last executing test programs: 1m44.434925673s ago: executing program 3 (id=3116): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f00000000c0)=0x7) 1m42.612468649s ago: executing program 3 (id=3131): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002300)='/proc/keys\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000340)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbdc, &(0x7f0000001ac0)="$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") pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) 1m41.546943475s ago: executing program 3 (id=3139): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) setresgid(0x0, 0xee00, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) 1m41.113100237s ago: executing program 3 (id=3144): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 1m40.67208916s ago: executing program 3 (id=3150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) 1m40.165114907s ago: executing program 3 (id=3153): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x218000, &(0x7f00000004c0)=ANY=[], 0xfa, 0x621a, &(0x7f0000005a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 1m39.644831337s ago: executing program 32 (id=3153): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x218000, &(0x7f00000004c0)=ANY=[], 0xfa, 0x621a, &(0x7f0000005a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 1m21.485549993s ago: executing program 2 (id=3269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, r1, 0x3c1ef5685f8d0157}, 0x14}}, 0x0) 1m20.790782531s ago: executing program 2 (id=3275): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0) 1m20.526617396s ago: executing program 2 (id=3276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m20.333329767s ago: executing program 2 (id=3279): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m19.637781165s ago: executing program 2 (id=3281): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x19, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1m16.850737185s ago: executing program 2 (id=3306): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002002, 0x0) 1m16.146661804s ago: executing program 33 (id=3306): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002002, 0x0) 27.127002456s ago: executing program 4 (id=3724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) unshare(0x40400) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, r0}, 0x18) 26.830819628s ago: executing program 4 (id=3727): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) 26.554249717s ago: executing program 4 (id=3730): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x5, 0x5fc, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 26.294449432s ago: executing program 6 (id=3732): r0 = msgget$private(0x0, 0x10) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x0, 0x4800) 26.183666076s ago: executing program 4 (id=3734): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f00000002c0)={[{@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@namecase}]}, 0x1, 0x1535, &(0x7f0000001380)="$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") mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) 26.144570964s ago: executing program 6 (id=3735): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 25.986488737s ago: executing program 6 (id=3737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 25.714333204s ago: executing program 6 (id=3741): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000001a80), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x153c, &(0x7f0000000440)="$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") syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) 25.484554533s ago: executing program 4 (id=3743): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea608641619f36514000cc008002c0107000200060019c00364bc24eab556a705251e618294ff005100000000f4d49302000000a6d0001000000e45916f996b2823b47a", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24.923370972s ago: executing program 4 (id=3749): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000000000000b703000000000000850000007c000000b70000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, &(0x7f0000000200)="000000000000000002", 0x0}, 0x50) 24.443945584s ago: executing program 34 (id=3749): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000000000000b703000000000000850000007c000000b70000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, &(0x7f0000000200)="000000000000000002", 0x0}, 0x50) 24.422900828s ago: executing program 6 (id=3753): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 24.03378002s ago: executing program 6 (id=3757): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0eo\x01\x00<\xcc\xb9Yg\x00\x00\x00\x00\x00\x00', 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r0, 0x0, 0x7fffffbfffffffff, 0x1) 23.257400555s ago: executing program 35 (id=3757): r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0eo\x01\x00<\xcc\xb9Yg\x00\x00\x00\x00\x00\x00', 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r0, 0x0, 0x7fffffbfffffffff, 0x1) 4.852125503s ago: executing program 1 (id=3882): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) 4.606561035s ago: executing program 0 (id=3885): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) 4.506492506s ago: executing program 1 (id=3886): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0xa00) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="9569cabbc754", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) 4.337942412s ago: executing program 0 (id=3887): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x444b, &(0x7f00000088c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x268) ioctl$FITRIM(r0, 