last executing test programs: 2.679723895s ago: executing program 3 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x28, 0x0, 0x81, 0x1}, {0xb1, 0x0, 0x28, 0x7}, {0x16, 0xfc, 0x5, 0xffffffff}]}) 2.582447366s ago: executing program 0 (id=234): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1) 2.397317899s ago: executing program 0 (id=235): syz_open_dev$evdev(&(0x7f0000000040), 0xd6600000000000, 0x8001) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1ff, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 2.39717293s ago: executing program 3 (id=236): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r1, r0, 0x0, 0x7ffffffd) 2.24314742s ago: executing program 3 (id=238): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') setresuid(0xee01, 0xee00, 0x0) setns(r0, 0x0) 2.141157379s ago: executing program 0 (id=239): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 2.083911519s ago: executing program 2 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0x2b, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c814}, 0x8000) 1.904304853s ago: executing program 3 (id=242): r0 = socket$inet(0x2, 0x6, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) 1.800532163s ago: executing program 2 (id=243): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.595842783s ago: executing program 3 (id=245): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000040c0)={0x200000, 0x200000, 0x1000, 0x200000}) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2284, 0x0) 1.547221494s ago: executing program 2 (id=246): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) 1.389290922s ago: executing program 3 (id=248): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.330372411s ago: executing program 2 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9b}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1.140824224s ago: executing program 2 (id=252): r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.010192038s ago: executing program 1 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 925.845112ms ago: executing program 0 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 843.505746ms ago: executing program 1 (id=255): r0 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 608.40165ms ago: executing program 1 (id=256): r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1ec, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x55000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x24}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "4ee2cf769c0b7ab36814a5ff5bb2559f1f73ec2cbb6d2581e7"}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1c1}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6918}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x810}, 0x4000040) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 364.514612ms ago: executing program 1 (id=257): r0 = socket$caif_stream(0x25, 0x1, 0x3) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x840, r0}, 0x0) 293.252258ms ago: executing program 0 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000002) 209.808102ms ago: executing program 1 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "e4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "1f23"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 147.63194ms ago: executing program 0 (id=260): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x7c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x68, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "1388"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.249882ms ago: executing program 2 (id=261): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x100010, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 0s ago: executing program 1 (id=262): unshare(0x60400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x60000}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 71.776782][ T5756] cgroup: Unknown subsys name 'net' [ 71.909930][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.623047][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.152519][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.158269][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.160641][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.167951][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.184524][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.192524][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.200520][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.210116][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.218703][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.226569][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.229365][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.234002][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.242049][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.255856][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.264217][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.273390][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.283163][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.290782][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.298649][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.306169][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.306426][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.320332][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.322317][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.341659][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.765235][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 75.779196][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 75.862324][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 75.906878][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 75.991294][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.999593][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.007024][ T5771] bridge_slave_0: entered allmulticast mode [ 76.014656][ T5771] bridge_slave_0: entered promiscuous mode [ 76.047161][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.054524][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.062602][ T5768] bridge_slave_0: entered allmulticast mode [ 76.069386][ T5768] bridge_slave_0: entered promiscuous mode [ 76.076671][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.084003][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.091742][ T5771] bridge_slave_1: entered allmulticast mode [ 76.098615][ T5771] bridge_slave_1: entered promiscuous mode [ 76.137934][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.145227][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.152683][ T5768] bridge_slave_1: entered allmulticast mode [ 76.159923][ T5768] bridge_slave_1: entered promiscuous mode [ 76.226507][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.238289][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.249702][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.269567][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.276822][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.284815][ T5769] bridge_slave_0: entered allmulticast mode [ 76.292410][ T5769] bridge_slave_0: entered promiscuous mode [ 