+xb+Sf+kf8o/5Z/2T/tnfBv/rG/rn/Pt/PO+vX/Bv+Bf9B19J9/Zv+S7+Jd9V9/Np/pU38P38D19T9/b9/Z9fV/fz/fz/X1/P8AP8IP8ID/YD/ZD/BA/1A/1w/1wP8KP8KP8KD/Gj/Hj/Dg/3o/3E/wEP9FP9JP9ZD/VT/XT/XQ/w8/ws/wsP7vgbD/Hz/Hz/Dy/wC/wC/1Cv9gv9kv8Er/UL/XL/XK/0q/0q/1qv9av9ev9er/Rb/Sb/Wa/1W/12/w2v8Pv8Lv8Lr/H7/F7/V6/3+/3B/wBf9Af9If8IX/Yf+WP+K/9Uf+NP+a/9cf9d/6E/96f9Kf8af+DP+N/9Gf9OX/e/+Qv+J/9Rf+Lv+SDH5d4JzE+8W5iQuK9xMTEpMTkxJTE1MS0xPTE+4kZiZmJWYkPErMTHybmJOYm5iXmJxYkPkosTCxKLE58nFiS+CSxNLEssTyxIrEysSoRQp5tccgX8odkuDEUCDeFgqFQKByKBB+KhmLh5lA83BJKhFtDyXBbKBVuD6VDmVA2PBYahIahUWgcmoTHQ9PwRGgWmocW4cnQMjwVWoWnQ+vwTGgTng1tw3OhXXg+tA8vhA7hxdAxdAqdw0uhS3g5dA3dQmroHnqEV0LP0Cv0Dn1C3/Bq6BdeC/3D62FAGBgGhTfC4PBmGBLeCkPDsDA8vB1GhJFhVBgdxoSxYVx4J4wP74YJ4b0wMUwKk8OUMDVMC9PD+2FGmBlmhQ/C7PBhmBPmhnlhflgQPgoLw6KwOHwcloRPwtKwLCwPK8LKsCqsDmvC2rAurA8bwsawKWwOW8LW8GnYFraHHWFn2BV2hz3hs7A37Av7w+fhQPgiHAx/CYfCl+Fw+CocCV+Ho+GbcCx8G46H78KJ8H04GU6F0+GHcCb8GM6Gc+F8+ClcCD+Hi+GXcEn+Zk0IIYQQ4p+i/+B493/wvXQAoH6b9wCAzNtzHfnPNTdm/+u8l8rdMgEAz3Tr8PDfRuXKqampv712qYYo/1wASPx9/b/Fy6AFPAWtoTkU/4fr66U6XeA/qJ+8DSDjf8hJgSvxlfq3/Bf1H39y+MJS8fms/039uQAF81/JyQBX4iv1S/wX9XM0/YP1Z/hyHECz/5CTCa7EV+oXgyfgWWj9d68UQgghhBBCCCH+qpcq2+6P7p8v35/nNldy0sOV+I/uz4UQQgghhBBCCHH1Pd+p89OPt27dvN0/N8Hfngv8a1l/2qT29n3PXT791Tm7TGSSdiZX+Y1JCCGEEEII8ae7ctF/tVcihBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKkXf8T/07sau9RCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEuNr+vwAAAP//OTE3DQ==") chdir(&(0x7f0000000380)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 2m22.536930891s ago: executing program 3 (id=220): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x800, 0x9971, {0x77359400}, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1}, 0x15, 0x1, 0x0, 0x0, "b07bd2f95c6e992716b00b5845cbf821978599b6a91032012cb3310574b49e3f6abe0a97195afb0157bec93253ccd8156ed4a8fb044e1f1508613cf281cc9b05"}}, 0x80}, 0x1, 0x0, 0x0, 0x58004}, 0x20004080) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 2m20.873595643s ago: executing program 3 (id=226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x20000284}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x2000, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 2m20.408204892s ago: executing program 33 (id=226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x20000284}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x2000, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 1m16.870700472s ago: executing program 1 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003ec0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3}}, @TCA_FLOWER_ACT={0x4}]}}]}, 0x40}}, 0x40004) 1m16.685617766s ago: executing program 1 (id=665): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x1}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={r4, @in6={{0xa, 0x4e21, 0x9, @mcast1, 0x7fffffff}}}, &(0x7f0000000100)=0x84) 1m15.694473575s ago: executing program 1 (id=671): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) 1m14.693701785s ago: executing program 1 (id=681): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 1m14.127926325s ago: executing program 1 (id=687): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) 1m12.593446375s ago: executing program 1 (id=702): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000001"], 0x0) 39.916864713s ago: executing program 0 (id=971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.753504757s ago: executing program 0 (id=973): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 39.257611666s ago: executing program 0 (id=980): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f00000003c0)="311437873a963bf4856ad67f0b4e09d488a8", 0x12, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 38.213587116s ago: executing program 0 (id=988): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0x3}}}, 0x24}}, 0x0) 37.830979663s ago: executing program 35 (id=988): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0x3}}}, 0x24}}, 0x0) 2.62531174s ago: executing program 7 (id=1296): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) 2.477694193s ago: executing program 5 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 2.392439824s ago: executing program 4 (id=1299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) shutdown(r0, 0x1) 2.281511216s ago: executing program 6 (id=1300): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004041}, 0x8804) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2.281415296s ago: executing program 4 (id=1301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000017c0)="1feb4e96e4a71fdc2e89eb3d54dd74a1a7ff26a2bdf45214c099237178fe16ffe1065dc4321eda71b732165e369a97387d35ed14a4c39aa261e9ffe1f9f4fc04b4b2b47e0e361d3c0a30c143dcfaebf4e8066a221adb374d0000000000", 0x5d}, {&(0x7f00000002c0)="df68106855", 0x5}, {&(0x7f0000000240)="c94c50ea88", 0x5}], 0x3) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x4) 2.210876098s ago: executing program 7 (id=1302): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.149447299s ago: executing program 6 (id=1304): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfe, 0x1103, &(0x7f0000002240)="$eJzs2T+L1EAYBvBnkvUPNpFcHwQtLOS4Y/0CVyhsa6uNyFVedVsp+m38OHqV/XG9Fgv2kbibXZEVwV0V5PeDkDcPeWcy5UwCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg0nyqSQHVdKOWZWkJF13MbtK0o357fd1lZInp7P5o/Pp43mS+tvr5WlShq6hLe3x3ZvttJ22x+3Dg5N7H+avXr98fnZ2er4apqTL5WKvq7g1zl3vdVgAAAD4P/Q7a/7x/AAAAMCv7O0gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA39c2mbseiSlKSrruYXSXptvRd+0vfBwAAAOyupMqzZlu+PAbYeJCPTVnnw/1LGeqjvNvSDwAAAPxUf2NVfP9/vVzf7MfvZ7Lelw/ZnUxyeLh8frvKP58kdZKjHwa/XLx5MV6lr//0WgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrIDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAYK8AAAD//+0M1yg=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.08103121s ago: executing program 5 (id=1305): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/122, 0x7a}, {&(0x7f0000000600)=""/217, 0xd9}], 0x2) sendmmsg$alg(r1, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="9c98d425afe56f214f063263de94ff93031f06039ddcb1d9cf89e039a97c89ebd9f53c411614e83992d1607b7a59cbe7993c3630080d6969b1c91da10113cd2657fdee548019656f33a2aa9cddad710a2d49b2b408db67acd1f838b73b2367cbd14eaeefaeb76faf0c1233c66b454155736ba29b46a8bebc251f84f1016dcb4fea54e1b6a6d419f0298bb17ae130e579", 0x90}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x0) 1.619975219s ago: executing program 5 (id=1306): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xa, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0x100, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.619221719s ago: executing program 7 (id=1314): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x8000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1.54111239s ago: executing program 4 (id=1307): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdf07}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) 1.380938244s ago: executing program 5 (id=1308): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={r4, r2, r3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800000}) 1.287596996s ago: executing program 6 (id=1309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) shutdown(r0, 0x1) 1.253865166s ago: executing program 7 (id=1310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0xb, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe97, 0x69}, {0x1, 0xb, 0x3}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.04908574s ago: executing program 5 (id=1311): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x222}], 0x1}}], 0x1, 0x400c0) 982.586351ms ago: executing program 6 (id=1312): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) 982.427521ms ago: executing program 4 (id=1313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 963.025872ms ago: executing program 7 (id=1315): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x2, 0x62a6, &(0x7f0000009900)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 777.779926ms ago: executing program 4 (id=1316): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT], 0xfd, 0x2bc, &(0x7f0000000c40)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 777.018865ms ago: executing program 5 (id=1324): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 438.384092ms ago: executing program 6 (id=1317): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x0, 0x7, 0x0, '\x00', {0x7ff, 0x7, 0x20004, 0x2, r2, 0xffffffffffffffff, 0xbfff, '\x00', 0x5, 0x200007ffffffd, 0xb4e7, 0x2, {0x8003, 0x8}, {0x100000001, 0x10001, 0x1000000}, {0x100000000, 0x7}, {0x9, 0xa80}, 0x8000, 0xb, 0x4, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1}, 0x50) 372.388013ms ago: executing program 4 (id=1318): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x800000, &(0x7f0000000380)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x78, 0x38, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 138.908497ms ago: executing program 7 (id=1319): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 0s ago: executing program 6 (id=1320): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): mode [ 103.365814][ T6134] loop3: detected capacity change from 0 to 1024 [ 103.380429][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.498112][ T1143] veth1_macvtap: left promiscuous mode [ 103.515387][ T1143] veth0_macvtap: left promiscuous mode [ 103.534625][ T1143] veth1_vlan: left promiscuous mode [ 103.551238][ T1143] veth0_vlan: left promiscuous mode [ 103.688125][ T5791] Bluetooth: hci0: command tx timeout [ 104.640077][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 104.705810][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 104.777749][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.849600][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.536352][ T1143] bond0 (unregistering): Released all slaves [ 105.641907][ T6045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.658684][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'. [ 105.767677][ T5791] Bluetooth: hci0: command tx timeout [ 105.769898][ T6045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.924753][ T6154] loop1: detected capacity change from 0 to 1024 [ 105.977623][ T6154] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.007014][ T6045] team0: Port device team_slave_0 added [ 106.053260][ T6045] team0: Port device team_slave_1 added [ 106.057823][ T6154] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 106.082508][ T5791] Bluetooth: Unexpected continuation frame (len 4) [ 106.093724][ T6154] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.175600][ T6154] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.84: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.222922][ T6154] EXT4-fs (loop1): 1 orphan inode deleted [ 106.232938][ T6154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.246390][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.246405][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.246422][ T6045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.248504][ T6045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.306590][ T6045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.346978][ T6045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.403476][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.585270][ T6045] hsr_slave_0: entered promiscuous mode [ 106.595777][ T6045] hsr_slave_1: entered promiscuous mode [ 106.606885][ T6045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.621377][ T6045] Cannot create hsr debugfs directory [ 107.032006][ T6181] binder: 6180:6181 ioctl c0306201 200000000080 returned -14 [ 107.387924][ T6045] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.410847][ T6045] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.487448][ T6045] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.506508][ T6045] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.796002][ T6045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.857418][ T5791] Bluetooth: hci0: command tx timeout [ 107.881569][ T6045] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.933342][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.944095][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.052321][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.061257][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.311631][ T6227] warning: `syz.3.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.602797][ T6237] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 108.843256][ T6045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.694681][ T6045] veth0_vlan: entered promiscuous mode [ 109.783742][ T6045] veth1_vlan: entered promiscuous mode [ 109.932468][ T6045] veth0_macvtap: entered promiscuous mode [ 109.966496][ T6045] veth1_macvtap: entered promiscuous mode [ 109.984489][ T6273] loop3: detected capacity change from 0 to 2048 [ 110.040318][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.064286][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.076838][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.094541][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.116717][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.134512][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.154164][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.180934][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.199935][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.239879][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.265250][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.296058][ T6045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.334861][ T6045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.373948][ T6045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.435800][ T6045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.459047][ T6045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.491426][ T6045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.520095][ T6045] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.809149][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.852126][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.900858][ T6289] netlink: 'syz.3.115': attribute type 13 has an invalid length. [ 110.916774][ T6291] fuse: root generation should be zero [ 111.232632][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.262331][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.153569][ T6332] loop4: detected capacity change from 0 to 32768 [ 113.215889][ T6332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.125 (6332) [ 