0x40046f01, 0x0) 4.151632071s ago: executing program 1 (id=3889): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001", 0xa}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9", 0x44}], 0x2}, 0x0) 3.949301534s ago: executing program 1 (id=3890): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@bsdgroups}]}, 0x1, 0x97f6, &(0x7f000001c700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) 3.856281434s ago: executing program 5 (id=3891): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@setneightbl={0x30, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x2}]}, 0x30}}, 0x0) 3.622624733s ago: executing program 5 (id=3892): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018100400000000000000000109022400010000000809040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 2.59905218s ago: executing program 0 (id=3893): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}], 0x2}) 2.113657813s ago: executing program 1 (id=3894): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x123901, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, 0x0) 1.783514723s ago: executing program 7 (id=3751): mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x76) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) unlink(&(0x7f0000000180)='./my_configfs/target/dbroot\x00') 1.32287659s ago: executing program 7 (id=3895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000051}, 0x4040000) 1.320668101s ago: executing program 5 (id=3896): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002b40)={r1, &(0x7f0000000240)="ddb6", 0x0}, 0x20) 1.148986477s ago: executing program 5 (id=3897): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 953.559828ms ago: executing program 0 (id=3898): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) read(r0, &(0x7f0000000000)=""/269, 0xfffffdef) 851.308ms ago: executing program 7 (id=3899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002200)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010000000000fdffffff03000000840001800d0001007564703a73797a32000000000c00028008000300030000001500010069623a76657468315f746f5f7465616d0000000044000280080001001e000000080001000500000008000104050000000800030007000000080001000e0000000800030001000080080002"], 0x98}}, 0x0) 802.67777ms ago: executing program 0 (id=3900): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x40400c4) 640.897235ms ago: executing program 0 (id=3901): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) 617.45595ms ago: executing program 5 (id=3902): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008a, &(0x7f00000001c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@prjquota}, {@noload}, {@noload}, {@grpjquota, 0x22}, {@grpid}, {@grpjquota}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) 166.720825ms ago: executing program 7 (id=3903): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x24, 0x3, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a10185107508950609018102090191028511750895130901810209019102c0"}}, 0x13c) write$UHID_INPUT2(r0, &(0x7f0000000380)={0xc, {0x7, "10ff4111010000"}}, 0xd) 84.020552ms ago: executing program 1 (id=3904): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) 0s ago: executing program 5 (id=3905): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) kernel console output (not intermixed with test programs): ] usb 5-1: config 0 descriptor?? [ 314.432698][ T7689] usb 4-1: USB disconnect, device number 15 [ 314.455695][ T6874] smsc95xx v2.0.0 [ 314.552509][ T7689] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 314.892890][T11347] loop3: detected capacity change from 0 to 4096 [ 314.935701][T11347] EXT4-fs (loop3): Test dummy encryption mode enabled [ 314.986341][T11347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 315.077382][ T6874] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 315.139897][ T6874] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 315.189915][ T6874] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 315.231185][ T6874] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 315.284430][ T6874] usb 5-1: USB disconnect, device number 19 [ 315.475967][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 316.518400][ T7689] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 316.739590][ T7689] usb 1-1: Using ep0 maxpacket: 8 [ 316.749477][ T7689] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.768456][ T7689] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.796670][ T7689] usb 1-1: config 0 interface 0 has no altsetting 0 [ 316.812354][ T7689] usb 1-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 316.848150][ T7689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.895214][ T7689] usb 1-1: config 0 descriptor?? [ 317.049736][T11383] loop1: detected capacity change from 0 to 32768 [ 317.140353][ T6183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.329328][ T7689] wacom 0003:056A:00CC.0009: hidraw0: USB HID v0.00 Joystick [HID 056a:00cc] on usb-dummy_hcd.0-1/input0 [ 317.353119][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.359539][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.502503][T11398] loop4: detected capacity change from 0 to 256 [ 317.526100][ T6183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.555251][ T7689] usb 1-1: USB disconnect, device number 16 [ 317.562507][T11398] exfat: Deprecated parameter 'utf8' [ 317.583166][T11398] exfat: Deprecated parameter 'namecase' [ 317.660389][T11402] can0: slcan on ttyS3. [ 317.687209][T11398] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 317.763959][T11400] fido_id[11400]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 