last executing test programs: 2m1.565748418s ago: executing program 2 (id=321): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) 2m1.165492817s ago: executing program 2 (id=325): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0xa105c2, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)) 2m0.537768003s ago: executing program 2 (id=332): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) pwritev(r0, &(0x7f0000000480)=[{&(0x7f00000006c0)="e8", 0xff44}], 0x1, 0x4, 0x5) 2m0.25704601s ago: executing program 2 (id=338): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m59.441249479s ago: executing program 2 (id=345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1m58.752506106s ago: executing program 2 (id=349): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x4000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r1, &(0x7f00000003c0)=""/68, 0x44) 1m58.19755012s ago: executing program 32 (id=349): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x4000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r1, &(0x7f00000003c0)=""/68, 0x44) 42.859859176s ago: executing program 0 (id=1045): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0xfffffe0c) 41.669094385s ago: executing program 0 (id=1061): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 41.414603091s ago: executing program 0 (id=1063): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) setuid(0xee01) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) 39.865950749s ago: executing program 0 (id=1076): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 38.606124109s ago: executing program 0 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xfffffffd, 0xfffffffd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x94}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2020023}]}]}, 0x38}}, 0x0) 37.284986461s ago: executing program 0 (id=1108): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xfffe, 0x560c, {0x80b, 0x5d5}, {0xfffa, 0x2}, @const={0xd, {0x101, 0x2, 0x401, 0xae6}}}) 36.848453303s ago: executing program 33 (id=1108): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xfffe, 0x560c, {0x80b, 0x5d5}, {0xfffa, 0x2}, @const={0xd, {0x101, 0x2, 0x401, 0xae6}}}) 36.096489121s ago: executing program 1 (id=1105): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0xa, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1000000}}}}}, 0x0) 25.84195196s ago: executing program 1 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc) 25.633690466s ago: executing program 1 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill1/soft\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) 25.332028543s ago: executing program 1 (id=1112): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 24.711352998s ago: executing program 1 (id=1118): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)="000000ef0902090001010000010000000169c9a5c3358e42cac39018318a85", 0x1f) 23.632477154s ago: executing program 1 (id=1131): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0x70}}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000200)={0x1}) 23.205685805s ago: executing program 34 (id=1131): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0x70}}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000200)={0x1}) 3.628243572s ago: executing program 3 (id=1251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x160bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x2c, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x10001}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0xe, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x7}, {0x8, 0x96, 0x0, 0x0, 0x7cc6}]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x40) 3.617077122s ago: executing program 6 (id=1252): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 2.673343355s ago: executing program 3 (id=1260): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2203, 0x0) 2.513389819s ago: executing program 4 (id=1262): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='appraise func=FIRMWARE_CHECK', 0x1c) 2.315916994s ago: executing program 3 (id=1264): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x1d, 0x2, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind(r0, &(0x7f0000000100)=@can={0x1d, 0x0, 0x1, 0x2}, 0x10) 2.212095586s ago: executing program 4 (id=1265): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x0, 0x0) lseek(r0, 0x4, 0x1) 2.190062177s ago: executing program 6 (id=1266): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000008000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2.188723677s ago: executing program 5 (id=1267): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.986444552s ago: executing program 5 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xe}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_IE={0x4}]}, 0x44}}, 0x0) 1.982326462s ago: executing program 3 (id=1270): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x401, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xe, 0x34, @random="e6b617f0e5ad9787b163"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x12, 0x4c, [0xfac12, 0xfac09, 0x87a0f, 0xfac0b]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x0) 1.951093433s ago: executing program 4 (id=1271): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x52) write(r0, 0x0, 0x0) 1.876967375s ago: executing program 6 (id=1272): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x6, &(0x7f0000000d80)=0x0) r1 = eventfd2(0x5, 0x80801) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, r1, 0x0, 0x0, 0xfbe, 0x0, 0x1, r1}]) 1.866470555s ago: executing program 7 (id=1273): unshare(0x28000600) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x48, 0x0, 0xffffffffffffffff, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x39d7, 0x1, 0x1, 0x0, 0x0) 1.726512828s ago: executing program 3 (id=1274): bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="c0bc0477e35a1cee487b9c245ea4", 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.706708009s ago: executing program 4 (id=1275): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000002a00)=""/15, 0xf}], 0x4}, 0xec}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 1.65980957s ago: executing program 5 (id=1276): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getrlimit(0x9, &(0x7f00000000c0)) 1.597117741s ago: executing program 6 (id=1277): r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0xff) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x3, 0xc) 1.551336612s ago: executing program 7 (id=1278): r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x109841) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1, 0xff, 0x5d4, 0x0, 0x81}) 1.364459417s ago: executing program 4 (id=1279): socket(0x2b, 0x80801, 0x1) setns(0xc9, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 1.342542088s ago: executing program 6 (id=1280): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550df33dd47ded539aef131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x60f6, &(0x7f00000002c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 1.336638938s ago: executing program 5 (id=1281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) 1.272345599s ago: executing program 7 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080180002d01010000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.189588401s ago: executing program 4 (id=1283): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1.059749584s ago: executing program 7 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000d0a010100000000000000000a0000010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 964.448917ms ago: executing program 5 (id=1285): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x8ff, 0x0, &(0x7f0000000080)="2e4ceced000222e02df633c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 607.687115ms ago: executing program 3 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 450.357969ms ago: executing program 7 (id=1287): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x2000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 129.648747ms ago: executing program 5 (id=1288): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000440)={0x62}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00('], 0x50, 0x7ffffff7}}], 0x1, 0xc050) 1.37082ms ago: executing program 6 (id=1289): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, 0x0) 0s ago: executing program 7 (id=1290): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x7fc, 0x4) kernel console output (not intermixed with test programs): tman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.125132][ T5387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.176642][ T5387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.183876][ T5387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.214524][ T5510] loop0: detected capacity change from 0 to 512 [ 139.290340][ T5510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 139.314617][ T5387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.345682][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 139.436641][ T5510] EXT4-fs error (device loop0): ext4_quota_enable:7045: comm syz.0.398: Bad quota inum: 2, type: 1 [ 139.463062][ T5510] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 139.536811][ T5387] device hsr_slave_0 entered promiscuous mode [ 139.560893][ T5387] device hsr_slave_1 entered promiscuous mode [ 139.585702][ T5510] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 139.611519][ T5387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.625346][ T5387] Cannot create hsr debugfs directory [ 139.686603][ T5510] EXT4-fs error (device loop0): ext4_quota_enable:7045: comm syz.0.398: Bad quota inum: 2, type: 1 [ 139.746474][ T5510] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 139.919167][ T4685] EXT4-fs (loop0): unmounting filesystem. [ 140.121919][ T5535] device geneve2 entered promiscuous mode [ 140.230999][ T5387] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.275933][ T5387] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.308650][ T5387] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.336083][ T5387] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.371660][ T5543] MTRR 1 not used [ 140.632025][ T5387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.723531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.732909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.774518][ T5387] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.797603][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.813991][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.853159][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.861319][ T4755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.931927][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.970800][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.026563][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.053380][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.061405][ T4755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.117095][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.191215][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.220027][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.267666][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.302138][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.326593][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.385936][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.421347][ T5566] loop4: detected capacity change from 0 to 128 [ 141.426024][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 141.482863][ T5566] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 141.489604][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.507557][ T5566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.562627][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.621987][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.656781][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.682568][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.224287][ T5588] rnbd_client L125: Can't parse path i: -93 [ 142.464609][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.485823][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.501994][ T5387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.537254][ T5596] loop4: detected capacity change from 0 to 1024 [ 142.914461][ T5608] loop3: detected capacity change from 0 to 1024 [ 142.937310][ T5610] loop4: detected capacity change from 0 to 1024 [ 142.979899][ T5610] EXT4-fs: inline encryption not supported [ 143.035628][ T5610] EXT4-fs: inline encryption not supported [ 143.041566][ T5610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.140846][ T5610] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.248454][ T5610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.257625][ T5610] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.521289][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 143.689262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.720796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.796179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.819212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.849389][ T5387] device veth0_vlan entered promiscuous mode [ 143.868033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.889692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.914585][ T5636] loop4: detected capacity change from 0 to 4096 [ 143.932137][ T5387] device veth1_vlan entered promiscuous mode [ 144.014870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.030833][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 144.030850][ T27] audit: type=1400 audit(1791984860.979:43): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=5642 comm="syz.1.440" name="p" offset=79 [ 144.037020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.047136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.171432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.208714][ T5387] device veth0_macvtap entered promiscuous mode [ 144.242228][ T5387] device veth1_macvtap entered promiscuous mode [ 144.263271][ T5648] loop0: detected capacity change from 0 to 1024 [ 