76.302445][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.338116][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.345600][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.352877][ T5769] bridge_slave_1: entered allmulticast mode [ 76.359688][ T5769] bridge_slave_1: entered promiscuous mode [ 76.389213][ T5768] team0: Port device team_slave_0 added [ 76.396556][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.404123][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.411818][ T5770] bridge_slave_0: entered allmulticast mode [ 76.418694][ T5770] bridge_slave_0: entered promiscuous mode [ 76.427077][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.434367][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.441909][ T5770] bridge_slave_1: entered allmulticast mode [ 76.448669][ T5770] bridge_slave_1: entered promiscuous mode [ 76.469024][ T5771] team0: Port device team_slave_0 added [ 76.477964][ T5768] team0: Port device team_slave_1 added [ 76.506674][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.517354][ T5771] team0: Port device team_slave_1 added [ 76.553603][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.585056][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.606368][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.616113][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.642963][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.655754][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.663023][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.689263][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.705008][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.733965][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.741503][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.767543][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.779412][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.787013][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.814766][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.845252][ T5769] team0: Port device team_slave_0 added [ 76.853799][ T5769] team0: Port device team_slave_1 added [ 76.902553][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.909540][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.936488][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.949282][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.956467][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.982680][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.998373][ T5770] team0: Port device team_slave_0 added [ 77.032535][ T5770] team0: Port device team_slave_1 added [ 77.089865][ T5771] hsr_slave_0: entered promiscuous mode [ 77.096352][ T5771] hsr_slave_1: entered promiscuous mode [ 77.109676][ T5768] hsr_slave_0: entered promiscuous mode [ 77.116883][ T5768] hsr_slave_1: entered promiscuous mode [ 77.125049][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.132977][ T5768] Cannot create hsr debugfs directory [ 77.147049][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.154112][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.180405][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.193700][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.200752][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.226883][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.255541][ T5769] hsr_slave_0: entered promiscuous mode [ 77.263126][ T5769] hsr_slave_1: entered promiscuous mode [ 77.269209][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.277448][ T5769] Cannot create hsr debugfs directory [ 77.291779][ T5083] Bluetooth: hci3: command tx timeout [ 77.371414][ T5083] Bluetooth: hci2: command tx timeout [ 77.371831][ T51] Bluetooth: hci1: command tx timeout [ 77.451102][ T51] Bluetooth: hci0: command tx timeout [ 77.463909][ T5770] hsr_slave_0: entered promiscuous mode [ 77.470401][ T5770] hsr_slave_1: entered promiscuous mode [ 77.476842][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.484696][ T5770] Cannot create hsr debugfs directory [ 77.766226][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.795707][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.805581][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.829631][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.875701][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.887444][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.897473][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.907814][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.993440][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.004023][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.031999][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.042305][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.154646][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.172738][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.187219][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.198639][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.286857][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.299305][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.333771][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.365162][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.372483][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.408534][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.418306][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.432341][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.439471][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.486573][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.493757][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.505242][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.528622][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.535808][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.566446][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.573647][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.588514][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.595644][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.670564][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.696733][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.733903][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.741105][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.823151][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.830298][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.994536][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.165056][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.289253][ T5769] veth0_vlan: entered promiscuous mode [ 79.332548][ T5769] veth1_vlan: entered promiscuous mode [ 79.371327][ T51] Bluetooth: hci3: command tx timeout [ 79.436824][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.451952][ T51] Bluetooth: hci1: command tx timeout [ 79.451988][ T5083] Bluetooth: hci2: command tx timeout [ 79.466140][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.485426][ T5769] veth0_macvtap: entered promiscuous mode [ 79.507484][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.517057][ T5769] veth1_macvtap: entered promiscuous mode [ 79.531779][ T5083] Bluetooth: hci0: command tx timeout [ 79.584043][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.610243][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.626048][ T5768] veth0_vlan: entered promiscuous mode [ 79.644845][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.654561][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.663549][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.672320][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.701913][ T5768] veth1_vlan: entered promiscuous mode [ 79.747399][ T5770] veth0_vlan: entered promiscuous mode [ 79.776051][ T5771] veth0_vlan: entered promiscuous mode [ 79.808678][ T5770] veth1_vlan: entered promiscuous mode [ 79.830242][ T5771] veth1_vlan: entered promiscuous mode [ 79.876209][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.886010][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.908641][ T5768] veth0_macvtap: entered promiscuous mode [ 79.928143][ T5768] veth1_macvtap: entered promiscuous mode [ 79.975712][ T5770] veth0_macvtap: entered promiscuous mode [ 79.995089][ T5770] veth1_macvtap: entered promiscuous mode [ 80.009866][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.026059][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.037511][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.050827][ T5771] veth0_macvtap: entered promiscuous mode [ 80.067887][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.081969][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.092433][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.103424][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.116226][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.125001][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.137984][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.148752][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.154313][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.167838][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.179511][ T5771] veth1_macvtap: entered promiscuous mode [ 80.195213][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.205978][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.216288][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.226907][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.238760][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.256823][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.265737][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.274597][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.283494][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.314815][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.325162][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.336750][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.346905][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.360727][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.379037][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.389150][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.400056][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.410260][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.422404][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.434789][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.507407][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.541258][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.561302][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.567763][ T5831] syz.3.4[5831]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.590769][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.602375][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.614175][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.627011][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.654986][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.673441][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.682661][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.689001][ T5831] loop3: detected capacity change from 0 to 4096 [ 80.691938][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.772300][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.780266][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.852292][ T5831] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 80.923106][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.933855][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.956995][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.967184][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.107415][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.140084][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.158790][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.178215][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.357121][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.392580][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.454186][ T5083] Bluetooth: hci3: command tx timeout [ 81.531438][ T5083] Bluetooth: hci2: command tx timeout [ 81.536436][ T51] Bluetooth: hci1: command tx timeout [ 81.601112][ T28] audit: type=1326 audit(1772547619.350:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2339c799 code=0x7ffc0000 [ 81.623250][ T51] Bluetooth: hci0: command tx timeout [ 81.681487][ T28] audit: type=1326 audit(1772547619.400:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2339c799 code=0x7ffc0000 [ 81.731874][ T28] audit: type=1326 audit(1772547619.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3b2339c799 code=0x7ffc0000 [ 81.827232][ T28] audit: type=1326 audit(1772547619.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2339c799 code=0x7ffc0000 [ 81.880523][ T28] audit: type=1326 audit(1772547619.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2339c799 code=0x7ffc0000 [ 81.929080][ T28] audit: type=1326 audit(1772547619.420:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f3b2339c799 code=0x7ffc0000 [ 82.048584][ T5850] loop1: detected capacity change from 0 to 128 [ 82.052265][ T28] audit: type=1326 audit(1772547619.420:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b2339c799 code=0x7ffc0000 [ 82.147651][ T5850] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.197440][ T5854] loop0: detected capacity change from 0 to 256 [ 82.265055][ T5850] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.567946][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.971633][ T5827] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.981338][ T5808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.171428][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 83.176659][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 83.190332][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.220580][ T5808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 211, changing to 7 [ 83.243624][ T5827] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 83.253387][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.275564][ T5808] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 83.285208][ T5827] usb 4-1: Product: syz [ 83.289443][ T5827] usb 4-1: Manufacturer: syz [ 83.300998][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.320412][ T5827] usb 4-1: SerialNumber: syz [ 83.325662][ T5808] usb 1-1: Product: syz [ 83.329866][ T5808] usb 1-1: Manufacturer: syz [ 83.347882][ T5827] usb 4-1: config 0 descriptor?? [ 83.360934][ T5808] usb 1-1: SerialNumber: syz [ 83.396345][ T5827] dw2102: su3000_identify_state [ 83.413923][ T5827] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 83.439365][ T5827] dw2102: su3000_power_ctrl: 1, initialized 0 [ 83.460126][ T5827] dvb-usb: bulk message failed: -22 (2/0) [ 83.522521][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.532010][ T51] Bluetooth: hci3: command tx timeout [ 83.573758][ T28] audit: type=1326 audit(1772547621.