last executing test programs: 6.237970295s ago: executing program 4 (id=522): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 5.589942631s ago: executing program 2 (id=528): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) 4.952981347s ago: executing program 0 (id=533): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071"], 0x0, 0x5}, 0x94) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 4.917284598s ago: executing program 4 (id=534): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x1c, 0x0, @opaque="acbc8e44b8817e42f60614d9e490b8c4f3e29d0a"}}}}}, 0x0) 4.615712126s ago: executing program 4 (id=536): r0 = io_uring_setup(0x2ac0, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0x0, 0x156}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close_range(r0, r0, 0x0) 4.277631864s ago: executing program 4 (id=539): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0x4) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xa003e458, 0x700000000000000) 3.493214463s ago: executing program 2 (id=540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@quota}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$eJzs279vG1UcAPDv2UlKf5FQlR/9AQQKoghImrSUDixFIDGAhARDGUOSVqVuA02QaFVBQKiMqBITC2LnL2CCBQETEivsqFKEsrQwGZ19lziO7capE6fx5yOd+57vue/79d2z392LA+hZw+lDErEnIv6MiMFqdWWD4eo/txevTf67eG0yiXL57X+SSrtbi9cm86b563bnlb6IwhdJHGrQ7+yVqxcmSqXpy1l9dO7iB6OzV66+cP7ixLnpc9OXxk+dOnF87KWT4y92JM80r1sHP5k5fOD1d2+8OXnmxnu/fp/k+dfl0SHDrXY+XS53uLvu2ltTTvq6GAhtKVaHafRXxv9gFGP54A3Ga593NThgQ5XL5fJDzXfPl4FtLIluRwB0R/5Fn17/5tsmTT22hIXT1QugNO/b2Vbd0xeFrE1/3fVtJw1HxJn5/75Nt9iY+xAAACv8mM5/nm80/ytE7X2h+7M1lKGIeCAi9kXEyYjYHxEPRlTaPhwRj7TZf/0iyer5T+HmuhJbo4XTH8bL2drWyvlfPvuLoWJW21vJvz85e740fSx7T45G/460Ptaij59e/eOrZvtq53/plvafzwWzOG727Vj5mqmJuYm7ybnWwmcRB/sa5Z8srQQkEXEgIg6us4/zxTjcbN+d82+hA+tM5e8inqke//moyz+XtF6fHL0vStPHRvOzYrXffr/+VrP+7yr/DkiP/66G5/9S/kNJ7XrtbDv/+zfPpo/X//qy6TXNes//geSd5REaER9PzM1dHosYSN6oBl37/Hhdu/Hl9mn+R480Hv/7YvmdOBRROYkfjYjHIuLxLPYnIuLJiDjS4l345ZWn3l9//hsrzX+qreO/XBiI+mcaF4oXfv5hRadD7eSfHv8TldLR7Jm1fP6tJa52z2YAAAC4VxUiYk8khZGlcqEwMlL9G/79satQmpmde+7szEeXpqq/ERiK/kJ+p2uw5n7oWHZZn9fH6+rHs/vGXxd3VuojkzOlqW4nDz1ud5Pxn/q72O3ogA23eh3NyIde4fea0LuMf+hdxj/0rgbjf2c34gA2X6Pv/0+7EAew+erGv5v/0ENc/0PvWs/495kB20PLsTyweXEAm2p2Z9z5R/L3dmHH1ghjuxWisCXCUNigQrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj/wAAAP//bW3m1Q==") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x583, &(0x7f0000000f80)="$eJzs3U1rG9caAOB35I983hsHQrj3Li6BLJqSRo7tfqRQaLosbdpAu0+FrZhgOQqWHGI30GTRbLopoVBKA6U/oPsuQ/9Af0WgDYQSTLsoBZWRR45iS5atyJUSPQ9Mco5mxmdenTlH52hGTABD60T6Ty7ivxHxZRJxpGndaGQrT6xvt/b45my6JFGrffRbEkn2WmP7JPv/UJb5T0T89HnE6dzWcisrqwuFUqm4lOUnq4vXJisrq2euLBbmi/PFq9MzM+dem5l+843Xexbryxf/+ObD+++e++Lk2tc/PDx6N4nzcThb1xzHM7jVnDlR+CtLjcX5TRtO9aCwQZL0+wDoykjWzsci7QOOxEjW6oEX32cRUQOGVKL9w5BqjAMac/sezYOfG4/eWZ8A1WMfb45/dP27kdhfnxsdXEuemhml892JHpSflvHjr/fupkts/z3EgQ55gF25dTsizo6Obu3/k6z/697Z+pfH29tcxrB9/kA/3U/HP6+0Gv/lNsY/0WL8c6hF2+1G5/afe9iDYtpKx39vtRz/bnRdEyNZ7l/1Md9YcvlKqXg2Iv4dEaei1vHSx7m1B7V265rHf+mSlt8YC2bH8XB039P7zBWqhYgY7zLkpzy6HfG/0VbxJxv1n7So//T9uLjDMo4X7/2/3brO8e+t2vcRL7Ws/yfVmkSsfrCebHV9crJ+Pkw2zoqtfr9z/Od25fc7/rT+D24f/0TSfL22svsyvtv/Z7Hdum7P//Hk43q60QhuFKrVpamI8eT9ra9PP9m3kW9sn8Z/6uT2/V+r8z+dfH2yJZrWU7I7x+5s3XTH8e+tNP65XdX/7hMP3vv023bl76z+X62nTmWvZP1fa9m5stMDfNb3DwAAAAAAAAZJLiIOR5LLb6RzuXx+/f6OY3EwVypXqqcvl5evzkX9t7ITMZZrXOk+0nQ/xFR2P2wjP70pPxMRRyPiq5ED9Xx+tlya63fwAAAAAAAAAAAAAAAAAAAAMCAOtfn9f+qXkX4fHbDn6g822NfvowD6oeMj/3vxpCdgIHVs/8ALS/uH4aX9w/Dqtv13fLo7MPB8/sPw0v5heGn/MLy0fwAAAAAAAAAAAAAAAAAAAAAAAAAAAOipixcupEtt7fHN2TQ/d31leaF8/cxcsbKQX1yezc+Wl67l58vl+VIxP1te7PT3SuXytanpWL4xWS1WqpOVldVLi+Xlq9VLVxYL88VLxbF/JCoAAAAAAAAAAAAAAAAAAAB4vlRWVhcKpVJxSaJt4u0YiMPYywDXdbX76KBEIdEmcTur3t3t1cdOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+TsAAP//0Msv0g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 3.192561561s ago: executing program 0 (id=541): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000028c0)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000880)="ee993abf99d826c3107b1259f25b162e724318d5d0c450141df0608f0f4f51cef8c8e8a49edb5af15fc39f35bbd0157324e55b9cd5f17e0a310913b385f189d13027c20b60d962cf7548082713069833a794bcffcd5f6daba24f91232f678cd091bcae6ec94991775faffbaf2645fd5a38a66a85eaac7006c9feee4f0f1ae0eb6374378f0acf90b6cc9e04c4c5bc5875bcdf80f18879ffd4a823bed96903405e4ac629733e48576a6e28e775fa1bd30190342fc3ea2fa690f84c78cd494d7ea7d50dbff1f362f3ed52cd7ae86e10efc957f23a0dd5cbc7ce0edbf2eb0c7dd53cf1f1cf10dd42790050f0e38d51a822e303802eeeaf8fa3875b7943f61f4530262b8775b7d31a2c3aa2ac6fe44e614e9d4c2abd00ea17142e7216632baca316fe7731dee60a8847b5d1207edf990bf254c5695ca9f2e35933864ded45bc6b109b5d2db3a19af0066d07798b044c2c228d3ce5c5f2b40499580a6a5dbd15f90bcf4ef8126cd4b818c84d27ca3bed4ee9d149afca7bc927b9df102e98a49add9a9c52ec950d679e4f40726736d974a2c4e9118c36238fe7aa057dee0f4433d587d4f3fb2cc39c8f9578eb80a4c5f3150d7a0f7aefa4eb8aecc70560880b0a7c6a835251427613c57dabddda6c8d407b1f2785f2a18918d5d5184c2156889d8c9be6c8e6e979a4987375d9566c1bf23d9b262fc4532c79afc3f1ae57bc3f8c838564ca2ea50ae26a6b9fa977f47bd2dbfebfc15dc602028520e37166c31adad67d17227963b970128477b107e5c4aaccc3d2feceaadecc3b1186765b52c72e9f70afa268a6213bd78d283f643f7b3769ad9a518336a79c45e9500887c469efea14102777a55ecbdac7aad31cc44f192b287e1366cee23125cd35b9adb7da8b3e1ce29931536957231818a2af645375b050bf82ad896afee5a98149861abbcbfe74f411d39897fcf2b61f4d8616224bcc082f68b0faf923093b38c87ca4d42d80e69f37bde9b8ed7c014c77010fae5007d7a229bcd72d2283cb47aacc2a7ca72066839bbd81ab58a98ba1b751e61c44f60157c549d872f3a36c1b99982fd51f329be6ed59379275d01a311a95cdb65b5f851699f9f2903a88fa63eb22453ec95082d3cd804fba64f67272b0ec4e322bcaa0d40a5d86398438e09352a3f2f2428009b5c4cede8720463c61765ae9a46f51827430d05755b1de5ee8a1835b5ec06890d921c63b0ac1c97f8bfc786c13cb3d88603ae5779076e0083ac0374870f32f299faff14cd86b78da9f56388d50e57d92e24bf6db454cb1579e6590f520be854baded354f235b0452b0fad58a67e8ed8cb0dad6c64c9b964ac18aab442b1c579b56287a1cceb23bd2885f93b8912217522f4e0139b2e0a65c117a0fa6aa8beba3298fbeca3ecc72c43eafe0a59e1e6c0a7810d2e0119203ae0990c69519f1cccaf553f20d7401881b579c3d5d23eb2cadab61dcfe231c62982091a2a1d733c5e2d768dc700655b834d83e58af85b9e87808c66e0a67903a0fbe940774ecbec6b069bbf4d72ad1f7adbae9bfbfe52fdea6397918fb5736e338ebb9329a7528f5b54ca3d5db39bf1c7e086096ff2d3abf275137e8c83e8fe1acf1f1bf9247e94855abd99d9ee8a2fa57b942a5fcf23db702286d5acf19147cfe51faa9ffbbf0562d344af117161ddad99603a50c2c896c1f9c3123dcec6844555b38bf3e7a52fcfeb3278035912763401edd4efb5d5744d5afbdf65d4df37f718c36166d43d03ff9ec61a16b91d6f8beffc1de631b5adcaa26d71829c92476f30ec4ca9c719c93611c4ba869dc044923fb8fa7e8e1e5fafc33a64deb307e3dc1e4d440118ba3d1cce4694a95eb9f1dae0f22a151f2de0a680c943f09928a20ffdea468d457a6206c13c5481a63101bdbc60f7a24b8e2c01e75b29466cace3e1347521995de18cac59392b0ab71285115528186e8f5d5ad0c4f46966515c2ba7f692aa6d4c87ebd93f4d286a32d3501545dde40f2be11891d5f0860d62320838ea95d35973e73466cc7f74ce1f06051de75abe44d6e0d72cb5d05a147c9f57bc37b1a5e03cd95194541636d2d9eb6e8d051d3a4d209b8db5c38999e10ab71309e005526beef8d81e385a00acfc9c6ce1ec7c4c36753c0622145e23ce7b8422d97248fb6ff22a0a589985c273c84ce7726eee34f32845e28433cf312f504734f0bad", 0x618}, {&(0x7f0000000500)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2d", 0x1a}], 0x3) 2.80532108s ago: executing program 0 (id=543): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x8001, @empty, 0x2}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, 0x0, 0x0, 0x48c11}, 0x8050) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0) 2.482040378s ago: executing program 2 (id=544): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) socket(0x15, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.287425733s ago: executing program 1 (id=546): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x280400b, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYRES16], 0x1, 0x23a, &(0x7f0000000080)="$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") setuid(0xee01) r0 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 2.224862315s ago: executing program 4 (id=547): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000100)={0x40, 0x8, 0x9, {0x9, 0x21, "ab9740a0c2d576"}}, 0x0, 0x0, 0x0}, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) 2.047037749s ago: executing program 0 (id=548): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 1.851522204s ago: executing program 0 (id=550): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) 1.776287356s ago: executing program 3 (id=551): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000d00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000001200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001240)={0x8, 0x0, 0x1002, 0x4000000005, 0x2, 0xa5, 0x5, 0x5, 0xffffffff}) capset(&(0x7f00000012c0)={0x19980330}, &(0x7f0000001300)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000001340)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) 1.589601511s ago: executing program 0 (id=552): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1.404446015s ago: executing program 2 (id=553): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.388600266s ago: executing program 3 (id=554): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) 1.23775399s ago: executing program 2 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120000000a0000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000380), &(0x7f0000000440)=@tcp=r1, 0x1}, 0x20) 1.187751451s ago: executing program 3 (id=556): setns(0xc9, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @empty, @empty}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1.064660394s ago: executing program 2 (id=557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 1.034792435s ago: executing program 1 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 906.390158ms ago: executing program 3 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 830.172589ms ago: executing program 1 (id=560): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r1, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000000c0)}, 0x20) 689.016113ms ago: executing program 3 (id=561): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 621.071405ms ago: executing program 1 (id=562): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x0, 0xc5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) ppoll(&(0x7f0000000dc0)=[{r1, 0x2}, {r0}], 0x2, 0x0, 0x0, 0x0) 401.62493ms ago: executing program 1 (id=563): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000040)=0xfffffffe, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xbfff7038}, {0x6, 0x0, 0x7f, 0xfffffffd}]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 266.621464ms ago: executing program 3 (id=564): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000019980)='./file1\x00', 0x80000b08) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000019a40)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000019a80)=""/4096, 0x1000) 173.939896ms ago: executing program 1 (id=565): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 4 (id=566): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x20000, 0xac) ioctl(r0, 0xc138fd09, &(0x7f0000000100)="040000000000000004000000000072000000000000f20ae1bbac6ac0b9a1") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 81.606321][ T4259] cgroup: Unknown subsys name 'net' [ 81.741121][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.278861][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.483545][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.491429][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.504829][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.512768][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.520703][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.528721][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.537973][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.546065][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.553380][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.559215][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.560745][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.573874][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.576926][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.585480][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.589956][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.598403][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.604609][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.612453][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.621403][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.626992][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.635054][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.640077][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.647122][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.660132][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.660826][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.669536][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.675373][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.683161][ T4287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.763688][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.771098][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.185977][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 86.276153][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.285152][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.294028][ T4273] device bridge_slave_0 entered promiscuous mode [ 86.304782][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.312189][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.320471][ T4273] device bridge_slave_1 entered promiscuous mode [ 86.333364][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 86.395123][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.404555][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 86.426915][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 86.438250][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.479165][ T4272] chnl_net:caif_netlink_parms(): no params data found [ 86.531222][ T4273] team0: Port device team_slave_0 added [ 86.559092][ T4273] team0: Port device team_slave_1 added [ 86.583192][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.590446][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.599063][ T4271] device bridge_slave_0 entered promiscuous mode [ 86.640549][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.651476][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.660027][ T4271] device bridge_slave_1 entered promiscuous mode [ 86.716359][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.723550][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.749610][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.769923][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.780117][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.806960][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.840511][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.850775][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.858871][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.866997][ T4283] device bridge_slave_0 entered promiscuous mode [ 86.880570][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.887894][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.896269][ T4286] device bridge_slave_0 entered promiscuous mode [ 86.904452][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.912761][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.920769][ T4272] device bridge_slave_0 