113.300218][ T6332] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.327439][ T6332] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 113.341398][ T6353] loop1: detected capacity change from 0 to 128 [ 113.357381][ T6332] BTRFS info (device loop4): using free space tree [ 113.645034][ T6332] BTRFS info (device loop4): enabling ssd optimizations [ 113.687571][ T6332] BTRFS info (device loop4): auto enabling async discard [ 113.961758][ T6343] loop3: detected capacity change from 0 to 32768 [ 114.049508][ T6343] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.127 (6343) [ 114.137492][ T6343] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.153125][ T6343] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 114.164978][ T6343] BTRFS info (device loop3): enabling disk space caching [ 114.184272][ T6343] BTRFS info (device loop3): enabling auto defrag [ 114.236047][ T6343] BTRFS info (device loop3): doing ref verification [ 114.264187][ T6343] BTRFS info (device loop3): use no compression [ 114.273619][ T6045] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.340487][ T6343] BTRFS info (device loop3): force clearing of disk cache [ 114.358148][ T6343] BTRFS info (device loop3): disabling disk space caching [ 114.430742][ T6388] tipc: Failed to remove unknown binding: 66,1,1/0:281382181/281382183 [ 114.727620][ T6343] BTRFS info (device loop3): enabling ssd optimizations [ 114.736082][ T6343] BTRFS info (device loop3): auto enabling async discard [ 114.745613][ T5941] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (5941) [ 114.833546][ T6343] BTRFS info (device loop3): rebuilding free space tree [ 115.148986][ T6343] BTRFS info (device loop3): disabling free space tree [ 115.156510][ T6343] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.268483][ T6343] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.538589][ T28] audit: type=1800 audit(1758319847.384:8): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.127" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 115.679628][ T6434] loop4: detected capacity change from 0 to 512 [ 115.824327][ T6434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 115.913301][ T6434] System zones: 1-12 [ 115.961193][ T5787] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.964417][ T6434] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.141: corrupted in-inode xattr: e_value size too large [ 116.085307][ T6434] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.141: couldn't read orphan inode 15 (err -117) [ 116.102154][ T6434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.725999][ T6448] loop1: detected capacity change from 0 to 128 [ 116.918947][ T6045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.039988][ T6474] loop0: detected capacity change from 0 to 32768 [ 118.104678][ T6474] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.194745][ T6501] loop3: detected capacity change from 0 to 1024 [ 118.259955][ T6501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.355862][ T6474] XFS (loop0): Ending clean mount [ 118.385846][ T6474] XFS (loop0): Quotacheck needed: Please wait. [ 118.413382][ T28] audit: type=1804 audit(1758319850.274:9): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.159" name="/newroot/41/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 118.518243][ T6474] XFS (loop0): Quotacheck: Done. [ 118.606009][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.850875][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 118.873789][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.945313][ T6511] 8021q: adding VLAN 0 to HW filter on device team1 [ 118.968791][ T6511] Zero length message leads to an empty skb [ 118.969057][ T6513] lo: Caught tx_queue_len zero misconfig [ 120.062018][ T6525] loop3: detected capacity change from 0 to 32768 [ 120.107538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.124309][ T6525] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 120.162746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 120.414989][ T5937] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 120.712744][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.917424][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 120.942004][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.963696][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.975863][ T5883] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 120.990373][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.018471][ T5883] usb 2-1: config 0 descriptor?? [ 121.472049][ T5883] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 121.658755][ T5883] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 121.729801][ T6546] loop3: detected capacity change from 0 to 32768 [ 121.856775][ T6544] loop0: detected capacity change from 0 to 32768 [ 121.882923][ T6544] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.917756][ T5883] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 122.145749][ T5883] ft260 0003:0403:6030.0002: failed to retrieve status: -32, no wakeup [ 122.165555][ T6546] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 122.315743][ T5883] ft260 0003:0403:6030.0002: i2c bus error: 0xb6 [ 122.476633][ T28] audit: type=1800 audit(1758319854.334:10): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.174" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 122.539730][ T5883] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71 [ 122.616200][ T6544] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 122.663230][ T5883] usb 2-1: USB disconnect, device number 3 [ 122.672629][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 122.699768][ T6544] XFS (loop0): Starting recovery (logdev: internal) [ 122.834521][ T6544] XFS (loop0): Ending recovery (logdev: internal) [ 123.237020][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.750603][ T6588] loop1: detected capacity change from 0 to 2048 [ 123.834632][ T6588] loop1: p1 < > p3 [ 123.858886][ T6588] loop1: p3 size 134217728 extends beyond EOD, truncated [ 123.923488][ T5157] loop1: p1 < > p3 [ 123.943766][ T5157] loop1: p3 size 134217728 extends beyond EOD, truncated [ 124.343750][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 124.556913][ T6585] loop3: detected capacity change from 0 to 40427 [ 124.623858][ T6585] F2FS-fs (loop3): invalid crc value [ 124.654296][ T6585] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.775367][ T6585] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 125.228035][ T5787] syz-executor: attempt to access beyond end of device [ 125.228035][ T5787] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.251595][ T5787] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 126.704934][ T28] audit: type=1326 audit(1758319858.564:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9478ec29 code=0x7fc00000 [ 126.957496][ T6655] loop0: detected capacity change from 0 to 512 [ 126.977372][ T6655] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 126.995574][ T6655] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.029496][ T6655] EXT4-fs (loop0): 1 truncate cleaned up [ 127.037079][ T6655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.375265][ T28] audit: type=1326 audit(1758319859.214:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6642 comm="syz.1.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca9478ec29 code=0x7fc00000 [ 127.608887][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.754222][ T6684] loop0: detected capacity change from 0 to 1024 [ 127.786730][ T6684] EXT4-fs: Ignoring removed bh option [ 127.901777][ T6684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 128.050530][ T6684] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.212: corrupted in-inode xattr: e_value out of bounds [ 128.086004][ T6684] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.212: corrupted in-inode xattr: e_value out of bounds [ 128.243889][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 128.302976][ T6699] loop3: detected capacity change from 0 to 256 [ 128.348199][ T6699] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.401287][ T6699] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 128.469203][ T6699] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 128.689079][ T6699] loop3: detected capacity change from 256 to 64 [ 128.717312][ T6706] syz.3.216: attempt to access beyond end of device [ 128.717312][ T6706] loop3: rw=2049, sector=168, nr_sectors = 1 limit=64 [ 128.785117][ T6706] Buffer I/O error on dev loop3, logical block 168, lost sync page write [ 128.842111][ T6706] syz.3.216: attempt to access beyond end of device [ 128.842111][ T6706] loop3: rw=0, sector=168, nr_sectors = 1 limit=64 [ 131.037402][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.297729][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.479132][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.655525][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.879774][ T6768] netlink: 44 bytes leftover after parsing attributes in process `syz.4.232'. [ 132.104308][ T6776] loop1: detected capacity change from 0 to 1024 [ 132.162629][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.180842][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.190478][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.216272][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.225805][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 132.234381][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.251421][ T6776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.269336][ T6776] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.651322][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.454029][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.462353][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.860723][ T6777] chnl_net:caif_netlink_parms(): no params data found [ 134.089086][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 134.101284][ T5790] CPU: 0 PID: 5790 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 134.109410][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.120056][ T5790] Workqueue: hci1 hci_rx_work [ 134.125245][ T5790] Call Trace: [ 134.128656][ T5790] [ 134.131712][ T5790] dump_stack_lvl+0x16c/0x230 [ 134.136607][ T5790] ? show_regs_print_info+0x20/0x20 [ 134.142205][ T5790] ? load_image+0x3b0/0x3b0 [ 134.147034][ T5790] sysfs_create_dir_ns+0x256/0x280 [ 134.152186][ T5790] ? hci_rx_work+0x43a/0xd80 [ 134.157425][ T5790] ? sysfs_warn_dup+0xa0/0xa0 [ 134.162497][ T5790] ? do_raw_spin_unlock+0x121/0x230 [ 134.168352][ T5790] kobject_add_internal+0x6b8/0xc70 [ 134.174747][ T5790] kobject_add+0x156/0x220 [ 134.179572][ T5790] ? __rwlock_init+0x150/0x150 [ 134.185332][ T5790] ? kobject_init+0x1e0/0x1e0 [ 134.190661][ T5790] ? _raw_spin_unlock+0x28/0x40 [ 134.196156][ T5790] ? get_device_parent+0x366/0x390 [ 134.201491][ T5790] device_add+0x408/0xc20 [ 134.206266][ T5790] hci_conn_add_sysfs+0xd5/0x1e0 [ 134.211252][ T5790] le_conn_complete_evt+0xc37/0x1220 [ 134.217063][ T5790] ? hci_event_packet+0x4a7/0x1210 [ 134.222669][ T5790] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 134.229314][ T5790] ? __copy_skb_header+0xa7/0x550 [ 134.234508][ T5790] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 134.241051][ T5790] ? skb_pull_data+0xfb/0x200 [ 134.245959][ T5790] hci_le_conn_complete_evt+0x187/0x440 [ 134.251547][ T5790] ? hci_remote_host_features_evt+0x160/0x160 [ 134.257827][ T5790] hci_event_packet+0x795/0x1210 [ 134.263182][ T5790] ? bis_list+0x290/0x290 [ 134.267747][ T5790] ? lockdep_hardirqs_on+0x98/0x150 [ 134.273603][ T5790] ? hci_send_to_monitor+0xd7/0x4f0 [ 134.279772][ T5790] hci_rx_work+0x43a/0xd80 [ 134.284684][ T5790] ? process_scheduled_works+0x957/0x15b0 [ 134.290766][ T5790] process_scheduled_works+0xa45/0x15b0 [ 134.296876][ T5790] ? assign_work+0x400/0x400 [ 134.301607][ T5790] ? assign_work+0x39e/0x400 [ 134.306445][ T5790] worker_thread+0xa55/0xfc0 [ 134.311801][ T5790] kthread+0x2fa/0x390 [ 134.316120][ T5790] ? pr_cont_work+0x560/0x560 [ 134.321707][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 134.326680][ T5790] ret_from_fork+0x48/0x80 [ 134.332060][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 134.337308][ T5790] ret_from_fork_asm+0x11/0x20 [ 134.342827][ T5790] [ 134.348639][ T5791] Bluetooth: hci2: command tx timeout [ 134.350169][ T5790] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 134.370676][ T5790] Bluetooth: hci1: failed to register connection device [ 135.035566][ T11] hsr_slave_0: left promiscuous mode [ 135.129485][ T11] hsr_slave_1: left promiscuous mode [ 135.160930][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.189822][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.220405][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.244036][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.257723][ T11] bridge_slave_1: left allmulticast mode [ 135.269289][ T11] bridge_slave_1: left promiscuous mode [ 135.296072][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.327089][ T11] bridge_slave_0: left allmulticast mode [ 135.334954][ T11] bridge_slave_0: left promiscuous mode [ 135.352125][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.436533][ T11] veth1_macvtap: left promiscuous mode [ 135.463542][ T11] veth0_macvtap: left promiscuous mode [ 135.485805][ T11] veth1_vlan: left promiscuous mode [ 135.503591][ T11] veth0_vlan: left promiscuous mode [ 136.383919][ T11] team0 (unregistering): Port device team_slave_1 removed [ 136.414442][ T5790] Bluetooth: hci2: command tx timeout [ 136.446925][ T11] team0 (unregistering): Port device team_slave_0 removed [ 136.505107][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.566140][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.244375][ T11] bond0 (unregistering): Released all slaves [ 137.339055][ T6870] team_slave_0: entered promiscuous mode [ 137.345770][ T6870] team_slave_1: entered promiscuous mode [ 137.362168][ T6870] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.400622][ T6872] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 137.425600][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.468213][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.517841][ T6777] bridge_slave_0: entered allmulticast mode [ 137.525976][ T6777] bridge_slave_0: entered promiscuous mode [ 137.560010][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.585998][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.606942][ T6777] bridge_slave_1: entered allmulticast mode [ 137.628592][ T6777] bridge_slave_1: entered promiscuous mode [ 138.040313][ T6777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.119452][ T6777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.234374][ T6777] team0: Port device team_slave_0 added [ 138.289463][ T6777] team0: Port device team_slave_1 added [ 138.386912][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.406199][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.467364][ T6777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.489771][ T5790] Bluetooth: hci2: command tx timeout [ 138.511337][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.527535][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.613676][ T6890] loop0: detected capacity change from 0 to 32768 [ 138.625301][ T6777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.703713][ T6890] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.792253][ T6890] XFS (loop0): Ending clean mount [ 138.868048][ T6777] hsr_slave_0: entered promiscuous mode [ 138.882375][ T6890] XFS (loop0): Quotacheck needed: Please wait. [ 138.896604][ T6777] hsr_slave_1: entered promiscuous mode [ 138.925167][ T6777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.957732][ T6777] Cannot create hsr debugfs directory [ 139.019029][ T6890] XFS (loop0): Quotacheck: Done. [ 139.643904][ T6777] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.654291][ T5786] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.668506][ T6777] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.684694][ T6777] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.749817][ T6777] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.154437][ T6777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.239691][ T6777] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.279864][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.287472][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.348820][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.358091][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.366496][ T6961] process 'syz.1.271' launched './file1' with NULL argv: empty string added [ 140.547122][ T6777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.573434][ T5790] Bluetooth: hci2: command tx timeout [ 140.684745][ T6965] loop0: detected capacity change from 0 to 128 [ 141.085693][ T6777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.377301][ T6777] veth0_vlan: entered promiscuous mode [ 142.411415][ T6777] veth1_vlan: entered promiscuous mode [ 142.516833][ T6777] veth0_macvtap: entered promiscuous mode [ 142.540217][ T6777] veth1_macvtap: entered promiscuous mode [ 142.601655][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.650292][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.670535][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.682158][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.695451][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.707568][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.720984][ T6777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.759008][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.780812][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.791970][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.804564][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.825723][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.840176][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.854198][ T6777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.874771][ T6777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.894873][ T6777] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.917299][ T6777] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.926983][ T6777] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.179932][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.225931][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.361487][ T7048] netlink: 372 bytes leftover after parsing attributes in process `syz.4.291'. [ 143.407582][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.416483][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.616178][ T7038] loop1: detected capacity change from 0 to 32768 [ 144.353661][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 144.663801][ T5788] IPVS: starting estimator thread 0... [ 144.778172][ T7091] IPVS: using max 22 ests per chain, 52800 per kthread [ 144.885514][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 145.026405][ T7105] sch_fq: defrate 0 ignored. [ 145.402083][ T7123] fuse: Bad value for 'fd' [ 145.739459][ T7139] x_tables: duplicate underflow at hook 4 [ 145.900340][ T7146] capability: warning: `syz.1.319' uses 32-bit capabilities (legacy support in use) [ 146.089869][ T7150] Illegal XDP return value 4294967274 on prog (id 69) dev syz_tun, expect packet loss! [ 146.133928][ T7152] loop1: detected capacity change from 0 to 512 [ 146.169638][ T7152] EXT4-fs: Ignoring removed bh option [ 146.233117][ T7152] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.257336][ T7152] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 146.308341][ T7152] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 146.346714][ T7152] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 146.361990][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 146.377400][ T7159] bridge_slave_1: left allmulticast mode [ 146.400055][ T7159] bridge_slave_1: left promiscuous mode [ 146.409475][ T7152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.465022][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.544889][ T7159] bridge_slave_0: left allmulticast mode [ 146.566092][ T7159] bridge_slave_0: left promiscuous mode [ 146.608356][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.622751][ T7169] loop5: detected capacity change from 0 to 1024 [ 146.677115][ T7169] hfsplus: failed to load catalog file [ 146.730113][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.730461][ T5790] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 146.753023][ T5790] Bluetooth: hci0: Injecting HCI hardware error event [ 146.764471][ T5790] Bluetooth: hci0: hardware error 0x00 [ 147.285269][ T7187] overlayfs: failed to clone upperpath [ 147.516932][ T7167] loop0: detected capacity change from 0 to 32768 [ 147.538827][ T7167] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.324 (7167) [ 147.660108][ T7167] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 147.678126][ T7167] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 147.710242][ T7167] BTRFS info (device loop0): enabling auto defrag [ 147.743680][ T7167] BTRFS info (device loop0): force clearing of disk cache [ 147.767404][ T7167] BTRFS info (device loop0): enabling disk space caching [ 147.807434][ T7167] BTRFS info (device loop0): max_inline at 0 [ 147.829141][ T7167] BTRFS info (device loop0): disk space caching is enabled [ 147.918924][ T7167] BTRFS info (device loop0): enabling ssd optimizations [ 147.946886][ T7167] BTRFS info (device loop0): auto enabling async discard [ 147.980427][ T7167] BTRFS info (device loop0): rebuilding free space tree [ 148.043844][ T7167] BTRFS info (device loop0): disabling free space tree [ 148.064100][ T7167] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.102187][ T7167] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.179317][ T7222] team0: Device gre1 is of different type [ 148.368156][ T28] audit: type=1804 audit(1758319880.224:13): pid=7227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.324" name="/newroot/85/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 148.614921][ T5786] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 148.900715][ T5790] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 150.866553][ T7319] team_slave_0: entered promiscuous mode [ 150.873502][ T7319] team_slave_1: entered promiscuous mode [ 150.932271][ T7319] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.985168][ T7324] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 151.297313][ T7334] loop0: detected capacity change from 0 to 512 [ 151.412841][ T7334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 151.488074][ T7334] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.629833][ T28] audit: type=1800 audit(1758319883.494:14): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.355" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 151.880942][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 151.985584][ T7355] fuse: Bad value for 'fd' [ 152.356827][ T7363] IPv4: Oversized IP packet from 172.20.20.24 [ 152.367246][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 152.374643][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 152.650562][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.369'. [ 152.832692][ T7361] loop0: detected capacity change from 0 to 32768 [ 152.868305][ T7361] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.365 (7361) [ 152.902380][ T7361] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 152.913760][ T7361] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 152.946613][ T7361] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 152.967863][ T7361] BTRFS info (device loop0): use zstd compression, level 3 [ 152.985450][ T7361] BTRFS info (device loop0): using free space tree [ 153.112658][ T7361] BTRFS info (device loop0): enabling ssd optimizations [ 153.162630][ T7361] BTRFS info (device loop0): auto enabling async discard [ 153.297046][ T28] audit: type=1800 audit(1758319885.154:15): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.365" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 153.667135][ T5786] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 155.406658][ T7432] loop1: detected capacity change from 0 to 32768 [ 155.457504][ T7432] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.385 (7432) [ 155.559938][ T7432] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 155.578021][ T7439] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 155.606312][ T7432] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 155.683449][ T7432] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 155.761967][ T7432] BTRFS info (device loop1): use zstd compression, level 3 [ 155.781318][ T7440] bond1: (slave bridge1): making interface the new active one [ 155.811327][ T7432] BTRFS info (device loop1): using free space tree [ 155.908375][ T5157] udevd[5157]: worker [5941] terminated by signal 33 (Unknown signal 33) [ 155.926619][ T7440] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 155.960653][ T5157] udevd[5157]: worker [5941] failed while handling '/devices/virtual/block/loop1' [ 156.052812][ T7432] BTRFS info (device loop1): enabling ssd optimizations [ 156.086580][ T7432] BTRFS info (device loop1): auto enabling async discard [ 156.407956][ T5796] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 157.512269][ T7482] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 158.010589][ T7493] loop1: detected capacity change from 0 to 736 [ 158.331263][ T7499] netlink: 156 bytes leftover after parsing attributes in process `syz.5.404'. [ 158.397738][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.404'. [ 159.394338][ T7505] loop1: detected capacity change from 0 to 32768 [ 159.427829][ T7505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.405 (7505) [ 159.471682][ T7505] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.504505][ T7505] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 159.538128][ T7505] BTRFS info (device loop1): turning on sync discard [ 159.570865][ T7505] BTRFS info (device loop1): setting nodatacow, compression disabled [ 159.591914][ T7505] BTRFS info (device loop1): turning off barriers [ 159.632285][ T7505] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 159.679917][ T7505] BTRFS info (device loop1): trying to use backup root at mount time [ 159.710313][ T7505] BTRFS info (device loop1): metadata ratio 3 [ 159.716986][ T7505] BTRFS info (device loop1): enabling auto defrag [ 159.725391][ T7521] mmap: syz.4.411 (7521) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.757360][ T7505] BTRFS info (device loop1): doing ref verification [ 159.765204][ T7505] BTRFS info (device loop1): max_inline at 0 [ 159.800561][ T7505] BTRFS info (device loop1): using free space tree [ 159.869033][ T7295] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 159.923301][ T7505] BTRFS error (device loop1): failed to load root extent [ 159.940632][ T7505] BTRFS warning (device loop1): try to load backup roots slot 1 [ 159.954954][ T7462] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 160.030812][ T7505] BTRFS warning (device loop1): couldn't read tree root [ 160.045048][ T7505] BTRFS warning (device loop1): try to load backup roots slot 2 [ 160.068454][ T7462] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 160.103005][ T7505] BTRFS warning (device loop1): couldn't read tree root [ 160.127577][ T7505] BTRFS warning (device loop1): try to load backup roots slot 3 [ 160.207301][ T7505] BTRFS info (device loop1): enabling ssd optimizations [ 160.242722][ T7505] BTRFS info (device loop1): rebuilding free space tree [ 160.346949][ T7505] BTRFS info (device loop1): checking UUID tree [ 160.736046][ T5796] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.437167][ C1] sched: RT throttling activated [ 162.572890][ T7580] loop5: detected capacity change from 0 to 131072 [ 162.588793][ T7580] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 162.597429][ T7580] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 162.621714][ T7580] F2FS-fs (loop5): invalid crc value [ 162.668274][ T7580] F2FS-fs (loop5): Found nat_bits in checkpoint [ 162.742082][ T7580] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 162.750058][ T7580] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 163.299333][ T7599] loop1: detected capacity change from 0 to 8192 [ 163.322608][ T7599] FAT-fs (loop1): Unrecognized mount option "dµ§t& ¶)ôxfloppy" or missing value [ 164.327415][ T5790] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 164.336925][ T5790] Bluetooth: hci1: Injecting HCI hardware error event [ 164.348033][ T5791] Bluetooth: hci1: hardware error 0x00 [ 165.142754][ T7616] loop5: detected capacity change from 0 to 32768 [ 165.319096][ T7616] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 165.319096][ T7616] [ 165.378990][ T7616] ERROR: (device loop5): remounting filesystem