last executing test programs: 2.694824967s ago: executing program 1 (id=99): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)='-', 0x1, 0x4004085, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8905, &(0x7f0000000080)) 2.579100333s ago: executing program 1 (id=101): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 2.451055389s ago: executing program 2 (id=102): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x14, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x0, "c896"}]}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c8, &(0x7f0000000cc0)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x39) 2.301985697s ago: executing program 1 (id=103): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) 2.301815067s ago: executing program 3 (id=104): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 2.132015845s ago: executing program 2 (id=105): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x1, 0xbe}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.131729215s ago: executing program 1 (id=106): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) 2.065680388s ago: executing program 3 (id=108): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x8, 0x5, 0x0, 0x2, 0x5, 0xd961, 0x1051548c, 0x0, r2}, 0x20) 1.903601706s ago: executing program 1 (id=109): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000580)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x74, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x4000000000000115, 0x1, 0x2, 0x0, 0x0, {[@eol, @md5sig={0x13, 0x12, "6e7bedf236dafc2462cdba45d0c59d14"}, @md5sig={0x13, 0x12, "4693c6ac149bb62237a7d71577d74029"}, @sack_perm, @md5sig={0x13, 0x12, "51d696aa9b83aab0111d60c636b4ec25"}]}}}}}}}, 0x0) 1.801946581s ago: executing program 3 (id=110): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.734863805s ago: executing program 2 (id=111): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 1.685590637s ago: executing program 1 (id=112): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0x5, 0x6, "cec2cb07ff03"}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xff}, 0x0, 0x0}) 1.575299663s ago: executing program 2 (id=113): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0xfffffffffffffffd}, 0x6}, 0x1) 1.498719677s ago: executing program 0 (id=114): prlimit64(0x0, 0x9, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='bbr', 0x3) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 1.398387122s ago: executing program 2 (id=115): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000021c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, 0x0, 0x0) 1.275333508s ago: executing program 0 (id=116): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x15, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x2, 0x5f, 0x9, 0x15, 0xfc, 0xff7fff01, 0x6, 0x5, 0x3, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x18e, 0x200006, 0x40000009, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0xc, 0x8000, 0x3, 0x40], [0x10000007, 0x0, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x0, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0x9, 0xfffffffd, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x10400, 0x401, 0x6, 0x6, 0xff, 0x2, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x9, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x5, 0x409, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x5, 0x86, 0x10000005, 0x3039, 0xfffffffa, 0xb, 0x5, 0x2, 0x82, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x4, 0x1000, 0xae, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x8, 0x1c, 0x1, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb8, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0x10003, 0xa620, 0x1, 0x6, 0x1, 0x2000002, 0x0, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x3, 0x5, 0xc8, 0x18, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x3, 0x2, 0x5, 0x10, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x5) 1.102931826s ago: executing program 0 (id=117): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) close(0x3) socket(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) 998.191001ms ago: executing program 0 (id=118): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x881}, 0x50) 856.489258ms ago: executing program 3 (id=119): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86dd}}}]}, 0x38}}, 0xc4c4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 799.99987ms ago: executing program 0 (id=120): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10fd, &(0x7f0000006200)="$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") socket$nl_sock_diag(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 662.790557ms ago: executing program 3 (id=121): io_setup(0x7, &(0x7f00000000c0)=0x0) io_destroy(r0) fsmount(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) io_getevents(r0, 0x8, 0x0, 0x0, &(0x7f0000000700)) 554.768762ms ago: executing program 2 (id=122): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 144.26µs ago: executing program 0 (id=123): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x71) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) sendto$inet(r0, &(0x7f0000000000)="f2ce", 0x2, 0x80c1, 0x0, 0x0) 0s ago: executing program 3 (id=124): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. [ 63.252078][ T5757] cgroup: Unknown subsys name 'net' [ 