last executing test programs: 35.273653675s ago: executing program 4 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xb}}}, 0x24}}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r3, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001a00010024bd70000000000002201400fc0200070002000008000300", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) 33.691014949s ago: executing program 4 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 32.806678949s ago: executing program 4 (id=424): socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 32.097643154s ago: executing program 4 (id=429): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 31.406632357s ago: executing program 4 (id=434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 30.023907404s ago: executing program 4 (id=437): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 28.801776195s ago: executing program 32 (id=437): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 15.566683832s ago: executing program 2 (id=480): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000006c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[], 0xfeffffff) 13.345688761s ago: executing program 2 (id=486): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0x0, 0x0) 11.864389964s ago: executing program 2 (id=492): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4ed) 10.257127346s ago: executing program 0 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x181180f, 0x0, 0xfd, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x8103) unshare(0x400) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80040, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x47f, 0x28b) lseek(r3, 0x70, 0x3) 9.787910399s ago: executing program 3 (id=496): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000006c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[], 0xfeffffff) 9.396924221s ago: executing program 3 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001", @ANYRESOCT], 0xe4}}, 0x840) 8.828462849s ago: executing program 3 (id=498): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setresuid(0x0, r1, r1) 8.5918554s ago: executing program 3 (id=500): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.334285019s ago: executing program 3 (id=503): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.23123647s ago: executing program 5 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000500b704000000000000850000003300000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5.943751527s ago: executing program 0 (id=505): ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x103) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x4f, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r1, 0x1, 0x0, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000005c0)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f000000ad00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) setsockopt$inet_int(r2, 0x0, 0x17, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5.788415128s ago: executing program 5 (id=506): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000006c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[], 0xfeffffff) 5.38126024s ago: executing program 5 (id=507): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000020050b391740000102030109026000030102d6090904000000010100000a240101000a0002010209040100000102000009040101010102270009050109ff"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 5.048399816s ago: executing program 1 (id=509): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x830}, 0x20000040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.893407962s ago: executing program 1 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) unshare(0x64000600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x1) 4.597114374s ago: executing program 1 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000001c0), &(0x7f00000000c0)=@tcp6=r3, 0x1}, 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x135) openat$kvm(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$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") 4.388634946s ago: executing program 3 (id=512): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) read$usbmon(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x20b82) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000140)='./bus\x00', 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$incfs(r5, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c890}, 0x4) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000400)) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 3.651680296s ago: executing program 1 (id=513): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 3.580720355s ago: executing program 0 (id=514): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xa, 0x75}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}], 0x18, 0x20044001}, 0x24000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0xfffffffffffffdcb) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x140, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x3de8e7ea, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) 3.14491137s ago: executing program 1 (id=515): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1286, &(0x7f0000002440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xffe1eb7a70500395, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x3}, 0x94) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1}, 0x20040051) 3.143101761s ago: executing program 0 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000500b704000000000000850000003300000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.895769509s ago: executing program 0 (id=517): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f0000006c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB], 0xfeffffff) 2.8412432s ago: executing program 5 (id=518): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gre0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000000)={0x5d36, 0xefd, 0x5, 0x2, 0x6, 0x5, 0x2, 0x1000000000000f64, 0x9}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r5, &(0x7f0000000400), 0x2000011a) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000", 0x3, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}], 0x2, 0x2100, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0001002abd", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) 2.674939484s ago: executing program 0 (id=519): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect$printer(0x6, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c03d1f209c0e87194eb2ed9c42875"]}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.608686337s ago: executing program 2 (id=520): syz_mount_image$exfat(&(0x7f0000001180), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000002f80)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file0/file0\x00', 0x54) 2.136750036s ago: executing program 1 (id=521): r0 = getpid() process_vm_readv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x4800a000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) pwritev(r3, 0x0, 0x0, 0x0, 0x0) 1.491359554s ago: executing program 5 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x1000, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000480)={0x2, 0x110000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.10336873s ago: executing program 2 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000001c0), &(0x7f00000000c0)=@tcp6=r3, 0x1}, 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x135) openat$kvm(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$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") 542.661104ms ago: executing program 5 (id=524): r0 = socket(0xb, 0x5, 0x8bf1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') execve(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000500)={0xe000200c}) 0s ago: executing program 2 (id=525): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1501, &(0x7f0000002a80)="$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") mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 81.255434][ T5816] cgroup: Unknown subsys name 'net' [ 81.386045][ T5816] cgroup: Unknown subsys name 'cpuset' [ 81.395348][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.060813][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.388238][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.407951][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.418311][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.419566][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.427274][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.436587][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.445101][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.456836][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.457926][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.465443][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.474706][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.479847][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.488311][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.502110][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.504156][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.511535][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.519504][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.528643][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.538366][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.539419][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.545602][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.556465][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.568807][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.572234][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.586099][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.289567][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 86.511751][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.525567][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 86.538009][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 86.713038][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.721592][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.729532][ T5829] bridge_slave_0: entered allmulticast mode [ 86.737477][ T5829] bridge_slave_0: entered promiscuous mode [ 86.747545][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 86.786133][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.794028][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.801625][ T5829] bridge_slave_1: entered allmulticast mode [ 86.809773][ T5829] bridge_slave_1: entered promiscuous mode [ 86.994448][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.016916][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.024702][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.032789][ T5837] bridge_slave_0: entered allmulticast mode [ 87.041760][ T5837] bridge_slave_0: entered promiscuous mode [ 87.050862][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.058753][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.067173][ T5830] bridge_slave_0: entered allmulticast mode [ 87.076707][ T5830] bridge_slave_0: entered promiscuous mode [ 87.085976][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.102227][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.109841][ T5828] bridge_slave_0: entered allmulticast mode [ 87.121088][ T5828] bridge_slave_0: entered promiscuous mode [ 87.136333][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.233236][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.247170][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.255714][ T5837] bridge_slave_1: entered allmulticast mode [ 87.265255][ T5837] bridge_slave_1: entered promiscuous mode [ 87.296204][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.304634][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.313171][ T5830] bridge_slave_1: entered allmulticast mode [ 87.322908][ T5830] bridge_slave_1: entered promiscuous mode [ 87.351582][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.359056][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.366770][ T5828] bridge_slave_1: entered allmulticast mode [ 87.374510][ T5828] bridge_slave_1: entered promiscuous mode [ 87.450750][ T5829] team0: Port device team_slave_0 added [ 87.457332][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.465170][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.472916][ T5831] bridge_slave_0: entered allmulticast mode [ 87.480601][ T5831] bridge_slave_0: entered promiscuous mode [ 87.498521][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.512767][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.526858][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.550254][ T5829] team0: Port device team_slave_1 added [ 87.552805][ T5845] Bluetooth: hci2: command tx timeout [ 87.556458][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.568945][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.576455][ T5831] bridge_slave_1: entered allmulticast mode [ 87.584242][ T5831] bridge_slave_1: entered promiscuous mode [ 87.607012][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.621487][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.632314][ T5845] Bluetooth: hci3: command tx timeout [ 87.632474][ T5840] Bluetooth: hci4: command tx timeout [ 87.638501][ T5832] Bluetooth: hci0: command tx timeout [ 87.644269][ T5838] Bluetooth: hci1: command tx timeout [ 87.720642][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.733489][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.740599][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.767533][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.794689][ T5837] team0: Port device team_slave_0 added [ 87.828204][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.835751][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.864565][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.890848][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.904253][ T5837] team0: Port device team_slave_1 added [ 87.913448][ T5830] team0: Port device team_slave_0 added [ 87.939319][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.964250][ T5830] team0: Port device team_slave_1 added [ 87.973931][ T5828] team0: Port device team_slave_0 added [ 88.063542][ T5828] team0: Port device team_slave_1 added [ 88.085204][ T5831] team0: Port device team_slave_0 added [ 88.093197][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.100357][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.127057][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.178877][ T5831] team0: Port device team_slave_1 added [ 88.186522][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.193743][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.220341][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.243027][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.250187][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.276534][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.308259][ T5829] hsr_slave_0: entered promiscuous mode [ 88.315396][ T5829] hsr_slave_1: entered promiscuous mode [ 88.352474][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.359549][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.385792][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.398867][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.406151][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.433185][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.446873][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.454239][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.481212][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.498606][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.505790][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.532559][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.569706][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.576930][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.603583][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.679760][ T5837] hsr_slave_0: entered promiscuous mode [ 88.687337][ T5837] hsr_slave_1: entered promiscuous mode [ 88.694957][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 88.700839][ T5837] Cannot create hsr debugfs directory [ 88.782119][ T5831] hsr_slave_0: entered promiscuous mode [ 88.789770][ T5831] hsr_slave_1: entered promiscuous mode [ 88.798384][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 88.804943][ T5831] Cannot create hsr debugfs directory [ 88.919370][ T5830] hsr_slave_0: entered promiscuous mode [ 88.926759][ T5830] hsr_slave_1: entered promiscuous mode [ 88.934974][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 88.941186][ T5830] Cannot create hsr debugfs directory [ 89.007059][ T5828] hsr_slave_0: entered promiscuous mode [ 89.014389][ T5828] hsr_slave_1: entered promiscuous mode [ 89.021247][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 89.027162][ T5828] Cannot create hsr debugfs directory [ 89.620521][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.632849][ T5840] Bluetooth: hci2: command tx timeout [ 89.646368][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.659499][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.671043][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.712560][ T5840] Bluetooth: hci0: command tx timeout [ 89.712591][ T5838] Bluetooth: hci3: command tx timeout [ 89.723233][ T5840] Bluetooth: hci4: command tx timeout [ 89.723914][ T5832] Bluetooth: hci1: command tx timeout [ 89.794396][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.814355][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.840278][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.855775][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.949399][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.973304][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.987741][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.017672][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.144563][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.159084][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.183233][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.219628][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.266836][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.346224][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.360582][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.382758][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.415707][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.434773][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.480238][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.488105][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.521052][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.547129][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.554330][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.640621][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.694388][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.701721][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.722682][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.770355][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.777821][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.834941][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.918768][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.926506][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.989107][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.996711][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.046285][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.160324][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.244893][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.253503][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.270320][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.291573][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.337112][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.344687][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.433043][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.488831][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.496485][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.548338][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.556019][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.574612][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.712081][ T5832] Bluetooth: hci2: command tx timeout [ 91.726829][ T5829] veth0_vlan: entered promiscuous mode [ 91.792612][ T5838] Bluetooth: hci3: command tx timeout [ 91.793742][ T5840] Bluetooth: hci4: command tx timeout [ 91.798176][ T5845] Bluetooth: hci0: command tx timeout [ 91.798356][ T5832] Bluetooth: hci1: command tx timeout [ 91.818684][ T5829] veth1_vlan: entered promiscuous mode [ 91.940355][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.987667][ T5837] veth0_vlan: entered promiscuous mode [ 92.049957][ T5837] veth1_vlan: entered promiscuous mode [ 92.118929][ T803] cfg80211: failed to load regulatory.db [ 92.128716][ T5829] veth0_macvtap: entered promiscuous mode [ 92.168771][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.189650][ T5829] veth1_macvtap: entered promiscuous mode [ 92.359778][ T5837] veth0_macvtap: entered promiscuous mode [ 92.378203][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.388769][ T5830] veth0_vlan: entered promiscuous mode [ 92.439331][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.450411][ T5837] veth1_macvtap: entered promiscuous mode [ 92.463201][ T5830] veth1_vlan: entered promiscuous mode [ 92.516989][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.528539][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.559275][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.569504][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.598695][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.643243][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.679367][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.758434][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.787753][ T5830] veth0_macvtap: entered promiscuous mode [ 92.795987][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.805659][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.815195][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.853230][ T5830] veth1_macvtap: entered promiscuous mode [ 92.903801][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.921522][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.004022][ T5828] veth0_vlan: entered promiscuous mode [ 93.043864][ T5831] veth0_vlan: entered promiscuous mode [ 93.061311][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.080920][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.097984][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.109708][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.143921][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.164357][ T5831] veth1_vlan: entered promiscuous mode [ 93.171621][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.185492][ T5828] veth1_vlan: entered promiscuous mode [ 93.197074][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.207279][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.232829][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.266492][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.276046][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.317684][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.361078][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.439150][ T5951] loop3: detected capacity change from 0 to 512 [ 93.509458][ T5951] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 93.523966][ T5831] veth0_macvtap: entered promiscuous mode [ 93.527375][ T5951] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.546662][ T5951] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 93.576459][ T5951] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 93.576874][ T5828] veth0_macvtap: entered promiscuous mode [ 93.584087][ T5951] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 93.639235][ T5951] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.642083][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 93.659261][ C0] EXT4-fs (loop3): last error at time 1773295394: ext4_ext_check_inode:521: inode 13 [ 93.671474][ T5831] veth1_macvtap: entered promiscuous mode [ 93.681193][ T5951] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4: couldn't read orphan inode 13 (err -117) [ 93.718770][ T5828] veth1_macvtap: entered promiscuous mode [ 93.726543][ T5951] loop3: lost filesystem error report for type 5 error -117 [ 93.730035][ T5951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.793552][ T5951] EXT4-fs (loop3): shut down requested (0) [ 93.795803][ T5832] Bluetooth: hci2: command tx timeout [ 93.828298][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.839769][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.863512][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.874032][ T5832] Bluetooth: hci1: command tx timeout [ 93.876791][ T5840] Bluetooth: hci3: command tx timeout [ 93.879677][ T5838] Bluetooth: hci0: command tx timeout [ 93.885508][ T5840] Bluetooth: hci4: command tx timeout [ 93.987463][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.075025][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.086261][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.100746][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.148971][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.154435][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.210586][ T140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.229286][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.293415][ T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.308616][ T140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.327679][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.558665][ T140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.587818][ T140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.610987][ T140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.152787][ T5915] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.294296][ T5934] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.355771][ T140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.452921][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 95.462109][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 95.492479][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.524125][ T5934] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 95.566404][ T5915] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 95.580708][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.595009][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.604759][ T5934] usb 4-1: Product: syz [ 95.610623][ T5934] usb 4-1: Manufacturer: syz [ 95.622191][ T5915] usb 1-1: Product: syz [ 95.626544][ T5934] usb 4-1: SerialNumber: syz [ 95.633206][ T5915] usb 1-1: Manufacturer: syz [ 95.637790][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.641555][ T5915] usb 1-1: SerialNumber: syz [ 95.657372][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.760846][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.779869][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.793994][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.811074][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.881279][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.895136][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.905462][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 95.917863][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 95.927937][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 95.970711][ T5934] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 95.989967][ T5915] usb 1-1: BAAD GENERIC IO: no channels? [ 96.026233][ T5934] usb 4-1: USB disconnect, device number 2 [ 96.293539][ T5915] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 96.314492][ T5980] loop1: detected capacity change from 0 to 4096 [ 96.377125][ T5915] usb 1-1: USB disconnect, device number 2 [ 96.396575][ T5980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.518685][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.825065][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.968073][ T5995] loop0: detected capacity change from 0 to 512 [ 97.110534][ T5995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.140013][ T5995] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.464394][ T6004] loop2: detected capacity change from 0 to 512 [ 97.474391][ T6004] ======================================================= [ 97.474391][ T6004] WARNING: The mand mount option has been deprecated and [ 97.474391][ T6004] and is ignored by this kernel. Remove the mand [ 97.474391][ T6004] option from the mount to silence this warning. [ 97.474391][ T6004] ======================================================= [ 97.671842][ T6004] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 97.785962][ T6004] block device autoloading is deprecated and will be removed. [ 97.798355][ T6004] EXT4-fs (loop2): external journal has bad superblock [ 98.383952][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.289250][ T5999] loop3: detected capacity change from 0 to 40427 [ 99.350362][ T5999] F2FS-fs (loop3): invalid crc value [ 99.432964][ T5974] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.634211][ T5974] usb 1-1: Using ep0 maxpacket: 16 [ 99.652051][ T5999] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 99.688732][ T5974] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 99.690398][ T5999] F2FS-fs (loop3): Start checkpoint disabled! [ 99.709084][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.741690][ T5974] usb 1-1: Product: syz [ 99.746337][ T5974] usb 1-1: Manufacturer: syz [ 99.753211][ T5974] usb 1-1: SerialNumber: syz [ 99.765147][ T5999] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 99.794885][ T5999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 99.795386][ T6033] loop2: detected capacity change from 0 to 512 [ 99.870908][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.913219][ T6033] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.041423][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.191939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.392046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.427269][ T5974] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.440963][ T5974] usb 1-1: MIDIStreaming interface descriptor not found [ 101.485222][ T6060] loop3: detected capacity change from 0 to 1024 [ 101.574611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.588495][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.652790][ T5974] usb 1-1: USB disconnect, device number 3 [ 101.815578][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.964124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.183939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 103.195237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.205009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.213897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.224270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.581697][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.686528][ T6078] loop0: detected capacity change from 0 to 256 [ 103.760772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 103.773150][ T6078] FAT-fs (loop0): Directory bread(block 64) failed [ 103.790871][ T6078] FAT-fs (loop0): Directory bread(block 65) failed [ 103.798509][ T6078] FAT-fs (loop0): Directory bread(block 66) failed [ 103.811759][ T6078] FAT-fs (loop0): Directory bread(block 67) failed [ 103.821443][ T6078] FAT-fs (loop0): Directory bread(block 68) failed [ 103.830016][ T6078] FAT-fs (loop0): Directory bread(block 69) failed [ 103.862125][ T6078] FAT-fs (loop0): Directory bread(block 70) failed [ 103.883012][ T6078] FAT-fs (loop0): Directory bread(block 71) failed [ 103.905349][ T6078] FAT-fs (loop0): Directory bread(block 72) failed [ 103.926372][ T6078] FAT-fs (loop0): Directory bread(block 73) failed [ 104.742467][ T987] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.913576][ T987] usb 3-1: Using ep0 maxpacket: 16 [ 104.920828][ T987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.942514][ T987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.962172][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.962212][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.002225][ T987] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 105.032053][ T987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.075486][ T987] usb 3-1: config 0 descriptor?? [ 105.134615][ T6107] loop3: detected capacity change from 0 to 128 [ 105.144528][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 105.151567][ T6100] loop0: detected capacity change from 0 to 40427 [ 105.161542][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.174068][ T6100] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 105.182493][ T6107] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 105.187530][ T5915] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.202230][ T6100] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 105.228220][ T6100] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 105.243966][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.246419][ T6107] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 105.267823][ T5915] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 105.289996][ T6107] FAT-fs (loop3): Filesystem has been set read-only [ 105.298738][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.338475][ T6107] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 105.357697][ T5915] usb 5-1: config 0 descriptor?? [ 105.558693][ T6100] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 105.575871][ T987] hid (null): unknown global tag 0xc [ 105.588283][ T987] hid (null): unknown global tag 0x3f [ 105.608896][ T6100] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 105.648561][ T6100] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.727661][ T6100] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 105.836511][ T987] usb 3-1: USB disconnect, device number 2 [ 105.858078][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.888274][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.939119][ T5915] hid (null): unknown global tag 0xc [ 106.166633][ T6105] loop1: detected capacity change from 0 to 40427 [ 106.198473][ T6105] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 106.211808][ T5915] usb 5-1: USB disconnect, device number 2 [ 106.220878][ T6105] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.237631][ T6105] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 106.358750][ T6105] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 106.372747][ T6105] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 106.380373][ T6105] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.392003][ T987] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.513512][ T6125] loop0: detected capacity change from 0 to 512 [ 106.518070][ T6105] kvm: pic: level sensitive irq not supported [ 106.528751][ T6125] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 106.533147][ T6105] kvm: pic: single mode not supported [ 106.545240][ T6105] kvm: pic: level sensitive irq not supported [ 106.574170][ T987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.584221][ T6105] kvm: pic: single mode not supported [ 106.591423][ T6105] kvm: pic: level sensitive irq not supported [ 106.621176][ T987] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.638706][ T987] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 106.641713][ T6105] kvm: pic: single mode not supported [ 106.649591][ T6105] kvm: pic: level sensitive irq not supported [ 106.652431][ T987] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.702061][ T987] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 106.729069][ T6105] kvm: pic: single mode not supported [ 106.729563][ T6105] kvm: pic: level sensitive irq not supported [ 106.735208][ T987] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.757816][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.767254][ T987] usb 4-1: Product: syz [ 106.772451][ T987] usb 4-1: Manufacturer: syz [ 106.777225][ T987] usb 4-1: SerialNumber: syz [ 107.272041][ T5915] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.442666][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 107.470090][ T5915] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 107.488607][ T5915] usb 5-1: config 0 has no interface number 0 [ 107.503608][ T5915] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 107.533114][ T5915] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.552115][ T5915] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 107.572693][ T5915] usb 5-1: config 0 interface 196 has no altsetting 0 [ 107.793601][ T5915] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 107.802881][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.811023][ T5915] usb 5-1: Product: syz [ 107.815338][ T5915] usb 5-1: Manufacturer: syz [ 107.819985][ T5915] usb 5-1: SerialNumber: syz [ 107.830589][ T5915] usb 5-1: config 0 descriptor?? [ 107.837740][ T6133] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 108.517364][ T987] cdc_ncm 4-1:1.0: bind() failure [ 108.549566][ T987] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 108.591311][ T987] cdc_ncm 4-1:1.1: bind() failure [ 108.635104][ T987] usb 4-1: USB disconnect, device number 3 [ 108.776446][ T5915] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 108.847805][ T6152] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.878772][ T6152] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 108.930391][ T5915] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 108.966738][ T5915] usb 5-1: USB disconnect, device number 3 [ 109.104507][ T5915] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 110.662662][ T5972] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.023540][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 111.056120][ T5972] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 111.763928][ T5972] usb 5-1: config 0 has no interface number 0 [ 111.770440][ T5972] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 111.866221][ T6174] overlay: Unknown parameter 'rootcontext' [ 111.901498][ T6174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 111.955454][ T5972] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 112.555984][ T5972] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 112.594197][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.745091][ T5972] usb 5-1: Product: syz [ 112.765254][ T5972] usb 5-1: Manufacturer: syz [ 112.776765][ T5972] usb 5-1: SerialNumber: syz [ 112.829231][ T5972] usb 5-1: config 0 descriptor?? [ 112.892862][ T5972] usb 5-1: can't set config #0, error -71 [ 112.964946][ T5972] usb 5-1: USB disconnect, device number 4 [ 113.942035][ T5915] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.112454][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 114.122046][ T5974] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.136575][ T5915] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 114.162942][ T5915] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 114.200838][ T5915] usb 4-1: config 2 has no interface number 0 [ 114.230787][ T5915] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 114.249110][ T5915] usb 4-1: config 2 interface 88 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.263261][ T5915] usb 4-1: config 2 interface 88 has no altsetting 0 [ 114.273377][ T5915] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 114.295214][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.307115][ T5915] usb 4-1: Product: syz [ 114.326041][ T5915] usb 4-1: Manufacturer: syz [ 114.334805][ T5974] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.342122][ T5915] usb 4-1: SerialNumber: syz [ 114.361757][ T5974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.380857][ T6189] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.395381][ T5915] asix 4-1:2.88: probe with driver asix failed with error -22 [ 114.400971][ T5974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.442747][ T6208] loop0: detected capacity change from 0 to 512 [ 114.460815][ T5974] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 114.481739][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.493028][ T6208] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 114.508314][ T5974] usb 5-1: Product: syz [ 114.518177][ T5974] usb 5-1: Manufacturer: syz [ 114.538169][ T6208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 114.549830][ T5974] usb 5-1: SerialNumber: syz [ 114.570410][ T6208] System zones: 1-12 [ 114.591517][ T6208] EXT4-fs (loop0): orphan cleanup on readonly fs [ 114.615175][ T5974] usb 5-1: selecting invalid altsetting 1 [ 114.656453][ T5974] usb 5-1: unit 6 not found! [ 114.667756][ T6208] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.90: bg 0: block 361: padding at end of block bitmap is not set [ 114.691997][ T6208] loop0: lost filesystem error report for type 5 error -117 [ 114.701922][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 114.716336][ C1] EXT4-fs (loop0): initial error at time 1773295415: ext4_validate_block_bitmap:441 [ 114.724154][ T5908] usb 4-1: USB disconnect, device number 4 [ 114.727061][ C1] EXT4-fs (loop0): last error at time 1773295415: ext4_validate_block_bitmap:441 [ 114.745466][ T6208] EXT4-fs (loop0): Remounting filesystem read-only [ 114.753140][ T6208] EXT4-fs (loop0): 1 truncate cleaned up [ 114.771270][ T6208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 114.830532][ T6208] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.90: error -117 reading directory block [ 114.850451][ T6208] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.90: error -117 reading directory block [ 114.917911][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 115.153591][ T5974] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.181625][ T5974] usb 5-1: USB disconnect, device number 5 [ 115.257036][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.436076][ T6244] loop4: detected capacity change from 0 to 512 [ 116.462868][ T6244] EXT4-fs: Ignoring removed nobh option [ 116.510605][ T6244] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 116.590340][ T6244] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #3: comm syz.4.105: corrupted inode contents [ 116.617187][ T6244] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.621995][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 116.638064][ C0] EXT4-fs (loop4): initial error at time 1773295417: ext4_do_update_inode:5572: inode 3 [ 116.648076][ C0] EXT4-fs (loop4): last error at time 1773295417: ext4_do_update_inode:5572: inode 3 [ 116.661176][ T6229] loop3: detected capacity change from 0 to 40427 [ 116.666065][ T6244] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #3: comm syz.4.105: mark_inode_dirty error [ 116.691048][ T6229] F2FS-fs (loop3): invalid crc value [ 116.700286][ T6244] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.729369][ T6244] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #3: comm syz.4.105: corrupted inode contents [ 116.799902][ T6244] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.801259][ T6244] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.105: mark_inode_dirty error [ 116.859107][ T6244] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 116.863557][ T6244] Quota error (device loop4): write_blk: dquota write failed [ 116.888587][ T6244] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 116.899029][ T6244] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.105: Failed to acquire dquot type 0 [ 116.912449][ T6244] loop4: lost filesystem error report for type 5 error -117 [ 116.917250][ T6244] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.105: corrupted inode contents [ 116.920481][ T6229] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 116.925415][ T6244] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 116.970657][ T6244] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #16: comm syz.4.105: mark_inode_dirty error [ 117.000196][ T6229] F2FS-fs (loop3): Start checkpoint disabled! [ 117.011378][ T6229] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 117.026925][ T6244] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 117.029680][ T6229] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 117.030433][ T6244] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.105: corrupted inode contents [ 117.078163][ T6244] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 117.079261][ T6244] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.105: mark_inode_dirty error [ 117.153388][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.214770][ T6244] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 117.217963][ T6244] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.105: corrupted inode contents [ 117.288644][ T6244] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 