as read-only [ 165.426293][ T7616] syz.5.435: attempt to access beyond end of device [ 165.426293][ T7616] loop5: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 165.461775][ T7616] syz.5.435: attempt to access beyond end of device [ 165.461775][ T7616] loop5: rw=524288, sector=2621792, nr_sectors = 8 limit=32768 [ 165.488800][ T7616] syz.5.435: attempt to access beyond end of device [ 165.488800][ T7616] loop5: rw=0, sector=2621792, nr_sectors = 8 limit=32768 [ 165.515297][ T7616] syz.5.435: attempt to access beyond end of device [ 165.515297][ T7616] loop5: rw=0, sector=2621792, nr_sectors = 8 limit=32768 [ 165.572265][ T113] blkno = 5002c, nblocks = 1 [ 165.591784][ T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 165.591784][ T113] [ 165.727258][ T5788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.942506][ T5788] usb 1-1: Using ep0 maxpacket: 16 [ 165.970319][ T5788] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 165.998171][ T5788] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.016124][ T5788] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.041193][ T5788] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.055715][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.075120][ T5788] usb 1-1: Product: syz [ 166.083302][ T5788] usb 1-1: Manufacturer: syz [ 166.098608][ T5788] usb 1-1: SerialNumber: syz [ 166.408273][ T5791] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 166.502318][ T7637] loop1: detected capacity change from 0 to 512 [ 166.545752][ T5788] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 166.651058][ T7637] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.448: corrupted in-inode xattr: invalid ea_ino [ 166.683413][ T7637] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.448: couldn't read orphan inode 15 (err -117) [ 166.689872][ T27] libceph: connect (1)[c::]:6789 error -101 [ 166.706341][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 166.723679][ T27] libceph: connect (1)[c::]:6789 error -101 [ 166.733656][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 166.746084][ T7637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.999437][ T27] libceph: connect (1)[c::]:6789 error -101 [ 167.013589][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 167.278210][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.345573][ T5788] usb 1-1: 2:1: cannot get freq at ep 0x82 [ 167.475738][ T7641] ceph: No mds server is up or the cluster is laggy [ 167.490689][ T5788] usb 1-1: USB disconnect, device number 3 [ 167.555693][ T23] libceph: connect (1)[c::]:6789 error -101 [ 167.570013][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 167.773891][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.306016][ T7665] loop5: detected capacity change from 0 to 64 [ 170.385416][ T7718] loop1: detected capacity change from 0 to 512 [ 170.401231][ T7718] EXT4-fs: Ignoring removed nobh option [ 170.456898][ T7718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.495576][ T7718] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.648645][ T5791] Bluetooth: hci2: command 0x0405 tx timeout [ 170.832565][ T7722] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.477: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 170.905367][ T7723] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.477: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 171.039117][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.304166][ T7731] loop1: detected capacity change from 0 to 8 [ 171.528186][ T7734] netlink: 'syz.0.480': attribute type 1 has an invalid length. [ 171.588987][ T7734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.744275][ T7738] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 171.792829][ T7738] bond2: (slave batadv1): making interface the new active one [ 171.813002][ T7738] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 171.835445][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 171.845103][ T7740] netlink: 'syz.1.484': attribute type 29 has an invalid length. [ 171.858004][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 171.873573][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 172.293592][ T7734] bond2 (unregistering): (slave batadv1): Releasing active interface [ 172.324385][ T7734] bond2 (unregistering): Released all slaves [ 172.711043][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 173.067291][ T7751] veth0_vlan: entered allmulticast mode [ 173.504481][ T7755] netlink: 'syz.5.490': attribute type 7 has an invalid length. [ 173.515262][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.490'. [ 173.564257][ T7757] loop1: detected capacity change from 0 to 512 [ 173.656030][ T7757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.885237][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.987725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.007350][ T5883] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 174.105898][ T7768] policy can only be matched on NF_INET_PRE_ROUTING [ 174.105915][ T7768] unable to load match [ 174.187369][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 174.195828][ T7770] loop0: detected capacity change from 0 to 512 [ 174.241135][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.284685][ T5883] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.305373][ T7770] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.495: corrupted in-inode xattr: invalid ea_ino [ 174.395310][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.406268][ T7770] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.495: couldn't read orphan inode 15 (err -117) [ 174.445854][ T5883] usb 6-1: config 0 descriptor?? [ 174.461738][ T7770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.607988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 174.617944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 174.698639][ T5883] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 175.102486][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.190799][ T5883] usb 6-1: USB disconnect, device number 2 [ 175.358748][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 175.869228][ T7796] loop5: detected capacity change from 0 to 1024 [ 175.880645][ T7796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.936448][ T7798] policy can only be matched on NF_INET_PRE_ROUTING [ 175.936471][ T7798] unable to load match [ 175.997948][ T7796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.116694][ T6777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.637305][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 176.837252][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 176.849629][ T5883] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.869462][ T5883] usb 1-1: config 0 has no interface number 0 [ 176.877024][ T5883] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.896813][ T5883] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.908372][ T5883] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 176.919221][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.934278][ T5883] usb 1-1: config 0 descriptor?? [ 176.957338][ T5854] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 177.167323][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 177.180350][ T5854] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 177.207328][ T5854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.231293][ T5854] usb 6-1: config 0 has no interface number 0 [ 177.254185][ T5854] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 177.278217][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.286452][ T5854] usb 6-1: Product: syz [ 177.296733][ T5854] usb 6-1: Manufacturer: syz [ 177.311428][ T5854] usb 6-1: SerialNumber: syz [ 177.327783][ T5854] usb 6-1: config 0 descriptor?? [ 177.581868][ T5883] uclogic 0003:28BD:0071.0003: pen parameters not found [ 177.603210][ T5854] usb 6-1: USB disconnect, device number 3 [ 177.603851][ T5883] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 177.857565][ T5883] usb 1-1: USB disconnect, device number 4 [ 180.019115][ T7863] ipip0: entered promiscuous mode [ 180.031470][ T7862] netlink: 'syz.1.532': attribute type 4 has an invalid length. [ 180.111151][ T7862] netlink: 'syz.1.532': attribute type 4 has an invalid length. [ 182.112366][ T7904] overlayfs: failed to verify index (index/00fb21000187f0a3c18dfc416aa6b14c9ede0b5ea22f15f9ff4103000000000000, ftype=2000, err=-61) [ 182.147468][ T7904] overlayfs: failed index dir cleanup (-61) [ 182.154217][ T7904] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 182.376852][ T7909] loop1: detected capacity change from 0 to 64 [ 182.836335][ T28] audit: type=1326 audit(1758320170.693:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.5.547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90c078ec29 code=0x0 [ 184.466457][ T7931] loop1: detected capacity change from 0 to 32768 [ 184.479093][ T7931] XFS: attr2 mount option is deprecated. [ 184.556907][ T7931] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 184.586639][ T7931] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.676726][ T7935] loop5: detected capacity change from 0 to 32768 [ 184.721656][ T7935] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.732814][ T7931] XFS (loop1): Ending clean mount [ 184.759663][ T7931] XFS (loop1): Quotacheck needed: Please wait. [ 184.864227][ T7935] XFS (loop5): Ending clean mount [ 184.920471][ T7935] XFS (loop5): Quotacheck needed: Please wait. [ 184.966673][ T7931] XFS (loop1): Quotacheck: Done. [ 185.092625][ T7935] XFS (loop5): Quotacheck: Done. [ 185.179950][ T5796] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.280534][ T6777] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 185.946764][ T7980] veth0: entered promiscuous mode [ 185.988019][ T7979] veth0: left promiscuous mode [ 186.767687][ T8005] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.585'. [ 187.375266][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 187.398935][ T8026] netlink: 'syz.4.593': attribute type 15 has an invalid length. [ 187.418909][ T8026] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.429850][ T8026] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.441485][ T8026] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.450830][ T8026] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.462107][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'. [ 187.474889][ T8026] netlink: 'syz.4.593': attribute type 15 has an invalid length. [ 187.597793][ T8032] IPv4: Oversized IP packet from 127.202.26.0 [ 188.325538][ T8053] binder: 8052:8053 ioctl c0306201 2000000003c0 returned -22 [ 188.642490][ T8047] netlink: 'syz.1.602': attribute type 13 has an invalid length. [ 188.667236][ T8047] netlink: 'syz.1.602': attribute type 17 has an invalid length. [ 188.715410][ T8047] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 189.402406][ T8081] loop0: detected capacity change from 0 to 164 [ 189.474022][ T8081] ISOFS: unable to read i-node block [ 189.511124][ T8081] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 189.734557][ T8081] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 189.893625][ T8081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.963045][ T8086] bond2: (slave geneve2): making interface the new active one [ 190.005140][ T8086] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 190.083284][ T8093] loop5: detected capacity change from 0 to 8192 [ 190.129590][ T8093] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 190.163085][ T8093] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 190.245099][ T8093] REISERFS (device loop5): using ordered data mode [ 190.307216][ T8093] reiserfs: using flush barriers [ 190.344251][ T8093] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.441990][ T8093] REISERFS (device loop5): checking transaction log (loop5) [ 190.482914][ T8093] REISERFS (device loop5): Using r5 hash to sort names [ 190.502929][ T8093] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 190.593123][ T8103] binder: 8102:8103 ioctl c0306201 200000000080 returned -14 [ 191.076009][ T8116] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 191.099364][ T8116] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 191.149103][ T8116] netlink: 'syz.5.626': attribute type 10 has an invalid length. [ 191.173184][ T8116] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 191.185237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 191.208979][ T8116] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 191.245495][ T8116] bond0: (slave wlan1): Opening slave failed [ 191.967312][ T5854] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 192.167569][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 192.184473][ T5854] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 192.200847][ T5854] usb 2-1: config 0 has no interface number 0 [ 192.210913][ T5854] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 192.224980][ T5854] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 192.239451][ T5854] usb 2-1: config 0 interface 41 has no altsetting 0 [ 192.258329][ T5854] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 192.270675][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.297901][ T5854] usb 2-1: Product: syz [ 192.309864][ T5854] usb 2-1: Manufacturer: syz [ 192.315510][ T5854] usb 2-1: SerialNumber: syz [ 192.334604][ T5854] usb 2-1: config 0 descriptor?? [ 192.422667][ T8133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 192.441737][ T8133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 192.682163][ T8133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 192.709455][ T8133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.093085][ T8164] overlayfs: failed to clone upperpath [ 193.162811][ T8166] netlink: 'syz.5.647': attribute type 1 has an invalid length. [ 193.233745][ T8169] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.238220][ T8166] bond1: (slave gretap1): making interface the new active one [ 193.249486][ T8169] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.253047][ T8166] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 193.265474][ T8169] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.275613][ T8169] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.291635][ T8169] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.314921][ T8169] Dead loop on virtual device ip6_vti0, fix it urgently! [ 193.334496][ T5854] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 