63.384354][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.804091][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.161467][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.170686][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.179116][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.192004][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.199408][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.206779][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.210243][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.222379][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.230705][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.239779][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.240777][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.267352][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.276163][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.305707][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.313062][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.316562][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.329530][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.338036][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.338456][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.345394][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.360697][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.360987][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.378186][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.387836][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.793286][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 66.815896][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 66.868588][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 66.974170][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 66.995808][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.003885][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.011775][ T5767] bridge_slave_0: entered allmulticast mode [ 67.019234][ T5767] bridge_slave_0: entered promiscuous mode [ 67.029271][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.037233][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.044624][ T5767] bridge_slave_1: entered allmulticast mode [ 67.052232][ T5767] bridge_slave_1: entered promiscuous mode [ 67.122196][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.130084][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.137996][ T5770] bridge_slave_0: entered allmulticast mode [ 67.148014][ T5770] bridge_slave_0: entered promiscuous mode [ 67.173467][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.180957][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.188892][ T5772] bridge_slave_0: entered allmulticast mode [ 67.195546][ T5772] bridge_slave_0: entered promiscuous mode [ 67.205449][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.218942][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.228563][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.236188][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.244286][ T5770] bridge_slave_1: entered allmulticast mode [ 67.251544][ T5770] bridge_slave_1: entered promiscuous mode [ 67.275110][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.282631][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.290146][ T5772] bridge_slave_1: entered allmulticast mode [ 67.297367][ T5772] bridge_slave_1: entered promiscuous mode [ 67.333587][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.370446][ T5767] team0: Port device team_slave_0 added [ 67.378996][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.390382][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.418684][ T5767] team0: Port device team_slave_1 added [ 67.426693][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.474655][ T5770] team0: Port device team_slave_0 added [ 67.481510][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.491460][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.499037][ T5771] bridge_slave_0: entered allmulticast mode [ 67.505889][ T5771] bridge_slave_0: entered promiscuous mode [ 67.531621][ T5770] team0: Port device team_slave_1 added [ 67.551967][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.559924][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.567523][ T5771] bridge_slave_1: entered allmulticast mode [ 67.574631][ T5771] bridge_slave_1: entered promiscuous mode [ 67.582598][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.592339][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.619632][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.634517][ T5772] team0: Port device team_slave_0 added [ 67.644507][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.652066][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.678374][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.699852][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.707241][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.733731][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.746508][ T5772] team0: Port device team_slave_1 added [ 67.755920][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.763155][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.791910][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.860699][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.880995][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.888431][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.916345][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.929730][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.936694][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.963062][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.994593][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.010906][ T5767] hsr_slave_0: entered promiscuous