317.850341][ T6183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.042752][ T6183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.060629][T11399] can0 (unregistered): slcan off ttyS3. [ 318.105386][ T7] netdevsim0 speed is unknown, defaulting to 1000 [ 318.519002][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.530898][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.543111][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.564880][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.573014][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 318.581054][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.699547][T11419] lo speed is unknown, defaulting to 1000 [ 318.976769][T11433] ip_tables: iptables: counters copy to user failed while replacing table [ 319.550875][T11445] loop2: detected capacity change from 0 to 4096 [ 319.705476][T11445] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 320.373455][T11419] chnl_net:caif_netlink_parms(): no params data found [ 320.573975][T11447] loop4: detected capacity change from 0 to 32768 [ 320.633313][T11447] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.3174 (11447) [ 320.698825][T11447] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 320.709212][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 320.719648][T11447] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 320.777953][T11447] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 320.787836][T11447] BTRFS info (device loop4): use zstd compression, level 3 [ 320.795272][T11447] BTRFS info (device loop4): using free space tree [ 320.895899][T11419] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.978029][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.039954][T11419] device bridge_slave_0 entered promiscuous mode [ 321.212911][T11419] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.222946][T11447] BTRFS info (device loop4): enabling ssd optimizations [ 321.231976][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.284796][T11419] device bridge_slave_1 entered promiscuous mode [ 321.459818][ T4271] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 321.594693][T11459] loop1: detected capacity change from 0 to 40427 [ 321.640480][T11459] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 321.682642][T11459] F2FS-fs (loop1): invalid crc value [ 321.777879][T11459] F2FS-fs (loop1): Found nat_bits in checkpoint [ 321.795638][T11501] loop2: detected capacity change from 0 to 4096 [ 321.967107][ T4420] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop4 scanned by udevd (4420) [ 321.968275][T11505] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.980697][T11459] F2FS-fs (loop1): recover fsync data on readonly fs [ 321.991598][T11501] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 322.019470][T11459] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 322.047139][T11459] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 322.082997][T11501] NILFS (loop2): mounting fs with errors [ 322.091562][T11459] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 322.669367][T11514] loop2: detected capacity change from 0 to 1024 [ 322.787760][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 322.982173][T11419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.070657][T11419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.263752][T11526] loop1: detected capacity change from 0 to 1024 [ 323.608634][T11419] team0: Port device team_slave_0 added [ 323.645699][T11419] team0: Port device team_slave_1 added [ 323.761044][T11419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.798024][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.920542][T11419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.987250][T11419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.018461][T11419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.138096][T11419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.269447][ T6183] device hsr_slave_0 left promiscuous mode [ 324.291865][T11548] loop2: detected capacity change from 0 to 1024 [ 324.300886][ T6183] device hsr_slave_1 left promiscuous mode [ 324.380002][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.420136][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.459881][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.496793][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.589345][ T6183] device bridge_slave_1 left promiscuous mode [ 324.598571][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.683774][ T6183] device bridge_slave_0 left promiscuous mode [ 324.734243][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.867971][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 324.934533][T11532] loop4: detected capacity change from 0 to 40427 [ 324.978739][T11532] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 324.992387][ T6183] device veth1_macvtap left promiscuous mode [ 324.992703][T11532] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 325.025499][ T6183] device veth0_macvtap left promiscuous mode [ 325.065204][ T6183] device veth1_vlan left promiscuous mode [ 325.080939][ T6183] device veth0_vlan left promiscuous mode [ 325.112066][T11532] F2FS-fs (loop4): invalid crc value [ 325.134457][T11532] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 325.325723][T11570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.438613][T11532] F2FS-fs (loop4): Start checkpoint disabled! [ 325.554801][T11532] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 325.578055][T11532] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 325.776804][ T4328] kworker/u4:5: attempt to access beyond end of device [ 325.776804][ T4328] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 326.149033][T11586] loop4: detected capacity change from 0 to 512 [ 326.231338][T11586] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 326.256051][T11586] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.3214: corrupted in-inode xattr [ 326.271882][T11586] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3214: couldn't read orphan inode 15 (err -117) [ 326.284948][T11586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 326.430322][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 326.957383][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 327.038069][ T6183] team0 (unregistering): Port device team_slave_1 removed [ 327.104177][ T6183] team0 (unregistering): Port device team_slave_0 removed [ 327.172908][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.182102][ T6183] device bond_slave_1 left promiscuous mode [ 327.253405][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.263489][ T6183] device bond_slave_0 left promiscuous mode [ 327.822535][ T6183] bond0 (unregistering): Released all slaves [ 328.102750][T11419] device hsr_slave_0 entered promiscuous mode [ 328.129618][T11419] device hsr_slave_1 entered promiscuous mode [ 328.199109][T11419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.206747][T11419] Cannot create hsr debugfs directory [ 328.896329][T11419] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 328.946297][T11419] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 328.990803][T11419] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 329.040920][T11419] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 329.428028][T11419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.496677][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.536060][T11634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3233'. [ 329.541862][T11637] loop4: detected capacity change from 0 to 64 [ 329.552937][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.568208][T11634] netlink: 'syz.0.3233': attribute type 2 has an invalid length. [ 329.586521][T11419] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.593483][T11634] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 329.641051][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.670425][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.687599][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3233'. [ 329.701867][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.709269][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.750914][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.803219][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.856057][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.900280][T11615] loop2: detected capacity change from 0 to 32768 [ 329.923500][T11520] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.930755][T11520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.949202][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.981297][T11615] JBD2: Ignoring recovery information on journal [ 330.002000][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.074486][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.092711][T11615] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 330.148097][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.166655][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.203227][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.222295][T11419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.240663][T11419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.253967][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 330.290461][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.306035][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.316674][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.326460][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.336565][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.356147][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.578160][T11651] tipc: Invalid UDP bearer configuration [ 330.578204][T11651] tipc: Enabling of bearer rejected, failed to enable media [ 330.860297][T11660] loop2: detected capacity change from 0 to 512 [ 330.960173][T11660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 331.029731][T11665] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3240'. [ 331.290006][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 331.445147][T11679] loop4: detected capacity change from 0 to 1024 [ 331.506163][T11679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.523535][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.545489][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.574941][T11419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.633974][T11679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 331.871750][T11679] EXT4-fs warning (device loop4): empty_inline_dir:1901: bad inline directory (dir #12) - no `..' [ 332.181161][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 332.743640][T11710] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3254'. [ 333.271270][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.304813][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.343927][T11718] loop2: detected capacity change from 0 to 4096 [ 333.428218][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.436130][T11726] netlink: 'syz.4.3259': attribute type 29 has an invalid length. [ 333.446292][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.501348][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.538854][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.561703][T11718] ntfs3: loop2: failed to convert "0000" to iso8859-6 [ 333.578580][T11419] device veth0_vlan entered promiscuous mode [ 333.594125][T11726] netlink: 'syz.4.3259': attribute type 29 has an invalid length. [ 333.604999][T11703] loop1: detected capacity change from 0 to 32768 [ 333.658940][T11718] ntfs3: loop2: failed to convert "0030" to iso8859-6 [ 333.680383][T11419] device veth1_vlan entered promiscuous mode [ 333.722943][T11718] ntfs3: loop2: failed to convert name for inode 1e. [ 333.751848][T11703] JBD2: Ignoring recovery information on journal [ 333.775173][T11718] ntfs3: loop2: failed to convert "0032" to iso8859-6 [ 333.784307][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.802392][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.892049][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.923706][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.956310][T11419] device veth0_macvtap entered promiscuous mode [ 333.979934][T11703] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 333.993010][T11419] device veth1_macvtap entered promiscuous mode [ 334.151354][T11703] (syz.1.3252,11703,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 334.168868][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.217753][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.260980][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.327546][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.387951][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.427423][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.463463][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.514715][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.596476][T11419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.628375][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 334.693454][T11739] loop2: detected capacity change from 0 to 8192 [ 334.706397][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.716447][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.748397][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.811083][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.812346][T11751] loop1: detected capacity change from 0 to 1024 [ 334.849396][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.894266][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.906046][T11751] EXT4-fs: inline encryption not supported [ 334.930364][T11751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 334.948310][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.031067][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.074375][T11751] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.3264: lblock 2 mapped to illegal pblock 2 (length 1) [ 335.098882][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.128834][T11751] __quota_error: 6 callbacks suppressed [ 335.128851][T11751] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 335.143485][T11751] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.3264: Invalid inode table block 1 in block_group 0 [ 335.163180][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.175833][T11419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.187119][T11419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.199535][T11419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.209264][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.228057][T11751] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 335.246693][T11751] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.3264: mark_inode_dirty error [ 335.254375][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.267025][T11751] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 335.286754][T11751] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3264: Failed to acquire dquot type 0 [ 335.311775][T11751] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 335.325690][T11751] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.3264: mark_inode_dirty error [ 335.341361][T11419] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.363780][T11751] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 335.380512][T11419] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.395559][T11751] EXT4-fs (loop1): 1 orphan inode deleted [ 335.406406][T11419] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.415835][ T41] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 335.430593][T11751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 335.477849][T11419] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.508022][ T41] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 335.528487][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0 [ 335.647709][T11761] ip_tables: iptables: counters copy to user failed while replacing table [ 335.770971][T11751] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 48: comm syz.1.3264: lblock 0 mapped to illegal pblock 48 (length 1) [ 335.803078][T11764] can0: slcan on ptm0. [ 335.845288][T11751] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 335.874592][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.893504][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.005618][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.028693][T11763] can0 (unregistered): slcan off ptm0. [ 336.045459][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 336.065349][ T4272] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 336.129729][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.155180][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.169568][ T4272] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 336.208563][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.239246][ T4272] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 336.843492][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3278'. [ 336.884753][T11790] loop2: detected capacity change from 0 to 512 [ 336.895664][T11789] loop1: detected capacity change from 0 to 1024 [ 336.927152][T11790] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 337.038307][T11790] EXT4-fs (loop2): 1 truncate cleaned up [ 337.044045][T11790] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 337.184292][T11790] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 337.365830][T11772] loop4: detected capacity change from 0 to 32768 [ 337.407877][ T4274] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 337.494910][ T4274] EXT4-fs (loop2): Remounting filesystem read-only [ 337.505837][T11772] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 337.608075][ T4274] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz-executor: path /637/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 337.689813][ T4271] ocfs2: Unmounting device (7,4) on (node local) [ 337.727373][ T4274] EXT4-fs (loop2): Remounting filesystem read-only [ 337.735357][ T4274] EXT4-fs error (device loop2): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 337.882703][ T4274] EXT4-fs (loop2): Remounting filesystem read-only [ 337.898585][ T4274] EXT4-fs warning (device loop2): empty_inline_dir:1919: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 337.937482][ T4274] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz-executor: path /637/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 338.030335][ T4274] EXT4-fs (loop2): Remounting filesystem read-only [ 338.050617][ T4274] EXT4-fs error (device loop2): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 338.144773][ T4274] EXT4-fs (loop2): Remounting filesystem read-only [ 338.181477][ T4274] EXT4-fs warning (device loop2): empty_inline_dir:1919: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 338.272945][ T4274] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz-executor: path /637/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 338.368700][ T4274] EXT4-fs (loop2): Remounting filesystem read-only [ 338.379240][ T4274] EXT4-fs error (device loop2): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 338.423848][ T4274] EXT4-fs (loop2): Remounting filesystem read-only [ 338.435229][ T4274] EXT4-fs warning (device loop2): empty_inline_dir:1919: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 338.468215][ T4274] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz-executor: path /637/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 338.508721][ T4274] EXT4-fs (loop2): Remounting filesystem read-only [ 338.520254][ T4274] EXT4-fs error (device loop2): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 338.574524][ T4274] EXT4-fs (loop2): Remounting filesystem read-only [ 338.615029][ T4274] EXT4-fs warning (device loop2): empty_inline_dir:1919: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 338.663987][T11824] loop1: detected capacity change from 0 to 256 [ 338.667132][ T4274] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1458: inode #12: block 7: comm syz-executor: path /637/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0 [ 338.757454][ T4274] EXT4-fs warning (device loop2): empty_inline_dir:1919: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 338.836220][ T4274] EXT4-fs warning (device loop2): empty_inline_dir:1919: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 338.906529][ T4274] EXT4-fs warning (device loop2): empty_inline_dir:1919: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 338.974876][ T4274] EXT4-fs warning (device loop2): empty_inline_dir:1919: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 339.057183][ T4274] EXT4-fs warning (device loop2): empty_inline_dir:1919: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 339.105074][ T4274] EXT4-fs warning (device loop2): empty_inline_dir:1919: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60 [ 339.110240][T11834] mkiss: ax0: crc mode is auto. [ 339.722869][T11854] loop4: detected capacity change from 0 to 256 [ 339.785115][T11854] exfat: Deprecated parameter 'utf8' [ 339.808578][T11854] exfat: Deprecated parameter 'namecase' [ 339.814561][T11854] exfat: Deprecated parameter 'namecase' [ 339.895385][T11854] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 340.261795][T11866] loop5: detected capacity change from 0 to 512 [ 340.273178][T11868] loop1: detected capacity change from 0 to 512 [ 340.363813][T11866] EXT4-fs (loop5): Test dummy encryption mode enabled [ 340.419478][T11868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 340.461228][T11866] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 340.496949][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.663127][T11419] EXT4-fs (loop5): unmounting filesystem. [ 340.686201][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 340.796524][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.972193][T11888] IPVS: ip_vs_edit_dest(): server weight less than zero [ 340.990386][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.074337][T11889] tipc: Started in network mode [ 341.117645][T11889] tipc: Node identity ac141441, cluster identity 4711 [ 341.126781][T11889] tipc: Enabled bearer , priority 10 [ 341.384156][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.461867][T11894] tipc: Enabling of bearer rejected, media not registered [ 341.579757][T11902] loop1: detected capacity change from 0 to 64 [ 