193.445578][ T8174] loop5: detected capacity change from 0 to 164 [ 193.461052][ T8174] ISOFS: unable to read i-node block [ 193.476531][ T8174] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 193.510870][ T8174] netlink: 'syz.5.650': attribute type 1 has an invalid length. [ 193.570777][ T8174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.597299][ T5854] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 193.628268][ T5854] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 193.664981][ T5854] CoreChips: probe of 2-1:0.41 failed with error -71 [ 193.668720][ T8174] bond2: (slave geneve2): making interface the new active one [ 193.684779][ T8174] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 193.754040][ T5854] usb 2-1: USB disconnect, device number 4 [ 193.853777][ T8182] loop0: detected capacity change from 0 to 64 [ 194.781334][ T8201] netlink: 'syz.0.660': attribute type 13 has an invalid length. [ 194.791118][ T8201] netlink: 'syz.0.660': attribute type 17 has an invalid length. [ 194.851101][ T8201] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 194.886099][ T8210] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 194.900124][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.900346][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.010448][ T8210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.113224][ T8215] bond1: (slave geneve2): making interface the new active one [ 195.159924][ T8215] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 195.872268][ T8233] loop1: detected capacity change from 0 to 1024 [ 195.914805][ T8233] EXT4-fs: Ignoring removed orlov option [ 195.967884][ T8233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.038035][ T28] audit: type=1800 audit(1758320183.893:17): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.671" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 196.223596][ T28] audit: type=1804 audit(1758320184.083:18): pid=8246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.671" name="/newroot/173/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 196.334072][ T28] audit: type=1800 audit(1758320184.083:19): pid=8246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.671" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 196.758994][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.956731][ T8267] loop1: detected capacity change from 0 to 1024 [ 196.970787][ T8267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.040115][ T8267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.248783][ T8267] loop1: detected capacity change from 1024 to 64 [ 197.354048][ T5796] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 197.375913][ T5796] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 197.392951][ T5796] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 197.417036][ T5796] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 197.437678][ T5796] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 197.455351][ T5796] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 197.473261][ T5796] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 197.504401][ T5796] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 197.520552][ T5796] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 197.535722][ T5796] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 197.833980][ T5928] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.891124][ T8269] kmmpd-loop1: attempt to access beyond end of device [ 197.891124][ T8269] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 197.913105][ T8269] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 198.999289][ T7280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.089559][ T7280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.266327][ T7280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.427031][ T7280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.631541][ T8341] loop5: detected capacity change from 0 to 128 [ 199.713467][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.749107][ T8341] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.768017][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.781248][ T8341] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.833042][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.846552][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.857929][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 199.865796][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.961777][ T8350] netlink: 'syz.0.712': attribute type 1 has an invalid length. [ 199.990910][ T8350] netlink: 'syz.0.712': attribute type 1 has an invalid length. [ 200.095195][ T7280] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 200.188902][ T7280] batman_adv: batadv0: Removing interface: ip6gretap1 [ 200.231165][ T6777] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.509869][ T8360] af_packet: tpacket_rcv: packet too big, clamped from 41123 to 4294967272. macoff=96 [ 201.075328][ T8342] chnl_net:caif_netlink_parms(): no params data found [ 201.197021][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.205306][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.214107][ T8342] bridge_slave_0: entered allmulticast mode [ 201.227552][ T8342] bridge_slave_0: entered promiscuous mode [ 201.258157][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.266931][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.275066][ T8342] bridge_slave_1: entered allmulticast mode [ 201.289298][ T8342] bridge_slave_1: entered promiscuous mode [ 201.357243][ T8373] syz.4.717[8373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.357483][ T8373] syz.4.717[8373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.468855][ T8342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.513282][ T8342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.570594][ T7280] hsr_slave_0: left promiscuous mode [ 201.606272][ T7280] hsr_slave_1: left promiscuous mode [ 201.625564][ T7280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.647286][ T7280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.666384][ T7280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.676750][ T7280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.688827][ T7280] bridge_slave_1: left allmulticast mode [ 201.695060][ T7280] bridge_slave_1: left promiscuous mode [ 201.702225][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.713116][ T7280] bridge_slave_0: left allmulticast mode [ 201.720970][ T7280] bridge_slave_0: left promiscuous mode [ 201.727203][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.770068][ T7280] team_slave_0: left promiscuous mode [ 201.777001][ T7280] team_slave_1: left promiscuous mode [ 201.784694][ T7280] veth1_macvtap: left promiscuous mode [ 201.793832][ T7280] veth0_macvtap: left promiscuous mode [ 201.803412][ T7280] veth1_vlan: left promiscuous mode [ 201.927959][ T8] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 201.938855][ T5790] Bluetooth: hci3: command tx timeout [ 202.165223][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.188728][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 202.201059][ T8] usb 1-1: config 225 has an invalid interface number: 249 but max is 0 [ 202.215692][ T8] usb 1-1: config 225 has no interface number 0 [ 202.223257][ T8] usb 1-1: config 225 interface 249 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 202.235849][ T8] usb 1-1: config 225 interface 249 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 202.262573][ T8] usb 1-1: config 225 interface 249 has no altsetting 0 [ 202.275983][ T8] usb 1-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 202.316557][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.335142][ T8] usb 1-1: Product: syz [ 202.341855][ T8] usb 1-1: Manufacturer: syz [ 202.347855][ T8] usb 1-1: SerialNumber: syz [ 202.629196][ T8] usb-storage 1-1:225.249: USB Mass Storage device detected [ 202.660226][ T8] usb-storage 1-1:225.249: Quirks match for vid 0781 pid 0001: 1 [ 202.752179][ T8] usb 1-1: USB disconnect, device number 5 [ 203.490607][ T7280] team0 (unregistering): Port device team_slave_1 removed [ 203.620664][ T7280] team0 (unregistering): Port device team_slave_0 removed [ 203.742902][ T7280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.800836][ T8408] loop0: detected capacity change from 0 to 1024 [ 203.810436][ T8408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.843602][ T8408] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 203.876854][ T7280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.898387][ T8408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.936668][ T8408] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.018305][ T5790] Bluetooth: hci3: command tx timeout [ 204.921792][ T7280] bond0 (unregistering): Released all slaves [ 205.017276][ T8376] netlink: 'syz.5.718': attribute type 1 has an invalid length. [ 205.051283][ T8376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.084170][ T8379] bond3: (slave dummy0): making interface the new active one [ 205.095793][ T8379] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 205.190754][ T8421] netlink: 51 bytes leftover after parsing attributes in process `syz.0.732'. [ 205.435882][ T8342] team0: Port device team_slave_0 added [ 205.460037][ T8342] team0: Port device team_slave_1 added [ 205.548923][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.567700][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.607522][ T8342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.657664][ T8342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.687242][ T8342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.719613][ T8342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.932924][ T8342] hsr_slave_0: entered promiscuous mode [ 205.964477][ T8342] hsr_slave_1: entered promiscuous mode [ 206.087255][ T5790] Bluetooth: hci3: command tx timeout [ 206.615332][ T8342] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 206.648537][ T8342] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 206.687588][ T8342] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 206.710145][ T8342] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 206.910102][ T8450] loop0: detected capacity change from 0 to 40427 [ 206.939753][ T8450] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 206.979313][ T8450] F2FS-fs (loop0): invalid crc value [ 207.015783][ T8450] F2FS-fs (loop0): Found nat_bits in checkpoint [ 207.016361][ T8342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.064104][ T8342] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.080137][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.087692][ T7313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.160729][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.168667][ T7277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.189360][ T8450] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 207.369894][ T8450] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 207.546426][ T5786] syz-executor: attempt to access beyond end of device [ 207.546426][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.573441][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 207.608164][ T8342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.134028][ T8342] veth0_vlan: entered promiscuous mode [ 208.167484][ T5790] Bluetooth: hci3: command tx timeout [ 208.189779][ T8342] veth1_vlan: entered promiscuous mode [ 208.314429][ T8342] veth0_macvtap: entered promiscuous mode [ 208.356965][ T8342] veth1_macvtap: entered promiscuous mode [ 208.385758][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.405348][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.427288][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.455666][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.477269][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.499848][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.522197][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.559608][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.584267][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.604564][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.616257][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.636876][ T8342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.649722][ T8342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.666571][ T8342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.703422][ T8342] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.718860][ T8342] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.729961][ T8342] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.740510][ T8342] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.890096][ T7285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.915848][ T7285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.964751][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.976751][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.566309][ T8529] loop0: detected capacity change from 0 to 4096 [ 209.616881][ T8529] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 209.731605][ T8529] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 209.771587][ T8529] ntfs3: loop0: Failed to load $Extend (-22). [ 209.793017][ T8529] ntfs3: loop0: Failed to initialize $Extend. [ 210.877233][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 211.067411][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 211.087376][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.110276][ T27] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 211.137239][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.185528][ T27] usb 1-1: config 0 descriptor?? [ 211.455936][ T27] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 211.942601][ T5832] usb 1-1: USB disconnect, device number 6 [ 211.997477][ T27] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 212.047531][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 212.211199][ T27] usb 7-1: unable to get BOS descriptor or descriptor too short [ 212.234198][ T27] usb 7-1: not running at top speed; connect to a high speed hub [ 212.249997][ T27] usb 7-1: config 225 has an invalid interface number: 249 but max is 0 [ 212.268101][ T27] usb 7-1: config 225 has no interface number 0 [ 212.275235][ T27] usb 7-1: config 225 interface 249 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 212.297639][ T27] usb 7-1: config 