144.322087][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.375451][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.413753][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.436431][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.468887][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.488491][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.500372][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.521331][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.573895][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.697880][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.736289][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.773416][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.800094][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.803506][ T5655] loop0: detected capacity change from 0 to 1024 [ 144.832600][ T5655] EXT4-fs: inline encryption not supported [ 144.847938][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.852922][ T5655] EXT4-fs: inline encryption not supported [ 144.885393][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.902314][ T5655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.918570][ T5655] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.931335][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.954429][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.969391][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.983853][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.015448][ T5387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.030164][ T5655] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 145.050152][ T5655] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.082881][ T5387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.094832][ T5387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.110012][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.124746][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.138694][ T5387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.149615][ T5387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.159072][ T5387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.168103][ T5387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.333516][ T4685] EXT4-fs (loop0): unmounting filesystem. [ 145.357226][ T4755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.386704][ T4755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.413005][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.449232][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.467722][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.517045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.078690][ T4334] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.291239][ T4334] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.327680][ T4334] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 146.379381][ T4334] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 146.411181][ T4334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.429930][ T4334] usb 1-1: Product: syz [ 146.449663][ T4334] usb 1-1: Manufacturer: syz [ 146.454384][ T4334] usb 1-1: SerialNumber: syz [ 146.717142][ T4334] kaweth 1-1:1.0: Firmware present in device. [ 146.907661][ T4334] kaweth 1-1:1.0: Statistics collection: 0 [ 146.913753][ T4334] kaweth 1-1:1.0: Multicast filter limit: 0 [ 146.932520][ T4334] kaweth 1-1:1.0: MTU: 0 [ 146.942674][ T4334] kaweth 1-1:1.0: Read MAC address 00:00:00:00:00:00 [ 147.109170][ T4334] kaweth: probe of 1-1:1.0 failed with error -5 [ 147.141343][ T4334] usb 1-1: USB disconnect, device number 2 [ 147.172996][ T5730] Zero length message leads to an empty skb [ 147.843466][ T5748] loop1: detected capacity change from 0 to 2048 [ 147.863021][ T5751] loop4: detected capacity change from 0 to 1024 [ 147.954449][ T5748] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.966118][ T5751] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.480: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 148.049584][ T5751] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.480: couldn't read orphan inode 11 (err -117) [ 148.093594][ T5751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.277966][ T5751] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.480: lblock 2 mapped to illegal pblock 2 (length 1) [ 148.422472][ T5751] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 148.494766][ T5760] EXT4-fs: Ignoring removed bh option [ 148.515571][ T5751] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.480: lblock 0 mapped to illegal pblock 48 (length 1) [ 148.597710][ T5751] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 148.676530][ T5778] capability: warning: `syz.3.489' uses 32-bit capabilities (legacy support in use) [ 148.725053][ T5751] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.480: Failed to acquire dquot type 0 [ 148.744502][ T5778] program syz.3.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.976351][ T5786] loop1: detected capacity change from 0 to 2048 [ 149.123527][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 149.164126][ T4283] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 149.201191][ T4283] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 149.231452][ T4283] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 149.255442][ T5122] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.386472][ T5797] program syz.5.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.448631][ T5122] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 149.483882][ T5122] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 149.538993][ T5803] loop1: detected capacity change from 0 to 64 [ 149.544553][ T5122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 149.585079][ T5122] usb 1-1: Product: syz [ 149.596582][ T5802] loop4: detected capacity change from 0 to 1024 [ 149.615711][ T5122] usb 1-1: Manufacturer: syz [ 149.753317][ T5802] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 149.846938][ T5802] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 149.865334][ T5802] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.496: Failed to acquire dquot type 0 [ 149.933548][ T5802] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 150.004382][ T5802] EXT4-fs (loop4): 1 truncate cleaned up [ 150.049761][ T5802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.122826][ T5802] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 150.188900][ T5802] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 150.212171][ T5814] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4276] was attempted by ""[5814] [ 150.254638][ T5802] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.496: Failed to acquire dquot type 0 [ 150.454590][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 150.534067][ T5122] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 150.653196][ T5824] loop5: detected capacity change from 0 to 512 [ 150.669747][ T5122] usb 1-1: USB disconnect, device number 3 [ 150.738410][ T5824] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.865783][ T5824] EXT4-fs (loop5): 1 truncate cleaned up [ 150.871532][ T5824] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 151.215961][ T5387] EXT4-fs (loop5): unmounting filesystem. [ 151.244029][ T5841] program syz.4.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.440879][ T5846] team0: Device gtp0 is of different type [ 151.613368][ T5854] ip_tables: iptables: counters copy to user failed while replacing table [ 151.715473][ T130] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.917578][ T130] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.936384][ T130] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.963531][ T130] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 151.993989][ T130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.038031][ T130] usb 4-1: config 0 descriptor?? [ 152.100745][ T5871] loop0: detected capacity change from 0 to 1024 [ 152.226679][ T5871] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.523: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 152.395459][ T5871] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.523: couldn't read orphan inode 11 (err -117) [ 152.454274][ T130] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 152.499778][ T5871] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.501666][ T130] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 152.547715][ T130] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 152.572684][ T130] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 152.585349][ T130] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 152.614591][ T130] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 152.631345][ T5871] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.523: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.669526][ T5871] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 152.681955][ T130] usb 4-1: USB disconnect, device number 3 [ 152.708441][ T5890] loop5: detected capacity change from 0 to 64 [ 152.737120][ T5871] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.523: lblock 0 mapped to illegal pblock 48 (length 1) [ 152.827856][ T5887] EXT4-fs: Ignoring removed bh option [ 152.875083][ T5871] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 152.930768][ T5871] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.523: Failed to acquire dquot type 0 [ 153.153260][ T4685] EXT4-fs (loop0): unmounting filesystem. [ 153.192218][ T4685] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 153.253727][ T4685] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 153.303497][ T4685] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 154.043044][ T27] audit: type=1400 audit(1791984870.989:44): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=5937 comm="syz.4.546" [ 154.218749][ T27] audit: type=1326 audit(1791984871.169:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fef9e559 code=0x7ffc0000 [ 154.317272][ T27] audit: type=1326 audit(1791984871.169:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fef9e559 code=0x7ffc0000 [ 154.397922][ T27] audit: type=1326 audit(1791984871.169:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fef9e559 code=0x7ffc0000 [ 154.755842][ T27] kauditd_printk_skb: 279 callbacks suppressed [ 154.755858][ T27] audit: type=1326 audit(1791984871.709:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96fef5ed8e code=0x7ffc0000 [ 154.824727][ T27] audit: type=1326 audit(1791984871.739:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96fef5ed8e code=0x7ffc0000 [ 154.869127][ T27] audit: type=1326 audit(1791984871.739:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96fef5ed8e code=0x7ffc0000 [ 154.946883][ T27] audit: type=1326 audit(1791984871.739:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96fef5ed8e code=0x7ffc0000 [ 155.027791][ T27] audit: type=1326 audit(1791984871.739:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96fef5ed8e code=0x7ffc0000 [ 155.120423][ T27] audit: type=1326 audit(1791984871.739:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96fef5ed8e code=0x7ffc0000 [ 155.208511][ T27] audit: type=1326 audit(1791984871.739:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96fef5ed8e code=0x7ffc0000 [ 155.305411][ T27] audit: type=1326 audit(1791984871.739:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96fef5ed8e code=0x7ffc0000 [ 155.379713][ T27] audit: type=1326 audit(1791984871.749:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96fef5ed8e code=0x7ffc0000 [ 155.447813][ T5983] program syz.4.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.492938][ T27] audit: type=1326 audit(1791984871.749:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5947 comm="syz.3.550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96fef5ed8e code=0x7ffc0000 [ 156.184122][ T5977] loop1: detected capacity change from 0 to 32768 [ 156.241508][ T6011] input: syz0 as /devices/virtual/input/input8 [ 156.275782][ T5977] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 156.348058][ T5977] JBD2: Ignoring recovery information on journal [ 156.568358][ T5977] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 157.014847][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 157.178646][ T6004] loop3: detected capacity change from 0 to 32768 [ 157.296062][ T6029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.579'. [ 157.313723][ T6004] XFS (loop3): Mounting V5 Filesystem [ 157.396098][ T6004] XFS (loop3): Ending clean mount [ 157.691358][ T4272] XFS (loop3): Unmounting Filesystem [ 158.492857][ T6043] loop5: detected capacity change from 0 to 32768 [ 158.541042][ T6043] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.583 (6043) [ 158.612836][ T6043] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 158.662043][ T6043] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 158.679782][ T6043] BTRFS info (device loop5): enabling disk space caching [ 158.715280][ T6043] BTRFS info (device loop5): force clearing of disk cache [ 158.723228][ T6043] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 158.779893][ T6043] BTRFS info (device loop5): use zstd compression, level 3 [ 158.818224][ T6043] BTRFS info (device loop5): disk space caching is enabled [ 158.881933][ T6056] team0: Device gtp0 is of different type [ 159.065962][ T6043] BTRFS info (device loop5): enabling ssd optimizations [ 159.079225][ T6043] BTRFS info (device loop5): rebuilding free space tree [ 159.188314][ T6043] BTRFS info (device loop5): disabling free space tree [ 159.196068][ T6043] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.208033][ T6043] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.411736][ T5387] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 159.443989][ T5122] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.655398][ T5122] usb 4-1: Using ep0 maxpacket: 32 [ 159.671935][ T5122] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 159.689183][ T5122] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.699550][ T5122] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 159.709711][ T5122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.729452][ T5122] usb 4-1: config 0 descriptor?? [ 159.971126][ T6095] qfq: no options [ 160.071926][ T6102] ip_tables: iptables: counters copy to user failed while replacing table [ 160.404883][ T6114] loop4: detected capacity change from 0 to 1024 [ 