entered promiscuous mode [ 86.931025][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.948152][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.956291][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.964976][ T4283] device bridge_slave_1 entered promiscuous mode [ 86.988244][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.995544][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.004557][ T4286] device bridge_slave_1 entered promiscuous mode [ 87.012115][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.019261][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.027937][ T4272] device bridge_slave_1 entered promiscuous mode [ 87.045180][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.080697][ T4271] team0: Port device team_slave_0 added [ 87.088877][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.122805][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.133262][ T4271] team0: Port device team_slave_1 added [ 87.150404][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.173960][ T4273] device hsr_slave_0 entered promiscuous mode [ 87.180899][ T4273] device hsr_slave_1 entered promiscuous mode [ 87.190484][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.216636][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.252304][ T4283] team0: Port device team_slave_0 added [ 87.299083][ T4272] team0: Port device team_slave_0 added [ 87.338266][ T4283] team0: Port device team_slave_1 added [ 87.351454][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.359351][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.391756][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.405005][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.413433][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.445615][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.468542][ T4272] team0: Port device team_slave_1 added [ 87.526828][ T4286] team0: Port device team_slave_0 added [ 87.570631][ T4286] team0: Port device team_slave_1 added [ 87.587442][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.594713][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.620800][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.635243][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.642559][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.671373][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.687739][ T4271] device hsr_slave_0 entered promiscuous mode [ 87.697175][ T4271] device hsr_slave_1 entered promiscuous mode [ 87.705151][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.713257][ T4271] Cannot create hsr debugfs directory [ 87.733830][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.740848][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.767152][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 87.773900][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 87.780162][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 87.782134][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 87.796355][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.810431][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.822366][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.849043][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 87.862658][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.982830][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.989857][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.016386][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.062103][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.069123][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.096601][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.139550][ T4283] device hsr_slave_0 entered promiscuous mode [ 88.147027][ T4283] device hsr_slave_1 entered promiscuous mode [ 88.154098][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.161900][ T4283] Cannot create hsr debugfs directory [ 88.176497][ T4272] device hsr_slave_0 entered promiscuous mode [ 88.184164][ T4272] device hsr_slave_1 entered promiscuous mode [ 88.191002][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.198706][ T4272] Cannot create hsr debugfs directory [ 88.302600][ T4286] device hsr_slave_0 entered promiscuous mode [ 88.309626][ T4286] device hsr_slave_1 entered promiscuous mode [ 88.316736][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.330189][ T4286] Cannot create hsr debugfs directory [ 88.548919][ T4273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.587643][ T4273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.618332][ T4273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.651735][ T4273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.687329][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.697747][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.726107][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.749408][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.783573][ T4283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.793997][ T4283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.830587][ T4283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.865064][ T4283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.953621][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.990199][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.004365][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.019991][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.051313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.064948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.078983][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.104729][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.133687][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.171276][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.179830][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.190678][ T4286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.209121][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.232346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.241263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.251782][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.259289][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.272494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.285992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.295702][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.303031][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.311277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.320400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.329509][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.336736][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.345120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.355949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.371538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.381051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.394366][ T4286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.420640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.429014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.437435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.449047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.460156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.469881][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.477602][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.487030][ T4286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.499372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.529721][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.539052][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.556713][ T4286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.593966][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.607459][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.620226][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.634583][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.646740][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.658574][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.670340][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.680801][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.715827][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.724925][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.740556][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.750698][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.768036][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.778752][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.794658][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.827313][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.840322][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.848555][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 89.854759][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 89.861065][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 89.862610][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 89.882888][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.897533][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.907811][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.921882][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 89.940758][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.952564][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.967687][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.983831][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.995638][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.005569][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.012858][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.054214][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.063698][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.076247][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.087558][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.095129][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.105162][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.115681][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.123913][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.135217][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.166893][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.182518][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.191523][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.252269][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.260556][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.308050][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.329267][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.336538][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.372157][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.382272][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.402968][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.410231][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.427673][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.440890][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.456156][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.473197][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.493544][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.503128][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.521259][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.533319][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.553893][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.572728][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.640863][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.665025][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.683015][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.702975][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.710618][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.738862][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.759602][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.780723][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.797141][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.814056][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.823009][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.852868][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.863119][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.872189][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.881109][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.898813][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.916258][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.956835][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.002990][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.010589][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.027269][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.038095][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.060520][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.071223][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.108555][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.159092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.192260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.218838][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.226073][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.284409][ T4273] device veth0_vlan entered promiscuous mode [ 91.293219][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.304066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.313407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.322868][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.330038][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.339052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.349387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.358737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.370553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.379579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.387562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.396206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.416053][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.423498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.434745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.463307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.488222][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.525733][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.579671][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.589195][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.614292][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.633512][ T4273] device veth1_vlan entered promiscuous mode [ 91.693153][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.713697][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.727803][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.744773][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.756609][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.765622][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.778877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.789642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.804787][ T4271] device veth0_vlan entered promiscuous mode [ 91.819770][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.854337][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.862889][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.887159][ T4273] device veth0_macvtap entered promiscuous mode [ 91.917577][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.924701][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 91.924761][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 91.924799][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 91.942060][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 91.976150][ T4271] device veth1_vlan entered promiscuous mode [ 91.993412][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.002383][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 92.021132][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.042650][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.053125][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.104818][ T4273] device veth1_macvtap entered promiscuous mode [ 92.128928][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.145211][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.157905][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.172029][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.188062][ T4271] device veth0_macvtap entered promiscuous mode [ 92.229835][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.239952][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.273150][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.283451][ T4271] device veth1_macvtap entered promiscuous mode [ 92.292870][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.303651][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.318433][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.329135][ T22] cfg80211: failed to load regulatory.db [ 92.351214][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.368174][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.379276][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.394760][ T4272] device veth0_vlan entered promiscuous mode [ 92.412061][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.433519][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.448844][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.458237][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.475402][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.503133][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.522807][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.537921][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.549073][ T4273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.560324][ T4273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.569974][ T4273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.579417][ T4273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.597191][ T4272] device veth1_vlan entered promiscuous mode [ 92.606159][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.616619][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.630720][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.646485][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.659074][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.706235][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.716410][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.734985][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.744849][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.759192][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.770697][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.813410][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.826080][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.844724][ T4272] device veth0_macvtap entered promiscuous mode [ 92.930130][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.940334][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.950433][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.960098][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.969137][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.979343][ T4272] device veth1_macvtap entered promiscuous mode [ 93.019037][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.047849][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.064513][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.092751][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.114885][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.128935][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.139860][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.151328][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.159135][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.167707][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.176441][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.185815][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.195874][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.205793][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.215395][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.226195][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.239320][ T4283] device veth0_vlan entered promiscuous mode [ 93.255859][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.272209][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.279974][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.310328][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.320338][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.331550][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.340288][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.353785][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.365222][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.376718][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.393676][ T4283] device veth1_vlan entered promiscuous mode [ 93.403764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.413114][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.423146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.440135][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.452924][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.466966][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.476677][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.507351][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.517496][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.589698][ T4286] device veth0_vlan entered promiscuous mode [ 93.616621][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.631884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.641100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.651278][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.657376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.669831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.704642][ T4283] device veth0_macvtap entered promiscuous mode [ 93.722400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.742783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.752395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.760558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.786235][ T4286] device veth1_vlan entered promiscuous mode [ 93.816251][ T4283] device veth1_macvtap entered promiscuous mode [ 93.924234][ T4286] device veth0_macvtap entered promiscuous mode [ 93.960126][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.984576][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.000390][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.013132][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 94.019221][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 94.027714][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 94.027737][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 94.036928][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.050784][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.061807][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.084586][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.092140][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 94.099481][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.120549][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.145260][ T4367] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7'. [ 94.158884][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.178203][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.208522][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.228232][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.260510][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.275890][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.296645][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.306907][ T4286] device veth1_macvtap entered promiscuous mode [ 94.322885][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.334193][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.346422][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.356651][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.367460][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.379870][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.391303][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.405066][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.422363][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.430581][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.443919][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.454309][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.513364][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.543427][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.570790][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.581795][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.620784][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.638417][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.652043][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.663301][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.674709][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.685763][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.700768][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.719773][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.741257][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.777537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.816698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.845594][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.875072][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.891507][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.908600][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.920829][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.933162][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.945048][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.956799][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.979745][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.005582][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.043363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.043364][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.069140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.090475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.102992][ T4286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.122233][ T4286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.131048][ T4286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.150485][ T4286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.246590][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.275205][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.329416][ T2960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.401368][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.422329][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.462295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.495890][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.517176][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.556560][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.584276][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.593920][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.601537][ T4385] netlink: 'syz.2.14': attribute type 2 has an invalid length. [ 95.631753][ T4385] netlink: 100 bytes leftover after parsing attributes in process `syz.2.14'. [ 95.642480][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.710890][ T4387] ima: rule for LSM 'u' is undefined [ 95.717823][ T26] audit: type=1807 audit(1791884185.320:2): action=measure func=FILE_CHECK obj_type=u res=0 [ 95.738246][ T4386] ima: policy update failed [ 95.747981][ T26] audit: type=1802 audit(1791884185.350:3): pid=4387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.5" res=0 errno=0 [ 95.787486][ T4389] loop0: detected capacity change from 0 to 64 [ 95.801039][ T26] audit: type=1802 audit(1791884185.390:4): pid=4386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.5" res=0 errno=0 [ 95.828512][ T4389] ======================================================= [ 95.828512][ T4389] WARNING: The mand mount option has been deprecated and [ 95.828512][ T4389] and is ignored by this kernel. Remove the mand [ 95.828512][ T4389] option from the mount to silence this warning. [ 95.828512][ T4389] ======================================================= [ 96.531351][ T4391] loop3: detected capacity change from 0 to 32768 [ 96.574055][ T4318] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.606797][ T4391] [ 96.606797][ T4391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.606797][ T4391] [ 96.635021][ T4408] loop1: detected capacity change from 0 to 4096 [ 96.683333][ T4391] JFS: metapage_get_blocks failed [ 96.689328][ T4391] ERROR: (device loop3): release_metapage: write_one_page() failed [ 96.689328][ T4391] [ 96.711526][ T4391] ERROR: (device loop3): diWrite: ixpxd invalid [ 96.711526][ T4391] [ 96.722536][ T4326] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.730255][ T3600] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.734825][ T4391] ERROR: (device loop3): txCommit: [ 96.734825][ T4391] [ 96.775931][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.787702][ T4408] ntfs3: loop1: Failed to load $Extend. [ 96.829526][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.876854][ T4286] [ 96.876854][ T4286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.876854][ T4286] [ 96.882226][ T4318] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 96.901903][ T4408] ntfs3: loop1: ino=5, "/" directory corrupted [ 96.919910][ T4286] [ 96.919910][ T4286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 96.919910][ T4286] [ 96.931831][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.932261][ T3600] usb 1-1: Using ep0 maxpacket: 32 [ 96.957655][ T4326] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 96.982392][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.994155][ T4318] usb 5-1: config 0 descriptor?? [ 97.006583][ T3600] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 97.026486][ T4326] usb 3-1: Product: syz [ 97.030752][ T4326] usb 3-1: Manufacturer: syz [ 97.042821][ T3600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.071821][ T4326] usb 3-1: SerialNumber: syz [ 97.118622][ T3600] usb 1-1: config 0 descriptor?? [ 97.132118][ T4326] usb 3-1: config 0 descriptor?? [ 97.183290][ T4326] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 002 [ 97.264931][ T4411] atomic_op ffff88801d6ea198 conn xmit_atomic 0000000000000000 [ 97.368138][ T4413] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.393577][ T3600] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 97.430816][ T4318] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.452135][ T3600] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.462032][ T4318] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.469178][ T4318] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.494102][ T3600] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 97.502801][ T4318] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.509859][ T4318] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.527304][ T3600] usb 1-1: media controller created [ 97.557354][ T4318] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 6/7 [ 97.564926][ T4326] (null): failure reading functionality [ 97.585520][ T4318] cp2112 0003:10C4:EA90.0001: parse failed [ 97.597234][ T4326] i2c i2c-1: connected i2c-tiny-usb device [ 97.604402][ T3600] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.614282][ T4318] cp2112: probe of 0003:10C4:EA90.0001 failed with error -22 [ 97.617033][ T4406] i2c i2c-1: adapter quirk: no zero length (addr 0x0099, size 0, read) [ 97.674660][ T4418] capability: warning: `syz.3.25' uses deprecated v2 capabilities in a way that may be insecure [ 97.699989][ T3600] az6027: usb out operation failed. (-71) [ 97.707617][ T3600] az6027: usb out operation failed. (-71) [ 97.714938][ T3600] stb0899_attach: Driver disabled by Kconfig [ 97.729385][ T3600] az6027: no front-end attached [ 97.729385][ T3600] [ 97.761179][ T3600] az6027: usb out operation failed. (-71) [ 97.788014][ T4318] usb 5-1: USB disconnect, device number 2 [ 97.795191][ T3600] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 97.830937][ T41] usb 3-1: USB disconnect, device number 2 [ 97.846281][ T3600] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 97.912225][ T3600] dvb-usb: schedule remote query interval to 400 msecs. [ 97.919258][ T3600] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 97.942942][ T3600] usb 1-1: USB disconnect, device number 2 [ 97.994553][ T4420] tap0: tun_chr_ioctl cmd 1074025677 [ 98.000608][ T4420] tap0: linktype set to 805 [ 98.021909][ T3600] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 98.631444][ T4441] loop4: detected capacity change from 0 to 128 [ 98.735752][ T4443] loop2: detected capacity change from 0 to 1024 [ 98.805526][ T4441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 98.896428][ T26] audit: type=1800 audit(1791884188.510:5): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 98.934319][ T4441] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.976800][ T4449] loop3: detected capacity change from 0 to 1024 [ 99.085714][ T4449] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.39: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 99.105868][ T4441] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10) [ 99.195982][ T4449] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.39: couldn't read orphan inode 11 (err -117) [ 99.212473][ T4449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.337271][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 99.359640][ T4449] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.39: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.492162][ T4456] EXT4-fs: Ignoring removed bh option [ 99.568527][ T4449] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 99.602586][ T4449] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.39: lblock 0 mapped to illegal pblock 48 (length 1) [ 99.620413][ T4449] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 99.637050][ T4449] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.39: Failed to acquire dquot type 0 [ 99.667145][ T4439] loop1: detected capacity change from 0 to 32768 [ 99.819250][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 99.841163][ T4439] XFS (loop1): Mounting V5 Filesystem [ 99.883048][ T4286] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 99.904158][ T4286] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 99.947277][ T4286] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 99.965299][ T4439] XFS (loop1): Ending clean mount [ 100.227364][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 100.274903][ T4439] syz.1.35 (4439) used greatest stack depth: 20496 bytes left [ 100.284863][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 100.320831][ T4486] netlink: 'syz.3.44': attribute type 6 has an invalid length. [ 100.340492][ T4273] XFS (loop1): Unmounting Filesystem [ 100.374256][ T4486] netlink: 'syz.3.44': attribute type 18 has an invalid length. [ 100.828237][ T4504] loop4: detected capacity change from 0 to 256 [ 100.930061][ T4504] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 101.414190][ T4524] loop4: detected capacity change from 0 to 1024 [ 101.429644][ T4524] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.476304][ T4524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.549473][ T4524] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 101.590851][ T4524] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.739740][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 101.753452][ T4318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.829874][ T4536] tipc: Started in network mode [ 101.835705][ T4536] tipc: Node identity 7f000001, cluster identity 4711 [ 101.844922][ T4536] tipc: Enabled bearer , priority 10 [ 101.854326][ T4536] tipc: Disabling bearer [ 101.924609][ T4540] bond0: option mode: unable to set because the bond device has slaves [ 101.973754][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.006802][ T4318] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 102.047982][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 102.071223][ T4318] usb 4-1: Product: syz [ 102.086508][ T4318] usb 4-1: Manufacturer: syz [ 102.124555][ T4318] usb 4-1: selecting invalid altsetting 1 [ 102.143349][ T4318] dvb_ttusb_budget: ttusb_init_controller: error [ 102.152032][ T4318] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 102.325478][ T4528] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 102.362789][ T4528] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 102.408003][ T4318] DVB: Unable to find symbol cx22700_attach() [ 102.458512][ T4555] loop4: detected capacity change from 0 to 2048 [ 102.514043][ T4318] DVB: Unable to find symbol tda10046_attach() [ 102.527650][ T4318] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 102.551835][ T4318] usb 4-1: USB disconnect, device number 2 [ 102.615837][ T4555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.631201][ T4555] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.752936][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 103.475758][ T4587] loop4: detected capacity change from 0 to 256 [ 103.511934][ T4591] loop3: detected capacity change from 0 to 16 [ 103.643935][ T4591] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 103.888804][ T4597] loop0: detected capacity change from 0 to 64 [ 103.950209][ T4589] loop1: detected capacity change from 0 to 32768 [ 104.161863][ T4320] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.190063][ T4589] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 104.401902][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 104.410490][ T4320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.458387][ T4320] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.500473][ T4589] syz.1.90 (4589) used greatest stack depth: 18432 bytes left [ 104.520930][ T4320] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.559347][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.577975][ T4320] usb 3-1: Product: syz [ 104.593196][ T4320] usb 3-1: Manufacturer: syz [ 104.598403][ T4320] usb 3-1: SerialNumber: syz [ 104.635962][ T4273] ocfs2: Unmounting device (7,1) on (node local) [ 104.864064][ T4320] usb 3-1: 0:2 : does not exist [ 104.888913][ T4320] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 105.015257][ T4320] usb 3-1: USB disconnect, device number 3 [ 105.101258][ T4399] udevd[4399]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.390180][ T4630] netlink: 'syz.4.109': attribute type 12 has an invalid length. [ 105.547156][ T4635] loop4: detected capacity change from 0 to 512 [ 105.653374][ T4641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 105.667631][ T4641] device batadv0 entered promiscuous mode [ 105.677173][ T4641] device macsec1 entered promiscuous mode [ 105.687701][ T4641] device batadv0 left promiscuous mode [ 105.895053][ T4323] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.957014][ T4646] Bluetooth: hci5: Frame reassembly failed (-84) [ 105.996306][ T4341] Bluetooth: hci5: Frame reassembly failed (-84) [ 106.095548][ T4323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.121490][ T4323] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 3.00 [ 106.152826][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.171134][ T4323] usb 1-1: Product: syz [ 106.176139][ T4323] usb 1-1: Manufacturer: syz [ 106.181377][ T4323] usb 1-1: SerialNumber: syz [ 106.193568][ T4323] pl2303 1-1:1.0: pl2303 converter detected [ 106.321012][ T4323] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 106.438701][ T4359] usb 1-1: USB disconnect, device number 3 [ 106.463472][ T4359] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 106.484250][ T4359] pl2303 1-1:1.0: device disconnected [ 106.769608][ T4660] device geneve2 entered promiscuous mode [ 106.927021][ T26] audit: type=1400 audit(1791884196.540:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name=":" pid=4662 comm="syz.2.123" [ 107.065790][ T4668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'. [ 107.085116][ T4668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 107.289011][ T4679] loop0: detected capacity change from 0 to 16 [ 107.329067][ T4679] erofs: (device loop0): mounted with root inode @ nid 36. [ 107.374469][ T4679] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 107.416348][ T4679] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 107.455149][ T4679] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 107.485804][ T4679] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 107.509272][ T4679] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 107.530336][ T4679] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 107.541935][ T26] audit: type=1800 audit(1791884197.160:7): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.130" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 107.976410][ T4689] device team0 entered promiscuous mode [ 107.992517][ T4689] device team_slave_0 entered promiscuous mode [ 107.999090][ T4689] device team_slave_1 entered promiscuous mode [ 108.006291][ T4281] Bluetooth: hci5: command 0xfc11 tx timeout [ 108.013941][ T4291] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 108.045003][ T4675] loop1: detected capacity change from 0 to 32768 [ 108.061862][ T4689] device macvlan2 entered promiscuous mode [ 108.088168][ T4689] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.171064][ T4675] ERROR: (device loop1): diAllocAG: numfree > numinos [ 108.171064][ T4675] [ 108.240599][ T4675] ERROR: (device loop1): remounting filesystem as read-only [ 108.280198][ T4675] ialloc: diAlloc returned -5! [ 108.329177][ T4691] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 108.329177][ T4691] [ 108.426258][ T4695] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 108.681674][ T4359] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.780009][ T4702] bridge0: port 2(bridge_slave_1) entered listening state [ 108.847770][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.889824][ T4359] usb 5-1: Using ep0 maxpacket: 16 [ 108.897785][ T4359] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.947290][ T4359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.991505][ T4359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 109.023736][ T4359] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 109.061876][ T4359] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.102761][ T4359] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.137332][ T4359] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 109.171694][ T4359] usb 5-1: Manufacturer: syz [ 109.187100][ T4359] usb 5-1: config 0 descriptor?? [ 109.671738][ T4359] rc_core: IR keymap rc-hauppauge not found [ 109.678408][ T4359] Registered IR keymap rc-empty [ 109.692347][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.762052][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.807396][ T4359] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 109.840493][ T4359] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 109.907678][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.956016][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.010003][ T4732] loop0: detected capacity change from 0 to 512 [ 110.025142][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.052414][ T4732] EXT4-fs: Ignoring removed nobh option [ 110.071798][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.103662][ T4732] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.122212][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.138732][ T4736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'. [ 110.149523][ T4732] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.168687][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.215148][ T4732] EXT4-fs (loop0): 1 truncate cleaned up [ 110.221920][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.256579][ T4732] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 110.271964][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.311725][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.341778][ T4359] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 110.393172][ T4359] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 110.403444][ T4359] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 110.420875][ T4745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 110.432876][ T4359] usb 5-1: USB disconnect, device number 3 [ 110.452594][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 110.630234][ T4751] loop3: detected capacity change from 0 to 136 [ 111.161190][ T4764] device-mapper: ioctl: name not supplied when creating device [ 111.460444][ T4770] Bluetooth: MGMT ver 1.22 [ 111.666110][ T4772] loop3: detected capacity change from 0 to 4096 [ 111.807061][ T4775] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.451734][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.476971][ T4794] loop0: detected capacity change from 0 to 4096 [ 112.513217][ T4794] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.550825][ T4794] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.593187][ T4794] EXT4-fs (loop0): Test dummy encryption mode enabled [ 112.643643][ T126] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.661683][ T126] usb 4-1: config 0 has no interface number 0 [ 112.675822][ T126] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 112.686082][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.694943][ T126] usb 4-1: Product: syz [ 112.699921][ T126] usb 4-1: Manufacturer: syz [ 112.705054][ T126] usb 4-1: SerialNumber: syz [ 112.711249][ T4794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.715521][ T126] usb 4-1: config 0 descriptor?? [ 112.870264][ T4802] loop1: detected capacity change from 0 to 256 [ 112.937618][ T126] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 112.955518][ T126] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.979882][ T4802] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 