225 interface 249 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 212.322188][ T27] usb 7-1: config 225 interface 249 has no altsetting 0 [ 212.332465][ T27] usb 7-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 212.347199][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.363294][ T27] usb 7-1: Product: syz [ 212.377449][ T27] usb 7-1: Manufacturer: syz [ 212.382345][ T27] usb 7-1: SerialNumber: syz [ 212.629668][ T27] usb-storage 7-1:225.249: USB Mass Storage device detected [ 212.648974][ T8598] netlink: 216 bytes leftover after parsing attributes in process `syz.0.795'. [ 212.668321][ T27] usb-storage 7-1:225.249: Quirks match for vid 0781 pid 0001: 1 [ 212.775869][ T27] usb 7-1: USB disconnect, device number 2 [ 212.856542][ T8593] loop5: detected capacity change from 0 to 32768 [ 212.868815][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 212.893209][ T8605] netlink: 'syz.0.797': attribute type 18 has an invalid length. [ 212.916904][ T8605] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.926922][ T8605] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.937567][ T8605] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.946809][ T8605] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.965747][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 212.975747][ T8605] netlink: 'syz.0.797': attribute type 18 has an invalid length. [ 212.979710][ T8593] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 213.488845][ T6777] ocfs2: Unmounting device (7,5) on (node local) [ 213.897735][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.809'. [ 213.969752][ T8638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.559200][ T28] audit: type=1326 audit(1758320202.423:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.4.810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2203f8ec29 code=0x0 [ 214.909653][ T8666] sctp: [Deprecated]: syz.5.820 (pid 8666) Use of int in max_burst socket option deprecated. [ 214.909653][ T8666] Use struct sctp_assoc_value instead [ 215.367979][ C0] TC_ACT_REPEAT abuse ? [ 215.472733][ T8672] loop5: detected capacity change from 0 to 40427 [ 215.498157][ T8672] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 215.519475][ T8672] F2FS-fs (loop5): invalid crc value [ 215.541545][ T8672] F2FS-fs (loop5): Found nat_bits in checkpoint [ 215.631307][ T8672] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 215.709218][ T7285] TC_ACT_REPEAT abuse ? [ 215.730836][ T8672] F2FS-fs (loop5): Unexpected flush for atomic writes: ino=10, npages=1 [ 215.754889][ T8672] syz.5.822: attempt to access beyond end of device [ 215.754889][ T8672] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 215.852777][ T6777] syz-executor: attempt to access beyond end of device [ 215.852777][ T6777] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 215.878785][ T6777] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 216.856862][ T7328] TC_ACT_REPEAT abuse ? [ 217.289077][ T8700] overlayfs: failed to resolve './file0': -2 [ 217.369181][ T8722] loop6: detected capacity change from 0 to 512 [ 217.412186][ T8722] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 217.449938][ T8722] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 217.481729][ T8722] EXT4-fs error (device loop6): ext4_orphan_get:1399: comm syz.6.840: inode #15: comm syz.6.840: iget: illegal inode # [ 217.514420][ T8722] EXT4-fs (loop6): Remounting filesystem read-only [ 217.539040][ T8722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.804071][ T8342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.928764][ T7280] TC_ACT_REPEAT abuse ? [ 217.937816][ T7277] TC_ACT_REPEAT abuse ? [ 218.006629][ T7285] TC_ACT_REPEAT abuse ? [ 218.097591][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 218.299817][ T8741] loop6: detected capacity change from 0 to 32768 [ 218.307383][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 218.322671][ T8] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 218.333185][ T8741] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 218.354270][ T8] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 218.377285][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 218.402980][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.432070][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 218.477371][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 218.517235][ T8] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 218.557239][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.600126][ T8] usb 1-1: config 0 descriptor?? [ 218.632988][ T7652] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 218.828310][ T8] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 218.880069][ T8] usb 1-1: USB disconnect, device number 7 [ 218.911849][ T8] usblp0: removed [ 219.138530][ T7313] TC_ACT_REPEAT abuse ? [ 219.304292][ T8765] overlayfs: failed to clone upperpath [ 219.527321][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 219.705264][ T8783] veth0_to_bridge: entered promiscuous mode [ 219.714806][ T8782] veth0_to_bridge: left promiscuous mode [ 219.727260][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 219.736930][ T8] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 219.752628][ T8] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 219.762833][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 219.782281][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.793057][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 219.813003][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 219.832925][ T8] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 219.853725][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.872128][ T8789] netlink: 'syz.5.865': attribute type 1 has an invalid length. [ 219.875868][ T8] usb 1-1: config 0 descriptor?? [ 219.934765][ T8789] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.114510][ T8] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 220.188861][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 220.213737][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 220.251410][ T7313] TC_ACT_REPEAT abuse ? [ 220.358396][ T8803] batadv_slave_0: entered promiscuous mode [ 220.371716][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 220.390981][ T8803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.451821][ T8] usb 1-1: USB disconnect, device number 8 [ 220.516324][ T8] usblp0: removed [ 220.530227][ T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 220.553265][ T8803] batadv_slave_0 (unregistering): left promiscuous mode [ 220.562027][ T8803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.727543][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 220.735657][ T27] usb 6-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 220.755437][ T27] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 220.768995][ T27] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 220.778896][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.053038][ T27] usb 6-1: USB disconnect, device number 4 [ 221.360113][ T7285] TC_ACT_REPEAT abuse ? [ 221.779950][ T8830] loop0: detected capacity change from 0 to 8192 [ 222.264845][ T8854] loop6: detected capacity change from 0 to 47 [ 222.458283][ T8854] syz.6.891: attempt to access beyond end of device [ 222.458283][ T8854] loop6: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 222.487413][ T8854] Buffer I/O error on dev loop6, logical block 24, lost async page write [ 222.559001][ T7277] TC_ACT_REPEAT abuse ? [ 222.693133][ T8862] overlayfs: failed to resolve './file0': -2 [ 222.710519][ T5883] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 222.924658][ T5883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 222.948944][ T5883] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 222.974688][ T5883] usb 6-1: can't read configurations, error -71 [ 223.049191][ T8850] loop0: detected capacity change from 0 to 40427 [ 223.056402][ T7277] TC_ACT_REPEAT abuse ? [ 223.111113][ T8850] F2FS-fs (loop0): invalid crc value [ 223.133054][ T8850] F2FS-fs (loop0): Found nat_bits in checkpoint [ 223.239659][ T8850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 223.320929][ T8850] syz.0.888: attempt to access beyond end of device [ 223.320929][ T8850] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 223.442371][ T5786] syz-executor: attempt to access beyond end of device [ 223.442371][ T5786] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.477809][ T5786] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 223.697838][ T7280] TC_ACT_REPEAT abuse ? [ 223.750393][ T7277] TC_ACT_REPEAT abuse ? [ 224.229168][ T8902] overlayfs: failed to clone upperpath [ 224.841787][ T7285] TC_ACT_REPEAT abuse ? [ 225.174925][ T8910] loop0: detected capacity change from 0 to 32768 [ 225.211510][ T8910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.913 (8910) [ 225.274119][ T8910] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.330428][ T8910] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 225.359268][ T8910] BTRFS info (device loop0): enabling ssd optimizations [ 225.378272][ T8910] BTRFS info (device loop0): using spread ssd allocation scheme [ 225.393444][ T8910] BTRFS info (device loop0): setting nodatacow, compression disabled [ 225.413881][ T8910] BTRFS info (device loop0): not using ssd optimizations [ 225.429432][ T8910] BTRFS info (device loop0): not using spread ssd allocation scheme [ 225.450812][ T8910] BTRFS info (device loop0): max_inline at 0 [ 225.467732][ T8910] BTRFS info (device loop0): using free space tree [ 225.589299][ T8910] BTRFS info (device loop0): auto enabling async discard [ 225.807495][ T8942] sctp: [Deprecated]: syz.5.921 (pid 8942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.807495][ T8942] Use struct sctp_sack_info instead [ 225.994751][ T11] TC_ACT_REPEAT abuse ? [ 226.090681][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.317459][ T5883] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 226.527420][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 226.545917][ T5883] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 226.565243][ T5883] usb 6-1: config 179 has no interface number 0 [ 226.581125][ T5883] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 226.610280][ T5883] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 226.624686][ T5883] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.649027][ T5883] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 226.671269][ T5883] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 226.699848][ T5883] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 226.717246][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.755177][ T8947] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 227.118134][ T7313] TC_ACT_REPEAT abuse ? [ 227.319701][ T5883] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input7 [ 227.566630][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.589522][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.884677][ T5883] usb 6-1: USB disconnect, device number 7 [ 227.884733][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 227.899962][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 228.348759][ T7313] TC_ACT_REPEAT abuse ? [ 228.376481][ T9000] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 228.414230][ T9000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.934'. [ 228.433029][ T9000] batman_adv: batadv0: Adding interface: virt_wifi0 [ 228.442646][ T9000] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.486302][ T9000] batman_adv: batadv0: Interface activated: virt_wifi0 [ 228.536972][ T9007] loop5: detected capacity change from 0 to 128 [ 228.593077][ T9007] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.603193][ T9010] tipc: Started in network mode [ 228.612452][ T9010] tipc: Node identity 2, cluster identity 3142 [ 228.621445][ T9010] tipc: Node number set to 2 [ 228.627514][ T9010] tipc: Cannot configure node identity twice [ 228.667809][ T9007] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.768504][ T6777] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.809916][ T7280] TC_ACT_REPEAT abuse ? [ 228.945802][ T28] audit: type=1326 audit(1758320216.803:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179798ec29 code=0x7ffc0000 [ 228.999242][ T28] audit: type=1326 audit(1758320216.803:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179798ec29 code=0x7ffc0000 [ 229.026220][ T28] audit: type=1326 audit(1758320216.803:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179798ec29 code=0x7ffc0000 [ 229.055687][ T28] audit: type=1326 audit(1758320216.803:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179798ec29 code=0x7ffc0000 [ 229.086060][ T28] audit: type=1326 audit(1758320216.803:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179798ec29 code=0x7ffc0000 [ 229.112794][ T28] audit: type=1326 audit(1758320216.803:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179798ec29 code=0x7ffc0000 [ 229.140254][ T28] audit: type=1326 audit(1758320216.803:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179798ec29 code=0x7ffc0000 [ 229.165873][ T28] audit: type=1326 audit(1758320216.803:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179798ec29 code=0x7ffc0000 [ 229.204010][ T28] audit: type=1326 audit(1758320216.803:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f179798ec29 code=0x7ffc0000 [ 229.320700][ T9005] overlayfs: statfs failed on './file0' [ 229.335615][ T28] audit: type=1326 audit(1758320216.833:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.0.