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d359c799 code=0x7ffc0000 [ 83.576070][ T5827] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 83.619948][ T51] Bluetooth: hci1: command tx timeout [ 83.626552][ T51] Bluetooth: hci2: command tx timeout [ 83.665471][ T5863] dvb-usb: bulk message failed: -22 (3/0) [ 83.671844][ T28] audit: type=1326 audit(1772547621.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23d359c799 code=0x7ffc0000 [ 83.671963][ T28] audit: type=1326 audit(1772547621.350:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5881 comm="syz.2.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f23d359c799 code=0x7ffc0000 [ 83.699478][ T5863] dw2102: i2c transfer failed. [ 83.718854][ T5808] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 83.719986][ T5808] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 83.734428][ T5863] dvb-usb: bulk message failed: -22 (4/0) [ 83.745593][ T5083] Bluetooth: hci0: command tx timeout [ 83.780033][ T5863] dw2102: i2c transfer failed. [ 83.794602][ T5827] usb 4-1: media controller created [ 83.794675][ T5884] loop1: detected capacity change from 0 to 4096 [ 83.831289][ T5863] dvb-usb: bulk message failed: -22 (3/0) [ 83.837074][ T5863] dw2102: i2c transfer failed. [ 83.856825][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 83.865173][ T5886] loop2: detected capacity change from 0 to 512 [ 83.906499][ T5827] dw2102: i2c transfer failed. [ 83.907696][ T5886] ======================================================= [ 83.907696][ T5886] WARNING: The mand mount option has been deprecated and [ 83.907696][ T5886] and is ignored by this kernel. Remove the mand [ 83.907696][ T5886] option from the mount to silence this warning. [ 83.907696][ T5886] ======================================================= [ 83.912652][ T5808] usb 1-1: USB disconnect, device number 2 [ 83.973110][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 83.979009][ T5827] dw2102: i2c transfer failed. [ 84.016688][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 84.048010][ T5827] dw2102: i2c transfer failed. [ 84.068260][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 84.081775][ T5886] EXT4-fs: inline encryption not supported [ 84.097325][ T5827] dw2102: i2c transfer failed. [ 84.119573][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 84.146736][ T5886] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 84.178890][ T5886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 84.186083][ T5827] dw2102: i2c transfer failed. [ 84.199358][ T5886] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.206678][ T5886] EXT4-fs error (device loop2): ext4_orphan_get:1424: comm syz.2.24: bad orphan inode 267 [ 84.227913][ T5886] EXT4-fs (loop2): Remounting filesystem read-only [ 84.228305][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 84.236742][ T5886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 84.324533][ T5827] dw2102: i2c transfer failed. [ 84.342219][ T5886] System zones: 1-12 [ 84.344089][ T5827] dvb-usb: MAC address: 02:02:02:02:02:02 [ 84.346208][ T5886] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000007. [ 84.454261][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.512635][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 84.551542][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 84.557698][ T5827] dw2102: command 0x0e transfer failed. [ 84.609617][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 84.625452][ T5827] dw2102: command 0x0e transfer failed. [ 84.800165][ T5897] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 84.826479][ T5897] macsec1: entered promiscuous mode [ 84.837982][ T5899] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 84.856653][ T5897] macsec1: entered allmulticast mode [ 84.866506][ T5897] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 84.886775][ T5897] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 84.892055][ T5903] loop3: detected capacity change from 0 to 512 [ 84.911323][ T5897] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 84.927360][ T5903] EXT4-fs: Ignoring removed orlov option [ 84.961477][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 84.962562][ T5903] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 84.967249][ T5827] dw2102: command 0x0e transfer failed. [ 84.967281][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 84.967307][ T5827] dw2102: command 0x0e transfer failed. [ 84.967317][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 84.967331][ T5827] dw2102: command 0x51 transfer failed. [ 85.177107][ T5908] loop1: detected capacity change from 0 to 64 [ 85.222939][ T5827] DVB: Unable to find symbol ds3000_attach() [ 85.247200][ T5827] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 85.433150][ T5827] rc_core: IR keymap rc-su3000 not found [ 85.461238][ T5827] Registered IR keymap rc-empty [ 85.468151][ T5827] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 85.514285][ T5827] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 85.564539][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 85.609398][ T5827] dw2102: su3000_power_ctrl: 0, initialized 1 [ 85.631870][ T966] IPVS: starting estimator thread 0... [ 85.648174][ T5827] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 85.702026][ T5827] usb 4-1: USB disconnect, device number 2 [ 85.731582][ T5922] IPVS: using max 18 ests per chain, 43200 per kthread [ 85.892640][ T5926] rdma_op ffff888029bf31f0 conn xmit_rdma 0000000000000000 [ 85.984143][ T5827] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 87.089784][ T5966] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.108665][ T8] cfg80211: failed to load regulatory.db [ 87.171126][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.351163][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 87.373276][ T27] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 87.390480][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.437818][ T27] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 87.495923][ T5973] loop3: detected capacity change from 0 to 512 [ 87.518559][ T5973] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.544287][ T5973] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.637954][ T5973] EXT4-fs (loop3): 1 truncate cleaned up [ 87.651377][ T5954] loop1: detected capacity change from 0 to 40427 [ 87.670757][ T5973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.687671][ T5954] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 87.724869][ T5954] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.781642][ T5954] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 87.808853][ T5954] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 