160.470010][ T4260] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 160.512567][ T5122] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 160.535414][ T5122] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 160.559255][ T5122] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 160.585313][ T5122] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 160.613561][ T5122] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0 [ 160.632705][ T5122] corsair-psu 0003:1B1C:1C09.0003: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 160.673351][ T4260] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.700758][ T4260] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.712357][ T4260] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 160.751135][ T4260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.777001][ T4260] usb 6-1: config 0 descriptor?? [ 160.987938][ T5122] corsair-psu 0003:1B1C:1C09.0003: unable to initialize device (-110) [ 161.030086][ T5122] corsair-psu: probe of 0003:1B1C:1C09.0003 failed with error -110 [ 161.088278][ T5122] usb 4-1: USB disconnect, device number 4 [ 161.192405][ T4260] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0 [ 161.211544][ T4260] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0 [ 161.231898][ T4260] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0 [ 161.252208][ T4260] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0 [ 161.262409][ T4260] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0 [ 161.282846][ T4260] logitech-djreceiver 0003:046D:C532.0004: unknown main item tag 0x0 [ 161.379532][ T6131] fido_id[6131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 161.435630][ T5122] usb 6-1: USB disconnect, device number 2 [ 161.762852][ T6130] loop4: detected capacity change from 0 to 32768 [ 161.829497][ T6130] XFS (loop4): Mounting V5 Filesystem [ 161.961544][ T6130] XFS (loop4): Ending clean mount [ 162.003408][ T6130] XFS (loop4): Quotacheck needed: Please wait. [ 162.072911][ T6130] XFS (loop4): Quotacheck: Done. [ 162.174406][ T6130] XFS (loop4): User initiated shutdown received. [ 162.199711][ T6130] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 162.266747][ T6130] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 162.298280][ T6158] loop0: detected capacity change from 0 to 4096 [ 162.328793][ T6158] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 162.448325][ T4283] XFS (loop4): Unmounting Filesystem [ 163.065539][ T5118] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 163.255596][ T5118] usb 2-1: Using ep0 maxpacket: 32 [ 163.265104][ T5118] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 163.310888][ T5118] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.320223][ T6190] rnbd_client L201: map_device: Unknown parameter or missing value 'à' [ 163.332638][ T5118] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 163.363331][ T5118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.400404][ T5118] usb 2-1: config 0 descriptor?? [ 163.530137][ T6194] tap0: tun_chr_ioctl cmd 1074025677 [ 163.540461][ T6194] tap0: linktype set to 776 [ 163.742617][ T6202] ALSA: mixer_oss: invalid OSS volume '' [ 164.209261][ T5118] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 164.227399][ T5118] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 164.234944][ T5118] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 164.252096][ T6218] ip_tables: iptables: counters copy to user failed while replacing table [ 164.263511][ T5118] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 164.303790][ T5118] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 164.343169][ T5118] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 164.378907][ T6196] loop5: detected capacity change from 0 to 32768 [ 164.472080][ T6196] XFS (loop5): Mounting V5 Filesystem [ 164.575087][ T6196] XFS (loop5): Ending clean mount [ 164.715318][ T5118] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-110) [ 164.745587][ T5118] corsair-psu: probe of 0003:1B1C:1C09.0005 failed with error -110 [ 164.769557][ T5387] XFS (loop5): Unmounting Filesystem [ 164.793086][ T5118] usb 2-1: USB disconnect, device number 6 [ 164.831117][ T5122] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 165.025406][ T5122] usb 5-1: Using ep0 maxpacket: 32 [ 165.032837][ T5122] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 165.088204][ T5122] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.135391][ T5122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.155680][ T5122] usb 5-1: Product: syz [ 165.160145][ T5122] usb 5-1: Manufacturer: syz [ 165.168741][ T6242] fido_id[6242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 165.193441][ T5122] usb 5-1: SerialNumber: syz [ 165.226539][ T5122] usb 5-1: Device is not authorized for usage [ 165.402987][ T6255] loop1: detected capacity change from 0 to 1024 [ 165.577308][ T6259] loop3: detected capacity change from 0 to 512 [ 165.683897][ T6255] hfsplus: catalog searching failed [ 165.749266][ T6259] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.801487][ T6259] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.941756][ T4755] hfsplus: bad catalog file entry [ 165.964151][ T4755] hfsplus: b-tree write err: -5, ino 3 [ 165.999073][ T6271] loop0: detected capacity change from 0 to 128 [ 166.083876][ T6271] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 166.125506][ T6271] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.946656][ T4685] EXT4-fs (loop0): unmounting filesystem. [ 166.954939][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 167.634705][ T5118] usb 5-1: USB disconnect, device number 2 [ 167.752709][ T6320] loop1: detected capacity change from 0 to 4096 [ 167.880643][ T6320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.045463][ T6320] fs-verity: sha256 using implementation "sha256-avx2" [ 168.132247][ T6320] fs-verity (loop1, inode 16): fs-verity keyring is empty, rejecting signed file! [ 168.374309][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 168.533838][ T6347] input: syz0 as /devices/virtual/input/input9 [ 169.000240][ T6362] loop5: detected capacity change from 0 to 256 [ 169.036310][ T6362] exfat: Deprecated parameter 'utf8' [ 169.041790][ T6362] exfat: Deprecated parameter 'utf8' [ 169.088486][ T6362] exfat: Deprecated parameter 'namecase' [ 169.094333][ T6362] exfat: Deprecated parameter 'namecase' [ 169.163700][ T6362] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d) [ 169.551966][ T6373] loop5: detected capacity change from 0 to 128 [ 169.612183][ T6376] device bridge0 entered promiscuous mode [ 169.654758][ T6376] device macsec1 entered promiscuous mode [ 169.667543][ T6373] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 169.696460][ T6373] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.920171][ T5387] EXT4-fs (loop5): unmounting filesystem. [ 170.100579][ T6391] loop5: detected capacity change from 0 to 256 [ 170.127124][ T6391] exfat: Deprecated parameter 'namecase' [ 170.132933][ T6391] exfat: Deprecated parameter 'namecase' [ 170.195640][ T6391] exfat: Deprecated parameter 'namecase' [ 170.256851][ T6391] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 170.987633][ T6388] loop0: detected capacity change from 0 to 32768 [ 171.038084][ T6388] XFS (loop0): Mounting V5 Filesystem [ 171.097102][ T6388] XFS (loop0): Ending clean mount [ 171.408849][ T4685] XFS (loop0): Unmounting Filesystem [ 171.626876][ T6430] loop4: detected capacity change from 0 to 128 [ 171.781861][ T6430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 171.816508][ T6430] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.000669][ T6443] loop3: detected capacity change from 0 to 512 [ 172.098013][ T6443] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 172.200292][ T6443] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 172.251856][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 172.271882][ T6443] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #13: comm syz.3.710: iget: bad i_size value: 12154757448730 [ 172.357974][ T6443] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.710: couldn't read orphan inode 13 (err -117) [ 172.396956][ T6449] loop5: detected capacity change from 0 to 128 [ 172.411168][ T6443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.502631][ T6449] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.551061][ T6443] EXT4-fs (loop3): shut down requested (2) [ 172.750203][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 172.800196][ T4755] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.271608][ T6470] loop5: detected capacity change from 0 to 4096 [ 173.334811][ T6470] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 173.453093][ T6470] fs-verity (loop5, inode 16): fs-verity keyring is empty, rejecting signed file! [ 173.522778][ T6462] loop3: detected capacity change from 0 to 32768 [ 173.560368][ T6462] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.716 (6462) [ 173.634334][ T6462] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 173.686567][ T6462] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 173.723246][ T6480] loop1: detected capacity change from 0 to 512 [ 173.741069][ T6462] BTRFS info (device loop3): turning on flush-on-commit [ 173.754753][ T5387] EXT4-fs (loop5): unmounting filesystem. [ 173.792624][ T6462] BTRFS info (device loop3): using free space tree [ 173.823004][ T6480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 173.856943][ T6480] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.932280][ T6459] loop4: detected capacity change from 0 to 32768 [ 173.985024][ T6459] XFS (loop4): Mounting V5 Filesystem [ 174.134832][ T6459] XFS (loop4): Ending clean mount [ 174.167016][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 174.193962][ T6462] BTRFS info (device loop3): enabling ssd optimizations [ 174.410224][ T4283] XFS (loop4): Unmounting Filesystem [ 174.752675][ T4272] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 175.420003][ T6539] loop3: detected capacity change from 0 to 1024 [ 175.522494][ T6539] hfsplus: b-tree write err: -5, ino 17 [ 175.705453][ T4755] hfsplus: b-tree write err: -5, ino 4 [ 175.711564][ T4755] hfsplus: b-tree write err: -5, ino 17 [ 176.021921][ T6559] loop0: detected capacity change from 0 to 128 [ 176.165660][ T6559] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.326200][ T6567] syz.4.741 uses obsolete (PF_INET,SOCK_PACKET) [ 176.397481][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.627327][ T6574] loop0: detected capacity change from 0 to 512 [ 176.651991][ T6574] EXT4-fs: Ignoring removed nobh option [ 176.684160][ T6574] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.762075][ T6576] XFS (mtdblock0): Invalid superblock magic number [ 176.776778][ T6574] EXT4-fs (loop0): 1 truncate cleaned up [ 176.782532][ T6574] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.804587][ T5110] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 177.038150][ T5110] usb 6-1: Using ep0 maxpacket: 16 [ 177.072312][ T5110] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.121246][ T5110] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.158209][ T5110] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 177.229136][ T5110] usb 6-1: config 0 interface 0 has no altsetting 0 [ 177.263302][ T5110] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 177.285374][ T5110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.308254][ T5110] usb 6-1: config 0 descriptor?? [ 177.345768][ T4685] EXT4-fs (loop0): unmounting filesystem. [ 177.418600][ T6570] loop1: detected capacity change from 0 to 32768 [ 177.504242][ T6597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.543875][ T6570] blkno = 8ed2c, nblocks = 1 [ 177.558156][ T4362] kernel write not supported for file /comedi4 (pid: 4362 comm: kworker/0:7) [ 177.562124][ T6570] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 177.562124][ T6570] [ 177.601277][ T6600] loop3: detected capacity change from 0 to 512 [ 177.620346][ T6570] ERROR: (device loop1): remounting filesystem as read-only [ 177.721326][ T6570] ialloc: diAlloc returned -17! [ 177.735406][ T5110] hid (null): bogus close delimiter [ 177.806112][ T6570] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 177.806112][ T6570] [ 177.866851][ T6570] syz.1.742: attempt to access beyond end of device [ 177.866851][ T6570] loop1: rw=2049, sector=4680032, nr_sectors = 8 limit=32768 [ 177.922252][ T6605] loop0: detected capacity change from 0 to 24 [ 177.942962][ T4260] usb 6-1: USB disconnect, device number 3 [ 177.979414][ T6605] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 178.050856][ T6605] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 178.242496][ T109] blkno = 8ed2c, nblocks = 1 [ 178.248059][ T109] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 178.248059][ T109] [ 178.428481][ T6614] loop0: detected capacity change from 0 to 1024 [ 178.459906][ T6614] ext4: Bad value for 'sb' [ 179.171685][ T6624] device team_slave_0 entered promiscuous mode [ 179.256694][ T6623] device team_slave_0 left promiscuous mode [ 179.412959][ T6631] ip_tables: iptables: counters copy to user failed while replacing table [ 179.672657][ T6640] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 179.680232][ T6640] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 179.699698][ T6644] netlink: 'syz.5.765': attribute type 12 has an invalid length. [ 179.718691][ T6644] netlink: 'syz.5.765': attribute type 29 has an invalid length. [ 179.741164][ T6644] netlink: 148 bytes leftover after parsing attributes in process `syz.5.765'. [ 179.772099][ T6644] netlink: 'syz.5.765': attribute type 1 has an invalid length. [ 179.792493][ T6644] netlink: 'syz.5.765': attribute type 2 has an invalid length. [ 179.950356][ T6650] overlayfs: unrecognized mount option "\']*=°¢ÛÎæ[\,\:/¢.@/)&!