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179798ec29 code=0x7ffc0000 [ 229.455013][ T7280] TC_ACT_REPEAT abuse ? [ 229.490567][ T7277] TC_ACT_REPEAT abuse ? [ 229.545120][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.947'. [ 229.589616][ T9033] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.599584][ T9033] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.609032][ T9033] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.618545][ T9033] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.670747][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.947'. [ 229.852659][ T9043] Bluetooth: MGMT ver 1.22 [ 230.656448][ T9066] netlink: 48 bytes leftover after parsing attributes in process `syz.6.960'. [ 231.441038][ T5883] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 231.637333][ T5883] usb 7-1: Using ep0 maxpacket: 32 [ 231.647846][ T5883] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 231.657894][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.680135][ T5883] usb 7-1: config 0 descriptor?? [ 231.799370][ T9096] loop0: detected capacity change from 0 to 1024 [ 231.852279][ T9096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.934458][ T5883] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 232.004486][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.048402][ T5883] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 232.056591][ T5883] usb 7-1: media controller created [ 232.088682][ T9096] loop0: detected capacity change from 1024 to 64 [ 232.164051][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.213385][ T5786] EXT4-fs warning (device loop0): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 232.233658][ T5883] az6027: usb out operation failed. (-71) [ 232.243539][ T5786] EXT4-fs warning (device loop0): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 232.273338][ T5883] az6027: usb out operation failed. (-71) [ 232.282424][ T5786] EXT4-fs warning (device loop0): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 232.297769][ T5883] stb0899_attach: Driver disabled by Kconfig [ 232.304098][ T5883] az6027: no front-end attached [ 232.304098][ T5883] [ 232.317795][ T5883] az6027: usb out operation failed. (-71) [ 232.325031][ T5786] EXT4-fs warning (device loop0): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 232.340241][ T5883] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 232.349963][ T5786] EXT4-fs warning (device loop0): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 232.359062][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8 [ 232.370517][ T5786] EXT4-fs warning (device loop0): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 232.397994][ T5786] EXT4-fs warning (device loop0): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 232.413580][ T5786] EXT4-fs warning (device loop0): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 232.424139][ T5883] dvb-usb: schedule remote query interval to 400 msecs. [ 232.466459][ T5786] EXT4-fs warning (device loop0): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 232.495373][ T5786] EXT4-fs warning (device loop0): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 232.499851][ T5883] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 232.537703][ T5883] usb 7-1: USB disconnect, device number 3 [ 232.639493][ T5883] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 232.783213][ T6968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.832828][ T9097] kmmpd-loop0: attempt to access beyond end of device [ 232.832828][ T9097] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 232.866026][ T9097] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 234.014452][ T9146] loop5: detected capacity change from 0 to 1024 [ 234.042729][ T9146] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.076756][ T9146] EXT4-fs: test_dummy_encryption requires encrypt feature [ 234.380474][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.396709][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.409630][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.433883][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.448489][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 234.465270][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.597299][ T27] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 234.797661][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 234.837830][ T27] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 234.861265][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.867553][ T9157] chnl_net:caif_netlink_parms(): no params data found [ 234.878717][ T27] usb 7-1: Product: syz [ 234.884284][ T27] usb 7-1: Manufacturer: syz [ 234.909467][ T27] usb 7-1: SerialNumber: syz [ 234.924324][ T27] usb 7-1: config 0 descriptor?? [ 234.949193][ T27] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 235.096659][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.106078][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.115035][ T9157] bridge_slave_0: entered allmulticast mode [ 235.125655][ T9157] bridge_slave_0: entered promiscuous mode [ 235.196488][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.204417][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.214164][ T9157] bridge_slave_1: entered allmulticast mode [ 235.222868][ T9157] bridge_slave_1: entered promiscuous mode [ 235.321280][ T9157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.351306][ T9183] loop5: detected capacity change from 0 to 1024 [ 235.355106][ T9157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.490128][ T9157] team0: Port device team_slave_0 added [ 235.553739][ T9157] team0: Port device team_slave_1 added [ 235.595099][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 235.595114][ T28] audit: type=1800 audit(1758320223.453:39): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1008" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 235.696298][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.717279][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.746806][ T9157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.777719][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.787730][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.819395][ T9157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.092808][ T9157] hsr_slave_0: entered promiscuous mode [ 236.147811][ T9157] hsr_slave_1: entered promiscuous mode [ 236.170674][ T9157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.190811][ T9157] Cannot create hsr debugfs directory [ 236.421718][ T27] gspca_topro: reg_r err -71 [ 236.428669][ T27] gspca_topro: Sensor soi763a [ 236.491519][ T27] usb 7-1: USB disconnect, device number 4 [ 236.567962][ T5790] Bluetooth: hci1: command tx timeout [ 236.766586][ T9207] loop5: detected capacity change from 0 to 2048 [ 236.816610][ T9207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.999937][ T9157] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 237.044366][ T9157] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 237.110145][ T9157] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 237.160761][ T9209] 9pnet: p9_errstr2errno: server reported unknown error 01777777 [ 237.172955][ T9157] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 237.392301][ T9221] loop5: detected capacity change from 0 to 256 [ 237.428158][ T9221] FAT-fs (loop5): Unrecognized mount option "iocharbet=cp860" or missing value [ 237.452688][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.538667][ T9157] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.574264][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.582451][ T7289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.653646][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.661312][ T7285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.052182][ T9240] netlink: 'syz.6.1025': attribute type 2 has an invalid length. [ 238.074186][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1025'. [ 238.123960][ T9246] netlink: 'syz.6.1025': attribute type 2 has an invalid length. [ 238.132834][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1025'. [ 238.176185][ T9157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.651240][ T5790] Bluetooth: hci1: command tx timeout [ 238.836166][ T9266] tipc: Started in network mode [ 238.852568][ T9266] tipc: Node identity , cluster identity 4711 [ 238.869444][ T9266] tipc: Failed to obtain node identity [ 238.875393][ T9266] tipc: Enabling of bearer rejected, failed to enable media [ 238.991966][ T9157] veth0_vlan: entered promiscuous mode [ 239.014058][ T9157] veth1_vlan: entered promiscuous mode [ 239.085081][ T9157] veth0_macvtap: entered promiscuous mode [ 239.100874][ T9157] veth1_macvtap: entered promiscuous mode [ 239.122670][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.135092][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.145839][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.157651][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.168675][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.180879][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.194036][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.223306][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.234718][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.247459][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.259240][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.276140][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.299964][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.312351][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.323995][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.336569][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.357084][ T9157] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.366698][ T9157] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.377081][ T9157] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.386024][ T9157] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.501596][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.511149][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.547840][ T7307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.556760][ T7307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.834680][ T9288] loop7: detected capacity change from 0 to 512 [ 239.842807][ T9288] EXT4-fs: Ignoring removed orlov option [ 239.864513][ T9288] EXT4-fs (loop7): orphan cleanup on readonly fs [ 239.876703][ T9288] EXT4-fs error (device loop7): ext4_find_extent:936: inode #4: comm syz.7.1038: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 239.942138][ T9288] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=-117 [ 239.996264][ T9288] EXT4-fs warning (device loop7): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 240.068995][ T9288] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 240.109416][ T9288] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.370796][ T9157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.727278][ T5790] Bluetooth: hci1: command tx timeout [ 240.915554][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1053'. [ 240.988824][ T9324] loop6: detected capacity change from 0 to 2048 [ 241.085426][ T9324] loop6: p1 < > p3 [ 241.102773][ T9324] loop6: p3 size 134217728 extends beyond EOD, truncated [ 241.390653][ T7652] udevd[7652]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 241.409224][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 241.559557][ T9331] binder: 9330:9331 ioctl 4018620d 0 returned -22 [ 241.628461][ T9334] binder: 9330:9334 ioctl c018620c 0 returned -14 [ 241.653469][ T9336] loop2: detected capacity change from 0 to 7 [ 241.671758][ T7652] Dev loop2: unable to read RDB block 7 [ 241.678546][ T7652] loop2: unable to read partition table [ 241.684894][ T7652] loop2: partition table beyond EOD, truncated [ 241.711507][ T9336] Dev loop2: unable to read RDB block 7 [ 241.724285][ T9336] loop2: unable to read partition table [ 241.731639][ T9336] loop2: partition table beyond EOD, truncated [ 241.746824][ T9336] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.836482][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 241.851779][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 242.572162][ T9363] syz.6.1069[9363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.572425][ T9363] syz.6.1069[9363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.808088][ T5790] Bluetooth: hci1: command tx timeout [ 242.921676][ T9373] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 244.467372][ T9423] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1089'. [ 245.109601][ T9441] loop6: detected capacity change from 0 to 1024 [ 245.167388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 245.327445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 245.448686][ T9440] hfsplus: invalid extended attribute record [ 245.517782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 245.559966][ T7285] hfsplus: b-tree write err: -5, ino 4 [ 246.334641][ T9465] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 246.351330][ T9467] loop5: detected capacity change from 0 to 128 [ 246.378071][ T9467] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.420821][ T9467] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 246.458526][ T9466] loop6: detected capacity change from 0 to 4096 [ 246.497573][ T9466] ext4: Unknown parameter 'uid<00000000000000000000' [ 246.572316][ T5780] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.795486][ T7313] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 248.121663][ T9506] loop6: detected capacity change from 0 to 32768 [ 248.148530][ T9506] XFS: noikeep mount option is deprecated. [ 248.154767][ T9506] XFS: noikeep mount option is deprecated. [ 248.236941][ T9506] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 248.528273][ T9506] XFS (loop6): Ending clean mount [ 248.597729][ T9506] XFS (loop6): Quotacheck needed: Please wait. [ 248.704427][ T9506] XFS (loop6): Quotacheck: Done. [ 248.850274][ T28] audit: type=1804 audit(1758320236.703:40): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1124" name="/newroot/98/file0/bus" dev="loop6" ino=9290 res=1 errno=0 [ 249.064484][ T8342] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 249.138045][ T5832] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 249.217047][ T9561] loop7: detected capacity change from 0 to 1024 [ 249.255940][ T9561] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.351151][ T5832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.378403][ T9561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 249.397225][ T5832] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 249.417253][ T5832] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.433263][ T9561] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.557859][ T5832] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 249.572196][ T9561] EXT4-fs error (device loop7): ext4_map_blocks:718: inode #15: comm syz.7.1145: lblock 0 mapped to illegal pblock 0 (length 1) [ 249.588015][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 249.623861][ T5832] usb 6-1: Product: syz [ 249.637201][ T5832] usb 6-1: Manufacturer: syz [ 249.644192][ T5832] usb 6-1: SerialNumber: syz [ 249.651988][ T9561] EXT4-fs error (device