87.821399][ T5954] F2FS-fs (loop1): Image doesn't support compression [ 87.856563][ T5954] F2FS-fs (loop1): invalid crc value [ 87.886413][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.926575][ T5954] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.068818][ T5758] usb 1-1: USB disconnect, device number 3 [ 88.116286][ T5985] loop3: detected capacity change from 0 to 128 [ 88.119329][ T5954] F2FS-fs (loop1): Start checkpoint disabled! [ 88.164945][ T5954] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.173977][ T5954] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 88.220343][ T5985] FAT-fs (loop3): Directory bread(block 32) failed [ 88.238861][ T5985] FAT-fs (loop3): Directory bread(block 33) failed [ 88.259035][ T5985] FAT-fs (loop3): Directory bread(block 34) failed [ 88.302126][ T5985] FAT-fs (loop3): Directory bread(block 35) failed [ 88.303561][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 88.303575][ T28] audit: type=1800 audit(1772547626.060:13): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.54" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 88.308780][ T5985] FAT-fs (loop3): Directory bread(block 36) failed [ 88.371045][ T5985] FAT-fs (loop3): Directory bread(block 37) failed [ 88.377850][ T5985] FAT-fs (loop3): Directory bread(block 38) failed [ 88.386174][ T5985] FAT-fs (loop3): Directory bread(block 39) failed [ 88.417271][ T5985] FAT-fs (loop3): Directory bread(block 40) failed [ 88.434629][ T5985] FAT-fs (loop3): Directory bread(block 41) failed [ 88.514131][ T49] kworker/u4:3: attempt to access beyond end of device [ 88.514131][ T49] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 88.536201][ T5991] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 88.545317][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 88.564409][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 88.638452][ T5991] team0: Port device dummy0 added [ 88.700977][ T5992] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 88.775073][ T5992] team0: Port device dummy0 removed [ 89.441401][ T6000] loop3: detected capacity change from 0 to 8192 [ 89.470076][ T6000] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.491073][ T6000] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 89.527283][ T6000] REISERFS (device loop3): using ordered data mode [ 89.565503][ T6000] reiserfs: using flush barriers [ 89.591165][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.609354][ T6000] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.704446][ T6000] REISERFS (device loop3): checking transaction log (loop3) [ 89.742586][ T6000] REISERFS (device loop3): Using r5 hash to sort names [ 89.773657][ T6000] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 89.831022][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 89.843994][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 89.866038][ T27] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 89.883618][ T27] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 89.920041][ T27] usb 2-1: Product: syz [ 89.931100][ T27] usb 2-1: Manufacturer: syz [ 89.943495][ T6011] loop0: detected capacity change from 0 to 32768 [ 89.950978][ T27] usb 2-1: SerialNumber: syz [ 90.044805][ T6011] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.202114][ T27] usb 2-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 90.210010][ T27] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 90.242031][ T27] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 90.311548][ T6011] XFS (loop0): Ending clean mount [ 90.417155][ T27] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 90.427259][ T6028] binder: 6027:6028 ioctl c0306201 0 returned -14 [ 90.435335][ T27] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 90.436424][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.452213][ T27] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 90.468782][ T6028] binder: 6027:6028 ioctl c00c6211 0 returned -14 [ 90.477009][ T27] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 90.517441][ T27] usb 2-1: USB disconnect, device number 2 [ 90.548146][ T27] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 90.618133][ T27] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 90.647070][ T27] visor 2-1:1.0: device disconnected [ 90.923393][ T6023] loop2: detected capacity change from 0 to 40427 [ 90.971104][ T6023] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 90.981354][ T6023] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 90.990469][ T6023] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 91.032535][ T6023] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 91.054612][ T6023] F2FS-fs (loop2): Image doesn't support compression [ 91.079388][ T6023] F2FS-fs (loop2): invalid crc value [ 91.149681][ T6023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.234703][ T6040] loop0: detected capacity change from 0 to 128 [ 91.315530][ T6023] F2FS-fs (loop2): Start checkpoint disabled! [ 91.342866][ T6023] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 91.350196][ T6040] FAT-fs (loop0): Directory bread(block 32) failed [ 91.350235][ T6040] FAT-fs (loop0): Directory bread(block 33) failed [ 91.350332][ T6040] FAT-fs (loop0): Directory bread(block 34) failed [ 91.350361][ T6040] FAT-fs (loop0): Directory bread(block 35) failed [ 91.350465][ T6040] FAT-fs (loop0): Directory bread(block 36) failed [ 91.350493][ T6040] FAT-fs (loop0): Directory bread(block 37) failed [ 91.350594][ T6040] FAT-fs (loop0): Directory bread(block 38) failed [ 91.350623][ T6040] FAT-fs (loop0): Directory bread(block 39) failed [ 91.350729][ T6040] FAT-fs (loop0): Directory bread(block 40) failed [ 91.350757][ T6040] FAT-fs (loop0): Directory bread(block 41) failed [ 91.359967][ T6023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 91.560778][ T28] audit: type=1800 audit(1772547629.310:14): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.78" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 91.854019][ T1132] kworker/u4:7: attempt to access beyond end of device [ 91.854019][ T1132] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 91.883105][ T1132] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 91.890836][ T1132] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 92.221034][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.431413][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 92.438984][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.461300][ T8] usb 2-1: config 0 has no interface number 0 [ 92.467465][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.496847][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.510147][ T8] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.525625][ T8] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 92.535164][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.552416][ T8] usb 2-1: config 0 descriptor?? [ 92.563594][ T5808] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.769038][ T5808] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 92.781088][ T5808] usb 4-1: config 0 has no interface number 0 [ 92.787249][ T5808] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.817581][ T5808] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.837426][ T5808] usb 