-(-f)*[=" or missing value [ 180.482370][ T6673] loop5: detected capacity change from 0 to 512 [ 180.575390][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 180.634703][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.777'. [ 180.943250][ T6687] loop0: detected capacity change from 0 to 16 [ 181.048777][ T6687] erofs: (device loop0): mounted with root inode @ nid 36. [ 182.379248][ T6696] loop1: detected capacity change from 0 to 32768 [ 182.401205][ T6725] dyndbg: bad flag-op e, at start of eM¿wOITÃRéூvý›Â [ 182.419877][ T6725] dyndbg: flags parse failed [ 182.494457][ T6696] XFS (loop1): Mounting V5 Filesystem [ 182.556458][ T6696] XFS (loop1): Ending clean mount [ 182.573417][ T6696] XFS (loop1): Quotacheck needed: Please wait. [ 182.691530][ T6696] XFS (loop1): Quotacheck: Done. [ 182.756857][ T5110] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 182.786190][ T6739] loop5: detected capacity change from 0 to 512 [ 182.835396][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 182.856481][ T6739] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 182.885440][ T6739] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.923653][ T4276] XFS (loop1): Unmounting Filesystem [ 182.949981][ T5387] EXT4-fs (loop5): unmounting filesystem. [ 182.969658][ T5110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.982308][ T5110] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.000640][ T5110] usb 5-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00 [ 183.012868][ T5110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.053118][ T5110] usb 5-1: Device is not authorized for usage [ 183.060475][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 183.069068][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 183.123644][ T22] usb 4-1: config 1 interface 0 has no altsetting 0 [ 183.181224][ T22] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40 [ 183.200184][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.211290][ T22] usb 4-1: Product: syz [ 183.217153][ T22] usb 4-1: Manufacturer: syz [ 183.224321][ T22] usb 4-1: SerialNumber: syz [ 183.465542][ T5107] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 183.476965][ T22] usbhid 4-1:1.0: can't add hid device: -71 [ 183.483036][ T22] usbhid: probe of 4-1:1.0 failed with error -71 [ 183.510709][ T22] usb 4-1: USB disconnect, device number 5 [ 183.551493][ T6755] loop0: detected capacity change from 0 to 64 [ 183.676917][ T5107] usb 6-1: Using ep0 maxpacket: 8 [ 183.698330][ T5107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.718756][ T5107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.761192][ T5107] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 183.777328][ T5107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.788015][ T5107] usb 6-1: Product: syz [ 183.793228][ T5107] usb 6-1: Manufacturer: syz [ 183.799809][ T5107] usb 6-1: SerialNumber: syz [ 184.010025][ T42] bond0: (slave bond_slave_0): interface is now down [ 184.038833][ T42] bond0: (slave bond_slave_1): interface is now down [ 184.048698][ T5107] usb 6-1: selecting invalid altsetting 1 [ 184.096258][ T5107] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 184.116886][ T5107] usb 6-1: USB disconnect, device number 4 [ 184.124207][ T4345] bond0: (slave bond_slave_0): interface is now down [ 184.147861][ T4345] bond0: (slave bond_slave_1): interface is now down [ 184.185410][ T9] bond0: (slave bond_slave_0): interface is now down [ 184.194323][ T9] bond0: (slave bond_slave_1): interface is now down [ 184.242499][ T42] bond0: (slave bond_slave_0): interface is now down [ 184.268989][ T42] bond0: (slave bond_slave_1): interface is now down [ 184.292050][ T42] bond0: now running without any active interface! [ 184.399634][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.016771][ T6795] i2c i2c-0: new_device: Can't parse I2C address [ 185.203248][ T6801] loop5: detected capacity change from 0 to 256 [ 185.231701][ T6801] exfat: Deprecated parameter 'utf8' [ 185.321946][ T6801] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb956f73f, utbl_chksum : 0xe619d30d) [ 185.358087][ T6805] pimreg: tun_chr_ioctl cmd 1074025677 [ 185.364035][ T6805] pimreg: linktype set to 270 [ 185.500837][ T4340] usb 5-1: USB disconnect, device number 3 [ 185.629227][ T6808] loop3: detected capacity change from 0 to 1024 [ 185.754003][ T6816] loop1: detected capacity change from 0 to 512 [ 186.031931][ T6820] tap0: tun_chr_ioctl cmd 1074025675 [ 186.050097][ T6820] tap0: persist disabled [ 186.849562][ T6826] loop1: detected capacity change from 0 to 40427 [ 186.909449][ T6826] F2FS-fs (loop1): invalid crc value [ 186.958062][ T6826] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.035466][ T5107] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 187.159584][ T6843] loop4: detected capacity change from 0 to 128 [ 187.177083][ T6826] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 187.198142][ T6843] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.225400][ T5107] usb 6-1: Using ep0 maxpacket: 32 [ 187.233303][ T6844] netlink: 48 bytes leftover after parsing attributes in process `syz.3.843'. [ 187.245402][ T5107] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 187.254560][ T5107] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 187.308760][ T5107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 187.349952][ T5107] usb 6-1: config 1 has no interface number 0 [ 187.365430][ T5107] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.395257][ T5107] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 187.418942][ T5107] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 187.465452][ T5107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.522549][ T5107] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 187.664907][ T4276] syz-executor: attempt to access beyond end of device [ 187.664907][ T4276] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 187.735718][ T5107] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 188.166735][ T5107] usb 6-1: USB disconnect, device number 5 [ 188.184644][ T5107] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 188.440373][ T6866] __sock_release: fasync list not empty! [ 188.760630][ T6857] loop4: detected capacity change from 0 to 32768 [ 189.496927][ T6893] loop5: detected capacity change from 0 to 136 [ 189.601317][ T6893] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 190.343165][ T6930] loop0: detected capacity change from 0 to 512 [ 190.900024][ T6948] netlink: 148 bytes leftover after parsing attributes in process `syz.3.884'. [ 191.093723][ T6957] program syz.5.891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.180219][ T6976] loop4: detected capacity change from 0 to 32768 [ 192.287422][ T6976] JBD2: Ignoring recovery information on journal [ 192.371307][ T6976] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 192.426225][ T4283] ocfs2: Unmounting device (7,4) on (node local) [ 192.806230][ T7000] WARNING! power/level is deprecated; use power/control instead [ 193.165618][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.917'. [ 193.431113][ T27] kauditd_printk_skb: 499 callbacks suppressed [ 193.431131][ T27] audit: type=1400 audit(1791984910.379:836): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=7025 comm="syz.1.922" name="p" offset=79 [ 194.102727][ T27] audit: type=1400 audit(1791984911.049:837): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=7051 comm="syz.4.933" name="p" offset=79 [ 194.638283][ T7073] loop0: detected capacity change from 0 to 2048 [ 194.712555][ T7073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 194.732279][ T7073] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.887375][ T4685] EXT4-fs (loop0): unmounting filesystem. [ 195.142400][ T7055] loop3: detected capacity change from 0 to 32768 [ 195.224842][ T7084] loop1: detected capacity change from 0 to 4096 [ 195.242878][ T7084] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.253919][ T7055] JBD2: Ignoring recovery information on journal [ 195.287444][ T7084] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.302868][ T7084] EXT4-fs (loop1): Test dummy encryption mode enabled [ 195.318634][ T7084] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.456406][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 195.491628][ T7055] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 195.662324][ T7096] netlink: 'syz.1.952': attribute type 2 has an invalid length. [ 195.683929][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 195.696559][ T7096] netlink: 100 bytes leftover after parsing attributes in process `syz.1.952'. [ 195.815521][ T4340] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 196.031125][ T4340] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.070751][ T4340] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.101714][ T4340] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 196.142811][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 196.169044][ T7104] phram: illegal start address [ 196.189478][ T4340] usb 5-1: SerialNumber: syz [ 196.237873][ T7081] loop0: detected capacity change from 0 to 32768 [ 196.239303][ T4340] usb 5-1: Device is not authorized for usage [ 196.256280][ T7106] loop1: detected capacity change from 0 to 128 [ 196.289163][ T7106] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.315453][ T7106] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.355025][ T7081] XFS (loop0): Mounting V5 Filesystem [ 196.548457][ T7081] XFS (loop0): Ending clean mount [ 196.573455][ T7081] XFS (loop0): Quotacheck needed: Please wait. [ 196.627649][ T7081] XFS (loop0): Quotacheck: Done. [ 196.680970][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.761718][ T7122] netlink: 104 bytes leftover after parsing attributes in process `syz.3.961'. [ 196.817188][ T4685] XFS (loop0): Unmounting Filesystem [ 197.054134][ T7130] loop1: detected capacity change from 0 to 1024 [ 197.072352][ T7130] EXT4-fs: Ignoring removed bh option [ 197.183176][ T7130] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 197.293466][ T7130] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 197.311848][ T7139] loop0: detected capacity change from 0 to 256 [ 197.324455][ T7139] exfat: Deprecated parameter 'utf8' [ 197.356617][ T7139] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 197.516870][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 197.530180][ T7144] loop3: detected capacity change from 0 to 1024 [ 197.548251][ T7143] loop5: detected capacity change from 0 to 512 [ 197.700823][ T7144] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 197.857701][ T7144] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 197.886316][ T7144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.049795][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 198.164920][ T7158] loop1: detected capacity change from 0 to 164 [ 198.525333][ T5110] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 198.543098][ T22] usb 5-1: USB disconnect, device number 4 [ 198.590209][ T7171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 198.631257][ T7171] System zones: 1-12 [ 198.673102][ T7171] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.982: Directory hole found for htree index block 0 [ 198.750858][ T5110] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.769030][ T5110] usb 6-1: config 0 has no interface number 0 [ 198.775719][ T7171] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 198.803743][ T5110] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.822077][ T7171] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.982: Directory hole found for htree index block 0 [ 198.844075][ T5110] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.865278][ T5110] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.878691][ T7171] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 198.895369][ T7171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 198.910305][ T5110] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 198.940229][ T5110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.957526][ T7171] EXT4-fs (loop0): shut down requested (2) [ 198.986113][ T5110] usb 6-1: config 0 descriptor?? [ 199.061855][ T4685] EXT4-fs (loop0): unmounting filesystem. [ 199.181985][ T7183] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 199.236913][ T7183] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 199.562202][ T7193] tun0: tun_chr_ioctl cmd 1074025676 [ 199.563271][ T7169] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 199.589965][ T7169] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 199.595831][ T7193] tun0: owner set to 0 [ 199.624447][ T5110] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0007/input/input10 [ 199.647598][ T7169] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 199.680362][ T7169] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 199.713251][ T7169] F2FS-fs (loop3): invalid crc value [ 199.745889][ T5110] uclogic 0003:28BD:0042.0007: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 199.795310][ T7169] F2FS-fs (loop3): Found nat_bits in checkpoint [ 199.851113][ T5110] usb 6-1: USB disconnect, device number 6 [ 200.071786][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.078828][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.089267][ T7169] F2FS-fs (loop3): Start checkpoint disabled! [ 200.124200][ T7199] fido_id[7199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 200.190353][ T7169] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 200.204798][ T7169] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 200.331499][ T7169] F2FS-fs (loop3) : inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9d8/0x19b0 [ 200.392692][ T7169] syz.3.980: attempt to access beyond end of device [ 200.392692][ T7169] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 200.456094][ T27] audit: type=1326 audit(1791984917.409:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.1.999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26919e559 code=0x7ffc0000 [ 200.480574][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.500512][ T7214] set_capacity_and_notify: 3 callbacks suppressed [ 200.500532][ T7214] loop0: detected capacity change from 0 to 256 [ 200.569606][ T27] audit: type=1326 audit(1791984917.409:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.1.999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26919e559 code=0x7ffc0000 [ 200.618881][ T7214] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 200.718398][ T27] audit: type=1326 audit(1791984917.409:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.1.999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26919e559 code=0x7ffc0000 [ 200.820127][ T7218] loop1: detected capacity change from 