loop7): ext4_ext_remove_space:2929: inode #15: comm syz.7.1145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 249.746536][ T9157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.889088][ T5832] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 250.096756][ T5832] usb 6-1: USB disconnect, device number 8 [ 250.108996][ T5832] usblp0: removed [ 251.413988][ T9623] loop5: detected capacity change from 0 to 1024 [ 251.509733][ T9623] EXT4-fs: inline encryption not supported [ 251.515778][ T9623] EXT4-fs: Ignoring removed i_version option [ 251.554901][ T9623] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.615333][ T9623] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.758588][ T9623] EXT4-fs error (device loop5): __ext4_get_inode_loc:4483: comm syz.5.1169: Invalid inode table block 5 in block_group 0 [ 251.805648][ T9623] EXT4-fs error (device loop5): __ext4_get_inode_loc:4483: comm syz.5.1169: Invalid inode table block 5 in block_group 0 [ 251.831921][ T9623] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 251.897237][ T9623] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #15: comm syz.5.1169: mark_inode_dirty error [ 251.933655][ T9623] EXT4-fs error (device loop5): __ext4_get_inode_loc:4483: comm syz.5.1169: Invalid inode table block 5 in block_group 0 [ 251.971708][ T9623] EXT4-fs error (device loop5): ext4_get_max_inline_size:116: inode #15: comm syz.5.1169: can't get inode location 15 [ 251.988145][ T9623] EXT4-fs error (device loop5): __ext4_get_inode_loc:4483: comm syz.5.1169: Invalid inode table block 5 in block_group 0 [ 252.040218][ T9635] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1172'. [ 252.113684][ T11] EXT4-fs error (device loop5): __ext4_get_inode_loc:4483: comm kworker/u4:0: Invalid inode table block 5 in block_group 0 [ 252.143895][ T6777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.769567][ T9651] loop7: detected capacity change from 0 to 2048 [ 252.869615][ T9651] loop7: p1 < > p4 [ 252.890177][ T9651] loop7: p4 size 8388608 extends beyond EOD, truncated [ 253.242736][ T7652] udevd[7652]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 253.261641][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 253.451661][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 255.528414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 256.334753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.338105][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.360737][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.376793][ T9715] loop5: detected capacity change from 0 to 32768 [ 256.410231][ T9715] XFS: ikeep mount option is deprecated. [ 256.543504][ T9715] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.099090][ T9715] XFS (loop5): Ending clean mount [ 257.152051][ T9715] XFS (loop5): Quotacheck needed: Please wait. [ 257.213690][ T9715] XFS (loop5): Quotacheck: Done. [ 257.507877][ T6777] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.996754][ T9755] loop7: detected capacity change from 0 to 1024 [ 258.054791][ T9755] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.074661][ T9755] EXT4-fs: test_dummy_encryption requires encrypt feature [ 258.361211][ T9759] loop6: detected capacity change from 0 to 2048 [ 258.410002][ T5791] Bluetooth: hci2: command 0x0405 tx timeout [ 258.425210][ T9759] loop6: p1 < > p4 [ 258.460134][ T9759] loop6: p4 size 8388608 extends beyond EOD, truncated [ 258.570929][ T9767] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1222'. [ 258.771533][ T7652] udevd[7652]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 258.783019][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 259.393124][ T9765] loop7: detected capacity change from 0 to 40427 [ 259.421288][ T9765] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff [ 259.459632][ T9765] F2FS-fs (loop7): Image doesn't support compression [ 259.474316][ T9765] F2FS-fs (loop7): Image doesn't support compression [ 259.506281][ T9765] F2FS-fs (loop7): invalid crc value [ 260.203203][ T9765] F2FS-fs (loop7): Found nat_bits in checkpoint [ 260.333387][ T9765] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 260.422286][ T9765] syz.7.1221: attempt to access beyond end of device [ 260.422286][ T9765] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 260.498481][ T9765] syz.7.1221: attempt to access beyond end of device [ 260.498481][ T9765] loop7: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 260.601337][ T9798] sctp: [Deprecated]: syz.4.1234 (pid 9798) Use of int in max_burst socket option deprecated. [ 260.601337][ T9798] Use struct sctp_assoc_value instead [ 260.697563][ T9794] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 260.739781][ T9794] F2FS-fs (loop7): invalid blkaddr: 5641, type: 6, run fsck to fix. [ 260.765124][ T9794] syz.7.1221: attempt to access beyond end of device [ 260.765124][ T9794] loop7: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 260.830460][ T9796] loop5: detected capacity change from 0 to 32768 [ 260.847543][ T9794] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 260.857280][ T9794] syz.7.1221: attempt to access beyond end of device [ 260.857280][ T9794] loop7: rw=2049, sector=53264, nr_sectors = 8 limit=40427 [ 260.879576][ T9794] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 260.901121][ T9796] [ 260.901121][ T9796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.901121][ T9796] [ 260.924228][ T9796] [ 260.924228][ T9796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.924228][ T9796] [ 260.936604][ T9796] [ 260.936604][ T9796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.936604][ T9796] [ 260.948241][ T9796] [ 260.948241][ T9796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.948241][ T9796] [ 260.960174][ T9796] [ 260.960174][ T9796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.960174][ T9796] [ 260.984440][ T112] [ 260.984440][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.984440][ T112] [ 261.016531][ T9796] [ 261.016531][ T9796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.016531][ T9796] [ 261.028297][ T9796] [ 261.028297][ T9796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.028297][ T9796] [ 261.040350][ T9796] [ 261.040350][ T9796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.040350][ T9796] [ 261.052654][ T9796] [ 261.052654][ T9796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.052654][ T9796] [ 261.072632][ T9796] [ 261.072632][ T9796] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.072632][ T9796] [ 261.240304][ T7313] [ 261.240304][ T7313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.240304][ T7313] [ 261.277585][ T7313] [ 261.277585][ T7313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.277585][ T7313] [ 261.307927][ T7313] [ 261.307927][ T7313] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.307927][ T7313] [ 261.329832][ T6777] [ 261.329832][ T6777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.329832][ T6777] [ 261.359374][ T113] [ 261.359374][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.359374][ T113] [ 261.406494][ T6777] [ 261.406494][ T6777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.406494][ T6777] [ 263.425846][ T9857] loop5: detected capacity change from 0 to 47 [ 264.214765][ T9862] ip6erspan0: entered promiscuous mode [ 264.232090][ T9865] loop5: detected capacity change from 0 to 1024 [ 264.264405][ T9865] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 264.336689][ T9865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.358230][ T9865] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.488586][ T9865] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #15: comm syz.5.1258: lblock 0 mapped to illegal pblock 0 (length 1) [ 264.545602][ T9865] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.1258: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 264.699260][ T6777] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 266.302974][ T9903] ip6erspan0: entered promiscuous mode [ 267.347576][ T9938] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 267.451999][ T9938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.972546][ T9941] loop6: detected capacity change from 0 to 32768 [ 267.983912][ T9941] XFS: ikeep mount option is deprecated. [ 268.049926][ T9941] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.220124][ T9941] XFS (loop6): Ending clean mount [ 268.245421][ T9941] XFS (loop6): Quotacheck needed: Please wait. [ 268.309715][ T9941] XFS (loop6): Quotacheck: Done. [ 268.454586][ T8342] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.967418][ T9980] netlink: 'syz.7.1296': attribute type 1 has an invalid length. [ 269.039284][ T9980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.601621][ T9999] loop6: detected capacity change from 0 to 8192 [ 269.632499][ T9999] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 269.706662][ T9999] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 269.744700][ T9999] REISERFS (device loop6): using ordered data mode [ 269.770932][ T9999] reiserfs: using flush barriers [ 269.811797][ T9999] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 269.880531][ T9999] REISERFS (device loop6): checking transaction log (loop6) [ 269.911011][ T9999] REISERFS (device loop6): Using r5 hash to sort names [ 269.937560][ T9999] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 270.562303][T10022] netlink: 'syz.6.1312': attribute type 1 has an invalid length. [ 270.698450][T10022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 270.908685][T10027] loop7: detected capacity change from 0 to 32768 [ 270.954001][T10027] [ 270.954001][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.954001][T10027] [ 270.994959][T10027] [ 270.994959][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.994959][T10027] [ 271.007882][T10027] [ 271.007882][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.007882][T10027] [ 271.020295][T10027] [ 271.020295][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.020295][T10027] [ 271.033266][T10027] [ 271.033266][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.033266][T10027] [ 271.053485][ T112] [ 271.053485][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.053485][ T112] [ 271.121761][T10027] [ 271.121761][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.121761][T10027] [ 271.135033][T10027] [ 271.135033][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.135033][T10027] [ 271.147909][T10027] [ 271.147909][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.147909][T10027] [ 271.160157][T10027] [ 271.160157][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.160157][T10027] [ 271.178768][T10027] [ 271.178768][T10027] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.178768][T10027] [ 271.333234][ T7277] [ 271.333234][ T7277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.333234][ T7277] [ 271.353098][ T7277] [ 271.353098][ T7277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.353098][ T7277] [ 271.380959][ T7277] [ 271.380959][ T7277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.380959][ T7277] [ 271.427069][ T9157] [ 271.427069][ T9157] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.427069][ T9157] [ 271.456711][ T9157] [ 271.456711][ T9157] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.456711][ T9157] [ 271.486710][ T112] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 271.499003][ T112] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 271.508396][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 271.516045][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.526549][ T112] RIP: 0010:lmLogSync+0xfc/0x9c0 [ 271.531781][ T112] Code: af 85 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 72 fa dc fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 56 fa dc fe 49 8b 3f e8 2e 1a b3 fe [ 271.552808][ T112] RSP: 0018:ffffc90002cd7c40 EFLAGS: 00010202 [ 271.559424][ T112] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000 [ 271.568027][ T112] RDX: ffff888018743c00 RSI: 0000000000000001 RDI: 0000000000000000 [ 271.576278][ T112] RBP: ffffc90002cd7d48 R08: 0000000000000003 R09: 0000000000000000 [ 271.585306][ T112] R10: ffffc90002cd7ca0 R11: fffff5200059af98 R12: ffff888024489800 [ 271.593654][ T112] R13: dffffc0000000000 R14: ffff88823bc0a038 R15: 0000000000000040 [ 271.602443][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 271.614264][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.621827][ T112] CR2: 00002000009b9000 CR3: 000000002be34000 CR4: 00000000003506e0 [ 271.630271][ T112] Call Trace: [ 271.633834][ T112] [ 271.637307][ T112] ? lmWriteRecord+0x1ac0/0x1ac0 [ 271.643155][ T112] ? __rwlock_init+0x150/0x150 [ 271.648492][ T112] jfs_syncpt+0x7b/0x90 [ 271.653170][ T112] txEnd+0x2e5/0x520 [ 271.657559][ T112] jfs_lazycommit+0x5a6/0xa60 [ 271.663316][ T112] ? txFreelock+0x5a0/0x5a0 [ 271.667846][ T112] ? do_task_dead+0xd0/0xd0 [ 271.672809][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 271.677868][ T112] kthread+0x2fa/0x390 [ 271.682001][ T112] ? txFreelock+0x5a0/0x5a0 [ 271.686798][ T112] ? kthread_blkcg+0xd0/0xd0 [ 271.691731][ T112] ret_from_fork+0x48/0x80 [ 271.696601][ T112] ? kthread_blkcg+0xd0/0xd0 [ 271.701291][ T112] ret_from_fork_asm+0x11/0x20 [ 271.706528][ T112] [ 271.710067][ T112] Modules linked in: [ 271.752118][ T112] ---[ end trace 0000000000000000 ]--- [ 271.758193][ T112] RIP: 0010:lmLogSync+0xfc/0x9c0 [ 271.763687][ T112] Code: af 85 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 72 fa dc fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 56 fa dc fe 49 8b 3f e8 2e 1a b3 fe [ 271.823229][ T112] RSP: 0018:ffffc90002cd7c40 EFLAGS: 00010202 [ 271.830698][ T112] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000 [ 271.850160][ T112] RDX: ffff888018743c00 RSI: 0000000000000001 RDI: 0000000000000000 [ 271.865132][ T112] RBP: ffffc90002cd7d48 R08: 0000000000000003 R09: 0000000000000000 [ 271.877042][ T112] R10: ffffc90002cd7ca0 R11: fffff5200059af98 R12: ffff888024489800 [ 271.900335][ T112] R13: dffffc0000000000 R14: ffff88823bc0a038 R15: 0000000000000040 [ 271.917886][ T112] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 271.935778][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.952992][ T112] CR2: 0000200001000000 CR3: 000000002be34000 CR4: 00000000003506e0 [ 271.971483][ T112] Kernel panic - not syncing: Fatal exception [ 271.978262][ T112] Kernel Offset: disabled [ 271.982949][ T112] Rebooting in 86400 seconds..