117.291475][ T6244] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 117.339743][ T6244] loop4: lost filesystem error report for type 5 error -117 [ 117.340245][ T6244] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #16: comm syz.4.105: corrupted inode contents [ 117.365887][ T6244] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 117.366396][ T6244] EXT4-fs error (device loop4): ext4_truncate:4590: inode #16: comm syz.4.105: mark_inode_dirty error [ 117.389021][ T6244] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 117.424538][ T6244] loop4: lost filesystem error report for type 5 error -117 [ 117.443988][ T6244] EXT4-fs (loop4): 1 truncate cleaned up [ 117.485053][ T6244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.509367][ T3514] kworker/u8:9: attempt to access beyond end of device [ 117.509367][ T3514] loop3: rw=1, sector=77824, nr_sectors = 3088 limit=40427 [ 117.520389][ T6244] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.577622][ T3514] kworker/u8:9: attempt to access beyond end of device [ 117.577622][ T3514] loop3: rw=1, sector=80912, nr_sectors = 1008 limit=40427 [ 117.620792][ T3514] kworker/u8:9: attempt to access beyond end of device [ 117.620792][ T3514] loop3: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 117.662139][ T5908] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.824075][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 117.840648][ T3514] kworker/u8:9: attempt to access beyond end of device [ 117.840648][ T3514] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.858999][ T3514] CPU: 1 UID: 0 PID: 3514 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 117.859027][ T3514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 117.859039][ T3514] Workqueue: writeback wb_workfn (flush-7:3) [ 117.859071][ T3514] Call Trace: [ 117.859080][ T3514] [ 117.859088][ T3514] dump_stack_lvl+0xe8/0x150 [ 117.859121][ T3514] f2fs_handle_critical_error+0x37c/0x540 [ 117.859154][ T3514] f2fs_write_end_io+0x1274/0x1740 [ 117.859205][ T3514] __submit_merged_bio+0x256/0x700 [ 117.859237][ T3514] __submit_merged_write_cond+0x3c9/0x4e0 [ 117.859272][ T3514] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 117.859322][ T3514] f2fs_write_data_pages+0x287e/0x34f0 [ 117.859400][ T3514] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 117.859519][ T3514] ? __lock_acquire+0x6b5/0x2cf0 [ 117.859570][ T3514] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 117.859600][ T3514] do_writepages+0x32e/0x550 [ 117.859633][ T3514] ? reacquire_held_locks+0x104/0x190 [ 117.859653][ T3514] ? writeback_sb_inodes+0x477/0x1a20 [ 117.859685][ T3514] __writeback_single_inode+0x133/0x11a0 [ 117.859712][ T3514] ? do_raw_spin_unlock+0xf5/0x210 [ 117.859743][ T3514] writeback_sb_inodes+0x992/0x1a20 [ 117.859813][ T3514] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 117.859836][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.859909][ T3514] ? rcu_is_watching+0x15/0xb0 [ 117.859941][ T3514] wb_writeback+0x456/0xb70 [ 117.859971][ T3514] ? queue_io+0x231/0x4a0 [ 117.860004][ T3514] ? __pfx_wb_writeback+0x10/0x10 [ 117.860025][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.860068][ T3514] wb_workfn+0x414/0xf50 [ 117.860092][ T3514] ? look_up_lock_class+0x57/0x110 [ 117.860130][ T3514] ? __pfx_wb_workfn+0x10/0x10 [ 117.860157][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.860183][ T3514] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.860232][ T3514] ? process_one_work+0x8bb/0x1780 [ 117.860260][ T3514] process_one_work+0x9ab/0x1780 [ 117.860314][ T3514] ? __pfx_process_one_work+0x10/0x10 [ 117.860340][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.860385][ T3514] worker_thread+0xb49/0x1140 [ 117.860438][ T3514] kthread+0x388/0x470 [ 117.860454][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.860462][ T3514] ? __pfx_worker_thread+0x10/0x10 [ 117.860479][ T3514] ? __pfx_kthread+0x10/0x10 [ 117.860503][ T3514] ret_from_fork+0x51e/0xb90 [ 117.860529][ T3514] ? __pfx_ret_from_fork+0x10/0x10 [ 117.860551][ T3514] ? __switch_to+0xc7d/0x1450 [ 117.860578][ T3514] ? __pfx_kthread+0x10/0x10 [ 117.860600][ T3514] ret_from_fork_asm+0x1a/0x30 [ 117.860637][ T3514] [ 117.861144][ T3514] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 117.886807][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.886833][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.886870][ T5908] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 117.886891][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.963298][ T6289] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #3: comm syz.4.105: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 117.963298][ T6289] [ 118.211240][ T5908] usb 3-1: config 0 descriptor?? [ 118.357822][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.759923][ T5908] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 118.777701][ T5908] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 118.788831][ T5908] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 118.814265][ T5908] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 118.839236][ T5908] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 118.866515][ T5908] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 118.885475][ T5908] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 118.898844][ T5908] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 118.917581][ T5908] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 118.934470][ T5908] a4tech 0003:09DA:000A.0003: unknown main item tag 0x0 [ 118.968487][ T5908] a4tech 0003:09DA:000A.0003: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.2-1/input0 [ 119.027833][ T5908] usb 3-1: USB disconnect, device number 3 [ 119.226845][ T6308] fido_id[6308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 119.380750][ T6316] netlink: 76 bytes leftover after parsing attributes in process `syz.1.131'. [ 119.394078][ T6316] netlink: 76 bytes leftover after parsing attributes in process `syz.1.131'. [ 119.648513][ T6322] loop0: detected capacity change from 0 to 512 [ 119.673569][ T6322] EXT4-fs: Ignoring removed orlov option [ 119.687865][ T6301] loop4: detected capacity change from 0 to 40427 [ 120.719279][ T6322] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.613125][ T6301] F2FS-fs (loop4): Unable to read 2th superblock [ 121.729660][ T6322] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.759401][ T6301] F2FS-fs (loop4): build fault injection rate: 174 [ 121.889212][ T6301] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 121.941397][ T6322] EXT4-fs (loop0): 1 truncate cleaned up [ 121.991005][ T6301] F2FS-fs (loop4): invalid crc value [ 122.028378][ T6301] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 122.058825][ T6322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.178567][ T6336] fuse: Bad value for 'fd' [ 122.598417][ T29] audit: type=1326 audit(1773295423.459:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6320 comm="syz.0.133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99ad59c799 code=0x0 [ 124.380255][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.610208][ T6360] veth0_to_team: entered promiscuous mode [ 124.614430][ T6359] kvm: pic: non byte write [ 124.638284][ T6363] loop0: detected capacity change from 0 to 256 [ 124.737413][ T6363] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 124.838892][ T6363] exFAT-fs (loop0): valid_size(562949953421322) is greater than size(10) [ 124.850522][ T6345] loop4: detected capacity change from 0 to 40427 [ 124.865163][ T6345] F2FS-fs (loop4): invalid crc value [ 124.980741][ T6369] overlayfs: failed to clone upperpath [ 125.015099][ T6345] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 125.027162][ T6345] F2FS-fs (loop4): Start checkpoint disabled! [ 125.034822][ T6345] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 125.081061][ T6345] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 125.163985][ T6370] Zero length message leads to an empty skb [ 125.181054][ T5972] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.334607][ T6378] loop3: detected capacity change from 0 to 1024 [ 125.352122][ T6378] EXT4-fs: Ignoring removed orlov option [ 125.357884][ T5972] usb 3-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 125.379121][ T6378] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.382786][ T5972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.404869][ T5972] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.423334][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.464356][ T5972] usb 3-1: SerialNumber: syz [ 125.472926][ T6378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.569298][ T6384] fuse: Bad value for 'fd' [ 125.646437][ T66] kworker/u8:4: attempt to access beyond end of device [ 125.646437][ T66] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 125.677988][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 125.678016][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.678028][ T66] Workqueue: writeback wb_workfn (flush-7:4) [ 125.678059][ T66] Call Trace: [ 125.678067][ T66] [ 125.678075][ T66] dump_stack_lvl+0xe8/0x150 [ 125.678108][ T66] f2fs_handle_critical_error+0x37c/0x540 [ 125.678142][ T66] f2fs_write_end_io+0x1274/0x1740 [ 125.678193][ T66] __submit_merged_bio+0x256/0x700 [ 125.678226][ T66] __submit_merged_write_cond+0x3c9/0x4e0 [ 125.678260][ T66] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 125.678308][ T66] f2fs_write_data_pages+0x287e/0x34f0 [ 125.678372][ T66] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.678412][ T66] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 125.678468][ T66] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 125.678518][ T66] ? __lock_acquire+0x6b5/0x2cf0 [ 125.678567][ T66] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.678596][ T66] do_writepages+0x32e/0x550 [ 125.678629][ T66] ? reacquire_held_locks+0x104/0x190 [ 125.678649][ T66] ? writeback_sb_inodes+0x477/0x1a20 [ 125.678680][ T66] __writeback_single_inode+0x133/0x11a0 [ 125.678705][ T66] ? do_raw_spin_unlock+0xf5/0x210 [ 125.678733][ T66] writeback_sb_inodes+0x992/0x1a20 [ 125.678786][ T66] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 125.678806][ T66] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.678871][ T66] ? rcu_is_watching+0x15/0xb0 [ 125.678901][ T66] wb_writeback+0x456/0xb70 [ 125.678928][ T66] ? queue_io+0x231/0x4a0 [ 125.678971][ T66] ? __pfx_wb_writeback+0x10/0x10 [ 125.678990][ T66] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.679029][ T66] wb_workfn+0x414/0xf50 [ 125.679053][ T66] ? look_up_lock_class+0x57/0x110 [ 125.679086][ T66] ? __pfx_wb_workfn+0x10/0x10 [ 125.679110][ T66] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.679137][ T66] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.679183][ T66] ? process_one_work+0x8bb/0x1780 [ 125.679210][ T66] process_one_work+0x9ab/0x1780 [ 125.679258][ T66] ? __pfx_process_one_work+0x10/0x10 [ 125.679282][ T66] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.679325][ T66] worker_thread+0xb49/0x1140 [ 125.679355][ T66] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.679400][ T66] kthread+0x388/0x470 [ 125.679424][ T66] ? __pfx_worker_thread+0x10/0x10 [ 125.679441][ T66] ? __pfx_kthread+0x10/0x10 [ 125.679465][ T66] ret_from_fork+0x51e/0xb90 [ 125.679497][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 125.679523][ T66] ? __switch_to+0xc7d/0x1450 [ 125.679553][ T66] ? __pfx_kthread+0x10/0x10 [ 125.679577][ T66] ret_from_fork_asm+0x1a/0x30 [ 125.679617][ T66] [ 125.681563][ T66] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 125.799875][ T6360] netlink: 64 bytes leftover after parsing attributes in process `syz.2.142'. [ 125.939577][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 125.939603][ T66] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.939619][ T66] Workqueue: writeback wb_workfn (flush-7:4) [ 125.939649][ T66] Call Trace: [ 125.939656][ T66] [ 125.939664][ T66] dump_stack_lvl+0xe8/0x150 [ 125.939694][ T66] f2fs_handle_critical_error+0x37c/0x540 [ 125.939724][ T66] f2fs_write_end_io+0x1274/0x1740 [ 125.939772][ T66] __submit_merged_bio+0x256/0x700 [ 125.939801][ T66] __submit_merged_write_cond+0x3c9/0x4e0 [ 125.939833][ T66] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 125.939881][ T66] f2fs_write_data_pages+0x287e/0x34f0 [ 125.939945][ T66] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.939983][ T66] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 125.940049][ T66] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 125.940098][ T66] ? __lock_acquire+0x6b5/0x2cf0 [ 125.940144][ T66] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.940168][ T66] do_writepages+0x32e/0x550 [ 125.940198][ T66] ? reacquire_held_locks+0x104/0x190 [ 125.940216][ T66] ? writeback_sb_inodes+0x477/0x1a20 [ 125.940245][ T66] __writeback_single_inode+0x133/0x11a0 [ 125.940277][ T66] ? do_raw_spin_unlock+0xf5/0x210 [ 125.940310][ T66] writeback_sb_inodes+0x992/0x1a20 [ 125.940364][ T66] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 125.940384][ T66] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.940450][ T66] ? rcu_is_watching+0x15/0xb0 [ 125.940479][ T66] wb_writeback+0x456/0xb70 [ 125.940504][ T66] ? queue_io+0x231/0x4a0 [ 125.940535][ T66] ? __pfx_wb_writeback+0x10/0x10 [ 125.940553][ T66] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.940592][ T66] wb_workfn+0x414/0xf50 [ 125.940614][ T66] ? look_up_lock_class+0x57/0x110 [ 125.940648][ T66] ? __pfx_wb_workfn+0x10/0x10 [ 125.940671][ T66] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.940695][ T66] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.940742][ T66] ? process_one_work+0x8bb/0x1780 [ 125.940765][ T66] process_one_work+0x9ab/0x1780 [ 125.940815][ T66] ? __pfx_process_one_work+0x10/0x10 [ 125.940837][ T66] ? do_raw_spin_lock+0x12b/0x2f0 [ 125.940877][ T66] worker_thread+0xb49/0x1140 [ 125.940905][ T66] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.940947][ T66] kthread+0x388/0x470 [ 125.940969][ T66] ? __pfx_worker_thread+0x10/0x10 [ 125.940983][ T66] ? __pfx_kthread+0x10/0x10 [ 125.941005][ T66] ret_from_fork+0x51e/0xb90 [ 125.941034][ T66] ? __pfx_ret_from_fork+0x10/0x10 [ 125.941064][ T66] ? __switch_to+0xc7d/0x1450 [ 125.941091][ T66] ? __pfx_kthread+0x10/0x10 [ 125.941113][ T66] ret_from_fork_asm+0x1a/0x30 [ 125.941151][ T66] [ 125.951063][ T66] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 125.975136][ T6389] loop0: detected capacity change from 0 to 512 [ 126.093919][ T5972] usb 3-1: 0:2 : does not exist [ 126.160373][ T6378] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.146: Allocating blocks 497-513 which overlap fs metadata [ 126.164586][ T6378] EXT4-fs (loop3): Remounting filesystem read-only [ 126.207712][ T5972] usb 3-1: unit 5 not found! [ 126.257152][ T6389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 126.309670][ T5972] usb 3-1: USB disconnect, device number 4 [ 126.376736][ T6389] System zones: 1-12 [ 126.392201][ T6389] EXT4-fs error (device loop0): ext4_iget_extra_inode:5028: inode #15: comm syz.0.150: corrupted