mode [ 68.017943][ T5767] hsr_slave_1: entered promiscuous mode [ 68.072579][ T5772] hsr_slave_0: entered promiscuous mode [ 68.082222][ T5772] hsr_slave_1: entered promiscuous mode [ 68.088749][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.099516][ T5772] Cannot create hsr debugfs directory [ 68.109383][ T5771] team0: Port device team_slave_0 added [ 68.120954][ T5770] hsr_slave_0: entered promiscuous mode [ 68.130061][ T5770] hsr_slave_1: entered promiscuous mode [ 68.136831][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.145058][ T5770] Cannot create hsr debugfs directory [ 68.170384][ T5771] team0: Port device team_slave_1 added [ 68.244012][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.251610][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.279536][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.298213][ T5773] Bluetooth: hci0: command tx timeout [ 68.333687][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.340751][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.369641][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.380653][ T5773] Bluetooth: hci3: command tx timeout [ 68.457473][ T5773] Bluetooth: hci1: command tx timeout [ 68.463202][ T5773] Bluetooth: hci2: command tx timeout [ 68.538522][ T5771] hsr_slave_0: entered promiscuous mode [ 68.545258][ T5771] hsr_slave_1: entered promiscuous mode [ 68.551966][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.559909][ T5771] Cannot create hsr debugfs directory [ 68.718975][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.750939][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.761118][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.783543][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.843618][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.865269][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.884531][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.895990][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.966165][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.979007][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.989902][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.004482][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.086838][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.106751][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.119413][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.137525][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.215508][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.254891][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.271592][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.279265][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.318161][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.330897][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.338198][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.416418][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.430497][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.450010][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.457379][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.487230][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.494357][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.520088][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.535533][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.570655][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.600808][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.608445][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.651993][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.659782][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.693553][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.700937][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.716277][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.723473][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.785529][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.947889][ T5767] veth0_vlan: entered promiscuous mode [ 69.971798][ T5767] veth1_vlan: entered promiscuous mode [ 70.092844][ T5767] veth0_macvtap: entered promiscuous mode [ 70.122848][ T5767] veth1_macvtap: entered promiscuous mode [ 70.174887][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.222946][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.251483][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.270110][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.281926][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.294320][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.332305][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.369622][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.377718][ T5773] Bluetooth: hci0: command tx timeout [ 70.448164][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.457178][ T5773] Bluetooth: hci3: command tx timeout [ 70.500302][ T5772] veth0_vlan: entered promiscuous mode [ 70.534802][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.548379][ T5773] Bluetooth: hci2: command tx timeout [ 70.552604][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.553895][ T5780] Bluetooth: hci1: command tx timeout [ 70.573981][ T5772] veth1_vlan: entered promiscuous mode [ 70.609887][ T5770] veth0_vlan: entered promiscuous mode [ 70.636760][ T5770] veth1_vlan: entered promiscuous mode [ 70.663356][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.673262][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.701647][ T5771] veth0_vlan: entered promiscuous mode [ 70.734963][ T5771] veth1_vlan: entered promiscuous mode [ 70.790933][ T5770] veth0_macvtap: entered promiscuous mode [ 70.803403][ T5772] veth0_macvtap: entered promiscuous mode [ 70.840840][ T5770] veth1_macvtap: entered promiscuous mode [ 70.863316][ T5771] veth0_macvtap: entered promiscuous mode [ 70.890682][ T5772] veth1_macvtap: entered promiscuous mode [ 70.907804][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.921013][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.942796][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.957955][ T5771] veth1_macvtap: entered promiscuous mode [ 70.976415][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.992126][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.004812][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.034964][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.046681][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.059612][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.070606][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.082618][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.113697][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.126275][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.139460][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.151883][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.165317][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.181124][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.196010][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.210457][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.229809][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.239667][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.251975][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.272275][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.285974][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.304417][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.320547][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.335504][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.367745][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.381378][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.391870][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.402550][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.412913][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.425859][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.438789][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.458188][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.477055][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.486048][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.498822][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.544294][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.554392][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.568649][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.580828][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.744601][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.752792][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.786028][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.804140][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.894327][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.894744][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.912497][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.942402][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.129886][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.144519][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.152915][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.188581][ T5843] syz.1.9[5843]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.191520][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.223758][ T5843] loop1: detected capacity change from 0 to 128 [ 72.256190][ T5843] ======================================================= [ 72.256190][ T5843] WARNING: The mand mount option has been deprecated and [ 72.256190][ T5843] and is ignored by this kernel. Remove the mand [ 72.256190][ T5843] option from the mount to silence this warning. [ 72.256190][ T5843] ======================================================= [ 72.370032][ T5843] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 72.390204][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.394135][ T5843] hpfs: filesystem error: improperly stopped [ 72.404733][ T5843] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 72.429805][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.430685][ T5843] hpfs: You really don't want any checks? You are crazy... [ 72.456785][ T5843] hpfs: hpfs_map_sector(): read error [ 72.458739][ T5780] Bluetooth: hci0: command tx timeout [ 72.473189][ T5843] hpfs: code page support is disabled [ 72.484758][ T5843] hpfs: hpfs_map_4sectors(): unaligned read [ 72.492346][ T5843] hpfs: hpfs_map_4sectors(): unaligned read [ 72.500150][ T5843] hpfs: filesystem error: unable to find root dir [ 72.538058][ T5780] Bluetooth: hci3: command tx timeout [ 72.618083][ T5780] Bluetooth: hci1: command tx timeout [ 72.621355][ T5773] Bluetooth: hci2: command tx timeout [ 73.428348][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 73.750715][ T5867] loop0: detected capacity change from 0 to 40427 [ 73.769706][ T5867] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 73.780253][ T5867] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 73.801416][ T5867] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.866407][ T5867] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 73.874014][ T5867] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.412686][ T5867] syz.0.16 (5867): drop_caches: 2 [ 74.537370][ T5780] Bluetooth: hci0: command tx timeout [ 74.617005][ T5885] loop3: detected capacity change from 0 to 256 [ 74.617099][ T5780] Bluetooth: hci3: command tx timeout [ 74.684053][ T5885] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d) [ 74.697294][ T5780] Bluetooth: hci2: command tx timeout [ 74.704272][ T5780] Bluetooth: hci1: command tx timeout [ 74.945342][ T5892] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.019613][ T5896] loop0: detected capacity change from 0 to 256 [ 75.417230][ T5773] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 75.508794][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.645963][ T5904] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.31'. [ 75.704270][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.715052][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.744964][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.756588][ T5907] loop6: detected capacity change from 0 to 8 [ 75.763102][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 75.763184][ T23] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 75.763204][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.794419][ T23] usb 1-1: config 0 descriptor?? [ 75.849166][ T5909] loop6: detected capacity change from 8 to 7 [ 75.864012][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.876470][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.886087][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.909593][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.919238][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.928751][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.938366][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.950949][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.960336][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 75.980910][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.990229][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.026977][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.046481][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.051874][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 76.056028][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 76.056061][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.079611][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 76.087611][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.096972][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 76.097245][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 76.104976][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 76.105023][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 76.147369][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 76.178043][ T23] usb 1-1: USB disconnect, device number 2 [ 76.368727][ T5918] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 76.626995][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.697130][ T5924] loop2: detected capacity change from 0 to 40427 [ 76.716008][ T5924] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 76.730835][ T5924] F2FS-fs (loop2): invalid crc value [ 76.744509][ T5924] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.790413][ T5924] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.807364][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.817193][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 76.841577][ T787] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 76.875407][ T787] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 76.886574][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.901915][ T787] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 76.921820][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.939782][ T787] usb 2-1: Product: syz [ 76.944095][ T787] usb 2-1: Manufacturer: syz [ 76.957426][ T787] usb 2-1: SerialNumber: syz [ 76.981480][ T787] usb 2-1: config 0 descriptor?? [ 76.983397][ T5772] syz-executor: attempt to access beyond end of device [ 76.983397][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 77.027222][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 77.037500][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 77.038589][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 77.049273][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.062472][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.076598][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.087815][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 77.103541][ T23] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 77.115258][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.139155][ T23] usb 1-1: config 0 descriptor?? [ 77.406542][ T787] gs_usb 2-1:0.0: Configuring for 159 interfaces [ 77.616053][ T23] betop 0003:20BC:5500.0001: unbalanced collection at end of report description [ 77.639856][ T23] betop 0003:20BC:5500.0001: parse failed [ 77.646537][ T23] betop: probe of 0003:20BC:5500.0001 failed with error -22 [ 77.845465][ T5937] Zero length message leads to an empty skb [ 77.899573][ T5806] usb 1-1: USB disconnect, device number 3 [ 77.969808][ T5939] sctp: [Deprecated]: syz.3.44 (pid 5939) Use of int in max_burst socket option deprecated. [ 77.969808][ T5939] Use struct sctp_assoc_value instead [ 78.014889][ T787] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 78.099412][ T787] gs_usb: probe of 2-1:0.0 failed with error -71 [ 78.128586][ T787] usb 2-1: USB