0 to 24 [ 200.825783][ T27] audit: type=1326 audit(1791984917.409:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.1.999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd26919e559 code=0x7ffc0000 [ 200.853327][ T7218] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 200.889447][ T11] kworker/u4:1: attempt to access beyond end of device [ 200.889447][ T11] loop3: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 200.911244][ T27] audit: type=1326 audit(1791984917.409:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.1.999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd26919e559 code=0x7ffc0000 [ 200.937592][ T7218] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 201.033201][ T27] audit: type=1326 audit(1791984917.409:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.1.999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd26919e559 code=0x7ffc0000 [ 201.107292][ T7216] loop5: detected capacity change from 0 to 4096 [ 201.132403][ T27] audit: type=1326 audit(1791984917.409:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.1.999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd26919e559 code=0x7ffc0000 [ 201.246987][ T7216] ntfs: volume version 3.1. [ 201.274358][ T7223] phram: parameter too long [ 201.579315][ T7225] loop0: detected capacity change from 0 to 1024 [ 201.655355][ T7225] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 201.692291][ T7225] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 201.771745][ T7225] jbd2_journal_init_inode: Cannot locate journal superblock [ 201.793483][ T7225] EXT4-fs (loop0): Could not load journal inode [ 201.861331][ T7232] program syz.3.1002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.892694][ T7213] loop4: detected capacity change from 0 to 32768 [ 202.048611][ T7213] XFS (loop4): Mounting V5 Filesystem [ 202.138127][ T7213] XFS (loop4): Ending clean mount [ 202.194696][ T7213] XFS (loop4): Quotacheck needed: Please wait. [ 202.289447][ T7213] XFS (loop4): Quotacheck: Done. [ 202.455269][ T4283] XFS (loop4): Unmounting Filesystem [ 202.855640][ T7258] loop3: detected capacity change from 0 to 128 [ 202.931875][ T7258] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.956210][ T7234] loop1: detected capacity change from 0 to 32768 [ 202.993627][ T7234] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 203.151152][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 203.354710][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1019'. [ 203.396596][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1019'. [ 203.399979][ T4388] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 203.454728][ T7269] tun0: tun_chr_ioctl cmd 1074812118 [ 203.863040][ T7283] loop1: detected capacity change from 0 to 64 [ 203.906245][ T4362] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 204.107336][ T4362] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.130575][ T4362] usb 5-1: config 0 has no interface number 0 [ 204.145100][ T4362] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.162221][ T7291] CacheFiles: Failed to register: -95 [ 204.190541][ T4362] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.233056][ T4362] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 204.271047][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.316519][ T4362] usb 5-1: Device is not authorized for usage [ 204.496999][ T7277] loop3: detected capacity change from 0 to 32768 [ 204.522913][ T7299] netlink: 'syz.5.1033': attribute type 5 has an invalid length. [ 204.554518][ T7277] XFS (loop3): Mounting V5 Filesystem [ 204.596531][ T7277] XFS (loop3): Ending clean mount [ 204.617135][ T7277] XFS (loop3): Quotacheck needed: Please wait. [ 204.659784][ T7277] XFS (loop3): Quotacheck: Done. [ 204.735316][ T5122] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.765080][ T4272] XFS (loop3): Unmounting Filesystem [ 204.945612][ T5122] usb 2-1: Using ep0 maxpacket: 32 [ 204.954263][ T5122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.985296][ T5122] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 205.005773][ T5122] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 205.027523][ T5122] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 205.043094][ T5122] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 205.057771][ T5122] usb 2-1: config 1 interface 1 has no altsetting 0 [ 205.070365][ T5122] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 205.084206][ T5122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.094995][ T5122] usb 2-1: Product: syz [ 205.099968][ T5122] usb 2-1: Manufacturer: syz [ 205.104809][ T5122] usb 2-1: SerialNumber: syz [ 205.327886][ T5122] usb 2-1: selecting invalid altsetting 0 [ 205.537681][ T5122] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 205.748158][ T5122] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 205.792481][ T5122] usb 2-1: USB disconnect, device number 7 [ 206.067466][ T4387] udevd[4387]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.643577][ T5110] usb 5-1: USB disconnect, device number 5 [ 206.965792][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1041'. [ 206.991107][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 207.049692][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.079834][ T7321] device bridge_slave_1 left promiscuous mode [ 207.091500][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.122926][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 207.161357][ T7327] Cannot find add_set index 4 as target [ 207.265365][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 207.271477][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 207.445077][ T7342] vivid-000: disconnect [ 207.465593][ T7338] vivid-000: reconnect [ 207.675151][ T7351] syz.3.1055: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 207.725789][ T7351] CPU: 0 PID: 7351 Comm: syz.3.1055 Not tainted syzkaller #0 [ 207.733271][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.743572][ T7351] Call Trace: [ 207.747363][ T7351] [ 207.750339][ T7351] dump_stack_lvl+0x188/0x24e [ 207.755164][ T7351] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 207.761621][ T7351] ? show_regs_print_info+0x12/0x12 [ 207.766887][ T7351] ? load_image+0x410/0x410 [ 207.771487][ T7351] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 207.777961][ T7351] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 207.784528][ T7351] warn_alloc+0x242/0x330 [ 207.788906][ T7351] ? zone_watermark_ok_safe+0x270/0x270 [ 207.794515][ T7351] ? verify_lock_unused+0x140/0x140 [ 207.799764][ T7351] __vmalloc_node_range+0x11e/0x1380 [ 207.805097][ T7351] ? _parse_integer_limit+0x187/0x1d0 [ 207.810805][ T7351] ? free_vm_area+0x50/0x50 [ 207.815371][ T7351] ? rwsem_write_trylock+0x135/0x1c0 [ 207.820709][ T7351] ? clear_nonspinnable+0x60/0x60 [ 207.825863][ T7351] ? memparse+0x1dd/0x240 [ 207.830238][ T7351] ? get_options+0x4c0/0x4c0 [ 207.834872][ T7351] ? disksize_store+0xe1/0x330 [ 207.839675][ T7351] vzalloc+0x75/0x80 [ 207.843608][ T7351] ? disksize_store+0xe1/0x330 [ 207.848559][ T7351] disksize_store+0xe1/0x330 [ 207.853292][ T7351] ? sysfs_kf_write+0x183/0x2a0 [ 207.858194][ T7351] ? sysfs_kf_read+0x350/0x350 [ 207.863017][ T7351] kernfs_fop_write_iter+0x3a0/0x520 [ 207.868373][ T7351] vfs_write+0x482/0x9a0 [ 207.872717][ T7351] ? file_end_write+0x250/0x250 [ 207.877643][ T7351] ? __fget_files+0x3fc/0x460 [ 207.883371][ T7351] ? __fdget_pos+0x2ae/0x360 [ 207.888459][ T7351] ? ksys_write+0x70/0x260 [ 207.892926][ T7351] ksys_write+0x14d/0x260 [ 207.897325][ T7351] ? __ia32_sys_read+0x80/0x80 [ 207.902345][ T7351] ? lockdep_hardirqs_on+0x94/0x140 [ 207.907712][ T7351] do_syscall_64+0x4c/0xa0 [ 207.912275][ T7351] ? clear_bhb_loop+0x60/0xb0 [ 207.917176][ T7351] ? clear_bhb_loop+0x60/0xb0 [ 207.921944][ T7351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.927934][ T7351] RIP: 0033:0x7f96fef9e559 [ 207.932563][ T7351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.952405][ T7351] RSP: 002b:00007f96ffe61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.961215][ T7351] RAX: ffffffffffffffda RBX: 00007f96ff225fa0 RCX: 00007f96fef9e559 [ 207.969228][ T7351] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 207.977448][ T7351] RBP: 00007f96ff0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 207.985842][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.996057][ T7351] R13: 00007f96ff226038 R14: 00007f96ff225fa0 R15: 00007fff492db798 [ 208.004905][ T7351] [ 208.015282][ T4260] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 208.065966][ T7351] Mem-Info: [ 208.070676][ T7351] active_anon:6328 inactive_anon:0 isolated_anon:0 [ 208.070676][ T7351] active_file:1541 inactive_file:40087 isolated_file:0 [ 208.070676][ T7351] unevictable:768 dirty:197 writeback:0 [ 208.070676][ T7351] slab_reclaimable:21939 slab_unreclaimable:98712 [ 208.070676][ T7351] mapped:30209 shmem:1434 pagetables:778 [ 208.070676][ T7351] sec_pagetables:0 bounce:0 [ 208.070676][ T7351] kernel_misc_reclaimable:0 [ 208.070676][ T7351] free:1329693 free_pcp:1069 free_cma:0 [ 208.185352][ T7351] Node 0 active_anon:25512kB inactive_anon:0kB active_file:6164kB inactive_file:160148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120936kB dirty:788kB writeback:0kB shmem:4200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11260kB pagetables:3212kB sec_pagetables:0kB all_unreclaimable? no [ 208.225717][ T4260] usb 6-1: Using ep0 maxpacket: 8 [ 208.233260][ T4260] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.254126][ T7351] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 208.265462][ T4260] usb 6-1: config 179 has no interface number 0 [ 208.325396][ T7351] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.381012][ T4260] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 208.409907][ T4260] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 208.415479][ T7351] lowmem_reserve[]: 0 2511 2513 2513 2513 [ 208.448864][ T4260] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.455961][ T7351] Node 0 DMA32 free:1402680kB boost:0kB min:3968kB low:6544kB high:9120kB reserved_highatomic:0KB active_anon:25112kB inactive_anon:0kB active_file:6164kB inactive_file:160148kB unevictable:1536kB writepending:788kB present:3129332kB managed:2576776kB mlocked:0kB bounce:0kB free_pcp:3936kB local_pcp:2592kB free_cma:0kB [ 208.495661][ T4260] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 208.522400][ T7351] lowmem_reserve[]: 0 0 1 1 1 [ 208.533046][ T7351] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.534219][ T4260] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 208.632157][ T4260] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 208.647147][ T4260] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.676834][ T7344] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 208.684887][ T7351] lowmem_reserve[]: 0 0 0 0 0 [ 208.726946][ T7351] Node 1 Normal free:3900680kB boost:0kB min:6344kB low:10460kB high:14576kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:824kB local_pcp:824kB free_cma:0kB [ 208.781973][ T7351] lowmem_reserve[]: 0 0 0 0 0 [ 208.787425][ T7351] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.864521][ T7351] Node 0 DMA32: 1*4kB (U) 511*8kB (UM) 429*16kB (UME) 219*32kB (UME) 127*64kB (UME) 55*128kB (UM) 21*256kB (UM) 13*512kB (ME) 7*1024kB (UME) 3*2048kB (M) 328*4096kB (UM) = 1401964kB [ 208.940965][ T7351] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 209.012240][ T7351] Node 1 Normal: 259*4kB (UM) 64*8kB (UME) 33*16kB (UME) 219*32kB (UME) 101*64kB (UME) 25*128kB (UME) 18*256kB (UME) 5*512kB (UM) 2*1024kB (UE) 3*2048kB (UME) 944*4096kB (M) = 3900732kB [ 209.050276][ T7370] loop0: detected capacity change from 0 to 8192 [ 209.098473][ T4260] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input11 [ 209.128448][ T7370] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 209.156597][ T7351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.185685][ T7370] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 209.220356][ T7370] REISERFS (device loop0): using ordered data mode [ 209.236564][ T7351] Node 0 hugepages_total=10 hugepages_free=10 hugepages_surp=0 hugepages_size=2048kB [ 209.286614][ T7370] reiserfs: using flush barriers [ 209.292341][ T4260] usb 6-1: USB disconnect, device number 7 [ 209.298935][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 209.299021][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 209.324903][ T4260] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 209.336862][ T7351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.357441][ T7370] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 209.389080][ T7351] Node 1 hugepages_total=10 hugepages_free=10 hugepages_surp=0 hugepages_size=2048kB [ 209.410714][ T7351] 43975 total pagecache pages [ 209.418200][ T7351] 0 pages in swap cache [ 209.423206][ T7351] Free swap = 124692kB [ 209.438115][ T7370] REISERFS (device loop0): checking transaction log (loop0) [ 209.449588][ T7351] Total swap = 124996kB [ 209.453850][ T7351] 2097051 pages RAM [ 209.459891][ T7351] 0 pages HighMem/MovableOnly [ 209.464788][ T7351] 419192 pages reserved [ 209.481719][ T7351] 0 pages cma reserved [ 209.733700][ T7370] REISERFS (device loop0): Using tea hash to sort names [ 209.757932][ T7370] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 210.068399][ T7394] netlink: 'syz.5.1072': attribute type 29 has an invalid length. [ 210.095785][ T7394] netlink: 'syz.5.1072': attribute type 29 has an invalid length. [ 210.127952][ T7394] netlink: 'syz.5.1072': attribute type 29 has an invalid length. [ 210.621587][ T7409] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1079'. [ 210.652260][ T7409] sch_fq: defrate 678942120 ignored. [ 210.771363][ T7413] loop0: detected capacity change from 0 to 1024 [ 210.830035][ T7413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.883580][ T7418] loop5: detected capacity change from 0 to 512 [ 210.916846][ T7413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.070652][ T7418] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 211.170159][ T7418] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 211.270212][ T7418] EXT4-fs (loop5): orphan cleanup on readonly fs [ 211.335892][ T7418] Quota error (device loop5): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 