in-inode xattr: e_value size too large [ 126.430100][ T6385] EXT4-fs (loop3): pa ffff88807e3509f8: logic 131328, phys. 401, len 7 [ 126.456555][ T6389] fserror_report: 1 callbacks suppressed [ 126.456577][ T6389] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 126.478935][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.479789][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.531924][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 126.538552][ C1] EXT4-fs (loop0): initial error at time 1773295427: ext4_iget_extra_inode:5028: inode 15 [ 126.548890][ C1] EXT4-fs (loop0): last error at time 1773295427: ext4_iget_extra_inode:5028: inode 15 [ 126.568478][ T6389] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.150: couldn't read orphan inode 15 (err -117) [ 126.595957][ T6389] loop0: lost filesystem error report for type 5 error -117 [ 126.649776][ T6389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.973075][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.058644][ T6406] loop4: detected capacity change from 0 to 128 [ 127.100857][ T6409] fuse: Bad value for 'fd' [ 127.186015][ T6410] 9p: Bad value for 'rfdno' [ 128.038324][ T6422] overlayfs: failed to clone upperpath [ 128.088805][ T6422] process 'syz.1.161' launched './file0' with NULL argv: empty string added [ 128.539005][ T6436] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.582841][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 128.802401][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.905332][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.266181][ T6452] loop2: detected capacity change from 0 to 128 [ 129.562882][ T6455] loop0: detected capacity change from 0 to 512 [ 130.171840][ T6455] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.243116][ T6455] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.269804][ T6455] EXT4-fs (loop0): 1 truncate cleaned up [ 130.297597][ T6455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.435466][ T6455] EXT4-fs (loop0): can't enable nombcache during remount [ 130.569408][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.755863][ T6473] loop0: detected capacity change from 0 to 256 [ 131.014244][ T5934] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.077706][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 131.104538][ T6481] loop4: detected capacity change from 0 to 256 [ 131.134791][ T6481] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 131.154997][ T6481] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 131.190524][ T6485] loop3: detected capacity change from 0 to 128 [ 131.277114][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.334696][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 131.380127][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.466359][ T5934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.677222][ T5934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.838677][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 131.994131][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.004702][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.110970][ T9] usb 1-1: config 0 descriptor?? [ 132.118400][ T5934] usb 3-1: Product: syz [ 132.132292][ T5934] usb 3-1: SerialNumber: syz [ 132.292217][ T6494] loop3: detected capacity change from 0 to 512 [ 132.300290][ T6494] EXT4-fs: Ignoring removed nobh option [ 132.392488][ T9] usb 1-1: USB disconnect, device number 4 [ 132.418827][ T6494] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #3: comm syz.3.188: corrupted inode contents [ 132.476035][ T6494] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 132.481912][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 132.497503][ C1] EXT4-fs (loop3): initial error at time 1773295433: ext4_do_update_inode:5572: inode 3 [ 132.507370][ C1] EXT4-fs (loop3): last error at time 1773295433: ext4_do_update_inode:5572: inode 3 [ 132.512258][ T6494] EXT4-fs error (device loop3): ext4_dirty_inode:6453: inode #3: comm syz.3.188: mark_inode_dirty error [ 132.530058][ T6494] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 132.972609][ T6494] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #3: comm syz.3.188: corrupted inode contents [ 133.004551][ T6494] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 133.149463][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.170913][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.177553][ T5934] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 133.234307][ T5934] cdc_ncm 3-1:1.0: bind() failure [ 133.243464][ T6494] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.188: mark_inode_dirty error [ 133.255634][ T6494] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 133.262512][ T6494] Quota error (device loop3): write_blk: dquota write failed [ 133.289156][ T6494] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 133.292264][ T5934] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 133.332120][ T5934] cdc_ncm 3-1:1.1: bind() failure [ 133.333429][ T6494] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.188: Failed to acquire dquot type 0 [ 133.367697][ T6494] loop3: lost filesystem error report for type 5 error -117 [ 133.384455][ T6494] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #16: comm syz.3.188: corrupted inode contents [ 133.385973][ T5934] usb 3-1: USB disconnect, device number 5 [ 133.409637][ T6494] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.419303][ T6494] EXT4-fs error (device loop3): ext4_dirty_inode:6453: inode #16: comm syz.3.188: mark_inode_dirty error [ 133.462229][ T6494] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.481725][ T6494] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #16: comm syz.3.188: corrupted inode contents [ 133.538082][ T6494] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.538558][ T6494] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.188: mark_inode_dirty error [ 133.557606][ T6505] fuse: Unknown parameter 'grou00000000000000000000' [ 133.583192][ T6494] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.586950][ T6494] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #16: comm syz.3.188: corrupted inode contents [ 133.630077][ T6494] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.631099][ T6494] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 133.664877][ T6494] loop3: lost filesystem error report for type 5 error -117 [ 133.666056][ T6494] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #16: comm syz.3.188: corrupted inode contents [ 133.688261][ T6494] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 133.690723][ T6494] EXT4-fs error (device loop3): ext4_truncate:4590: inode #16: comm syz.3.188: mark_inode_dirty error [ 133.794652][ T6509] loop0: detected capacity change from 0 to 256 [ 133.802318][ T6509] exfat: Deprecated parameter 'namecase' [ 133.808467][ T6509] exfat: Deprecated parameter 'namecase' [ 133.871919][ T6494] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 133.902873][ T6509] exFAT-fs (loop0): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 134.124172][ T6494] loop3: lost filesystem error report for type 5 error -117 [ 134.347855][ T6494] EXT4-fs (loop3): 1 truncate cleaned up [ 134.636612][ T6494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.665255][ T6494] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.137334][ T6523] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #3: comm syz.3.188: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 135.137334][ T6523] [ 135.415879][ T6525] loop0: detected capacity change from 0 to 128 [ 135.714757][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.757370][ T6529] loop0: detected capacity change from 0 to 256 [ 136.136514][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 136.163610][ T5972] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.333519][ T5972] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 136.362197][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.392597][ T5972] usb 4-1: config 0 descriptor?? [ 136.814607][ T6550] loop0: detected capacity change from 0 to 1024 [ 136.833301][ T6550] EXT4-fs: Ignoring removed orlov option [ 136.902484][ T6550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.041125][ T5972] usb 4-1: Cannot set autoneg [ 137.052622][ T5972] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 137.087085][ T5972] usb 4-1: USB disconnect, device number 5 [ 137.167920][ T6550] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.207: Allocating blocks 497-513 which overlap fs metadata [ 137.197874][ T6541] loop2: detected capacity change from 0 to 40427 [ 137.212554][ T6550] EXT4-fs (loop0): Remounting filesystem read-only [ 137.225418][ T6541] F2FS-fs (loop2): invalid crc value [ 137.430590][ T6549] EXT4-fs (loop0): pa ffff888034641828: logic 131328, phys. 401, len 7 [ 137.467670][ T6541] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 137.494628][ T6541] F2FS-fs (loop2): Start checkpoint disabled! [ 137.519295][ T6541] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 137.532519][ T6541] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 137.572905][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.523355][ T6567] loop0: detected capacity change from 0 to 128 [ 139.266245][ T6571] loop0: detected capacity change from 0 to 128 [ 139.339296][ T6571] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.414131][ T6571] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.626458][ T200] kworker/u8:6: attempt to access beyond end of device [ 139.626458][ T200] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 139.709939][ T6576] loop3: detected capacity change from 0 to 1024 [ 139.726210][ T200] kworker/u8:6: attempt to access beyond end of device [ 139.726210][ T200] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 139.752727][ T6576] EXT4-fs: Ignoring removed orlov option [ 139.776570][ T200] CPU: 1 UID: 0 PID: 200 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 139.776598][ T200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.776610][ T200] Workqueue: writeback wb_workfn (flush-7:2) [ 139.776644][ T200] Call Trace: [ 139.776652][ T200] [ 139.776661][ T200] dump_stack_lvl+0xe8/0x150 [ 139.776694][ T200] f2fs_handle_critical_error+0x37c/0x540 [ 139.776729][ T200] f2fs_write_end_io+0x1274/0x1740 [ 139.776785][ T200] __submit_merged_bio+0x256/0x700 [ 139.776819][ T200] __submit_merged_write_cond+0x3c9/0x4e0 [ 139.776856][ T200] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 139.776920][ T200] f2fs_write_data_pages+0x287e/0x34f0 [ 139.776995][ T200] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 139.777040][ T200] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 139.777104][ T200] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 139.777159][ T200] ? __lock_acquire+0x6b5/0x2cf0 [ 139.777209][ T200] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 139.777238][ T200] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 139.777268][ T200] do_writepages+0x32e/0x550 [ 139.777302][ T200] ? reacquire_held_locks+0x104/0x190 [ 139.777323][ T200] ? writeback_sb_inodes+0x477/0x1a20 [ 139.777357][ T200] __writeback_single_inode+0x133/0x11a0 [ 139.777384][ T200] ? do_raw_spin_unlock+0xf5/0x210 [ 139.777415][ T200] writeback_sb_inodes+0x992/0x1a20 [ 139.777479][ T200] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 139.777501][ T200] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.777578][ T200] ? rcu_is_watching+0x15/0xb0 [ 139.777611][ T200] wb_writeback+0x456/0xb70 [ 139.777640][ T200] ? queue_io+0x231/0x4a0 [ 139.777677][ T200] ? __pfx_wb_writeback+0x10/0x10 [ 139.777698][ T200] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.777744][ T200] wb_workfn+0x414/0xf50 [ 139.777769][ T200] ? look_up_lock_class+0x57/0x110 [ 139.777809][ T200] ? __pfx_wb_workfn+0x10/0x10 [ 139.777835][ T200] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.777870][ T200] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.777929][ T200] ? process_one_work+0x8bb/0x1780 [ 139.777957][ T200] process_one_work+0x9ab/0x1780 [ 139.778015][ T200] ? __pfx_process_one_work+0x10/0x10 [ 139.778041][ T200] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.778089][ T200] worker_thread+0xb49/0x1140 [ 139.778137][ T200] kthread+0x388/0x470 [ 139.778161][ T200] ? __pfx_worker_thread+0x10/0x10 [ 139.778176][ T200] ? __pfx_kthread+0x10/0x10 [ 139.778197][ T200] ret_from_fork+0x51e/0xb90 [ 139.778224][ T200] ? __pfx_ret_from_fork+0x10/0x10 [ 139.778247][ T200] ? __switch_to+0xc7d/0x1450 [ 139.778279][ T200] ? __pfx_kthread+0x10/0x10 [ 139.778302][ T200] ret_from_fork_asm+0x1a/0x30 [ 139.778341][ T200] [ 140.062863][ T200] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.079135][ T6576] EXT4-fs: Ignoring removed bh option [ 140.132567][ T1038] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.154129][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 140.179224][ T6579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.220760][ T6576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.260674][ T6579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.431823][ T6576] EXT4-fs error (device loop3): __ext4_remount:6804: comm syz.3.214: Abort forced by user [ 140.517899][ T6576] EXT4-fs (loop3): Remounting filesystem read-only [ 140.554988][ T6576] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 140.564568][ T6590] 9p: Bad value for 'uname' [ 140.729665][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.767791][ T6595] loop0: detected capacity change from 0 to 128 [ 141.172264][ T987] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.227623][ T6608] loop3: detected capacity change from 0 to 256 [ 141.269174][ T6608] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 141.334808][ T6608] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10) [ 141.350212][ T987] usb 5-1: Using ep0 maxpacket: 32 [ 141.382257][ T987] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 141.404357][ T987] usb 5-1: config 0 has no interface number 0 [ 141.421416][ T987] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 141.441188][ T987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.469405][ T987] usb 5-1: Product: syz [ 141.486242][ T987] usb 5-1: Manufacturer: syz [ 141.521720][ T987] usb 5-1: SerialNumber: syz [ 141.594169][ T987] usb 5-1: config 0 descriptor?? [ 142.597690][ T987] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 142.654131][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 143.805671][ T987] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 144.200791][ T6640] loop0: detected capacity change from 0 to 256 [ 144.257045][ T987] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 144.921292][ T6640] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 144.982168][ T987] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 145.050872][ T987] usb 5-1: USB disconnect, device number 6 [ 145.130365][ T6651] loop4: detected capacity change from 0 to 1024 [ 145.323065][ T6651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.343968][ T6661] loop2: detected capacity change from 0 to 4096 [ 