disconnect, device number 2 [ 78.173770][ T5941] loop3: detected capacity change from 0 to 256 [ 78.201576][ T5935] loop2: detected capacity change from 0 to 32768 [ 78.302589][ T27] audit: type=1800 audit(1773748202.496:2): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.40" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 78.951519][ T5954] loop0: detected capacity change from 0 to 128 [ 79.048863][ T5954] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.120602][ T23] kernel write not supported for file /40/coredump_filter (pid: 23 comm: kworker/1:0) [ 79.167301][ T5954] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.290817][ T5954] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10) [ 79.374554][ T5963] syz.3.54 uses obsolete (PF_INET,SOCK_PACKET) [ 79.402923][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.959999][ T5982] loop0: detected capacity change from 0 to 4096 [ 79.977363][ T5982] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 80.335698][ T5976] loop3: detected capacity change from 0 to 32768 [ 80.401618][ T5976] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 80.537240][ T5976] XFS (loop3): Ending clean mount [ 80.609516][ T5976] XFS (loop3): Quotacheck needed: Please wait. [ 80.768947][ T5976] XFS (loop3): Quotacheck: Done. [ 80.835320][ T5985] loop1: detected capacity change from 0 to 32768 [ 80.837998][ T5976] XFS (loop3): User initiated shutdown received. [ 80.850173][ T5976] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 80.865699][ T5976] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 80.886718][ T5985] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.912225][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 81.138303][ T5985] XFS (loop1): Ending clean mount [ 81.174546][ T5985] XFS (loop1): Quotacheck needed: Please wait. [ 81.260962][ T5985] XFS (loop1): Quotacheck: Done. [ 81.492412][ T5767] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.840722][ T6018] Illegal XDP return value 4294967274 on prog (id 6) dev syz_tun, expect packet loss! [ 81.990217][ T9] cfg80211: failed to load regulatory.db [ 82.290184][ T6025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.585240][ T6036] loop3: detected capacity change from 0 to 2048 [ 82.681923][ T6040] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.806369][ T27] audit: type=1800 audit(1773748207.006:3): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.76" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 82.927628][ T6044] vcan0: tx drop: invalid sa for name 0x0000000007fffffe [ 82.969308][ T6040] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 83.006978][ T6040] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 83.060663][ T6040] Remounting filesystem read-only [ 83.108854][ T6049] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 83.123807][ T6035] loop1: detected capacity change from 0 to 32768 [ 83.133085][ T6035] XFS: attr2 mount option is deprecated. [ 83.190581][ T6035] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.222510][ T5770] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 83.255381][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 83.301503][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.322519][ T6035] XFS (loop1): Ending clean mount [ 83.334303][ T6059] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.352240][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.354316][ T6035] XFS (loop1): Quotacheck needed: Please wait. [ 83.367726][ T5770] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 83.375723][ T5770] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 83.385285][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 83.399550][ T5770] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 83.411261][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.423680][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.434730][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.437926][ T6035] XFS (loop1): Quotacheck: Done. [ 83.445399][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 83.457610][ T5770] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 83.467378][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.499235][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.537564][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.541463][ T6035] XFS (loop1): User initiated shutdown received. [ 83.557243][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 83.577053][ T6035] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 83.597093][ T5770] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 83.604799][ T5770] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 83.608302][ T6035] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 83.635184][ T5770] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 83.645361][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.660001][ T5770] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 83.688224][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.703634][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.710477][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.735665][ T5770] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 83.798351][ T5770] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 83.805670][ T5770] NILFS (loop3): discard dirty page: offset=233472, ino=3 [ 83.851974][ T6066] loop2: detected capacity change from 0 to 512 [ 83.865266][ T5770] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 83.887001][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.912042][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.922092][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 