4-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.844141][ T6067] loop2: detected capacity change from 0 to 4096 [ 92.860622][ T5808] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 92.891745][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.907961][ T6067] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 92.920684][ T6067] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 92.930511][ T5808] usb 4-1: config 0 descriptor?? [ 92.937294][ T6067] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 92.953537][ T6067] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 92.982730][ T8] holtek_mouse 0003:04D9:A072.0001: unknown main item tag 0x2 [ 93.007153][ T6067] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 93.027479][ T8] holtek_mouse 0003:04D9:A072.0001: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.1-1/input1 [ 93.045076][ T6067] ntfs: volume version 3.1. [ 93.056768][ T6067] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 93.085424][ T6067] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 93.105075][ T6067] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 93.178598][ T8] usb 2-1: USB disconnect, device number 3 [ 93.322118][ T6070] fido_id[6070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 93.428177][ T5808] uclogic 0003:28BD:0042.0002: interface is invalid, ignoring [ 93.645688][ T5808] usb 4-1: USB disconnect, device number 3 [ 93.710311][ T6076] loop2: detected capacity change from 0 to 128 [ 93.748950][ T6069] loop0: detected capacity change from 0 to 40427 [ 93.759725][ T6069] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 93.774453][ T6069] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.826289][ T6076] FAT-fs (loop2): Directory bread(block 32) failed [ 93.836586][ T6069] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 93.839529][ T6076] FAT-fs (loop2): Directory bread(block 33) failed [ 93.859209][ T6069] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 93.871225][ T6076] FAT-fs (loop2): Directory bread(block 34) failed [ 93.880980][ T6076] FAT-fs (loop2): Directory bread(block 35) failed [ 93.901119][ T6069] F2FS-fs (loop0): Image doesn't support compression [ 93.901805][ T6076] FAT-fs (loop2): Directory bread(block 36) failed [ 93.927576][ T6069] F2FS-fs (loop0): invalid crc value [ 93.941407][ T6076] FAT-fs (loop2): Directory bread(block 37) failed [ 93.964262][ T6069] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.964766][ T6076] FAT-fs (loop2): Directory bread(block 38) failed [ 93.984729][ T6076] FAT-fs (loop2): Directory bread(block 39) failed [ 93.993460][ T6076] FAT-fs (loop2): Directory bread(block 40) failed [ 94.000117][ T6076] FAT-fs (loop2): Directory bread(block 41) failed [ 94.041134][ T6069] F2FS-fs (loop0): Start checkpoint disabled! [ 94.050771][ T6069] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 94.065481][ T6069] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 94.185013][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 94.185029][ T28] audit: type=1800 audit(1772547631.930:15): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.97" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 94.491727][ T1081] kworker/u4:5: attempt to access beyond end of device [ 94.491727][ T1081] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 94.517349][ T1081] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 94.543344][ T1081] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 94.921239][ T6098] loop2: detected capacity change from 0 to 2048 [ 94.953059][ T6098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.565343][ T6116] loop1: detected capacity change from 0 to 128 [ 95.637389][ T6116] FAT-fs (loop1): Directory bread(block 32) failed [ 95.674748][ T6116] FAT-fs (loop1): Directory bread(block 33) failed [ 95.681150][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 95.720596][ T6120] capability: warning: `syz.3.121' uses deprecated v2 capabilities in a way that may be insecure [ 95.726371][ T6116] FAT-fs (loop1): Directory bread(block 34) failed [ 95.744929][ T6116] FAT-fs (loop1): Directory bread(block 35) failed [ 95.761862][ T6116] FAT-fs (loop1): Directory bread(block 36) failed [ 95.768542][ T6116] FAT-fs (loop1): Directory bread(block 37) failed [ 95.816021][ T6116] FAT-fs (loop1): Directory bread(block 38) failed [ 95.834112][ T6122] loop2: detected capacity change from 0 to 64 [ 95.840269][ T6116] FAT-fs (loop1): Directory bread(block 39) failed [ 95.884097][ T6116] FAT-fs (loop1): Directory bread(block 40) failed [ 95.890694][ T6116] FAT-fs (loop1): Directory bread(block 41) failed [ 96.450995][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.476329][ T6138] loop0: detected capacity change from 0 to 512 [ 96.581903][ T6138] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.649637][ T6138] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 96.664118][ T8] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 96.680954][ T8] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 96.700982][ T8] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 96.707954][ T6138] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.130: Corrupt directory, running e2fsck is recommended [ 96.717115][ T8] usb 4-1: config 220 has no interface number 2 [ 96.759818][ T8] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 96.774993][ T6138] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 96.787179][ T8] usb 4-1: config 220 interface 0 has no altsetting 0 [ 96.801279][ T8] usb 4-1: config 220 interface 76 has no altsetting 0 [ 96.808206][ T8] usb 4-1: config 220 interface 1 has no altsetting 0 [ 96.821365][ T6138] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.130: corrupted in-inode xattr: e_name out of bounds [ 96.847400][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 96.860981][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.876605][ T6138] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.130: couldn't read orphan inode 15 (err -117) [ 96.891242][ T8] usb 4-1: Product: syz [ 96.895463][ T8] usb 4-1: Manufacturer: syz [ 96.915500][ T8] usb 4-1: SerialNumber: syz [ 96.917508][ T6138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.094665][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.182820][ T8] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 97.216389][ T8] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 97.237729][ T8] usb 4-1: No valid video chain found. [ 97.249979][ T8] usb 4-1: selecting invalid altsetting 0 [ 97.291103][ T8] usb 4-1: selecting invalid altsetting 0 [ 97.296916][ T8] usbtest: probe of 4-1:220.1 failed with error -22 [ 97.321555][ T8] usb 4-1: USB disconnect, device number 4 [ 97.502976][ T6166] netlink: 'syz.0.142': attribute type 2 has an invalid length. [ 97.503032][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.142'. [ 97.503204][ T6166] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 97.775766][ T6175] loop0: detected capacity change from 0 to 512 [ 97.863014][ T6175] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 98.246715][ T6189] batman_adv: The newly added mac address (aa:00:00:00:00:00) already exists on: batadv_slave_1 [ 98.259525][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.277188][ T6189] batadv_slave_1: entered promiscuous mode [ 98.302761][ T6190] team0: entered allmulticast mode [ 98.309154][ T6190] team_slave_0: entered allmulticast mode [ 98.334829][ T6190] team_slave_1: entered allmulticast mode [ 98.494222][ T6196] Zero length message leads to an empty skb [ 98.751135][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.906729][ T6210] loop0: detected capacity change from 0 to 512 [ 98.922212][ T6210] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.949836][ T6210] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.983762][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 99.015272][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.025033][ T6210] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.164: inode #15: comm syz.0.164: iget: illegal inode # [ 99.055851][ T6216] loop2: detected capacity change from 0 to 512 [ 99.063644][ T6216] EXT4-fs: inline encryption not supported [ 99.069648][ T6216] EXT4-fs: Ignoring removed i_version option [ 99.092853][ T8] usb 2-1: config 0 descriptor?? [ 99.095418][ T6210] EXT4-fs (loop0): Remounting filesystem read-only [ 99.139598][ T6210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.185515][ T6216] EXT4-fs (loop2): 1 orphan inode deleted [ 99.206474][ T6216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.317555][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.413634][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.498233][ T6202] loop3: detected capacity change from 0 to 32768 [ 99.519351][ T6202] XFS: attr2 mount option is deprecated. [ 99.533247][ T6220] warning: `syz.0.167' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.550315][ T8] ath6kl: Unsupported hardware version: 0x0 [ 99.597785][ T8] ath6kl: Failed to init ath6kl core: -22 [ 99.618909][ T8] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 99.631402][ T6202] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 99.678767][ T6202] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.750842][ T8] usb 2-1: USB disconnect, device number 4 [ 99.861243][ T6202] XFS (loop3): Ending clean mount [ 99.888013][ T6202] XFS (loop3): Quotacheck needed: Please wait. [ 100.014815][ T6202] XFS (loop3): Quotacheck: Done. [ 100.236748][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.447514][ T6247] loop2: detected capacity change from 0 to 8192 [ 100.489636][ T6247] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.511239][ T6247] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 100.561824][ T6247] REISERFS (device loop2): using journaled data mode [ 100.604369][ T6247] reiserfs: using flush barriers [ 100.665230][ T6254] loop0: detected capacity change from 0 to 8 [ 100.712105][ T6247] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.742213][ T6247] REISERFS (device loop2): checking transaction log (loop2) [ 100.792532][ T6247] REISERFS (device loop2): Using r5 hash to sort names [ 100.812967][ T6254] SQUASHFS error: Unable to read directory block [629:46] [ 100.871518][ T6247] reiserfs: enabling write barrier flush mode [ 100.933169][ T6247] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 101.031106][ T6247] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 101.163768][ T6251] loop1: detected capacity change from 0 to 32768 [ 101.262465][ T6262] loop3: detected capacity change from 0 to 64 [ 101.307686][ T6251] JBD2: Ignoring recovery information on journal [ 101.388389][ T6251] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 101.427490][ T6262] Trying to free block not in datazone [ 101.483015][ T6262] Trying to free block not in datazone [ 101.509132][ T6262] Trying to free block not in datazone [ 101.529264][ T6262] Trying to free block not in datazone [ 101.554145][ T6262] minix_free_block (loop3:6): bit already cleared [ 101.586851][ T6262] Trying to free block not in datazone [ 101.617112][ T6262] Trying to free block not in datazone [ 101.630485][ T6272] netlink: 'syz.0.185': attribute type 3 has an invalid length. [ 101.813453][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 102.138772][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 102.504287][ T6269] loop2: detected capacity change from 0 to 32768 [ 102.599723][ T6269] [ 102.599723][ T6269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.599723][ T6269] [ 102.684939][ T6269] ERROR: (device loop2): dbReAlloc: the block is outside the filesystem [ 102.684939][ T6269] [ 102.723906][ T6269] ERROR: (device loop2): remounting filesystem as read-only [ 102.745546][ T6298] loop3: detected capacity change from 0 to 22 [ 102.786230][ T6298] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 102.831806][ T6298] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 103.814018][ T6331] loop0: detected capacity change from 0 to 512 [ 103.830278][ T6331] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.862891][ T6331] EXT4-fs (loop0): 1 truncate cleaned up [ 103.883384][ T6331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.936376][ T6335] IPVS: ip_vs_edit_dest(): server weight less than zero [ 103.954411][ T5758] IPVS: starting estimator thread 0... [ 103.993988][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.041084][ T6336] IPVS: using max 17 ests per chain, 40800 per kthread [ 104.186726][ T6344] raw_sendmsg: syz.0.216 forgot to set AF_INET. Fix it! [ 104.316509][ T6350] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.318580][ T6349] loop3: detected capacity change from 0 to 512 [ 104.419314][ T6349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.504541][ T6349] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.595592][ T6349] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.220: bg 0: block 456: padding at end of block bitmap is not set [ 104.664996][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.852677][ T6364] loop0: detected capacity change from 0 to 512 [ 104.889543][ T6368] syz.3.227[6368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.889778][ T6368] syz.3.227[6368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.958881][ T6364] EXT4-fs (loop0): 1 orphan inode deleted [ 105.000217][ T6364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.044283][ T6364] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.093626][ T6364] EXT4-fs (loop0): resizing filesystem from 64 to 1 blocks [ 105.121092][ T6364] EXT4-fs warning (device loop0): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 105.219063][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.791927][ T6366] loop2: detected capacity change from 0 to 32768 [ 106.069707][ T6394] tipc: Started in network mode [ 106.083492][ T6394] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 106.135761][ T6394] tipc: Enabled bearer , priority 10 [ 106.440658][ T6404] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 106.962927][ T6418] capability: warning: `syz.1.251' uses 32-bit capabilities (legacy support in use) [ 107.001133][ T966] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.195207][ T966] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 107.202607][ T6420] loop2: detected capacity change from 0 to 8192 [ 107.224126][ T966] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 107.226765][ T6420] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.236728][ T27] tipc: Node number set to 4269801488 [ 107.252218][ T6420] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 107.264048][ T6420] REISERFS (device loop2): using ordered data mode [ 107.271582][ T6420] reiserfs: using flush barriers [ 107.287191][ T6420] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.289942][ T966] usb 4-1: config 220 has no interface number 2 [ 107.317906][ T6420] REISERFS (device loop2): checking transaction log (loop2) [ 107.356004][ T6420] REISERFS (device loop2): Using r5 hash to sort names [ 107.373366][ T966] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 107.439050][ T966] usb 4-1: config 220 interface 0 has no altsetting 0 [ 107.452271][ T6420] reiserfs: enabling write barrier flush mode [ 107.470957][ T966] usb 4-1: config 220 interface 76 has no altsetting 0 [ 107.505715][ T966] usb 4-1: config 220 interface 1 has no altsetting 0 [ 107.523802][ T6420] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 107.528250][ T966] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 107.556399][ T6429] netlink: 'syz.1.256': attribute type 16 has an invalid length. [ 107.575477][ T6429] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.256'. [ 107.578775][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.592546][ T6420] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 107.598239][ T966] usb 4-1: Product: syz [ 107.610109][ T966] usb 4-1: Manufacturer: syz [ 107.620021][ T966] usb 4-1: SerialNumber: syz [ 107.627545][ T6420] REISERFS (device loop2): Remounting filesystem read-only [ 107.650028][ T6420] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 107.666004][ T6420] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 107.698180][ T6420] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 107.740132][ T6420] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 107.770604][ T6420] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 107.793508][ T6420] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 107.805276][ T6420] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 107.820641][ T6420] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 107.863207][ T966] usb 4-1: selecting invalid altsetting 0 [ 107.882161][ T966] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 107.907582][ T966] usb 4-1: No valid video chain found. [ 107.949214][ T966] usb 4-1: selecting invalid altsetting 0 [ 107.969275][ T6435] xt_socket: unknown flags 0xe4 [ 107.970748][ T966] usbtest: probe of 4-1:220.1 failed with error -22 [ 107.995966][ T6437] netlink: 'syz.0.260': attribute type 7 has an invalid length. [ 107.997432][ T966] usb 4-1: USB disconnect, device number 5 [ 108.025987][ T6437] netlink: 'syz.0.260': attribute type 8 has an invalid length. [ 108.032264][ T5768] ------------[ cut here ]------------ [ 108.039648][ T5768] kernel BUG at fs/reiserfs/journal.c:1916! [ 108.088643][ T5768] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 108.094783][ T5768] CPU: 0 PID: 5768 Comm: syz-executor Not tainted syzkaller #0 [ 108.102397][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.112656][ T5768] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 108.118486][ T5768] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 c4 de b5 ff e9 f9 fc ff ff e8 4a af 5d ff <0f> 0b e8 43 af 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 108.138192][ T5768] RSP: 0018:ffffc90004677b00 EFLAGS: 00010293 [ 108.144271][ T5768] RAX: ffffffff822965c6 RBX: 1ffff920008cef64 RCX: ffff88802fae0000 [ 108.152336][ T5768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.160313][ T5768] RBP: ffffc90004677bf8 R08: ffffc90004677b77 R09: 0000000000000000 [ 108.168293][ T5768] R10: ffffc90004677b40 R11: fffff520008cef6f R12: ffffc9001921b000 [ 108.176364][ T5768] R13: dffffc0000000000 R14: ffff88802cd12630 R15: 0000000000000000 [ 108.184431][ T5768] FS: 0000555577f53500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 108.193373][ T5768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.199957][ T5768] CR2: 000000110c3fc012 CR3: 0000000061b47000 CR4: 00000000003506f0 [ 108.207936][ T5768] Call Trace: [ 108.211225][ T5768] [ 108.214168][ T5768] ? journal_release+0x30/0x30 [ 108.218956][ T5768] journal_release+0x1f/0x30 [ 108.223556][ T5768] reiserfs_put_super+0x26b/0x510 [ 108.228596][ T5768] ? hook_inode_free_security+0xb0/0xb0 [ 108.234153][ T5768] ? evict_inodes+0x63c/0x6a0 [ 108.238836][ T5768] ? reiserfs_dirty_inode+0x270/0x270 [ 108.244308][ T5768] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 108.249952][ T5768] ? reiserfs_dirty_inode+0x270/0x270 [ 108.255333][ T5768] generic_shutdown_super+0x134/0x2b0 [ 108.260800][ T5768] kill_block_super+0x44/0x90 [ 108.265485][ T5768] deactivate_locked_super+0x97/0x100 [ 108.270866][ T5768] cleanup_mnt+0x43b/0x4d0 [ 108.275292][ T5768] task_work_run+0x1d4/0x260 [ 108.279890][ T5768] ? task_work_cancel+0x220/0x220 [ 108.284925][ T5768] ? exit_to_user_mode_loop+0x3b/0x110 [ 108.290398][ T5768] exit_to_user_mode_loop+0xe6/0x110 [ 108.295693][ T5768] exit_to_user_mode_prepare+0xee/0x180 [ 108.301251][ T5768] syscall_exit_to_user_mode+0x1a/0x50 [ 108.306713][ T5768] do_syscall_64+0x61/0xa0 [ 108.311138][ T5768] ? clear_bhb_loop+0x40/0x90 [ 108.315843][ T5768] ? clear_bhb_loop+0x40/0x90 [ 108.320542][ T5768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.326451][ T5768] RIP: 0033:0x7f23d359d9d7 [ 108.330886][ T5768] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.350515][ T5768] RSP: 002b:00007fffeddf23b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.358950][ T5768] RAX: 0000000000000000 RBX: 00007f23d3631f90 RCX: 00007f23d359d9d7 [ 108.366927][ T5768] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffeddf2470 [ 108.374906][ T5768] RBP: 00007fffeddf2470 R08: 00007fffeddf3470 R09: 00000000ffffffff [ 108.382879][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffeddf3500 [ 108.390875][ T5768] R13: 00007f23d3631f90 R14: 000000000001a560 R15: 00007fffeddf3540 [ 108.398949][ T5768] [ 108.401974][ T5768] Modules linked in: [ 108.442612][ T5768] ---[ end trace 0000000000000000 ]--- [ 108.448187][ T5768] RIP: 0010:do_journal_release+0x4e6/0x4f0 [ 108.456065][ T5768] Code: b5 ff e9 a8 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 06 fd ff ff 4c 89 ff e8 c4 de b5 ff e9 f9 fc ff ff e8 4a af 5d ff <0f> 0b e8 43 af 5d ff 0f 0b 90 66 0f 1f 00 41 57 41 56 53 48 89 f3 [ 108.476532][ T5768] RSP: 0018:ffffc90004677b00 EFLAGS: 00010293 [ 108.482937][ T5768] RAX: ffffffff822965c6 RBX: 1ffff920008cef64 RCX: ffff88802fae0000 [ 108.493397][ T5768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.502635][ T5768] RBP: ffffc90004677bf8 R08: ffffc90004677b77 R09: 0000000000000000 [ 108.510669][ T5768] R10: ffffc90004677b40 R11: fffff520008cef6f R12: ffffc9001921b000 [ 108.521015][ T5768] R13: dffffc0000000000 R14: ffff88802cd12630 R15: 0000000000000000 [ 108.529031][ T5768] FS: 0000555577f53500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 108.538131][ T5768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.544799][ T5768] CR2: 00007f13517e82f8 CR3: 0000000061b47000 CR4: 00000000003506e0 [ 108.552989][ T5768] Kernel panic - not syncing: Fatal exception [ 108.559458][ T5768] Kernel Offset: disabled [ 108.563779][ T5768] Rebooting in 86400 seconds..