145.430097][ T6661] EXT4-fs error (device loop2): ext4_quota_enable:7188: comm syz.2.244: Bad quota inum: 365571, type: 0 [ 145.488940][ T6668] fuse: Unknown parameter '0xffffffffffffffff' [ 145.566770][ T6661] loop2: lost filesystem error report for type 5 error -117 [ 145.581901][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 145.596075][ C0] EXT4-fs (loop2): initial error at time 1773295446: ext4_quota_enable:7188 [ 145.604831][ C0] EXT4-fs (loop2): last error at time 1773295446: ext4_quota_enable:7188 [ 145.642797][ T6661] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=365571). Please run e2fsck to fix. [ 145.694827][ T6661] EXT4-fs (loop2): mount failed [ 146.023264][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.412312][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 147.819949][ T6708] loop4: detected capacity change from 0 to 256 [ 148.039939][ T6708] FAT-fs (loop4): Directory bread(block 64) failed [ 148.083608][ T6708] FAT-fs (loop4): Directory bread(block 65) failed [ 148.094221][ T6707] ip6tnl1: entered promiscuous mode [ 148.119036][ T6708] FAT-fs (loop4): Directory bread(block 66) failed [ 148.132994][ T6707] ip6tnl1: entered allmulticast mode [ 148.160559][ T6708] FAT-fs (loop4): Directory bread(block 67) failed [ 148.208736][ T6708] FAT-fs (loop4): Directory bread(block 68) failed [ 148.221127][ T1038] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 148.281371][ T6708] FAT-fs (loop4): Directory bread(block 69) failed [ 148.313637][ T6708] FAT-fs (loop4): Directory bread(block 70) failed [ 148.348019][ T6708] FAT-fs (loop4): Directory bread(block 71) failed [ 148.375906][ T6708] FAT-fs (loop4): Directory bread(block 72) failed [ 148.411551][ T6708] FAT-fs (loop4): Directory bread(block 73) failed [ 148.857875][ T6734] loop2: detected capacity change from 0 to 256 [ 148.875114][ T6734] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 149.761984][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 150.633537][ T6765] loop3: detected capacity change from 0 to 512 [ 150.797647][ T6765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.833799][ T6765] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.875131][ T9] usb 3-1: config 129 has an invalid interface number: 2 but max is 0 [ 150.886805][ T9] usb 3-1: config 129 has no interface number 0 [ 150.893288][ T9] usb 3-1: config 129 interface 2 altsetting 20 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 150.904789][ T9] usb 3-1: config 129 interface 2 has no altsetting 0 [ 150.914285][ T9] usb 3-1: New USB device found, idVendor=146b, idProduct=9148, bcdDevice=41.70 [ 151.841930][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.860456][ T9] usb 3-1: Product: syz [ 151.875323][ T9] usb 3-1: Manufacturer: syz [ 151.885487][ T9] usb 3-1: SerialNumber: syz [ 152.259436][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.264638][ T9] usb 3-1: USB disconnect, device number 6 [ 152.279883][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 153.164484][ T6797] fuse: Bad value for 'fd' [ 155.353860][ T6835] loop4: detected capacity change from 0 to 1024 [ 155.516723][ T6835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.577764][ T6844] fuse: Bad value for 'user_id' [ 155.600180][ T6844] fuse: Bad value for 'user_id' [ 155.616390][ T29] audit: type=1800 audit(1773295456.479:3): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.310" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 155.651207][ T6835] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 155.737159][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.772799][ T6846] loop3: detected capacity change from 0 to 256 [ 155.830441][ T6846] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 156.246264][ T6862] loop3: detected capacity change from 0 to 512 [ 156.317638][ T6862] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 156.328785][ T6862] EXT4-fs (loop3): external journal has bad superblock [ 157.240549][ T6859] loop0: detected capacity change from 0 to 8192 [ 157.583432][ T6873] xt_hashlimit: size too large, truncated to 1048576 [ 157.653142][ T9] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 157.834391][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.864082][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.896580][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.942716][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 157.995536][ T9] usb 3-1: string descriptor 0 read error: -22 [ 158.003234][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.40 [ 158.021343][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.084636][ T9] usbhid 3-1:1.0: can't add hid device: -22 [ 158.099314][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 158.240797][ T6883] loop3: detected capacity change from 0 to 256 [ 158.324341][ T6876] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 158.328109][ T5934] usb 3-1: USB disconnect, device number 7 [ 158.350530][ T6883] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 158.370606][ T6876] FAT-fs (loop0): Filesystem has been set read-only [ 159.067722][ T6895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.331'. [ 159.429401][ T6904] xt_hashlimit: size too large, truncated to 1048576 [ 160.155208][ T6913] loop2: detected capacity change from 0 to 1024 [ 160.164838][ T6913] EXT4-fs: Ignoring removed bh option [ 160.187730][ T6913] ext4: Bad value for 'stripe' [ 160.492374][ T6916] loop3: detected capacity change from 0 to 256 [ 160.592160][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 161.494546][ T6916] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 162.232077][ T5922] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 162.418425][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.464447][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.497715][ T5922] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 162.533597][ T5922] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 162.567127][ T5922] usb 4-1: Manufacturer: syz [ 162.600105][ T5922] usb 4-1: config 0 descriptor?? [ 164.056159][ T5922] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 164.123047][ T5922] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 164.168498][ T5922] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 164.218282][ T5922] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 164.267977][ T5922] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 164.354549][ T5922] usb 4-1: USB disconnect, device number 6 [ 165.417601][ T6952] loop2: detected capacity change from 0 to 4096 [ 165.465978][ T6952] EXT4-fs: inline encryption not supported [ 165.538841][ T6952] EXT4-fs (loop2): Test dummy encryption mode enabled [ 165.606759][ T6952] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 165.668482][ T6952] System zones: 0-5 [ 165.752751][ T6952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.803334][ T6968] loop3: detected capacity change from 0 to 256 [ 166.024997][ T6968] FAT-fs (loop3): Directory bread(block 64) failed [ 166.093806][ T6968] FAT-fs (loop3): Directory bread(block 65) failed [ 166.107096][ T6952] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 166.155816][ T6968] FAT-fs (loop3): Directory bread(block 66) failed [ 166.199212][ T6968] FAT-fs (loop3): Directory bread(block 67) failed [ 166.234085][ T6968] FAT-fs (loop3): Directory bread(block 68) failed [ 166.235707][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.269440][ T6968] FAT-fs (loop3): Directory bread(block 69) failed [ 166.290030][ T6968] FAT-fs (loop3): Directory bread(block 70) failed [ 166.315168][ T6968] FAT-fs (loop3): Directory bread(block 71) failed [ 166.323851][ T6968] FAT-fs (loop3): Directory bread(block 72) failed [ 166.330866][ T6968] FAT-fs (loop3): Directory bread(block 73) failed [ 167.375953][ T6990] fuse: Bad value for 'fd' [ 167.442918][ T6994] syz.4.363 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 167.455472][ T29] audit: type=1326 audit(1773295468.289:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284899c799 code=0x7ffc0000 [ 167.581356][ T29] audit: type=1326 audit(1773295468.289:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284899c799 code=0x7ffc0000 [ 167.761129][ T6998] xt_hashlimit: size too large, truncated to 1048576 [ 167.781482][ T29] audit: type=1326 audit(1773295468.309:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f284899c799 code=0x7ffc0000 [ 167.872142][ T29] audit: type=1326 audit(1773295468.369:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284899c799 code=0x7ffc0000 [ 167.895741][ T29] audit: type=1326 audit(1773295468.369:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.4.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284899c799 code=0x7ffc0000 [ 168.103894][ T7001] loop4: detected capacity change from 0 to 1024 [ 168.268802][ T7001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.314347][ T7011] loop0: detected capacity change from 0 to 256 [ 168.516202][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.812325][ T7021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.371'. [ 169.803061][ T7034] fuse: Bad value for 'fd' [ 169.848279][ T7024] loop3: detected capacity change from 0 to 8192 [ 170.658994][ T7047] loop4: detected capacity change from 0 to 256 [ 170.768617][ T7047] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 171.165866][ T7054] netlink: 36 bytes leftover after parsing attributes in process `syz.0.387'. [ 171.432594][ T7062] loop4: detected capacity change from 0 to 512 [ 171.443933][ T7062] EXT4-fs: Ignoring removed nobh option [ 171.450423][ T7062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.470823][ T7062] EXT4-fs (loop4): 1 truncate cleaned up [ 171.485415][ T7062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.607768][ T7068] loop0: detected capacity change from 0 to 512 [ 171.623392][ T7068] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 171.633972][ T7068] EXT4-fs (loop0): external journal has bad superblock [ 172.411596][ T7074] loop2: detected capacity change from 0 to 512 [ 172.445899][ T7074] EXT4-fs: Ignoring removed nobh option [ 172.460691][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.541911][ T7074] EXT4-fs: Mount option(s) incompatible with ext2 [ 172.610852][ T7079] loop3: detected capacity change from 0 to 1024 [ 172.640751][ T7079] EXT4-fs: Ignoring removed bh option [ 172.764876][ T7079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.731354][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.832244][ T7093] loop3: detected capacity change from 0 to 512 [ 175.297416][ T7093] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.398: inode has both inline data and extents flags [ 175.310975][ T7093] fserror_report: 1 callbacks suppressed [ 175.311010][ T7093] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.320603][ T7093] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.398: couldn't read orphan inode 15 (err -117) [ 175.329861][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 175.329887][ C1] EXT4-fs (loop3): initial error at time 1773295476: ext4_orphan_get:1391: inode 15 [ 175.329921][ C1] EXT4-fs (loop3): last error at time 1773295476: ext4_orphan_get:1391: inode 15 [ 175.369433][ T7093] loop3: lost filesystem error report for type 5 error -117 [ 175.395295][ T7093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.592237][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 176.609010][ T7100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.400'. [ 176.950978][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.142890][ T7115] fuse: Bad value for 'fd' [ 177.388355][ T7119] loop3: detected capacity change from 0 to 16 [ 177.470715][ T7125] loop4: detected capacity change from 0 to 256 [ 177.499444][ T7119] erofs (device loop3): invalid ishare xattr prefix id 0 [ 177.576085][ T7125] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 178.760593][ T7106] loop0: detected capacity change from 0 to 40427 [ 178.807988][ T7106] F2FS-fs (loop0): invalid crc value [ 180.051071][ T7106] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 180.074804][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 180.137730][ T7106] F2FS-fs (loop0): Start checkpoint disabled! [ 180.199992][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 180.219354][ T7106] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 180.248793][ T7152] loop2: detected capacity change from 0 to 256 [ 180.426122][ T7152] FAT-fs (loop2): Directory bread(block 64) failed [ 180.483120][ T7152] FAT-fs (loop2): Directory bread(block 65) failed [ 180.527368][ T7152] FAT-fs (loop2): Directory bread(block 66) failed [ 180.571974][ T7152] FAT-fs (loop2): Directory bread(block 67) failed [ 180.580761][ T7152] FAT-fs (loop2): Directory bread(block 68) failed [ 180.588097][ T7152] FAT-fs (loop2): Directory bread(block 69) failed [ 180.595412][ T7152] FAT-fs (loop2): Directory bread(block 70) failed [ 180.608038][ T7152] FAT-fs (loop2): Directory bread(block 71) failed [ 180.702350][ T7152] FAT-fs (loop2): Directory bread(block 72) failed [ 180.748490][ T7152] FAT-fs (loop2): Directory bread(block 73) failed [ 181.482939][ T7164] xt_hashlimit: size too large, truncated to 1048576 [ 181.605977][ T7171] xt_hashlimit: size too large, truncated to 1048576 [ 181.845478][ T7181] loop3: detected capacity change from 0 to 512 [ 181.894679][ T7181] EXT4-fs (loop3): Test dummy encryption mode enabled [ 181.957131][ T7181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.982458][ T7177] loop0: detected capacity change from 0 to 4096 [ 182.021194][ T7177] EXT4-fs: inline encryption not supported [ 182.073353][ T7177] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003] [ 182.129290][ T7177] System zones: 0-5 [ 182.164800][ T7177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.318704][ T7187] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 182.336113][ T7192] loop4: detected capacity change from 0 to 512 [ 182.383567][ T7192] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.439052][ T7195] binder_alloc: 7194: binder_alloc_buf size 4088 failed, no address space [ 182.476305][ T7192] EXT4-fs (loop4): 1 truncate cleaned up [ 182.479733][ T7195] binder_alloc: allocated: 240 (num: 1 largest: 240), free: 3856 (num: 1 largest: 3856) [ 182.533332][ T7192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.871626][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.887576][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.537428][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.688551][ T3552] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.114748][ T3552] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.427261][ T3552] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.580395][ T7227] loop0: detected capacity change from 0 to 128 [ 185.600489][ T3552] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.610318][ T7226] xt_hashlimit: size too large, truncated to 1048576 [ 185.618886][ T7227] EXT4-fs (loop0): Test dummy encryption mode enabled [ 185.661101][ T7227] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.704955][ T7227] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.731353][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.745077][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.756617][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.764223][ T5934] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 185.794405][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.804032][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.962554][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 185.975895][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.991016][ T5934] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.003059][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.010110][ T5934] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 186.019787][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.038727][ T5934] usb 4-1: config 0 descriptor?? [ 186.314635][ T3552] bridge_slave_1: left allmulticast mode [ 186.336129][ T3552] bridge_slave_1: left promiscuous mode [ 186.350959][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.417114][ T3552] bridge_slave_0: left allmulticast mode [ 186.424143][ T3552] bridge_slave_0: left promiscuous mode [ 186.432833][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.450317][ T5830] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.538549][ T5934] hid (null): nested delimiters [ 186.744798][ T7240] loop2: detected capacity change from 0 to 1024 [ 186.769175][ T5934] usb 4-1: USB disconnect, device number 7 [ 186.784090][ T7240] EXT4-fs: Ignoring removed orlov option [ 186.842564][ T7240] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 186.905224][ T7240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.183806][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.354093][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.373495][ T7253] loop2: detected capacity change from 0 to 256 [ 187.398883][ T7253] exfat: Deprecated parameter 'utf8' [ 187.408657][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.466902][ T7253] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 187.471425][ T3552] bond0 (unregistering): Released all slaves [ 187.780491][ T7265] loop2: detected capacity change from 0 to 1024 [ 187.873342][ T5838] Bluetooth: hci0: command tx timeout [ 188.125121][ T7265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.024889][ T7278] loop0: detected capacity change from 0 to 256 [ 189.036804][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.218951][ T7231] chnl_net:caif_netlink_parms(): no params data found [ 189.520147][ T3552] hsr_slave_0: left promiscuous mode [ 189.547239][ T3552] hsr_slave_1: left promiscuous mode [ 189.581217][ T3552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.608254][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.694399][ T3552] veth1_macvtap: left promiscuous mode [ 189.707966][ T7296] loop2: detected capacity change from 0 to 1024 [ 189.718489][ T3552] veth0_macvtap: left promiscuous mode [ 189.733546][ T3552] veth1_vlan: left promiscuous mode [ 189.751395][ T3552] veth0_vlan: left promiscuous mode [ 189.773271][ T7296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.804783][ T7296] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 189.892763][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.951999][ T5838] Bluetooth: hci0: command tx timeout [ 190.206133][ T7307] loop0: detected capacity change from 0 to 256 [ 190.252500][ T7307] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.655576][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 190.719403][ T3552] team0 (unregistering): Port device team_slave_0 removed [ 190.753006][ T7286] loop3: detected capacity change from 0 to 40427 [ 190.798017][ T7286] F2FS-fs (loop3): invalid crc value [ 191.031289][ T7286] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 191.061626][ T7286] F2FS-fs (loop3): Start checkpoint disabled! [ 191.093308][ T7286] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 191.132374][ T7286] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 191.252740][ T7307] netlink: 76 bytes leftover after parsing attributes in process `syz.0.461'. [ 191.356027][ T7310] netlink: 76 bytes leftover after parsing attributes in process `syz.0.461'. [ 191.452547][ T5934] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.539461][ T7231] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.552811][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.560755][ T7231] bridge_slave_0: entered allmulticast mode [ 191.573838][ T7231] bridge_slave_0: entered promiscuous mode [ 191.584392][ T7231] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.595343][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.610521][ T7231] bridge_slave_1: entered allmulticast mode [ 191.629203][ T7231] bridge_slave_1: entered promiscuous mode [ 191.641354][ T5934] usb 4-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 191.729916][ T7231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.768556][ T7231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.837526][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.860875][ T5934] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 191.870844][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.879835][ T5934] usb 4-1: SerialNumber: syz [ 192.042240][ T5838] Bluetooth: hci0: command tx timeout [ 192.542200][ T5934] usb 4-1: 0:2 : does not exist [ 192.586349][ T7231] team0: Port device team_slave_0 added [ 192.602257][ T7231] team0: Port device team_slave_1 added [ 192.648672][ T7231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.655881][ T7231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.700840][ T7231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.797192][ T7231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.810598][ T5934] usb 4-1: USB disconnect, device number 8 [ 192.839757][ T7231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.939447][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.951755][ T7231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.271157][ T7231] hsr_slave_0: entered promiscuous mode [ 193.299666][ T7231] hsr_slave_1: entered promiscuous mode [ 193.329469][ T7231] debugfs: 'hsr0' already exists in 'hsr' [ 193.358280][ T7231] Cannot create hsr debugfs directory [ 193.382063][ T3514] kworker/u8:9: attempt to access beyond end of device [ 193.382063][ T3514] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 193.435122][ T3514] CPU: 1 UID: 0 PID: 3514 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 193.435150][ T3514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.435162][ T3514] Workqueue: writeback wb_workfn (flush-7:3) [ 193.435190][ T3514] Call Trace: [ 193.435198][ T3514] [ 193.435217][ T3514] dump_stack_lvl+0xe8/0x150 [ 193.435250][ T3514] f2fs_handle_critical_error+0x37c/0x540 [ 193.435284][ T3514] f2fs_write_end_io+0x1274/0x1740 [ 193.435339][ T3514] __submit_merged_bio+0x256/0x700 [ 193.435373][ T3514] __submit_merged_write_cond+0x3c9/0x4e0 [ 193.435410][ T3514] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 193.435462][ T3514] f2fs_write_data_pages+0x287e/0x34f0 [ 193.435535][ T3514] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 193.435579][ T3514] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 193.435641][ T3514] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 193.435697][ T3514] ? __lock_acquire+0x6b5/0x2cf0 [ 193.435741][ T3514] ? lock_list_lru_of_memcg+0x2e/0x4c0 [ 193.435765][ T3514] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 193.435794][ T3514] do_writepages+0x32e/0x550 [ 193.435826][ T3514] ? reacquire_held_locks+0x104/0x190 [ 193.435846][ T3514] ? writeback_sb_inodes+0x477/0x1a20 [ 193.435878][ T3514] __writeback_single_inode+0x133/0x11a0 [ 193.435904][ T3514] ? do_raw_spin_unlock+0xf5/0x210 [ 193.435933][ T3514] writeback_sb_inodes+0x992/0x1a20 [ 193.435983][ T3514] ? do_raw_spin_unlock+0xf5/0x210 [ 193.436015][ T3514] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 193.436038][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.436110][ T3514] ? rcu_is_watching+0x15/0xb0 [ 193.436141][ T3514] wb_writeback+0x456/0xb70 [ 193.436167][ T3514] ? queue_io+0x231/0x4a0 [ 193.436200][ T3514] ? __pfx_wb_writeback+0x10/0x10 [ 193.436231][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.436276][ T3514] wb_workfn+0x414/0xf50 [ 193.436301][ T3514] ? look_up_lock_class+0x57/0x110 [ 193.436341][ T3514] ? __pfx_wb_workfn+0x10/0x10 [ 193.436367][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.436395][ T3514] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 193.436454][ T3514] ? process_one_work+0x8bb/0x1780 [ 193.436482][ T3514] process_one_work+0x9ab/0x1780 [ 193.436540][ T3514] ? __pfx_process_one_work+0x10/0x10 [ 193.436567][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.436613][ T3514] worker_thread+0xb49/0x1140 [ 193.436667][ T3514] kthread+0x388/0x470 [ 193.436692][ T3514] ? __pfx_worker_thread+0x10/0x10 [ 193.436709][ T3514] ? __pfx_kthread+0x10/0x10 [ 193.436736][ T3514] ret_from_fork+0x51e/0xb90 [ 193.436768][ T3514] ? __pfx_ret_from_fork+0x10/0x10 [ 193.436794][ T3514] ? __switch_to+0xc7d/0x1450 [ 193.436824][ T3514] ? __pfx_kthread+0x10/0x10 [ 193.436850][ T3514] ret_from_fork_asm+0x1a/0x30 [ 193.436893][ T3514] [ 193.715784][ T3514] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 193.723119][ T3514] CPU: 0 UID: 0 PID: 3514 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 193.723147][ T3514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.723159][ T3514] Workqueue: writeback wb_workfn (flush-7:3) [ 193.723190][ T3514] Call Trace: [ 193.723197][ T3514] [ 193.723205][ T3514] dump_stack_lvl+0xe8/0x150 [ 193.723237][ T3514] f2fs_handle_critical_error+0x37c/0x540 [ 193.723269][ T3514] f2fs_write_end_io+0x1274/0x1740 [ 193.723318][ T3514] __submit_merged_bio+0x256/0x700 [ 193.723349][ T3514] __submit_merged_write_cond+0x3c9/0x4e0 [ 193.723382][ T3514] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 193.723430][ T3514] f2fs_write_data_pages+0x287e/0x34f0 [ 193.723504][ T3514] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 193.723544][ T3514] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 193.723599][ T3514] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 193.723648][ T3514] ? __lock_acquire+0x6b5/0x2cf0 [ 193.723690][ T3514] ? lock_list_lru_of_memcg+0x2e/0x4c0 [ 193.723712][ T3514] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 193.723739][ T3514] do_writepages+0x32e/0x550 [ 193.723769][ T3514] ? reacquire_held_locks+0x104/0x190 [ 193.723788][ T3514] ? writeback_sb_inodes+0x477/0x1a20 [ 193.723818][ T3514] __writeback_single_inode+0x133/0x11a0 [ 193.723844][ T3514] ? do_raw_spin_unlock+0xf5/0x210 [ 193.723873][ T3514] writeback_sb_inodes+0x992/0x1a20 [ 193.723918][ T3514] ? do_raw_spin_unlock+0xf5/0x210 [ 193.723948][ T3514] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 193.723969][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.724036][ T3514] ? rcu_is_watching+0x15/0xb0 [ 193.724066][ T3514] wb_writeback+0x456/0xb70 [ 193.724093][ T3514] ? queue_io+0x231/0x4a0 [ 193.724125][ T3514] ? __pfx_wb_writeback+0x10/0x10 [ 193.724146][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.724186][ T3514] wb_workfn+0x414/0xf50 [ 193.724206][ T3514] ? look_up_lock_class+0x57/0x110 [ 193.724241][ T3514] ? __pfx_wb_workfn+0x10/0x10 [ 193.724270][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.724296][ T3514] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 193.724343][ T3514] ? process_one_work+0x8bb/0x1780 [ 193.724369][ T3514] process_one_work+0x9ab/0x1780 [ 193.724420][ T3514] ? __pfx_process_one_work+0x10/0x10 [ 193.724454][ T3514] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.724495][ T3514] worker_thread+0xb49/0x1140 [ 193.724542][ T3514] kthread+0x388/0x470 [ 193.724565][ T3514] ? __pfx_worker_thread+0x10/0x10 [ 193.724581][ T3514] ? __pfx_kthread+0x10/0x10 [ 193.724605][ T3514] ret_from_fork+0x51e/0xb90 [ 193.724635][ T3514] ? __pfx_ret_from_fork+0x10/0x10 [ 193.724659][ T3514] ? __switch_to+0xc7d/0x1450 [ 193.724688][ T3514] ? __pfx_kthread+0x10/0x10 [ 193.724712][ T3514] ret_from_fork_asm+0x1a/0x30 [ 193.724749][ T3514] [ 193.724780][ T3514] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 194.112101][ T5838] Bluetooth: hci0: command tx timeout [ 194.192066][ T5908] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 194.375650][ T5908] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 194.432982][ T5908] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 194.470229][ T5908] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 194.511101][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.522750][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.530529][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.926221][ T7231] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.945150][ T7359] netlink: 84 bytes leftover after parsing attributes in process `syz.3.470'. [ 194.987859][ T7231] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.039427][ T7231] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.102475][ T7231] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.901025][ T7231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.181166][ T7231] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.374524][ T5908] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 197.416441][ T5908] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5 [ 197.425886][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.433391][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.507949][ T5908] input: failed to attach handler kbd to device input5, error: -5 [ 197.520027][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.527508][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.701633][ T5908] usb 1-1: USB disconnect, device number 5 [ 197.822333][ T7381] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.846114][ T7381] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.815386][ T7381] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.951122][ T7405] fuse: Bad value for 'fd' [ 199.341978][ T7414] netlink: 'syz.1.481': attribute type 3 has an invalid length. [ 199.593161][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.158301][ T7381] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.192108][ T7381] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 200.318542][ T7231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.401606][ T7381] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 200.428793][ T7381] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.452753][ T7381] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 200.497986][ T7381] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 200.531319][ T7381] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.558279][ T7381] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 200.595048][ T7381] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 200.627955][ T7381] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.653645][ T7381] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 200.684390][ T7381] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 201.632185][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.192125][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.259644][ T7231] veth0_vlan: entered promiscuous mode [ 202.452028][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.672073][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.679712][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.712054][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.971450][ T7231] veth1_vlan: entered promiscuous mode [ 204.272408][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.279888][ T7231] veth0_macvtap: entered promiscuous mode [ 204.306529][ T7231] veth1_macvtap: entered promiscuous mode [ 204.345177][ T7483] capability: warning: `syz.3.495' uses deprecated v2 capabilities in a way that may be insecure [ 204.385172][ T7482] netlink: 'syz.2.492': attribute type 12 has an invalid length. [ 204.487777][ T7231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.522602][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.588862][ T7231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.669200][ T7094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.711543][ T7094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.755642][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.762472][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.773497][ T7094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.814185][ T7094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.056040][ T7491] netlink: 44 bytes leftover after parsing attributes in process `syz.3.497'. [ 205.094223][ T7491] netlink: 59 bytes leftover after parsing attributes in process `syz.3.497'. [ 205.127350][ T7491] netlink: 59 bytes leftover after parsing attributes in process `syz.3.497'. [ 205.413160][ T6176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.453751][ T6176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.658485][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.354629][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.458556][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.593213][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.723155][ T7479] loop0: detected capacity change from 0 to 40427 [ 206.769861][ T7479] F2FS-fs (loop0): build fault injection rate: 174 [ 206.797710][ T7479] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 206.922747][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.929058][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.958357][ T7479] F2FS-fs (loop0): invalid crc value [ 207.969016][ T7479] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 208.107349][ T7479] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 209.232804][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.342096][ T5922] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.424884][ T7537] overlayfs: failed to clone upperpath [ 209.512203][ T5922] usb 6-1: Using ep0 maxpacket: 32 [ 209.559605][ T5922] usb 6-1: unable to get BOS descriptor or descriptor too short [ 209.596265][ T5922] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.618883][ T5922] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 209.666969][ T5922] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 209.726367][ T5922] usb 6-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 209.762957][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.812351][ T5922] usb 6-1: Product: syz [ 209.825103][ T5922] usb 6-1: Manufacturer: syz [ 209.842227][ T5922] usb 6-1: SerialNumber: syz [ 210.695014][ T5922] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 210.742272][ T5922] usb 6-1: 0:2 : does not exist [ 210.911062][ T5922] usb 6-1: USB disconnect, device number 2 [ 211.671800][ T7563] loop5: detected capacity change from 0 to 1024 [ 211.756833][ T7556] xt_hashlimit: size too large, truncated to 1048576 [ 211.801038][ T7563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.984150][ T987] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 212.632676][ T7579] loop2: detected capacity change from 0 to 256 [ 212.658232][ T7579] exfat: Deprecated parameter 'utf8' [ 212.689662][ T7579] exfat: Deprecated parameter 'utf8' [ 212.772257][ T987] usb 1-1: Using ep0 maxpacket: 16 [ 212.780362][ T987] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.787311][ T7231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.793354][ T987] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.813637][ T987] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 212.849387][ T987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.865568][ T7579] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 212.874972][ T987] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 212.924401][ T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.984994][ T987] usb 1-1: config 0 descriptor?? [ 213.415312][ T7591] loop2: detected capacity change from 0 to 512 [ 213.441113][ T7591] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 213.452388][ T7591] EXT4-fs (loop2): external journal has bad superblock [ 214.264175][ T987] usb 1-1: USB disconnect, device number 6 [ 214.449542][ T7599] loop5: detected capacity change from 0 to 512 [ 214.461773][ T7599] EXT4-fs: Ignoring removed nobh option [ 215.129362][ T7599] ------------[ cut here ]------------ [ 215.136057][ T7599] EA inode 11 i_nlink=1026 [ 215.136080][ T7599] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4c9/0x5a0, CPU#1: syz.5.524/7599 [ 215.152695][ T7599] Modules linked in: [ 215.157294][ T7599] CPU: 1 UID: 0 PID: 7599 Comm: syz.5.524 Not tainted syzkaller #0 PREEMPT(full) [ 215.167742][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.179221][ T7599] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 215.186171][ T7599] Code: 74 08 4c 89 ef e8 4f 6e 96 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 3b 9d 19 09 44 89 [ 215.210790][ T7599] RSP: 0000:ffffc900059df100 EFLAGS: 00010246 [ 215.220678][ T7599] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 215.233540][ T7599] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff901903b0 [ 215.244859][ T7599] RBP: ffffc900059df200 R08: ffff8880687747b7 R09: 1ffff1100d0ee8f6 [ 215.255080][ T7599] R10: dffffc0000000000 R11: ffffed100d0ee8f7 R12: ffffffff901903b0 [ 215.265077][ T7599] R13: 000000000000000b R14: 1ffff1100d0ee8c1 R15: ffff888068774608 [ 215.280010][ T7599] FS: 00007f1cd78fe6c0(0000) GS:ffff88812553e000(0000) knlGS:0000000000000000 [ 215.289976][ T7599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.300718][ T7599] CR2: 000055555dcc5000 CR3: 0000000067572000 CR4: 00000000003526f0 [ 215.312280][ T7599] Call Trace: [ 215.316763][ T7599] [ 215.320006][ T7599] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 215.326416][ T7599] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 215.330929][ T7600] loop2: detected capacity change from 0 to 256 [ 215.335633][ T7599] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 215.348539][ T7599] ext4_xattr_set_entry+0xabb/0x1e20 [ 215.356409][ T7599] ext4_xattr_ibody_set+0x254/0x6a0 [ 215.363402][ T7599] ext4_expand_extra_isize_ea+0x13a2/0x1ea0 [ 215.370189][ T7599] __ext4_expand_extra_isize+0x30d/0x400 [ 215.376881][ T7599] __ext4_mark_inode_dirty+0x45c/0x730 [ 215.384807][ T7599] ext4_evict_inode+0x7a1/0xeb0 [ 215.390289][ T7599] ? __pfx_ext4_evict_inode+0x10/0x10 [ 215.397461][ T7599] ? do_raw_spin_unlock+0xf5/0x210 [ 215.403933][ T7599] ? __pfx_ext4_evict_inode+0x10/0x10 [ 215.412509][ T7599] evict+0x61e/0xb10 [ 215.416758][ T7599] ? preempt_schedule_thunk+0x16/0x30 [ 215.422579][ T7599] ? __pfx_evict+0x10/0x10 [ 215.427722][ T7599] ? _raw_spin_unlock+0x3f/0x50 [ 215.433377][ T7599] ? iput+0xb25/0xe80 [ 215.437755][ T7599] ext4_orphan_cleanup+0xc38/0x1470 [ 215.443618][ T7599] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 215.449819][ T7599] ? ext4_register_li_request+0x259/0x720 [ 215.456724][ T7599] ? errseq_check_and_advance+0x66/0x120 [ 215.465351][ T7599] ext4_fill_super+0x59ff/0x6320 [ 215.471084][ T7599] ? __pfx_ext4_fill_super+0x10/0x10 [ 215.477114][ T7599] ? snprintf+0xe8/0x140 [ 215.482001][ T7599] ? __pfx_snprintf+0x10/0x10 [ 215.486814][ T7599] ? set_blocksize+0x1c9/0x440 [ 215.492145][ T7599] ? sb_set_blocksize+0x155/0x240 [ 215.498358][ T7599] ? setup_bdev_super+0x4c1/0x5b0 [ 215.504423][ T7599] get_tree_bdev_flags+0x431/0x4f0 [ 215.509784][ T7599] ? __pfx_ext4_fill_super+0x10/0x10 [ 215.516073][ T7599] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 215.522697][ T7599] vfs_get_tree+0x92/0x2a0 [ 215.527792][ T7599] do_new_mount+0x341/0xd30 [ 215.532878][ T7599] ? apparmor_capable+0x126/0x170 [ 215.538532][ T7599] ? __pfx_do_new_mount+0x10/0x10 [ 215.544001][ T7599] ? ns_capable+0x89/0xe0 [ 215.548998][ T7599] ? user_path_at+0xd4/0x160 [ 215.553973][ T7599] __se_sys_mount+0x31d/0x420 [ 215.559039][ T7599] ? __pfx___se_sys_mount+0x10/0x10 [ 215.564871][ T7599] ? __x64_sys_mount+0x20/0xc0 [ 215.571073][ T7599] do_syscall_64+0x14d/0xf80 [ 215.576149][ T7599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.582352][ T7599] ? clear_bhb_loop+0x40/0x90 [ 215.587461][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.593897][ T7599] RIP: 0033:0x7f1cd699da0a [ 215.599313][ T7599] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.621298][ T7599] RSP: 002b:00007f1cd78fde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 215.632397][ T7599] RAX: ffffffffffffffda RBX: 00007f1cd78fdee0 RCX: 00007f1cd699da0a [ 215.640798][ T7599] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f1cd78fdea0 [ 215.649758][ T7599] RBP: 0000200000000180 R08: 00007f1cd78fdee0 R09: 0000000000800718 [ 215.658475][ T7599] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 215.667067][ T7599] R13: 00007f1cd78fdea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 215.676339][ T7599] [ 215.679406][ T7599] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.687239][ T7599] CPU: 1 UID: 0 PID: 7599 Comm: syz.5.524 Not tainted syzkaller #0 PREEMPT(full) [ 215.696728][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.707183][ T7599] Call Trace: [ 215.710688][ T7599] [ 215.713828][ T7599] vpanic+0x56c/0xa60 [ 215.717872][ T7599] ? __pfx__printk+0x10/0x10 [ 215.722741][ T7599] ? __pfx_vpanic+0x10/0x10 [ 215.727599][ T7599] ? is_bpf_text_address+0x292/0x2b0 [ 215.733072][ T7599] ? is_bpf_text_address+0x26/0x2b0 [ 215.738466][ T7599] panic+0xc5/0xd0 [ 215.742229][ T7599] ? __pfx_panic+0x10/0x10 [ 215.747795][ T7599] __warn+0x315/0x4f0 [ 215.752147][ T7599] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 215.760661][ T7599] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 215.767779][ T7599] __report_bug+0x29a/0x540 [ 215.773380][ T7599] ? ext4_xattr_inode_update_ref+0x4c9/0x5a0 [ 215.780045][ T7599] ? __pfx___report_bug+0x10/0x10 [ 215.785373][ T7599] ? lockdep_hardirqs_on+0x7a/0x110 [ 215.790692][ T7599] ? ext4_xattr_inode_update_ref+0x516/0x5a0 [ 215.797493][ T7599] report_bug_entry+0x19a/0x290 [ 215.802473][ T7599] ? ext4_xattr_inode_update_ref+0x511/0x5a0 [ 215.809255][ T7599] ? ext4_xattr_inode_update_ref+0x516/0x5a0 [ 215.815331][ T7599] handle_bug+0xce/0x200 [ 215.819583][ T7599] exc_invalid_op+0x1a/0x50 [ 215.824369][ T7599] asm_exc_invalid_op+0x1a/0x20 [ 215.829856][ T7599] RIP: 0010:ext4_xattr_inode_update_ref+0x511/0x5a0 [ 215.837221][ T7599] Code: 74 08 4c 89 ef e8 4f 6e 96 ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 59 fe ff ff e8 3b 9d 19 09 44 89 [ 215.859483][ T7599] RSP: 0000:ffffc900059df100 EFLAGS: 00010246 [ 215.866412][ T7599] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: dffffc0000000000 [ 215.875381][ T7599] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff901903b0 [ 215.883905][ T7599] RBP: ffffc900059df200 R08: ffff8880687747b7 R09: 1ffff1100d0ee8f6 [ 215.892167][ T7599] R10: dffffc0000000000 R11: ffffed100d0ee8f7 R12: ffffffff901903b0 [ 215.900664][ T7599] R13: 000000000000000b R14: 1ffff1100d0ee8c1 R15: ffff888068774608 [ 215.909043][ T7599] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 215.915058][ T7599] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 215.921756][ T7599] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 215.927876][ T7599] ext4_xattr_set_entry+0xabb/0x1e20 [ 215.934199][ T7599] ext4_xattr_ibody_set+0x254/0x6a0 [ 215.940019][ T7599] ext4_expand_extra_isize_ea+0x13a2/0x1ea0 [ 215.946329][ T7599] __ext4_expand_extra_isize+0x30d/0x400 [ 215.952165][ T7599] __ext4_mark_inode_dirty+0x45c/0x730 [ 215.958650][ T7599] ext4_evict_inode+0x7a1/0xeb0 [ 215.964439][ T7599] ? __pfx_ext4_evict_inode+0x10/0x10 [ 215.970106][ T7599] ? do_raw_spin_unlock+0xf5/0x210 [ 215.975491][ T7599] ? __pfx_ext4_evict_inode+0x10/0x10 [ 215.980996][ T7599] evict+0x61e/0xb10 [ 215.985012][ T7599] ? preempt_schedule_thunk+0x16/0x30 [ 215.990704][ T7599] ? __pfx_evict+0x10/0x10 [ 215.995316][ T7599] ? _raw_spin_unlock+0x3f/0x50 [ 216.000465][ T7599] ? iput+0xb25/0xe80 [ 216.004512][ T7599] ext4_orphan_cleanup+0xc38/0x1470 [ 216.010142][ T7599] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 216.023433][ T7599] ? ext4_register_li_request+0x259/0x720 [ 216.032988][ T7599] ? errseq_check_and_advance+0x66/0x120 [ 216.038755][ T7599] ext4_fill_super+0x59ff/0x6320 [ 216.044115][ T7599] ? __pfx_ext4_fill_super+0x10/0x10 [ 216.050425][ T7599] ? snprintf+0xe8/0x140 [ 216.055320][ T7599] ? __pfx_snprintf+0x10/0x10 [ 216.061164][ T7599] ? set_blocksize+0x1c9/0x440 [ 216.065962][ T7599] ? sb_set_blocksize+0x155/0x240 [ 216.071374][ T7599] ? setup_bdev_super+0x4c1/0x5b0 [ 216.076948][ T7599] get_tree_bdev_flags+0x431/0x4f0 [ 216.082518][ T7599] ? __pfx_ext4_fill_super+0x10/0x10 [ 216.087987][ T7599] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 216.093947][ T7599] vfs_get_tree+0x92/0x2a0 [ 216.098498][ T7599] do_new_mount+0x341/0xd30 [ 216.103039][ T7599] ? apparmor_capable+0x126/0x170 [ 216.108109][ T7599] ? __pfx_do_new_mount+0x10/0x10 [ 216.113271][ T7599] ? ns_capable+0x89/0xe0 [ 216.117828][ T7599] ? user_path_at+0xd4/0x160 [ 216.122653][ T7599] __se_sys_mount+0x31d/0x420 [ 216.127442][ T7599] ? __pfx___se_sys_mount+0x10/0x10 [ 216.132893][ T7599] ? __x64_sys_mount+0x20/0xc0 [ 216.138130][ T7599] do_syscall_64+0x14d/0xf80 [ 216.142738][ T7599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.148900][ T7599] ? clear_bhb_loop+0x40/0x90 [ 216.153586][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.159671][ T7599] RIP: 0033:0x7f1cd699da0a [ 216.164114][ T7599] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.183907][ T7599] RSP: 002b:00007f1cd78fde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.192522][ T7599] RAX: ffffffffffffffda RBX: 00007f1cd78fdee0 RCX: 00007f1cd699da0a [ 216.200791][ T7599] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f1cd78fdea0 [ 216.209308][ T7599] RBP: 0000200000000180 R08: 00007f1cd78fdee0 R09: 0000000000800718 [ 216.217891][ T7599] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 216.226171][ T7599] R13: 00007f1cd78fdea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 216.234280][ T7599] [ 216.237718][ T7599] Kernel Offset: disabled [ 216.242265][ T7599] Rebooting in 86400 seconds..