341.863581][T11900] loop4: detected capacity change from 0 to 8192 [ 341.920547][T11900] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 341.938117][T11900] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 341.996942][T11900] REISERFS (device loop4): using ordered data mode [ 342.012093][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.025300][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.035590][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.045258][T11913] loop5: detected capacity change from 0 to 512 [ 342.049891][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.060713][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.067809][T11900] reiserfs: using flush barriers [ 342.072785][T11900] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 342.073525][ T8321] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 342.112134][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.148538][T11900] REISERFS (device loop4): checking transaction log (loop4) [ 342.168174][T11913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 342.181667][ T9] tipc: Left network mode [ 342.241271][ T7] tipc: Node number set to 2886997057 [ 342.286782][T11908] lo speed is unknown, defaulting to 1000 [ 342.332940][ T8321] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 342.353958][ T8321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.384364][ T8321] usb 1-1: Product: syz [ 342.406090][ T8321] usb 1-1: Manufacturer: syz [ 342.428603][ T8321] usb 1-1: SerialNumber: syz [ 342.428649][ T6896] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 342.471617][ T8321] usb 1-1: config 0 descriptor?? [ 342.554135][T11900] REISERFS (device loop4): Using tea hash to sort names [ 342.579941][T11900] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 342.639526][ T6896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.659375][T11419] EXT4-fs (loop5): unmounting filesystem. [ 342.674293][ T6896] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 342.707473][ T6896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 342.749848][ T6896] usb 2-1: Product: syz [ 342.754162][ T6896] usb 2-1: Manufacturer: syz [ 342.819835][ T6896] usb 2-1: selecting invalid altsetting 1 [ 342.886820][ T6896] dvb_ttusb_budget: ttusb_init_controller: error [ 342.927544][ T6896] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 342.944180][ T7685] usb 1-1: USB disconnect, device number 17 [ 343.222641][ T6896] DVB: Unable to find symbol cx22700_attach() [ 343.455770][ T6896] DVB: Unable to find symbol tda10046_attach() [ 343.467530][ T6896] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 343.509508][ T6896] usb 2-1: USB disconnect, device number 13 [ 344.147723][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 344.181242][T11958] loop5: detected capacity change from 0 to 512 [ 344.274291][T11958] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 344.491844][T11958] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 344.555481][T11908] chnl_net:caif_netlink_parms(): no params data found [ 344.624387][ T26] audit: type=1326 audit(1790645009.036:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.4.3337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfa99e159 code=0x7ffc0000 [ 344.737946][ T26] audit: type=1326 audit(1790645009.036:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.4.3337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fadfa99e159 code=0x7ffc0000 [ 344.775789][ T26] audit: type=1326 audit(1790645009.056:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.4.3337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfa99e159 code=0x7ffc0000 [ 344.876016][ T26] audit: type=1326 audit(1790645009.056:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.4.3337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfa99e159 code=0x7ffc0000 [ 345.007522][ T26] audit: type=1326 audit(1790645009.056:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.4.3337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fadfa99e159 code=0x7ffc0000 [ 345.069020][ T26] audit: type=1326 audit(1790645009.056:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.4.3337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfa99e159 code=0x7ffc0000 [ 345.147522][ T26] audit: type=1326 audit(1790645009.056:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.4.3337" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadfa99e159 code=0x7ffc0000 [ 345.202590][ T9] bond0: (slave wlan1): Releasing backup interface [ 345.297902][T11908] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.305646][T11908] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.314546][T11908] device bridge_slave_0 entered promiscuous mode [ 345.325042][T11908] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.332849][T11908] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.341750][T11908] device bridge_slave_1 entered promiscuous mode [ 345.378277][T11908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.390494][T11908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.598056][T11994] loop4: detected capacity change from 0 to 4096 [ 345.717608][T11908] team0: Port device team_slave_0 added [ 345.726162][T11908] team0: Port device team_slave_1 added [ 345.734550][T12003] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.878949][T12006] ip_tables: iptables: counters copy to user failed while replacing table [ 345.916679][T11908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.974984][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.097706][T11908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.178865][T11908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.186421][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.227473][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 