211.376202][ T7418] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.421514][ T7418] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 211.489566][ T7418] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1082: bg 0: block 15: invalid block bitmap [ 211.594461][ T7418] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 211.616101][ T4685] EXT4-fs warning (device loop0): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 211.641675][ T7418] EXT4-fs (loop5): 1 truncate cleaned up [ 211.648904][ T4685] EXT4-fs warning (device loop0): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 211.657396][ T7432] loop1: detected capacity change from 0 to 2048 [ 211.675458][ T7418] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 211.683377][ T4685] EXT4-fs warning (device loop0): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 211.712548][ T4685] EXT4-fs warning (device loop0): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 211.744545][ T4685] EXT4-fs warning (device loop0): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 211.762108][ T7432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.779779][ T4685] EXT4-fs warning (device loop0): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 211.823539][ T4685] EXT4-fs warning (device loop0): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 211.869237][ T4685] EXT4-fs warning (device loop0): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 211.922204][ T4685] EXT4-fs warning (device loop0): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 211.981402][ T4685] EXT4-fs warning (device loop0): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 211.997941][ T5387] EXT4-fs (loop5): unmounting filesystem. [ 212.649473][ T4685] EXT4-fs (loop0): unmounting filesystem. [ 212.824406][ T4347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.971634][ T7455] loop5: detected capacity change from 0 to 1024 [ 213.031893][ T7455] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.080027][ T7455] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 213.092618][ T4347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.214617][ T4347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.320346][ T5387] EXT4-fs warning (device loop5): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 213.350196][ T4347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.384390][ T5387] EXT4-fs warning (device loop5): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 213.416392][ T5387] EXT4-fs warning (device loop5): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 213.444978][ T5387] EXT4-fs warning (device loop5): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 213.485967][ T5387] EXT4-fs warning (device loop5): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 213.534550][ T5387] EXT4-fs warning (device loop5): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 213.565872][ T5387] EXT4-fs warning (device loop5): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 213.587247][ T5387] EXT4-fs warning (device loop5): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 213.643167][ T5387] EXT4-fs warning (device loop5): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 213.683405][ T5387] EXT4-fs warning (device loop5): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 214.176066][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.203727][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.213101][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.224157][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.233532][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.281799][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.690769][ T5387] EXT4-fs (loop5): unmounting filesystem. [ 214.710238][ T7470] rxe_eth0 speed is unknown, defaulting to 1000 [ 215.660352][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 216.151474][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.162027][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.171293][ T7470] device bridge_slave_0 entered promiscuous mode [ 216.208784][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.235543][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.246565][ T7470] device bridge_slave_1 entered promiscuous mode [ 216.305413][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 216.311050][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.378753][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.418980][ T4347] device hsr_slave_0 left promiscuous mode [ 216.431019][ T4347] device hsr_slave_1 left promiscuous mode [ 216.440652][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.455526][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.463840][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.477954][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.489804][ T4347] device bridge_slave_1 left promiscuous mode [ 216.509479][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.544812][ T4347] device bridge_slave_0 left promiscuous mode [ 216.551691][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.624615][ T4347] device bridge0 left promiscuous mode [ 216.660113][ T4347] device team0 left promiscuous mode [ 216.665698][ T4347] device team_slave_0 left promiscuous mode [ 216.672620][ T4347] device team_slave_1 left promiscuous mode [ 216.706421][ T4347] device veth1_macvtap left promiscuous mode [ 216.713201][ T4347] device veth0_macvtap left promiscuous mode [ 216.725395][ T4347] device veth1_vlan left promiscuous mode [ 216.746233][ T4347] device veth0_vlan left promiscuous mode [ 217.743333][ T7459] Set syz1 is full, maxelem 65536 reached [ 217.999457][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 218.057994][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 218.115831][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.179701][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.386689][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 218.631806][ T4347] bond0 (unregistering): Released all slaves [ 218.794620][ T7470] team0: Port device team_slave_0 added [ 218.803593][ T7470] team0: Port device team_slave_1 added [ 218.841964][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.863849][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.913892][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.934097][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.941547][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.981560][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.065730][ T7470] device hsr_slave_0 entered promiscuous mode [ 219.072874][ T7470] device hsr_slave_1 entered promiscuous mode [ 219.286313][ T7470] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.302970][ T7470] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.314601][ T7470] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.333769][ T7470] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.464575][ T4347] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.511737][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.533969][ T7470] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.568113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.583387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.592220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.608290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.621282][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.628518][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.643756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.661980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.676127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.686195][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.693797][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.722736][ T4347] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.753018][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.771652][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.819850][ T4347] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.832828][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.852465][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.903909][ T4347] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.931648][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.946404][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.957178][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.967571][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.978493][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.011223][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.024429][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.044174][ T7470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.465583][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 220.495009][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.503725][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.553486][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.272266][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.281751][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.339364][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.351409][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.362601][ T7470] device veth0_vlan entered promiscuous mode [ 221.446647][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.465837][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.480822][ T7470] device veth1_vlan entered promiscuous mode [ 221.514975][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.536317][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.552538][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.561958][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.583016][ T7470] device veth0_macvtap entered promiscuous mode [ 221.629531][ T7470] device veth1_macvtap entered promiscuous mode [ 221.690294][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.715327][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.735279][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.755497][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.773718][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.784828][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.795268][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.806087][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.818424][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.839763][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.850594][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.862904][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.874079][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.884086][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.895928][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.913183][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.924122][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.938781][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.952568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.964316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.979327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.992286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.004413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.019506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.034904][ T4347] device hsr_slave_0 left promiscuous mode [ 222.042881][ T4347] device hsr_slave_1 left promiscuous mode [ 222.050857][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.059123][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.072644][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.081373][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.093090][ T4347] device bridge_slave_1 left promiscuous mode [ 222.101956][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.114687][ T4347] device bridge_slave_0 left promiscuous mode [ 222.124227][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.184369][ T4347] device veth1_macvtap left promiscuous mode [ 222.192005][ T4347] device veth0_macvtap left promiscuous mode [ 222.205515][ T4347] device veth1_vlan left promiscuous mode [ 222.212264][ T4347] device veth0_vlan left promiscuous mode [ 222.549573][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 223.108427][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 223.174743][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 223.232513][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.297653][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.751472][ T4347] bond0 (unregistering): Released all slaves [ 223.843704][ T7470] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.853026][ T7470] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.862192][ T7470] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.871034][ T7470] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.002995][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.015369][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.029028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.074185][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.084310][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.101425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.840292][ T7586] loop1: detected capacity change from 0 to 1024 [ 224.884154][ T7586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.901453][ T7589] [ 224.990673][ T7586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.059507][ T4277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.072847][ T4277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.085618][ T4277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.094386][ T4277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.106528][ T4277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.115677][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.180587][ T7594] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.251121][ T7600] program syz.4.1115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.380859][ T4276] EXT4-fs warning (device loop1): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 225.432751][ T4276] EXT4-fs warning (device loop1): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 225.473322][ T4276] EXT4-fs warning (device