113.012046][ T126] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 113.051535][ T126] usb 4-1: media controller created [ 113.099284][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.109718][ T4802] exFAT-fs (loop1): hint_cluster is invalid (17) [ 113.118651][ T26] audit: type=1800 audit(1791884202.730:8): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.182" name="file2" dev="loop1" ino=1048642 res=0 errno=0 [ 113.152625][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 113.179942][ T126] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 113.203796][ T4802] exFAT-fs (loop1): error, broken FAT chain. [ 113.210148][ T4802] exFAT-fs (loop1): Filesystem has been set read-only [ 113.239257][ T126] usb 4-1: USB disconnect, device number 3 [ 113.299057][ T4802] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880528c07e0 iblock : 24, err : -5) [ 113.369278][ T4802] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 114.451773][ T4847] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 114.479260][ T4847] iwpm_mapping_info_cb: Unable to parse nlmsg [ 114.570293][ T4820] loop1: detected capacity change from 0 to 40427 [ 114.620235][ T4820] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 114.645605][ T4820] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 114.684145][ T4853] rnbd_client L211: map_device: Parameters missing [ 114.716230][ T4820] F2FS-fs (loop1): invalid crc value [ 114.769657][ T4855] loop0: detected capacity change from 0 to 256 [ 114.797727][ T4820] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 114.843119][ T4855] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 114.980966][ T4864] loop2: detected capacity change from 0 to 128 [ 115.030706][ T4864] FAT-fs (loop2): Invalid FSINFO signature: 0x00000004, 0x80417272 (sector = 1) [ 115.258241][ T4820] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 115.258552][ T4820] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.303379][ T4875] loop3: detected capacity change from 0 to 512 [ 115.369716][ T4341] FAT-fs (loop2): Invalid FSINFO signature: 0x00000004, 0x80417272 (sector = 1) [ 115.410101][ T4875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.410229][ T4875] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.570763][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 115.716554][ T4273] syz-executor: attempt to access beyond end of device [ 115.716554][ T4273] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.837819][ T4890] loop0: detected capacity change from 0 to 2048 [ 115.906676][ T4890] NILFS (loop0): invalid segment: Magic number mismatch [ 115.945464][ T4890] NILFS (loop0): trying rollback from an earlier position [ 116.008005][ T4890] NILFS (loop0): recovery complete [ 116.117367][ T4892] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.782918][ T4912] process 'syz.4.226' launched './file0' with NULL argv: empty string added [ 116.847073][ T4914] ALSA: mixer_oss: invalid OSS volume '¾áÿôƒxŠ·*ß ' [ 116.861662][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.024913][ T4922] loop0: detected capacity change from 0 to 128 [ 117.071907][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 117.088117][ T126] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 117.112424][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.131784][ T126] usb 3-1: Product: syz [ 117.142662][ T126] usb 3-1: Manufacturer: syz [ 117.152959][ T126] usb 3-1: SerialNumber: syz [ 117.168802][ T126] usb 3-1: config 0 descriptor?? [ 117.263306][ T4926] loop3: detected capacity change from 0 to 2048 [ 117.331503][ T4926] NILFS (loop3): invalid segment: Magic number mismatch [ 117.359179][ T4926] NILFS (loop3): trying rollback from an earlier position [ 117.398807][ T126] usb 3-1: ignoring: not an USB2CAN converter [ 117.436885][ T4926] NILFS (loop3): recovery complete [ 117.476564][ T4932] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.641093][ T126] usb 3-1: USB disconnect, device number 4 [ 117.863260][ T4928] loop4: detected capacity change from 0 to 32768 [ 117.908269][ T4928] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.234 (4928) [ 117.972590][ T4928] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 118.014090][ T4928] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 118.041102][ T4928] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.051311][ T4928] BTRFS info (device loop4): use zstd compression, level 3 [ 118.058750][ T4928] BTRFS info (device loop4): using free space tree [ 118.380793][ T4928] BTRFS info (device loop4): enabling ssd optimizations [ 118.511655][ T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.609105][ T26] audit: type=1800 audit(1791884208.220:9): pid=4928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.234" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 118.717015][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 118.725698][ T126] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 118.746262][ T126] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.758338][ T126] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.775942][ T126] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.807422][ T126] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.865317][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.101138][ T4283] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.118334][ T126] usb 3-1: GET_CAPABILITIES returned 0 [ 119.127121][ T126] usbtmc 3-1:16.0: can't read capabilities [ 119.407832][ T126] usb 3-1: USB disconnect, device number 5 [ 119.596852][ T4972] loop0: detected capacity change from 0 to 40427 [ 119.639057][ T4972] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 119.657017][ T4972] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.697523][ T4972] F2FS-fs (loop0): invalid crc value [ 119.707524][ T4972] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 119.917028][ T4972] F2FS-fs (loop0): Start checkpoint disabled! [ 119.996678][ T4972] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.023666][ T4972] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 120.206712][ T4972] syz.0.243: attempt to access beyond end of device [ 120.206712][ T4972] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.315810][ T11] kworker/u4:1: attempt to access beyond end of device [ 120.315810][ T11] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 120.625673][ T5015] loop2: detected capacity change from 0 to 64 [ 120.838245][ T5018] loop3: detected capacity change from 0 to 512 [ 120.903964][ T5018] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 121.428331][ T5032] MTRR 1 not used [ 121.706265][ T5043] loop2: detected capacity change from 0 to 128 [ 121.794735][ T5043] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 121.900823][ T5043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 121.977936][ T5043] ext2 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.225693][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 122.266050][ T5060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 122.295122][ T5060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 123.117938][ T5093] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.127219][ T5093] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.136157][ T5093] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.145582][ T5093] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.474924][ T5104] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4286] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5104] [ 123.802962][ T5112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 123.832472][ T5112] netlink: 'syz.0.298': attribute type 7 has an invalid length. [ 123.840199][ T5112] netlink: 'syz.0.298': attribute type 8 has an invalid length. [ 123.872552][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 124.428278][ T5133] device batadv_slave_1 entered promiscuous mode [ 124.460943][ T5132] device batadv_slave_1 left promiscuous mode [ 124.504809][ T5135] loop0: detected capacity change from 0 to 512 [ 124.579314][ T5135] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 124.611800][ T5135] System zones: 0-2, 18-18, 34-35 [ 124.661824][ T5135] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 124.673289][ T5135] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.698694][ T5142] loop1: detected capacity change from 0 to 64 [ 124.926140][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 125.511045][ T5163] loop0: detected capacity change from 0 to 512 [ 125.553957][ T5163] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.589067][ T5163] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 125.660022][ T5163] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 125.696445][ T5163] EXT4-fs (loop0): orphan cleanup on readonly fs [ 125.713786][ T5163] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.320: Invalid block bitmap block 0 in block_group 0 [ 125.732169][ T5163] Quota error (device loop0): write_blk: dquota write failed [ 125.740094][ T5163] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 125.750462][ T5163] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.320: Failed to acquire dquot type 1 [ 125.764380][ T5163] EXT4-fs (loop0): 1 orphan inode deleted [ 125.772727][ T4341] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 125.783651][ T4341] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 125.801544][ T5163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.831736][ T126] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.908107][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 126.033049][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 126.047541][ T126] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 126.062613][ T5178] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 126.086344][ T126] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 126.101677][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.128177][ T126] usb 4-1: Product: syz [ 126.132802][ T126] usb 4-1: Manufacturer: syz [ 126.137464][ T126] usb 4-1: SerialNumber: syz [ 126.167124][ T126] r8152-cfgselector 4-1: config 0 descriptor?? [ 126.397478][ T126] r8152-cfgselector 4-1: Needed 2 retries to read version [ 126.407135][ T126] r8152-cfgselector 4-1: Unknown version 0x0000 [ 126.469347][ T5193] loop2: detected capacity change from 0 to 1024 [ 126.616995][ T126] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 126.637735][ T5195] loop0: detected capacity change from 0 to 512 [ 126.708345][ T5195] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.741003][ T5195] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.995461][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 127.361792][ T26] audit: type=1326 audit(1791884216.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5211 comm="syz.1.340" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa1d59e2d9 code=0x0 [ 127.841341][ T5206] loop0: detected capacity change from 0 to 32768 [ 127.951390][ T5206] XFS (loop0): Mounting V5 Filesystem [ 128.028193][ T5206] XFS (loop0): Ending clean mount [ 128.116621][ T5219] loop2: detected capacity change from 0 to 32768 [ 128.166615][ T5219] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.342 (5219) [ 128.222373][ T5219] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.286107][ T5219] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 128.301697][ T5219] BTRFS info (device loop2): force clearing of disk cache [ 128.301812][ T5219] BTRFS info (device loop2): enabling auto defrag [ 128.301903][ T5219] BTRFS info (device loop2): max_inline at 0 [ 128.301929][ T5219] BTRFS info (device loop2): enabling disk space caching [ 128.301947][ T5219] BTRFS info (device loop2): disk space caching is enabled [ 128.326034][ T4271] XFS (loop0): Unmounting Filesystem [ 128.607264][ T5219] BTRFS info (device loop2): enabling ssd optimizations [ 128.637906][ T5219] BTRFS info (device loop2): rebuilding free space tree [ 128.733844][ T5254] netlink: 48 bytes leftover after parsing attributes in process `syz.3.347'. [ 128.824919][ T5219] BTRFS info (device loop2): disabling free space tree [ 128.852066][ T5219] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.893847][ T5219] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.138937][ T26] audit: type=1800 audit(1791884218.750:11): pid=5219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.342" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 129.278236][ T5262] input: syz0 as /devices/virtual/input/input9 [ 129.359111][ T4272] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.744357][ T5273] FAULT_INJECTION: forcing a failure. [ 129.744357][ T5273] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 129.781803][ T5273] CPU: 1 PID: 5273 Comm: syz.0.352 Not tainted syzkaller #0 [ 129.789189][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.799348][ T5273] Call Trace: [ 129.802697][ T5273] [ 129.805677][ T5273] dump_stack_lvl+0x188/0x24e [ 129.810506][ T5273] ? show_regs_print_info+0x12/0x12 [ 129.815763][ T5273] ? load_image+0x410/0x410 [ 129.820927][ T5273] ? __lock_acquire+0x7ea0/0x7ea0 [ 129.826599][ T5273] should_fail_ex+0x390/0x4c0 [ 129.831668][ T5273] prepare_alloc_pages+0x1e1/0x5b0 [ 129.838346][ T5273] __alloc_pages+0x130/0x4f0 [ 129.843045][ T5273] ? zone_statistics+0x170/0x170 [ 129.848349][ T5273] folio_alloc+0x1c/0x60 [ 129.853054][ T5273] filemap_alloc_folio+0xdb/0x480 [ 129.858276][ T5273] ? __filemap_get_folio+0x10f/0xde0 [ 129.863793][ T5273] ? filemap_add_folio+0x3d0/0x3d0 [ 129.869550][ T5273] ? __lock_acquire+0x7ea0/0x7ea0 [ 129.874941][ T5273] ? xas_load+0x127/0x140 [ 129.879341][ T5273] __filemap_get_folio+0x6ba/0xde0 [ 129.884533][ T5273] ? __filemap_get_folio+0x10f/0xde0 [ 129.890571][ T5273] ? page_cache_prev_miss+0x380/0x380 [ 129.896575][ T5273] pagecache_get_page+0x26/0x260 [ 129.901864][ T5273] aio_setup_ring+0x3ab/0xf50 [ 129.907170][ T5273] ? free_ioctx_reqs+0x180/0x180 [ 129.912315][ T5273] ioctx_alloc+0x315/0x7b0 [ 129.916821][ T5273] __se_sys_io_setup+0x7b/0x190 [ 129.922011][ T5273] do_syscall_64+0x4c/0xa0 [ 129.927935][ T5273] ? clear_bhb_loop+0x60/0xb0 [ 129.932954][ T5273] ? clear_bhb_loop+0x60/0xb0 [ 129.937722][ T5273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.943867][ T5273] RIP: 0033:0x7f917039e2d9 [ 129.948381][ T5273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.968314][ T5273] RSP: 002b:00007f91711d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 129.976891][ T5273] RAX: ffffffffffffffda RBX: 00007f9170625fa0 RCX: 00007f917039e2d9 [ 129.985020][ T5273] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000002278 [ 129.993076][ T5273] RBP: 00007f9170435888 R08: 0000000000000000 R09: 0000000000000000 [ 130.001312][ T5273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.009361][ T5273] R13: 00007f9170626038 R14: 00007f9170625fa0 R15: 00007ffd1aeb1198 [ 130.018232][ T5273] [ 130.021450][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.309396][ T5284] FAULT_INJECTION: forcing a failure. [ 130.309396][ T5284] name failslab, interval 1, probability 0, space 0, times 1 [ 130.354231][ T5284] CPU: 1 PID: 5284 Comm: syz.1.355 Not tainted syzkaller #0 [ 130.361620][ T5284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.372161][ T5284] Call Trace: [ 130.375513][ T5284] [ 130.378482][ T5284] dump_stack_lvl+0x188/0x24e [ 130.383236][ T5284] ? show_regs_print_info+0x12/0x12 [ 130.388490][ T5284] ? load_image+0x410/0x410 [ 130.393034][ T5284] ? __might_sleep+0xd0/0xd0 [ 130.397763][ T5284] ? __lock_acquire+0x7ea0/0x7ea0 [ 130.402847][ T5284] should_fail_ex+0x390/0x4c0 [ 130.407582][ T5284] should_failslab+0x5/0x20 [ 130.412387][ T5284] slab_pre_alloc_hook+0x59/0x300 [ 130.418185][ T5284] kmem_cache_alloc+0x56/0x2f0 [ 130.422994][ T5284] ? do_timer_create+0x1c1/0x12f0 [ 130.428064][ T5284] do_timer_create+0x1c1/0x12f0 [ 130.432948][ T5284] ? vfs_write+0x777/0x9a0 [ 130.437413][ T5284] ? do_futex+0x310/0x320 [ 130.442233][ T5284] ? __ia32_sys_clock_nanosleep_time32+0xa0/0xa0 [ 130.448646][ T5284] __x64_sys_timer_create+0x149/0x1c0 [ 130.454083][ T5284] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.460137][ T5284] ? posix_timer_event+0xf0/0xf0 [ 130.465375][ T5284] ? lock_chain_count+0x20/0x20 [ 130.470299][ T5284] ? lockdep_hardirqs_on+0x94/0x140 [ 130.475577][ T5284] do_syscall_64+0x4c/0xa0 [ 130.480074][ T5284] ? clear_bhb_loop+0x60/0xb0 [ 130.484800][ T5284] ? clear_bhb_loop+0x60/0xb0 [ 130.489517][ T5284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.495740][ T5284] RIP: 0033:0x7ffa1d59e2d9 [ 130.500284][ T5284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.520100][ T5284] RSP: 002b:00007ffa1e463028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 130.528640][ T5284] RAX: ffffffffffffffda RBX: 00007ffa1d825fa0 RCX: 00007ffa1d59e2d9 [ 130.536727][ T5284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.544825][ T5284] RBP: 00007ffa1d635888 R08: 0000000000000000 R09: 0000000000000000 [ 130.552823][ T5284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.560916][ T5284] R13: 00007ffa1d826038 R14: 00007ffa1d825fa0 R15: 00007ffd4b12f768 [ 130.568952][ T5284] [ 130.572093][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.070302][ T5300] Zero length message leads to an empty skb [ 131.070329][ T5303] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 131.096560][ T5303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.104772][ T5303] IPv6: NLM_F_CREATE should be set when creating new route [ 131.112310][ T5303] IPv6: NLM_F_CREATE should be set when creating new route [ 131.183504][ T5306] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 131.212451][ T5306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.243701][ T5305] loop2: detected capacity change from 0 to 1024 [ 131.553679][ T5294] loop0: detected capacity change from 0 to 32768 [ 131.676332][ T5294] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 132.054494][ T4271] ocfs2: Unmounting device (7,0) on (node local) [ 132.322049][ T5334] device batadv_slave_0 entered promiscuous mode [ 132.358754][ T5331] device batadv_slave_0 left promiscuous mode [ 132.461189][ T5336] loop2: detected capacity change from 0 to 256 [ 132.514886][ T5339] loop4: detected capacity change from 0 to 128 [ 132.622663][ T5339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.682371][ T5339] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.832120][ T4990] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 132.969303][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 133.051799][ T4990] usb 1-1: Using ep0 maxpacket: 8 [ 133.079437][ T4990] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 133.109099][ T4990] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.141871][ T4990] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.177191][ T4990] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.201800][ T4990] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.221636][ T4990] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.230794][ T4990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.319483][ T5359] loop1: detected capacity change from 0 to 128 [ 133.330713][ T5359] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.367057][ T5359] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.480667][ T4990] usb 1-1: GET_CAPABILITIES returned 0 [ 133.498111][ T4990] usbtmc 1-1:16.0: can't read capabilities [ 133.578500][ T32] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.700730][ T5346] loop2: detected capacity change from 0 to 32768 [ 133.729175][ T5271] usb 1-1: USB disconnect, device number 4 [ 133.753250][ T5346] (syz.2.379,5346,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.812674][ T5346] (syz.2.379,5346,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 133.887518][ T5346] JBD2: Ignoring recovery information on journal [ 134.029666][ T5346] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 134.300358][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 134.417481][ T5372] FAULT_INJECTION: forcing a failure. [ 134.417481][ T5372] name failslab, interval 1, probability 0, space 0, times 0 [ 134.432081][ T5372] CPU: 1 PID: 5372 Comm: syz.1.391 Not tainted syzkaller #0 [ 134.441150][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.451267][ T5372] Call Trace: [ 134.454686][ T5372] [ 134.457678][ T5372] dump_stack_lvl+0x188/0x24e [ 134.462444][ T5372] ? show_regs_print_info+0x12/0x12 [ 134.467747][ T5372] ? load_image+0x410/0x410 [ 134.472335][ T5372] ? __lock_acquire+0x7ea0/0x7ea0 [ 134.477453][ T5372] should_fail_ex+0x390/0x4c0 [ 134.482342][ T5372] should_failslab+0x5/0x20 [ 134.486922][ T5372] slab_pre_alloc_hook+0x59/0x300 [ 134.492018][ T5372] kmem_cache_alloc+0x56/0x2f0 [ 134.496832][ T5372] ? vm_area_alloc+0x20/0xe0 [ 134.501535][ T5372] vm_area_alloc+0x20/0xe0 [ 134.506022][ T5372] mmap_region+0xcbc/0x1c50 [ 134.510611][ T5372] ? file_mmap_ok+0x170/0x170 [ 134.515449][ T5372] ? vma_expand+0x850/0x850 [ 134.520031][ T5372] ? cap_mmap_addr+0x153/0x2c0 [ 134.525386][ T5372] do_mmap+0x9ce/0x10d0 [ 134.529617][ T5372] ? mlock_future_check+0x100/0x100 [ 134.534939][ T5372] ? ima_file_mmap+0xf7/0x140 [ 134.539700][ T5372] ? ima_file_free+0x3e0/0x3e0 [ 134.544539][ T5372] vm_mmap_pgoff+0x1c1/0x2d0 [ 134.549194][ T5372] ? account_locked_vm+0xe0/0xe0 [ 134.554168][ T5372] ? __se_sys_memfd_create+0x2c0/0x340 [ 134.559676][ T5372] ? ksys_mmap_pgoff+0xef/0x720 [ 134.564717][ T5372] ? lockdep_hardirqs_on+0x94/0x140 [ 134.569989][ T5372] do_syscall_64+0x4c/0xa0 [ 134.574459][ T5372] ? clear_bhb_loop+0x60/0xb0 [ 134.579456][ T5372] ? clear_bhb_loop+0x60/0xb0 [ 134.584187][ T5372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.590135][ T5372] RIP: 0033:0x7ffa1d59e042 [ 134.594645][ T5372] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 134.614314][ T5372] RSP: 002b:00007ffa1e462df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 134.622769][ T5372] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffa1d59e042 [ 134.631049][ T5372] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 134.639788][ T5372] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 134.648074][ T5372] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 134.656218][ T5372] R13: 00007ffa1e462ee0 R14: 00007ffa1e462ea0 R15: 0000200000000300 [ 134.665200][ T5372] [ 134.668538][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.740220][ T5376] raw_sendmsg: syz.4.394 forgot to set AF_INET. Fix it! [ 134.966096][ T5385] netlink: 25 bytes leftover after parsing attributes in process `syz.4.396'. [ 134.990486][ T5385] device eql entered promiscuous mode [ 135.069507][ T5385] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.396'. [ 135.102377][ T5385] 0ªX¹¦Dö»: renamed from eql [ 135.128897][ T5385] 0ªX¹¦Dö»: remember to turn off Van-Jacobson compression on your slave devices [ 135.171834][ T5385] device 00ªX¹¦Dö» left promiscuous mode [ 135.178554][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 135.242633][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): 00ªX¹¦Dö»: link becomes ready [ 135.561662][ T5272] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.732865][ T5375] loop3: detected capacity change from 0 to 32768 [ 135.776929][ T5272] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.821936][ T5272] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.837279][ T5272] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.848515][ T5272] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 135.861441][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.873599][ T5272] usb 2-1: config 0 descriptor?? [ 135.912939][ T5375] XFS (loop3): Mounting V5 Filesystem [ 136.076585][ T5375] XFS (loop3): Ending clean mount [ 136.213239][ T5416] loop4: detected capacity change from 0 to 256 [ 136.295742][ T5272] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:06A3:0CD0.0002/input/input11 [ 136.453944][ T4286] XFS (loop3): Unmounting Filesystem [ 136.555135][ T5272] saitek 0003:06A3:0CD0.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.1-1/input0 [ 136.573512][ T5420] loop2: detected capacity change from 0 to 1024 [ 136.584345][ T5420] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.622117][ T5272] usb 2-1: USB disconnect, device number 2 [ 136.643836][ T5420] EXT4-fs: inline encryption not supported [ 136.818933][ T5420] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.406: lblock 2 mapped to illegal pblock 2 (length 1) [ 136.938330][ T5420] EXT4-fs (loop2): Remounting filesystem read-only [ 136.957215][ T5420] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 136.990981][ T5424] fido_id[5424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 137.016220][ T5420] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.406: lblock 0 mapped to illegal pblock 48 (length 1) [ 137.072104][ T5420] EXT4-fs (loop2): Remounting filesystem read-only [ 137.117921][ T5420] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 137.221679][ T5420] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.406: Failed to acquire dquot type 0 [ 137.259149][ T5420] EXT4-fs (loop2): Remounting filesystem read-only [ 137.271698][ T5420] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 137.331256][ T5420] EXT4-fs (loop2): Remounting filesystem read-only [ 137.371130][ T5420] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.406: mark_inode_dirty error [ 137.412878][ T5420] EXT4-fs (loop2): Remounting filesystem read-only [ 137.432010][ T5420] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 137.473508][ T5420] EXT4-fs (loop2): 1 orphan inode deleted [ 137.479433][ T5420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.502259][ T11] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 137.542253][ T5439] netlink: 104 bytes leftover after parsing attributes in process `syz.4.411'. [ 137.598429][ T11] EXT4-fs (loop2): Remounting filesystem read-only [ 137.623870][ T5420] EXT4-fs (loop2): shut down requested (1) [ 137.628520][ T11] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 137.760910][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 138.060260][ T5457] loop4: detected capacity change from 0 to 128 [ 138.122215][ T5457] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 138.171394][ T5457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.207698][ T5457] ext2 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.416526][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.423424][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.451328][ T5457] overlayfs: upper fs needs to support d_type. [ 138.601229][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 138.688564][ T5446] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 138.855885][ T5472] netlink: 25 bytes leftover after parsing attributes in process `syz.1.420'. [ 138.878692][ T5474] loop3: detected capacity change from 0 to 512 [ 138.888487][ T5472] device 00ªX¹¦Dö» entered promiscuous mode [ 138.931041][ T5474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.943019][ T5472] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.420'. [ 138.957187][ T5472] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» [ 138.973418][ T5474] EXT4-fs (loop3): 1 truncate cleaned up [ 138.988791][ T5474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.999470][ T5472] 1ªX¹¦Dö»: remember to turn off Van-Jacobson compression on your slave devices [ 139.009739][ T5472] device 01ªX¹¦Dö» left promiscuous mode [ 139.016260][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): 01ªX¹¦Dö»: link becomes ready [ 139.024610][ T5472] IPv6: ADDRCONF(NETDEV_CHANGE): 01ªX¹¦Dö»: link becomes ready [ 139.129017][ T26] audit: type=1800 audit(1791884228.740:12): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.423" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 139.159058][ T5474] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.423: missing EA_INODE flag [ 139.248213][ T5474] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.423: error while reading EA inode 2 err=-117 [ 139.570329][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 139.581785][ T4990] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.766317][ T4990] usb 5-1: Using ep0 maxpacket: 16 [ 139.775717][ T4990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.826713][ T4990] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.862383][ T4990] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.891408][ T4990] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 139.930781][ T4990] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.945588][ T4990] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 139.959090][ T4990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.972562][ T4990] usb 5-1: config 0 descriptor?? [ 140.099425][ T5498] loop0: detected capacity change from 0 to 1024 [ 140.144054][ T5500] loop1: detected capacity change from 0 to 1024 [ 140.163237][ T5498] EXT4-fs: inline encryption not supported [ 140.220001][ T5498] EXT4-fs: inline encryption not supported [ 140.250446][ T5498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.294204][ T5498] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.306613][ T5500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 140.392994][ T5498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 140.441874][ T26] audit: type=1800 audit(1791884230.050:13): pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.435" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 140.452692][ T5498] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.462763][ T5500] EXT4-fs (loop1): shut down requested (0) [ 140.479891][ T4990] logitech-djreceiver 0003:046D:C53A.0003: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 140.500730][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 140.519342][ T5498] EXT4-fs (loop0): shut down requested (2) [ 140.636495][ T4990] usb 5-1: USB disconnect, device number 4 [ 140.749457][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 140.765961][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 140.933829][ T5510] fido_id[5510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 141.191752][ T5275] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.331520][ T5524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 141.388481][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.409249][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.419446][ T5275] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.433531][ T5275] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.443195][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.462613][ T5275] usb 1-1: config 0 descriptor?? [ 141.812376][ T5522] loop3: detected capacity change from 0 to 32768 [ 141.877222][ T5522] JBD2: Ignoring recovery information on journal [ 141.889615][ T5275] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 141.912115][ T5275] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 142.041882][ T5532] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 142.064714][ T5522] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.207660][ T5275] usb 1-1: USB disconnect, device number 5 [ 142.384339][ T4286] ocfs2: Unmounting device (7,3) on (node local) [ 142.564751][ T5549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 142.586307][ T5551] loop4: detected capacity change from 0 to 128 [ 142.638168][ T5551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.661892][ T5551] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.733670][ T5549] device macvtap1 entered promiscuous mode [ 142.803283][ T5549] device vlan0 entered promiscuous mode [ 142.836335][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 142.933742][ T5552] device macvtap2 entered promiscuous mode [ 142.950742][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 143.069697][ T5565] loop1: detected capacity change from 0 to 512 [ 143.135332][ T5565] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.194123][ T5565] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #15: comm syz.1.458: inline data xattr refers to an external xattr inode [ 143.209282][ T5567] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 143.290621][ T5565] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.458: couldn't read orphan inode 15 (err -117) [ 143.334825][ T5565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 143.344833][ T5570] loop3: detected capacity change from 0 to 1024 [ 143.383767][ T5565] EXT4-fs (loop1): shut down requested (2) [ 143.430586][ T5570] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 143.462859][ T5570] hfsplus: xattr searching failed [ 143.468310][ T5570] syz.3.461: attempt to access beyond end of device [ 143.468310][ T5570] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 143.563597][ T5570] Buffer I/O error on dev loop3, logical block 458752, async page read [ 143.582436][ T5570] hfsplus: unable to mark blocks free: error -5 [ 143.588786][ T5570] hfsplus: can't free extent [ 143.608669][ T5565] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 143.648560][ T5576] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 143.675992][ T5576] hfsplus: xattr searching failed [ 143.721860][ T5576] syz.3.461: attempt to access beyond end of device [ 143.721860][ T5576] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 143.801458][ T5576] Buffer I/O error on dev loop3, logical block 458752, async page read [ 143.814247][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 143.841809][ T5576] hfsplus: unable to mark blocks free: error -5 [ 143.861653][ T5576] hfsplus: can't free extent [ 143.896968][ T5580] netlink: 'syz.4.465': attribute type 3 has an invalid length. [ 144.051201][ T5585] loop1: detected capacity change from 0 to 2048 [ 144.145915][ T5585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.214181][ T5587] ptp ptp0: new virtual clock ptp1 [ 144.219931][ T5587] ptp ptp0: guarantee physical clock free running [ 144.244021][ T5591] ptp ptp0: delete virtual clock ptp1 [ 144.325017][ T5591] ptp ptp0: only physical clock in use now [ 144.652476][ T5601] FAULT_INJECTION: forcing a failure. [ 144.652476][ T5601] name failslab, interval 1, probability 0, space 0, times 0 [ 144.665379][ T5601] CPU: 1 PID: 5601 Comm: syz.1.473 Not tainted syzkaller #0 [ 144.672723][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.682828][ T5601] Call Trace: [ 144.686145][ T5601] [ 144.689108][ T5601] dump_stack_lvl+0x188/0x24e [ 144.693839][ T5601] ? show_regs_print_info+0x12/0x12 [ 144.699091][ T5601] ? load_image+0x410/0x410 [ 144.703647][ T5601] ? __lock_acquire+0x7ea0/0x7ea0 [ 144.708863][ T5601] should_fail_ex+0x390/0x4c0 [ 144.713638][ T5601] should_failslab+0x5/0x20 [ 144.718228][ T5601] slab_pre_alloc_hook+0x59/0x300 [ 144.724119][ T5601] kmem_cache_alloc+0x56/0x2f0 [ 144.729309][ T5601] ? security_inode_alloc+0x30/0x110 [ 144.734846][ T5601] security_inode_alloc+0x30/0x110 [ 144.740034][ T5601] inode_init_always+0x910/0xc90 [ 144.745049][ T5601] new_inode_pseudo+0x91/0x1c0 [ 144.749878][ T5601] __sock_create+0x129/0x940 [ 144.754523][ T5601] ? memset+0x1e/0x40 [ 144.758563][ T5601] smc_create+0x186/0x290 [ 144.762958][ T5601] __sock_create+0x49a/0x940 [ 144.767608][ T5601] __sys_socket+0xc4/0x190 [ 144.772172][ T5601] __x64_sys_socket+0x76/0x80 [ 144.776959][ T5601] do_syscall_64+0x4c/0xa0 [ 144.781432][ T5601] ? clear_bhb_loop+0x60/0xb0 [ 144.786170][ T5601] ? clear_bhb_loop+0x60/0xb0 [ 144.790905][ T5601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.796841][ T5601] RIP: 0033:0x7ffa1d59e2d9 [ 144.801291][ T5601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.820939][ T5601] RSP: 002b:00007ffa1e463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 144.829483][ T5601] RAX: ffffffffffffffda RBX: 00007ffa1d825fa0 RCX: 00007ffa1d59e2d9 [ 144.837500][ T5601] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 144.845499][ T5601] RBP: 00007ffa1d635888 R08: 0000000000000000 R09: 0000000000000000 [ 144.853507][ T5601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.861504][ T5601] R13: 00007ffa1d826038 R14: 00007ffa1d825fa0 R15: 00007ffd4b12f768 [ 144.869532][ T5601] [ 144.899316][ T5602] loop0: detected capacity change from 0 to 2048 [ 144.947297][ T5601] socket: no more sockets [ 144.967699][ T5602] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.072312][ T26] audit: type=1800 audit(1791884234.690:14): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.474" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 145.492118][ T5618] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 145.678520][ T5626] netlink: 428 bytes leftover after parsing attributes in process `syz.1.483'. [ 145.723292][ T5626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.483'. [ 145.871672][ T5631] syz.1.487 uses obsolete (PF_INET,SOCK_PACKET) [ 146.486896][ T5647] loop1: detected capacity change from 0 to 512 [ 146.511928][ T4991] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.538591][ T5647] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.608518][ T5647] EXT4-fs (loop1): 1 truncate cleaned up [ 146.622307][ T5647] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 146.724086][ T4991] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.750111][ T4991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.780215][ T26] audit: type=1800 audit(1791884236.390:15): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.493" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 146.812414][ T5647] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.493: missing EA_INODE flag [ 146.831822][ T4991] usb 3-1: config 0 descriptor?? [ 146.849865][ T4991] cp210x 3-1:0.0: cp210x converter detected [ 146.883111][ T5647] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.493: error while reading EA inode 2 err=-117 [ 147.269892][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 147.281184][ T4991] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 147.288139][ T5658] loop3: detected capacity change from 0 to 8192 [ 147.372644][ T5658] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.454898][ T5660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.498'. [ 147.488256][ T5660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 147.504082][ T4991] usb 3-1: cp210x converter now attached to ttyUSB0 [ 147.688621][ T5656] loop4: detected capacity change from 0 to 32768 [ 147.713011][ T5275] usb 3-1: USB disconnect, device number 6 [ 147.740083][ T5275] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 147.816508][ T5275] cp210x 3-1:0.0: device disconnected [ 147.844747][ T5656] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 147.867286][ T5656] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 147.920301][ T5668] synth uevent: /bus/acpi: unknown uevent action string [ 148.055302][ T4283] XFS (loop4): Unmounting Filesystem [ 148.357284][ T5682] loop1: detected capacity change from 0 to 2048 [ 148.438768][ T5682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.467778][ T5685] loop3: detected capacity change from 0 to 16 [ 148.522230][ T5685] erofs: (device loop3): mounted with root inode @ nid 36. [ 148.538635][ T5688] ptp ptp0: new virtual clock ptp1 [ 148.548715][ T5688] ptp ptp0: guarantee physical clock free running [ 148.591283][ T5691] ptp ptp0: delete virtual clock ptp1 [ 148.631140][ T5691] ptp ptp0: only physical clock in use now [ 148.864754][ T5699] loop1: detected capacity change from 0 to 1024 [ 148.914899][ T5703] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 148.949853][ T5699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 148.972684][ T5699] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.123379][ T5699] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.510: lblock 0 mapped to illegal pblock 0 (length 1) [ 149.208263][ T5699] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 149.253809][ T5699] EXT4-fs (loop1): This should not happen!! Data will be lost [ 149.253809][ T5699] [ 149.477535][ T4356] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:7: lblock 4 mapped to illegal pblock 4 (length 2) [ 149.535390][ T4356] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 149.550223][ T5725] netlink: 104 bytes leftover after parsing attributes in process `syz.0.517'. [ 149.566032][ T4356] EXT4-fs (loop1): This should not happen!! Data will be lost [ 149.566032][ T4356] [ 149.602472][ T4356] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 149.652542][ T4356] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 149.695677][ T4356] EXT4-fs (loop1): This should not happen!! Data will be lost [ 149.695677][ T4356] [ 149.740188][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 150.226401][ T5721] loop3: detected capacity change from 0 to 32768 [ 150.278749][ T5721] (syz.3.515,5721,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.327195][ T5721] (syz.3.515,5721,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 150.424921][ T5721] JBD2: Ignoring recovery information on journal [ 150.501212][ T5721] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 150.903731][ T5763] size and base must be multiples of 4 kiB [ 150.909631][ T5763] CPU: 0 PID: 5763 Comm: syz.1.530 Not tainted syzkaller #0 [ 150.916974][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.928389][ T5763] Call Trace: [ 150.931718][ T5763] [ 150.934910][ T5763] dump_stack_lvl+0x188/0x24e [ 150.939830][ T5763] ? show_regs_print_info+0x12/0x12 [ 150.945176][ T5763] ? load_image+0x410/0x410 [ 150.949824][ T5763] mtrr_del+0x81/0xb0 [ 150.953949][ T5763] mtrr_ioctl+0x998/0x1140 [ 150.958886][ T5763] ? mtrr_close+0x1f0/0x1f0 [ 150.963440][ T5763] ? __fget_files+0x28/0x460 [ 150.968527][ T5763] ? mtrr_close+0x1f0/0x1f0 [ 150.973091][ T5763] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 150.978953][ T5763] ? proc_reg_poll+0x280/0x280 [ 150.983853][ T5763] __se_sys_ioctl+0xfa/0x170 [ 150.988573][ T5763] do_syscall_64+0x4c/0xa0 [ 150.993038][ T5763] ? clear_bhb_loop+0x60/0xb0 [ 150.997986][ T5763] ? clear_bhb_loop+0x60/0xb0 [ 151.002713][ T5763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.008732][ T5763] RIP: 0033:0x7ffa1d59e2d9 [ 151.013355][ T5763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.032993][ T5763] RSP: 002b:00007ffa1e463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.041439][ T5763] RAX: ffffffffffffffda RBX: 00007ffa1d825fa0 RCX: 00007ffa1d59e2d9 [ 151.049471][ T5763] RDX: 0000200000000a00 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 151.057472][ T5763] RBP: 00007ffa1d635888 R08: 0000000000000000 R09: 0000000000000000 [ 151.065679][ T5763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.073776][ T5763] R13: 00007ffa1d826038 R14: 00007ffa1d825fa0 R15: 00007ffd4b12f768 [ 151.081793][ T5763] [ 151.136225][ T4286] ocfs2: Unmounting device (7,3) on (node local) [ 151.291067][ T5765] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 151.375966][ T5768] loop1: detected capacity change from 0 to 512 [ 151.450826][ T5768] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 151.645354][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 151.654549][ T5275] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 151.662278][ T5768] System zones: 0-2, 18-18, 34-35 [ 151.668300][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 151.688090][ T5768] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.712237][ T5768] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.851808][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 151.858852][ T5275] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 151.921383][ T5275] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.936492][ T5275] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.949548][ T5275] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.963962][ T5275] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.979067][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.020825][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 152.033858][ T5782] loop3: detected capacity change from 0 to 8192 [ 152.157520][ T5782] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 152.205490][ T5275] usb 1-1: GET_CAPABILITIES returned 0 [ 152.211083][ T5275] usbtmc 1-1:16.0: can't read capabilities [ 152.260473][ T5782] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 152.280564][ T5782] REISERFS (device loop3): using ordered data mode [ 152.300759][ T5782] reiserfs: using flush barriers [ 152.318012][ T5782] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 152.355539][ T5782] REISERFS (device loop3): checking transaction log (loop3) [ 152.438650][ T14] usb 1-1: USB disconnect, device number 6 [ 152.622828][ T5782] REISERFS (device loop3): Using tea hash to sort names [ 152.654716][ T5782] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 152.701045][ T5782] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 152.793653][ T5782] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 152.839924][ T5790] loop2: detected capacity change from 0 to 512 [ 152.869922][ T5782] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 152.885994][ T5790] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.928815][ T5790] EXT4-fs (loop2): 1 truncate cleaned up [ 152.935814][ T5790] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.978622][ T5782] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 153.012496][ T26] audit: type=1800 audit(1791884242.630:16): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.540" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 153.057634][ T5790] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.540: missing EA_INODE flag [ 153.173477][ T5790] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.540: error while reading EA inode 2 err=-117 [ 153.219782][ T5794] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.268823][ T5788] loop4: detected capacity change from 0 to 32768 [ 153.346888][ T5788] JBD2: Ignoring recovery information on journal [ 153.564169][ T5788] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 153.617645][ T5800] loop3: detected capacity change from 0 to 128 [ 153.665935][ T5800] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 153.768251][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 153.969830][ T26] audit: type=1326 audit(1791884243.580:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.544" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11d499e2d9 code=0x0 [ 154.030090][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 154.062540][ T5275] kernel write not supported for file /vcsu (pid: 5275 comm: kworker/1:14) [ 154.230218][ T5810] loop1: detected capacity change from 0 to 16 [ 154.259502][ T5810] erofs: (device loop1): mounted with root inode @ nid 36. [ 154.442571][ T26] audit: type=1326 audit(1791884244.060:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.0.