83.974923][ T6066] EXT4-fs error (device loop2): ext4_iget_extra_inode:4732: inode #15: comm syz.2.87: corrupted in-inode xattr: invalid ea_ino [ 84.026217][ T6066] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.87: couldn't read orphan inode 15 (err -117) [ 84.093428][ T6074] loop1: detected capacity change from 0 to 512 [ 84.130330][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.136175][ T6071] loop3: detected capacity change from 0 to 512 [ 84.210985][ T6071] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.83: corrupted in-inode xattr: e_value size too large [ 84.248074][ T6074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.264876][ T6071] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.83: couldn't read orphan inode 15 (err -117) [ 84.284579][ T6071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.329833][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.351092][ T6074] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.410672][ T6074] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.86: corrupted inode contents [ 84.444039][ T6074] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.86: mark_inode_dirty error [ 84.475965][ T6074] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.86: corrupted inode contents [ 84.491246][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.501699][ T6074] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.86: mark_inode_dirty error [ 84.659447][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.696395][ T6109] loop2: detected capacity change from 0 to 128 [ 85.708893][ T6109] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.728660][ T6109] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.929378][ T48] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.072124][ T6117] loop0: detected capacity change from 0 to 512 [ 86.124512][ T6117] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.153345][ T6117] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.201673][ T6117] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.107: inode has both inline data and extents flags [ 86.238842][ T6117] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.107: couldn't read orphan inode 15 (err -117) [ 86.279520][ T6117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.348283][ T6117] EXT4-fs error (device loop0): ext4_read_inline_dir:1583: inode #12: block 7: comm syz.0.107: path /19/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 86.552278][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.787341][ T787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.017429][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 87.025288][ T787] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 87.042800][ T787] usb 2-1: config 0 has no interface number 0 [ 87.059686][ T787] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 87.076114][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.098356][ T787] usb 2-1: Product: syz [ 87.102580][ T787] usb 2-1: Manufacturer: syz [ 87.122988][ T787] usb 2-1: SerialNumber: syz [ 87.143478][ T787] usb 2-1: config 0 descriptor?? [ 87.172878][ T787] smsc95xx v2.0.0 [ 87.355136][ T6140] loop2: detected capacity change from 0 to 32768 [ 87.508197][ T6149] loop0: detected capacity change from 0 to 8192 [ 87.560870][ T6149] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 87.607586][ T787] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 87.614515][ T6149] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 87.628345][ T787] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.686016][ T6149] REISERFS (device loop0): using ordered data mode [ 87.712951][ T6149] reiserfs: using flush barriers [ 87.781477][ T6149] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.811875][ T6149] REISERFS (device loop0): checking transaction log (loop0) [ 87.965998][ T6149] REISERFS (device loop0): Using tea hash to sort names [ 87.981618][ T6149] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 88.001561][ T6149] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 88.033170][ T27] audit: type=1804 audit(1773748212.236:4): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.120" name="/newroot/24/file0/file1" dev="loop0" ino=4 res=1 errno=0 [ 88.083055][ T787] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 88.122566][ T787] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 88.122883][ T112] ------------[ cut here ]------------ [ 88.136030][ T112] WARNING: CPU: 0 PID: 112 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 88.145247][ T112] Modules linked in: [ 88.149531][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 88.157411][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.168969][ T112] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 88.174387][ T112] Code: e8 dd fa db fe e9 5a ff ff ff e8 43 cc 83 fe eb 05 e8 3c cc 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 28 cc 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 88.175138][ T787] usb 2-1: USB disconnect, device number 3 [ 88.194971][ T112] RSP: 0018:ffffc900025f7648 EFLAGS: 00010293 [ 88.194997][ T112] RAX: ffffffff83035038 RBX: ffff88802ecd8010 RCX: ffff888019398000 [ 88.195010][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 88.195026][ T112] RBP: 0000000000020056 R08: ffffea0000bb3607 R09: 1ffffd40001766c0 [ 88.195037][ T112] R10: dffffc0000000000 R11: fffff940001766c1 R12: ffff88802ecd8018 [ 88.195048][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 88.195058][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 