loop1): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 225.515962][ T4276] EXT4-fs warning (device loop1): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 225.550346][ T4276] EXT4-fs warning (device loop1): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 225.557542][ T7608] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.598439][ T4276] EXT4-fs warning (device loop1): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 225.634819][ T4276] EXT4-fs warning (device loop1): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 225.662239][ T4276] EXT4-fs warning (device loop1): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 225.688905][ T4276] EXT4-fs warning (device loop1): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 225.709863][ T4276] EXT4-fs warning (device loop1): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 225.799179][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'. [ 225.990027][ T4287] Bluetooth: hci4: link tx timeout [ 225.997308][ T4287] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 226.017481][ T4287] Bluetooth: hci4: link tx timeout [ 226.022929][ T4287] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 226.042207][ T7620] 9pnet_fd: Insufficient options for proto=fd [ 226.277735][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 226.451907][ T4755] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.555276][ T4340] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 226.650065][ T4755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.672818][ T7594] chnl_net:caif_netlink_parms(): no params data found [ 226.749620][ T4755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.767773][ T4340] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 226.799613][ T4340] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.826076][ T4340] usb 5-1: config 0 interface 0 has no altsetting 0 [ 226.832813][ T4340] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 226.842780][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.910292][ T4340] usb 5-1: Device is not authorized for usage [ 226.972265][ T4755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.066737][ T4347] Bluetooth: hci2: Frame reassembly failed (-84) [ 227.100729][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.111787][ T7650] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 227.136232][ T7594] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.171110][ T7594] device bridge_slave_0 entered promiscuous mode [ 227.185450][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 227.222383][ T7594] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.246552][ T7594] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.264375][ T7594] device bridge_slave_1 entered promiscuous mode [ 227.419579][ T7594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.452153][ T7594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.573868][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.585346][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.594939][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.603758][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.612119][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 227.621427][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.629256][ T7594] team0: Port device team_slave_0 added [ 227.748394][ T7594] team0: Port device team_slave_1 added [ 227.755358][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 227.858333][ T7656] rxe_eth0 speed is unknown, defaulting to 1000 [ 227.885308][ T7594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.893722][ T7594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.985690][ T7594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.045508][ T7594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.067130][ T7594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.108028][ T7594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.233692][ T7594] device hsr_slave_0 entered promiscuous mode [ 228.248179][ T7594] device hsr_slave_1 entered promiscuous mode [ 228.260108][ T7594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.289614][ T7594] Cannot create hsr debugfs directory [ 228.742953][ T7676] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 229.078824][ T7656] chnl_net:caif_netlink_parms(): no params data found [ 229.105586][ T4287] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 229.105632][ T4277] Bluetooth: hci2: command 0x1003 tx timeout [ 229.264534][ T7690] loop3: detected capacity change from 0 to 256 [ 229.275483][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 229.306755][ T4361] usb 5-1: USB disconnect, device number 6 [ 229.572414][ T7698] usbip-vudc usbip-vudc.0: gadget not bound [ 229.665456][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 229.835434][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 229.852148][ T7696] netlink: 'syz.6.1143': attribute type 32 has an invalid length. [ 229.868859][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1143'. [ 229.884287][ T7696] (unnamed net_device) (uninitialized): option coupled_control: invalid value (28) [ 230.144771][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.182776][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.210498][ T7656] device bridge_slave_0 entered promiscuous mode [ 230.231796][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.241444][ T7718] loop3: detected capacity change from 0 to 64 [ 230.249243][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.296633][ T7656] device bridge_slave_1 entered promiscuous mode [ 230.372811][ T4755] device hsr_slave_0 left promiscuous mode [ 230.383880][ T4755] device hsr_slave_1 left promiscuous mode [ 230.411314][ T4755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.440923][ T4755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.462009][ T4755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.489860][ T4755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.539416][ T4755] device bridge_slave_0 left promiscuous mode [ 230.565456][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.667378][ T4755] device veth1_to_team left promiscuous mode [ 230.704422][ T4755] device veth1_macvtap left promiscuous mode [ 230.735474][ T4755] device veth0_macvtap left promiscuous mode [ 230.742024][ T4755] device veth1_vlan left promiscuous mode [ 230.765553][ T4755] device veth0_vlan left promiscuous mode [ 231.345292][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 231.745387][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 232.596782][ T4755] team0 (unregistering): Port device team_slave_1 removed [ 232.671425][ T4755] team0 (unregistering): Port device team_slave_0 removed [ 232.734781][ T4755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.808009][ T4755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.310879][ T4755] bond0 (unregistering): Released all slaves [ 233.400737][ T7656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.413657][ T7656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.425508][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 233.590430][ T7656] team0: Port device team_slave_0 added [ 233.632705][ T7656] team0: Port device team_slave_1 added [ 233.733354][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.765639][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.823172][ T7656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.834063][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 233.867848][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.875060][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.903441][ T7656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.925714][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 234.057173][ T7656] device hsr_slave_0 entered promiscuous mode [ 234.064348][ T7656] device hsr_slave_1 entered promiscuous mode [ 234.081059][ T7656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.090589][ T7656] Cannot create hsr debugfs directory [ 234.103050][ T7594] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.114185][ T22] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 234.133646][ T7594] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.140586][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.154749][ T22] usb 7-1: Product: syz [ 234.175271][ T22] usb 7-1: Manufacturer: syz [ 234.180007][ T22] usb 7-1: SerialNumber: syz [ 234.194861][ T22] usb 7-1: config 0 descriptor?? [ 234.212081][ T22] hub 7-1:0.0: bad descriptor, ignoring hub [ 234.218496][ T22] hub: probe of 7-1:0.0 failed with error -5 [ 234.257840][ T7594] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.280038][ T7594] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.415845][ T22] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 234.482435][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.524387][ T22] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 234.554302][ T22] usb 7-1: media controller created [ 234.603743][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.922410][ T7594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.000399][ T22] DVB: Unable to find symbol dib7000p_attach() [ 235.006936][ T22] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 235.040247][ T7594] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.066244][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.089637][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.226295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.243957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.273362][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.281265][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.285829][ T22] rc_core: IR keymap rc-dib0700-rc5 not found [ 235.313916][ T22] Registered IR keymap rc-empty [ 235.326909][ T22] dvb-usb: could not initialize remote control. [ 235.334058][ T22] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 235.346803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.383412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.405944][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.414682][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.424967][ T22] usb 7-1: USB disconnect, device number 2 [ 235.474946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.537906][ T22] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 235.567367][ T7815] program syz.4.1184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.586963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.636918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.657596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.710451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.722209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.761003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.779505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.830481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.859463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.880366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.906886][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 235.942207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.012411][ T7594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.047794][ T7656] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 236.084993][ T7656] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 236.116813][ T7656] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 236.162517][ T7656] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 236.514637][ T7656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.624020][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.627315][ T7811] loop6: detected capacity change from 0 to 32768 [ 236.656757][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.709291][ T7656] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.728329][ T7811] XFS (loop6): Mounting V5 Filesystem [ 236.751670][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.796146][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.840865][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.848174][ T4755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.882030][ T7811] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 236.936036][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.962379][ T7811] XFS (loop6): Starting recovery (logdev: internal) [ 236.983780][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.014735][ T7811] XFS (loop6): Ending recovery (logdev: internal) [ 237.027702][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.060488][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.067867][ T4755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.200263][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.226524][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.249732][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.272509][ T7811] XFS (loop6): Metadata corruption detected at xfs_btree_lookup_get_block+0x43b/0x660, xfs_bnobt block 0x8 [ 237.272666][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.316449][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.334995][ T7811] XFS (loop6): Unmount and run xfs_repair [ 237.339305][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.380019][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.426455][ T7594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.455942][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.478893][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.506674][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.536522][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.627691][ T7470] XFS (loop6): Unmounting Filesystem [ 237.643982][ T7656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.670631][ T7656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.736946][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.766164][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.908804][ T7656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.956232][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.995431][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.088385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.135046][ T7893] loop4: detected capacity change from 0 to 512 [ 