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917039e2d9 code=0x7ffc0000 [ 154.468132][ T26] audit: type=1326 audit(1791884244.080:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.0.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917039e2d9 code=0x7ffc0000 [ 154.492744][ T26] audit: type=1326 audit(1791884244.090:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.0.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917039e2d9 code=0x7ffc0000 [ 154.524469][ T5822] loop3: detected capacity change from 0 to 512 [ 154.541283][ T26] audit: type=1326 audit(1791884244.140:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.0.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f917039e2d9 code=0x7ffc0000 [ 154.599219][ T26] audit: type=1326 audit(1791884244.140:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.0.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917039e2d9 code=0x7ffc0000 [ 154.660880][ T26] audit: type=1326 audit(1791884244.140:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.0.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917039e2d9 code=0x7ffc0000 [ 154.687166][ T5822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 154.694773][ T26] audit: type=1326 audit(1791884244.090:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.0.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917039e2d9 code=0x7ffc0000 [ 154.704925][ T5822] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.722206][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.747880][ T5822] capability: warning: `syz.3.551' uses 32-bit capabilities (legacy support in use) [ 154.761683][ T26] audit: type=1326 audit(1791884244.140:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5818 comm="syz.0.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917039e2d9 code=0x7ffc0000 [ 154.860954][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 155.011803][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 155.019040][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.046941][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.077098][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 155.102735][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.130723][ T14] usb 5-1: config 0 descriptor?? [ 155.145620][ T14] hub 5-1:0.0: USB hub found [ 155.360968][ T14] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 155.528063][ T5826] loop0: detected capacity change from 0 to 32768 [ 155.578277][ T5826] (syz.0.552,5826,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.588850][ T14] usbhid 5-1:0.0: can't add hid device: -71 [ 155.611057][ T14] usbhid: probe of 5-1:0.0 failed with error -71 [ 155.643874][ T5826] (syz.0.552,5826,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.695629][ T14] usb 5-1: USB disconnect, device number 5 [ 155.791518][ T5826] JBD2: Ignoring recovery information on journal [ 155.939746][ T5826] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 156.066776][ T5854] loop3: detected capacity change from 0 to 22 [ 156.107277][ T5854] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 156.155994][ T5854] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 156.352979][ T5856] [ 156.355432][ T5856] ====================================================== [ 156.362479][ T5856] WARNING: possible circular locking dependency detected [ 156.369582][ T5856] syzkaller #0 Not tainted [ 156.374012][ T5856] ------------------------------------------------------ [ 156.381066][ T5856] syz.0.552/5856 is trying to acquire lock: [ 156.386984][ T5856] ffff888056775f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_remove_btree_range+0x64f/0x15e0 [ 156.400009][ T5856] [ 156.400009][ T5856] but task is already holding lock: [ 156.407403][ T5856] ffff8880567eea20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_truncate_file+0x365/0x1660 [ 156.418327][ T5856] [ 156.418327][ T5856] which lock already depends on the new lock. [ 156.418327][ T5856] [ 156.428750][ T5856] [ 156.428750][ T5856] the existing dependency chain (in reverse order) is: [ 156.437793][ T5856] [ 156.437793][ T5856] -> #4 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 156.446683][ T5856] down_write+0x36/0x60 [ 156.451416][ T5856] ocfs2_create_local_dquot+0x19a/0x1900 [ 156.457593][ T5856] ocfs2_acquire_dquot+0x7e6/0xb80 [ 156.463247][ T5856] dqget+0x713/0xbb0 [ 156.467686][ T5856] __dquot_initialize+0x3a9/0xd00 [ 156.473259][ T5856] ocfs2_get_init_inode+0x144/0x1b0 [ 156.479021][ T5856] ocfs2_mknod+0xbdc/0x2500 [ 156.484062][ T5856] ocfs2_create+0x1b6/0x4b0 [ 156.489120][ T5856] path_openat+0x11b9/0x2f10 [ 156.494281][ T5856] do_filp_open+0x1ee/0x420 [ 156.499340][ T5856] do_sys_openat2+0x14b/0x4f0 [ 156.504574][ T5856] __x64_sys_openat+0x135/0x160 [ 156.509976][ T5856] do_syscall_64+0x4c/0xa0 [ 156.514939][ T5856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.521374][ T5856] [ 156.521374][ T5856] -> #3 (&dquot->dq_lock){+.+.}-{3:3}: [ 156.529046][ T5856] __mutex_lock+0x12d/0xae0 [ 156.534102][ T5856] dquot_commit+0x5a/0x410 [ 156.539061][ T5856] ext4_write_dquot+0x1f0/0x360 [ 156.544457][ T5856] mark_all_dquot_dirty+0xf9/0x400 [ 156.550110][ T5856] __dquot_alloc_space+0x5f6/0xe50 [ 156.555766][ T5856] ext4_mb_new_blocks+0xf55/0x44d0 [ 156.561428][ T5856] ext4_ext_map_blocks+0x18d1/0x6640 [ 156.567255][ T5856] ext4_map_blocks+0x9d7/0x1a90 [ 156.572644][ T5856] ext4_getblk+0x1c5/0x720 [ 156.577600][ T5856] ext4_bread+0x26/0x170 [ 156.582381][ T5856] ext4_append+0x2bb/0x560 [ 156.587508][ T5856] ext4_init_new_dir+0x2b8/0x550 [ 156.592984][ T5856] ext4_mkdir+0x4c3/0xc90 [ 156.597872][ T5856] vfs_mkdir+0x386/0x570 [ 156.602657][ T5856] do_mkdirat+0x1d8/0x440 [ 156.607544][ T5856] __x64_sys_mkdirat+0x85/0x90 [ 156.612880][ T5856] do_syscall_64+0x4c/0xa0 [ 156.617846][ T5856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.624287][ T5856] [ 156.624287][ T5856] -> #2 (&ei->i_data_sem){++++}-{3:3}: [ 156.631953][ T5856] down_read+0x42/0x2d0 [ 156.636656][ T5856] ext4_map_blocks+0x338/0x1a90 [ 156.642143][ T5856] ext4_append+0x22d/0x560 [ 156.647116][ T5856] ext4_init_new_dir+0x2b8/0x550 [ 156.652614][ T5856] ext4_mkdir+0x4c3/0xc90 [ 156.657491][ T5856] vfs_mkdir+0x386/0x570 [ 156.662272][ T5856] do_mkdirat+0x1d8/0x440 [ 156.667142][ T5856] __x64_sys_mkdir+0x6a/0x80 [ 156.672276][ T5856] do_syscall_64+0x4c/0xa0 [ 156.677241][ T5856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.683689][ T5856] [ 156.683689][ T5856] -> #1 (jbd2_handle){++++}-{0:0}: [ 156.691012][ T5856] jbd2_journal_lock_updates+0xa8/0x390 [ 156.697104][ T5856] __ocfs2_flush_truncate_log+0x2cf/0x1220 [ 156.703451][ T5856] ocfs2_flush_truncate_log+0x4b/0x60 [ 156.709373][ T5856] ocfs2_sync_fs+0x119/0x330 [ 156.714517][ T5856] sync_filesystem+0x1be/0x220 [ 156.719818][ T5856] generic_shutdown_super+0x6b/0x340 [ 156.725725][ T5856] kill_block_super+0x7c/0xe0 [ 156.730947][ T5856] deactivate_locked_super+0x93/0xf0 [ 156.736782][ T5856] cleanup_mnt+0x471/0x4f0 [ 156.741749][ T5856] task_work_run+0x1d0/0x260 [ 156.746885][ T5856] exit_to_user_mode_loop+0xe6/0x110 [ 156.752719][ T5856] exit_to_user_mode_prepare+0xee/0x180 [ 156.758819][ T5856] syscall_exit_to_user_mode+0x16/0x40 [ 156.764830][ T5856] do_syscall_64+0x58/0xa0 [ 156.769798][ T5856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.776235][ T5856] [ 156.776235][ T5856] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 156.786786][ T5856] __lock_acquire+0x3a03/0x7ea0 [ 156.792189][ T5856] lock_acquire+0x1bc/0x4a0 [ 156.797236][ T5856] down_write+0x36/0x60 [ 156.801938][ T5856] ocfs2_remove_btree_range+0x64f/0x15e0 [ 156.808123][ T5856] ocfs2_commit_truncate+0xba2/0x1e00 [ 156.814042][ T5856] ocfs2_truncate_file+0xdf0/0x1660 [ 156.819786][ T5856] ocfs2_setattr+0x16f8/0x1d90 [ 156.825152][ T5856] notify_change+0xca0/0xf90 [ 156.830305][ T5856] do_truncate+0x1ac/0x240 [ 156.835276][ T5856] path_openat+0x2897/0x2f10 [ 156.840409][ T5856] do_filp_open+0x1ee/0x420 [ 156.845452][ T5856] do_sys_openat2+0x14b/0x4f0 [ 156.850679][ T5856] __x64_sys_openat+0x135/0x160 [ 156.856080][ T5856] do_syscall_64+0x4c/0xa0 [ 156.861037][ T5856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.867506][ T5856] [ 156.867506][ T5856] other info that might help us debug this: [ 156.867506][ T5856] [ 156.877750][ T5856] Chain exists of: [ 156.877750][ T5856] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &dquot->dq_lock --> &ocfs2_quota_ip_alloc_sem_key [ 156.877750][ T5856] [ 156.894895][ T5856] Possible unsafe locking scenario: [ 156.894895][ T5856] [ 156.902356][ T5856] CPU0 CPU1 [ 156.907735][ T5856] ---- ---- [ 156.913110][ T5856] lock(&ocfs2_quota_ip_alloc_sem_key); [ 156.918759][ T5856] lock(&dquot->dq_lock); [ 156.925714][ T5856] lock(&ocfs2_quota_ip_alloc_sem_key); [ 156.933893][ T5856] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 156.941235][ T5856] [ 156.941235][ T5856] *** DEADLOCK *** [ 156.941235][ T5856] [ 156.949389][ T5856] 3 locks held by syz.0.552/5856: [ 156.954427][ T5856] #0: ffff888077302460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 156.963695][ T5856] #1: ffff8880567eed88 (&sb->s_type->i_mutex_key#28){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 156.974087][ T5856] #2: ffff8880567eea20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_truncate_file+0x365/0x1660 [ 156.985427][ T5856] [ 156.985427][ T5856] stack backtrace: [ 156.991329][ T5856] CPU: 0 PID: 5856 Comm: syz.0.552 Not tainted syzkaller #0 [ 156.998654][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.008743][ T5856] Call Trace: [ 157.012056][ T5856] [ 157.015009][ T5856] dump_stack_lvl+0x188/0x24e [ 157.019713][ T5856] ? load_image+0x410/0x410 [ 157.024231][ T5856] ? show_regs_print_info+0x12/0x12 [ 157.029455][ T5856] ? print_circular_bug+0x12b/0x1a0 [ 157.034683][ T5856] check_noncircular+0x2f8/0x400 [ 157.039660][ T5856] ? look_up_lock_class+0x75/0x140 [ 157.044801][ T5856] ? print_deadlock_bug+0x5d0/0x5d0 [ 157.050055][ T5856] ? lockdep_lock+0xf1/0x1f0 [ 157.054677][ T5856] ? _find_first_zero_bit+0xd2/0x100 [ 157.060016][ T5856] __lock_acquire+0x3a03/0x7ea0 [ 157.064991][ T5856] ? is_bpf_text_address+0x22/0x2a0 [ 157.070251][ T5856] ? verify_lock_unused+0x140/0x140 [ 157.075493][ T5856] ? __kernel_text_address+0x9/0x30 [ 157.080726][ T5856] ? unwind_get_return_address+0x49/0x80 [ 157.086387][ T5856] ? stack_trace_save+0xf0/0xf0 [ 157.091275][ T5856] ? arch_stack_walk+0xf2/0x140 [ 157.096178][ T5856] lock_acquire+0x1bc/0x4a0 [ 157.100726][ T5856] ? ocfs2_remove_btree_range+0x64f/0x15e0 [ 157.106578][ T5856] ? __might_sleep+0xd0/0xd0 [ 157.111202][ T5856] ? rcu_is_watching+0x11/0xa0 [ 157.115997][ T5856] ? read_lock_is_recursive+0x10/0x10 [ 157.121406][ T5856] ? ocfs2_num_free_extents+0x307/0x630 [ 157.126979][ T5856] ? ocfs2_validate_extent_block+0x620/0x620 [ 157.133031][ T5856] ? path_openat+0x2897/0x2f10 [ 157.137840][ T5856] ? do_sys_openat2+0x14b/0x4f0 [ 157.142725][ T5856] ? __x64_sys_openat+0x135/0x160 [ 157.147780][ T5856] ? do_syscall_64+0x4c/0xa0 [ 157.152407][ T5856] down_write+0x36/0x60 [ 157.156594][ T5856] ? ocfs2_remove_btree_range+0x64f/0x15e0 [ 157.162429][ T5856] ocfs2_remove_btree_range+0x64f/0x15e0 [ 157.168110][ T5856] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.174127][ T5856] ? ocfs2_truncate_rec+0x1ec0/0x1ec0 [ 157.179533][ T5856] ? lock_chain_count+0x20/0x20 [ 157.184438][ T5856] ? kasan_quarantine_put+0xd4/0x210 [ 157.189771][ T5856] ? lockdep_hardirqs_on+0x94/0x140 [ 157.195008][ T5856] ? slab_free_freelist_hook+0x133/0x1b0 [ 157.200677][ T5856] ? ocfs2_extent_map_trunc+0x56a/0x5e0 [ 157.206253][ T5856] ? __kmem_cache_free+0xb6/0x200 [ 157.211301][ T5856] ? __ocfs2_find_path+0x47e/0x860 [ 157.216437][ T5856] ? ocfs2_extent_map_trunc+0x583/0x5e0 [ 157.222008][ T5856] ? __ocfs2_find_path+0x860/0x860 [ 157.227150][ T5856] ? ocfs2_find_path+0x100/0x100 [ 157.232135][ T5856] ? ocfs2_extent_map_init+0x90/0x90 [ 157.237451][ T5856] ocfs2_commit_truncate+0xba2/0x1e00 [ 157.242855][ T5856] ? find_get_entries+0xea/0x530 [ 157.247828][ T5856] ? ocfs2_inode_sector_count+0x100/0x100 [ 157.253569][ T5856] ? truncate_inode_pages_range+0xd0d/0x10b0 [ 157.259601][ T5856] ? ocfs2_allocate_extend_trans+0x670/0x670 [ 157.265769][ T5856] ? __up_read+0x2b4/0x6b0 [ 157.270246][ T5856] ? unmap_mapping_range+0x91/0x100 [ 157.275478][ T5856] ocfs2_truncate_file+0xdf0/0x1660 [ 157.280718][ T5856] ? __lock_acquire+0x7ea0/0x7ea0 [ 157.285778][ T5856] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 157.291536][ T5856] ? jbd2_journal_begin_ordered_truncate+0xa6/0x150 [ 157.298164][ T5856] ? _raw_spin_unlock+0x24/0x40 [ 157.303040][ T5856] ? __lock_acquire+0x7ea0/0x7ea0 [ 157.308102][ T5856] ? do_raw_spin_lock+0x128/0x2f0 [ 157.313152][ T5856] ? __rwlock_init+0x140/0x140 [ 157.317931][ T5856] ? ocfs2_rw_lock+0x134/0x250 [ 157.322734][ T5856] ? do_raw_spin_unlock+0x11d/0x230 [ 157.327994][ T5856] ? _raw_spin_unlock+0x24/0x40 [ 157.332880][ T5856] ? jbd2_journal_begin_ordered_truncate+0xb0/0x150 [ 157.339540][ T5856] ocfs2_setattr+0x16f8/0x1d90 [ 157.344347][ T5856] ? ocfs2_extend_allocation+0x1940/0x1940 [ 157.350183][ T5856] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 157.356022][ T5856] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 157.362300][ T5856] ? ocfs2_xattr_get+0x147/0x260 [ 157.367267][ T5856] ? tomoyo_path_perm+0x48c/0x610 [ 157.372318][ T5856] ? ktime_get_coarse_real_ts64+0x106/0x120 [ 157.378240][ T5856] ? current_time+0x19b/0x2c0 [ 157.382947][ T5856] ? atime_needs_update+0x770/0x770 [ 157.388174][ T5856] ? security_inode_setattr+0xd8/0x140 [ 157.393658][ T5856] ? try_break_deleg+0x79/0x120 [ 157.398534][ T5856] ? ocfs2_extend_allocation+0x1940/0x1940 [ 157.404373][ T5856] notify_change+0xca0/0xf90 [ 157.408999][ T5856] do_truncate+0x1ac/0x240 [ 157.413442][ T5856] ? put_page_bootmem+0x2b0/0x2b0 [ 157.418501][ T5856] ? ima_bprm_check+0x200/0x200 [ 157.423379][ T5856] ? bpf_lsm_path_truncate+0x5/0x10 [ 157.428618][ T5856] path_openat+0x2897/0x2f10 [ 157.433235][ T5856] ? kasan_set_track+0x60/0x70 [ 157.438025][ T5856] ? verify_lock_unused+0x140/0x140 [ 157.443267][ T5856] ? do_filp_open+0x420/0x420 [ 157.448002][ T5856] do_filp_open+0x1ee/0x420 [ 157.452553][ T5856] ? vfs_tmpfile+0x470/0x470 [ 157.457226][ T5856] ? _raw_spin_unlock+0x24/0x40 [ 157.462111][ T5856] ? alloc_fd+0x590/0x640 [ 157.466487][ T5856] do_sys_openat2+0x14b/0x4f0 [ 157.471201][ T5856] ? do_sys_open+0xe0/0xe0 [ 157.475639][ T5856] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.481646][ T5856] ? rcu_is_watching+0x11/0xa0 [ 157.486457][ T5856] ? lock_chain_count+0x20/0x20 [ 157.491356][ T5856] __x64_sys_openat+0x135/0x160 [ 157.496246][ T5856] do_syscall_64+0x4c/0xa0 [ 157.500698][ T5856] ? clear_bhb_loop+0x60/0xb0 [ 157.505406][ T5856] ? clear_bhb_loop+0x60/0xb0 [ 157.510109][ T5856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.516026][ T5856] RIP: 0033:0x7f917039e2d9 [ 157.520471][ T5856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.540544][ T5856] RSP: 002b:00007f91711af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 157.548991][ T5856] RAX: ffffffffffffffda RBX: 00007f9170626090 RCX: 00007f917039e2d9 [ 157.556981][ T5856] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 157.565080][ T5856] RBP: 00007f9170435888 R08: 0000000000000000 R09: 0000000000000000 [ 157.573094][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.581203][ T5856] R13: 00007f9170626128 R14: 00007f9170626090 R15: 00007ffd1aeb1198 [ 157.589201][ T5856] [ 157.682918][ T4271] ocfs2: Unmounting device (7,0) on (node local)