88.195073][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.195085][ T112] CR2: 00007fa0be144000 CR3: 00000000613f3000 CR4: 00000000003506f0 [ 88.195100][ T112] Call Trace: [ 88.195121][ T112] [ 88.195130][ T112] ? lock_page+0x2a0/0x2a0 [ 88.195156][ T112] dbJoin+0x238/0x300 [ 88.195174][ T112] dbFreeBits+0x4e1/0xda0 [ 88.195199][ T112] dbFree+0x332/0x650 [ 88.299744][ T112] txFreeMap+0x9e6/0xde0 [ 88.304192][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 88.310670][ T112] xtTruncate+0xd27/0x2ec0 [ 88.315176][ T112] ? xtInitRoot+0x170/0x170 [ 88.319942][ T112] ? __lock_acquire+0x7d40/0x7d40 [ 88.325418][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 88.330597][ T112] ? __asan_memset+0x22/0x40 [ 88.335275][ T112] ? __dquot_initialize+0x217/0xcd0 [ 88.340666][ T112] jfs_free_zero_link+0x35c/0x4c0 [ 88.345910][ T112] ? inode_wait_for_writeback+0x1e3/0x230 [ 88.351831][ T112] ? jfs_write_failed+0x190/0x190 [ 88.357226][ T112] ? sb_clear_inode_writeback+0x360/0x360 [ 88.363071][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 88.368380][ T112] ? bit_waitqueue+0x30/0x30 [ 88.373017][ T112] jfs_evict_inode+0x35d/0x440 [ 88.378281][ T112] ? evict+0x4c4/0x8d0 [ 88.383169][ T112] ? jfs_write_inode+0x220/0x220 [ 88.388645][ T112] evict+0x4ca/0x8d0 [ 88.393383][ T112] ? proc_nr_inodes+0x230/0x230 [ 88.398852][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 88.404475][ T112] ? _raw_spin_unlock+0x28/0x40 [ 88.409711][ T112] ? iput+0x706/0x920 [ 88.414008][ T112] jfs_lazycommit+0x429/0xa70 [ 88.419132][ T112] ? txFreelock+0x5a0/0x5a0 [ 88.423885][ T112] ? do_task_dead+0xd0/0xd0 [ 88.428626][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 88.434482][ T112] kthread+0x2fa/0x390 [ 88.438725][ T112] ? txFreelock+0x5a0/0x5a0 [ 88.443725][ T112] ? kthread_blkcg+0xd0/0xd0 [ 88.448599][ T112] ret_from_fork+0x48/0x80 [ 88.453153][ T112] ? kthread_blkcg+0xd0/0xd0 [ 88.458157][ T112] ret_from_fork_asm+0x11/0x20 [ 88.463368][ T112] [ 88.466500][ T112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.474382][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 88.482166][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.493308][ T112] Call Trace: [ 88.497052][ T112] [ 88.500790][ T112] dump_stack_lvl+0x18c/0x250 [ 88.505677][ T112] ? show_regs_print_info+0x20/0x20 [ 88.511172][ T112] ? load_image+0x400/0x400 [ 88.515808][ T112] panic+0x2dc/0x730 [ 88.519848][ T112] ? bpf_jit_dump+0xd0/0xd0 [ 88.524479][ T112] ? ret_from_fork_asm+0x11/0x20 [ 88.529637][ T112] __warn+0x2e0/0x470 [ 88.533745][ T112] ? dbAdjTree+0x448/0x4d0 [ 88.538466][ T112] ? dbAdjTree+0x448/0x4d0 [ 88.542998][ T112] report_bug+0x2be/0x4f0 [ 88.549504][ T112] ? dbAdjTree+0x448/0x4d0 [ 88.554027][ T112] ? dbAdjTree+0x448/0x4d0 [ 88.558599][ T112] ? dbAdjTree+0x44a/0x4d0 [ 88.563154][ T112] handle_bug+0xcf/0x120 [ 88.567510][ T112] exc_invalid_op+0x1a/0x50 [ 88.572309][ T112] asm_exc_invalid_op+0x1a/0x20 [ 88.577598][ T112] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 88.582639][ T112] Code: e8 dd fa db fe e9 5a ff ff ff e8 43 cc 83 fe eb 05 e8 3c cc 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 28 cc 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 88.602786][ T112] RSP: 0018:ffffc900025f7648 EFLAGS: 00010293 [ 88.609025][ T112] RAX: ffffffff83035038 RBX: ffff88802ecd8010 RCX: ffff888019398000 [ 88.617712][ T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 88.626093][ T112] RBP: 0000000000020056 R08: ffffea0000bb3607 R09: 1ffffd40001766c0 [ 88.634537][ T112] R10: dffffc0000000000 R11: fffff940001766c1 R12: ffff88802ecd8018 [ 88.645570][ T112] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 88.654168][ T112] ? dbAdjTree+0x448/0x4d0 [ 88.658985][ T112] ? dbAdjTree+0x448/0x4d0 [ 88.663392][ T112] ? lock_page+0x2a0/0x2a0 [ 88.667903][ T112] dbJoin+0x238/0x300 [ 88.672084][ T112] dbFreeBits+0x4e1/0xda0 [ 88.676438][ T112] dbFree+0x332/0x650 [ 88.680862][ T112] txFreeMap+0x9e6/0xde0 [ 88.685313][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 88.690638][ T112] xtTruncate+0xd27/0x2ec0 [ 88.695279][ T112] ? xtInitRoot+0x170/0x170 [ 88.699844][ T112] ? __lock_acquire+0x7d40/0x7d40 [ 88.705146][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 88.710304][ T112] ? __asan_memset+0x22/0x40 [ 88.714909][ T112] ? __dquot_initialize+0x217/0xcd0 [ 88.720324][ T112] jfs_free_zero_link+0x35c/0x4c0 [ 88.725382][ T112] ? inode_wait_for_writeback+0x1e3/0x230 [ 88.731124][ T112] ? jfs_write_failed+0x190/0x190 [ 88.736183][ T112] ? sb_clear_inode_writeback+0x360/0x360 [ 88.742381][ T112] ? do_raw_spin_lock+0x11f/0x2c0 [ 88.747807][ T112] ? bit_waitqueue+0x30/0x30 [ 88.752445][ T112] jfs_evict_inode+0x35d/0x440 [ 88.757414][ T112] ? evict+0x4c4/0x8d0 [ 88.761605][ T112] ? jfs_write_inode+0x220/0x220 [ 88.766541][ T112] evict+0x4ca/0x8d0 [ 88.770476][ T112] ? proc_nr_inodes+0x230/0x230 [ 88.775516][ T112] ? do_raw_spin_unlock+0x121/0x230 [ 88.780939][ T112] ? _raw_spin_unlock+0x28/0x40 [ 88.785976][ T112] ? iput+0x706/0x920 [ 88.789986][ T112] jfs_lazycommit+0x429/0xa70 [ 88.795064][ T112] ? txFreelock+0x5a0/0x5a0 [ 88.799889][ T112] ? do_task_dead+0xd0/0xd0 [ 88.804662][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 88.809603][ T112] kthread+0x2fa/0x390 [ 88.814196][ T112] ? txFreelock+0x5a0/0x5a0 [ 88.819312][ T112] ? kthread_blkcg+0xd0/0xd0 [ 88.824453][ T112] ret_from_fork+0x48/0x80 [ 88.829556][ T112] ? kthread_blkcg+0xd0/0xd0 [ 88.834450][ T112] ret_from_fork_asm+0x11/0x20 [ 88.840399][ T112] [ 88.844661][ T112] Kernel Offset: disabled [ 88.849976][ T112] Rebooting in 86400 seconds..