239.136421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.261411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.288365][ T7893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 239.310030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.320944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.332334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.376580][ T7594] device veth0_vlan entered promiscuous mode [ 239.440881][ T4283] EXT4-fs (loop4): unmounting filesystem. [ 239.474171][ T7594] device veth1_vlan entered promiscuous mode [ 239.680775][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.710422][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.742674][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.773098][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.869104][ T7594] device veth0_macvtap entered promiscuous mode [ 239.897215][ T7594] device veth1_macvtap entered promiscuous mode [ 239.965496][ T7875] loop6: detected capacity change from 0 to 40427 [ 239.980403][ T7594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.021822][ T7875] F2FS-fs (loop6): invalid crc value [ 240.044591][ T7594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.059317][ T7875] F2FS-fs (loop6): Found nat_bits in checkpoint [ 240.097655][ T7594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.139363][ T7594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.179433][ T7594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.220948][ T7594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.237532][ T7875] F2FS-fs (loop6): Start checkpoint disabled! [ 240.272638][ T7594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.299126][ T7875] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 240.301235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.348065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.389017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.418215][ T7875] syz.6.1192: attempt to access beyond end of device [ 240.418215][ T7875] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 240.431508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.491545][ T7594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.534594][ T7594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.606582][ T7594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.658906][ T7594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.701272][ T7594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.750813][ T7594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.838342][ T7594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.897273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.927714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.988641][ T7594] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.007808][ T11] kworker/u4:1: attempt to access beyond end of device [ 241.007808][ T11] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 241.075431][ T7594] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.084897][ T7594] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.145255][ T7594] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.230016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.256886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.443606][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.480872][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.517446][ T7656] device veth0_vlan entered promiscuous mode [ 241.543300][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.566732][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.609427][ T7656] device veth1_vlan entered promiscuous mode [ 241.663209][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.689062][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.811776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.877244][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.917979][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.936674][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.967455][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.005999][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.043897][ T7656] device veth0_macvtap entered promiscuous mode [ 242.061203][ T7951] loop3: detected capacity change from 0 to 256 [ 242.088583][ T7656] device veth1_macvtap entered promiscuous mode [ 242.178356][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.214467][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.257167][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.292242][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.339072][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.375241][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.406126][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.435226][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.476455][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.485518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.494555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.513339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.565452][ T4337] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 242.581335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.606184][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.625830][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.660178][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.672298][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.683190][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.718905][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.738922][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.755265][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.776558][ T4337] usb 6-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 242.790846][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.804002][ T4337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.838219][ T4337] usb 6-1: config 0 descriptor?? [ 242.959420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.970705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.003286][ T7656] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.028847][ T7656] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.059572][ T7656] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.082553][ T7656] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.156027][ T4386] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 243.312699][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.355308][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.365516][ T4386] usb 5-1: Using ep0 maxpacket: 32 [ 243.375725][ T4386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.400104][ T4386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.423611][ T4386] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 243.435641][ T7965] loop3: detected capacity change from 0 to 32768 [ 243.448041][ T4386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.465412][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.474114][ T4337] usb 6-1: string descriptor 0 read error: -71 [ 243.488363][ T4337] uclogic 0003:256C:006E.0008: failed retrieving string descriptor #200: -71 [ 243.507049][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.526950][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.558102][ T4337] uclogic 0003:256C:006E.0008: failed retrieving pen parameters: -71 [ 243.570469][ T4386] usb 5-1: Device is not authorized for usage [ 243.585734][ T4337] uclogic 0003:256C:006E.0008: failed probing pen v2 parameters: -71 [ 243.609583][ T7973] ea_get: invalid extended attribute [ 243.619114][ T7973] ffff8880727fe8f0: 04 00 00 00 .... [ 243.643398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.661584][ T4337] uclogic 0003:256C:006E.0008: failed probing parameters: -71 [ 243.691602][ T4337] uclogic: probe of 0003:256C:006E.0008 failed with error -71 [ 243.735388][ T4337] usb 6-1: USB disconnect, device number 8 [ 244.474136][ T7988] loop3: detected capacity change from 0 to 8192 [ 244.524381][ T7988] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.588105][ T7988] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 244.643117][ T7988] REISERFS (device loop3): using ordered data mode [ 244.688151][ T7988] reiserfs: using flush barriers [ 244.748191][ T7988] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 244.831494][ T7988] REISERFS (device loop3): checking transaction log (loop3) [ 244.858566][ T7988] REISERFS (device loop3): Using r5 hash to sort names [ 244.889620][ T7988] REISERFS (device loop3): using 3.5.x disk format [ 244.911532][ T7988] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 245.469866][ T8019] vcan0: tx address claim with dlc 0 [ 245.531670][ T8022] loop3: detected capacity change from 0 to 64 [ 245.701428][ T4337] kernel write not supported for file [eventfd] (pid: 4337 comm: kworker/1:5) [ 245.813694][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1240'. [ 245.893061][ T5110] usb 5-1: USB disconnect, device number 7 [ 246.077928][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 246.131143][ T8039] batman_adv: batadv0: Adding interface: vlan2 [ 246.169748][ T8039] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.256617][ T8039] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 246.512442][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 246.542930][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 246.573163][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 246.603831][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 246.629188][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 246.656075][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 246.705377][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 246.756103][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 246.841787][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.924355][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.942680][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.065343][ T8059] device macvlan2 left promiscuous mode [ 247.103780][ T8072] bond0: option arp_validate: invalid value ( I) [ 247.679171][ T27] audit: type=1807 audit(1791984964.629:845): action=appraise func=FIRMWARE_CHECK res=1 [ 247.687466][ T8087] ima: policy update completed [ 247.720760][ T27] audit: type=1802 audit(1791984964.669:846): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.1262" res=1 errno=0 [ 249.684499][ T8141] loop6: detected capacity change from 0 to 32768 [ 249.782925][ T8141] find_entry called with index = 0 [ 249.838433][ T8141] read_mapping_page failed! [ 249.858086][ T8141] ERROR: (device loop6): txCommit: [ 249.858086][ T8141] [ 250.033783][ T109] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 250.059724][ T109] ------------[ cut here ]------------ [ 250.065650][ T109] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 250.101009][ T109] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 250.107225][ T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted syzkaller #0 [ 250.114490][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.124686][ T109] RIP: 0010:txUnlock+0xc7d/0xcb0 [ 250.129958][ T109] Code: e9 b5 33 07 0f 0b e8 f2 55 8d fe 48 c7 c7 c0 3f c6 8a 48 c7 c6 a9 3b c6 8a ba a4 03 00 00 48 c7 c1 a0 4c c6 8a e8 c3 b5 33 07 <0f> 0b e8 cc 55 8d fe 48 c7 c7 c0 3f c6 8a 48 c7 c6 a9 3b c6 8a ba [ 250.149657][ T109] RSP: 0018:ffffc90002607d30 EFLAGS: 00010246 [ 250.156032][ T109] RAX: 0000000000000037 RBX: 0000000000000000 RCX: aa39a6c876815e00 [ 250.164081][ T109] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 250.172106][ T109] RBP: ffff888027e410f8 R08: ffffc90002607a27 R09: 1ffff920004c0f44 [ 250.180216][ T109] R10: dffffc0000000000 R11: fffff520004c0f45 R12: ffffc900028ea168 [ 250.188247][ T109] R13: dffffc0000000000 R14: 000000000000002d R15: ffff888028461694 [ 250.196463][ T109] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 250.205586][ T109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.212265][ T109] CR2: 00007f5dc3b5da08 CR3: 000000005257c000 CR4: 00000000003506f0 [ 250.220295][ T109] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.228363][ T109] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.236653][ T109] Call Trace: [ 250.240079][ T109] [ 250.243165][ T109] ? _raw_spin_lock_irqsave+0x100/0x100 [ 250.249297][ T109] ? lockdep_hardirqs_on+0x94/0x140 [ 250.254566][ T109] jfs_lazycommit+0x588/0xa90 [ 250.259333][ T109] ? txFreelock+0x5a0/0x5a0 [ 250.263894][ T109] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 250.270369][ T109] ? do_task_dead+0xd0/0xd0 [ 250.274945][ T109] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 250.281015][ T109] ? __kthread_parkme+0x71/0x1c0 [ 250.286019][ T109] ? __kthread_parkme+0x15b/0x1c0 [ 250.292585][ T109] kthread+0x29d/0x330 [ 250.297055][ T109] ? txFreelock+0x5a0/0x5a0 [ 250.301721][ T109] ? kthread_blkcg+0xd0/0xd0 [ 250.306461][ T109] ret_from_fork+0x1f/0x30 [ 250.311035][ T109] [ 250.314109][ T109] Modules linked in: [ 250.447280][ T109] ---[ end trace 0000000000000000 ]--- [ 250.452963][ T109] RIP: 0010:txUnlock+0xc7d/0xcb0 [ 250.459500][ T109] Code: e9 b5 33 07 0f 0b e8 f2 55 8d fe 48 c7 c7 c0 3f c6 8a 48 c7 c6 a9 3b c6 8a ba a4 03 00 00 48 c7 c1 a0 4c c6 8a e8 c3 b5 33 07 <0f> 0b e8 cc 55 8d fe 48 c7 c7 c0 3f c6 8a 48 c7 c6 a9 3b c6 8a ba [ 250.480674][ T109] RSP: 0018:ffffc90002607d30 EFLAGS: 00010246 [ 250.488959][ T109] RAX: 0000000000000037 RBX: 0000000000000000 RCX: aa39a6c876815e00 [ 250.497514][ T109] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 250.507644][ T109] RBP: ffff888027e410f8 R08: ffffc90002607a27 R09: 1ffff920004c0f44 [ 250.516130][ T109] R10: dffffc0000000000 R11: fffff520004c0f45 R12: ffffc900028ea168 [ 250.526780][ T109] R13: dffffc0000000000 R14: 000000000000002d R15: ffff888028461694 [ 250.544957][ T109] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 250.563121][ T109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.570146][ T109] CR2: 00007f6552660478 CR3: 00000000767f6000 CR4: 00000000003506e0 [ 250.583356][ T109] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.592432][ T109] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.600955][ T109] Kernel panic - not syncing: Fatal exception [ 250.607672][ T109] Kernel Offset: disabled [ 250.612017][ T109] Rebooting in 86400 seconds..