346.321828][T12018] loop5: detected capacity change from 0 to 256 [ 346.337911][T12018] exfat: Deprecated parameter 'namecase' [ 346.346362][T12018] exfat: Deprecated parameter 'utf8' [ 346.391993][T11908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.398988][T12018] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 346.426978][T12014] tipc: Started in network mode [ 346.432703][T12014] tipc: Node identity 00000000000000000000ffff, cluster identity 4711 [ 346.451764][T12014] tipc: Enabling of bearer rejected, failed to enable media [ 346.504546][ T9] device hsr_slave_0 left promiscuous mode [ 346.563483][ T9] device hsr_slave_1 left promiscuous mode [ 346.568022][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.568071][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.568803][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.568840][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.569521][ T9] device bridge_slave_1 left promiscuous mode [ 346.569662][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.598191][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.699030][ T9] device veth1_macvtap left promiscuous mode [ 346.699158][ T9] device veth0_macvtap left promiscuous mode [ 346.699288][ T9] device veth1_vlan left promiscuous mode [ 346.699397][ T9] device veth0_vlan left promiscuous mode [ 347.220823][T12035] loop5: detected capacity change from 0 to 256 [ 347.234614][ T9] infiniband sz1: set down [ 347.276981][T12035] exfat: Deprecated parameter 'namecase' [ 347.343800][T12035] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 347.471831][T12039] loop1: detected capacity change from 0 to 256 [ 347.488589][T12039] exfat: Deprecated parameter 'utf8' [ 347.494009][T12039] exfat: Deprecated parameter 'namecase' [ 347.531126][T12039] exfat: Deprecated parameter 'namecase' [ 347.554743][T12022] loop4: detected capacity change from 0 to 32768 [ 347.570736][T12039] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 347.702485][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3364'. [ 347.722910][T12022] XFS (loop4): Mounting V5 Filesystem [ 347.842930][T12022] XFS (loop4): Ending clean mount [ 348.185927][ T4271] XFS (loop4): Unmounting Filesystem [ 348.307761][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 348.872341][T12061] loop5: detected capacity change from 0 to 32768 [ 348.889555][T12061] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 348.904701][T12061] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 348.950172][T12063] loop4: detected capacity change from 0 to 128 [ 349.009846][T12061] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 349.028745][ T7683] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 349.034531][T12063] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 349.041528][ T7683] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 349.068643][T12063] ; already mounted read-only [ 349.073690][T12063] hpfs: filesystem error: improperly stopped [ 349.124191][ T7683] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 82ms [ 349.135428][T12063] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 349.138214][ T7683] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 349.160199][T12061] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 349.182841][T12063] hpfs: You really don't want any checks? You are crazy... [ 349.191052][T12063] hpfs: Code page index out of array [ 349.196753][T12063] hpfs: code page support is disabled [ 349.209343][T12063] hpfs: hpfs_map_4sectors(): unaligned read [ 349.216547][T12063] hpfs: hpfs_map_4sectors(): unaligned read [ 349.239369][T12063] hpfs: filesystem error: unable to find root dir [ 349.894482][ T9] team0 (unregistering): Port device team_slave_1 removed [ 350.040504][ T9] team0 (unregistering): Port device team_slave_0 removed [ 350.080312][ T8321] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 350.155415][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.265060][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.297669][ T8321] usb 5-1: Using ep0 maxpacket: 16 [ 350.324641][ T8321] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 350.349181][ T8321] usb 5-1: config 0 interface 0 has no altsetting 0 [ 350.356162][ T8321] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 350.372023][T12083] loop5: detected capacity change from 0 to 512 [ 350.387521][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 350.401135][ T8321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.447511][ T8321] usb 5-1: config 0 descriptor?? [ 350.511112][T12083] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 350.566391][T12083] EXT4-fs (loop5): 1 truncate cleaned up [ 350.587226][T12083] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 350.714410][T11419] EXT4-fs (loop5): unmounting filesystem. [ 350.892706][ T8321] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0 [ 350.904676][ T8321] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x4 [ 350.922181][ T8321] sigmamicro 0003:1C4F:0059.000A: hidraw0: USB HID v0.04 Device [HID 1c4f:0059] on usb-dummy_hcd.4-1/input0 [ 351.118964][ T8321] usb 5-1: USB disconnect, device number 20 [ 351.169235][ T9] bond0 (unregistering): Released all slaves [ 351.305514][ T4338] smc: removing ib device sz1 [ 351.346919][ T7685] lo speed is unknown, defaulting to 1000 [ 351.356086][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 351.401312][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3365'. [ 351.419206][T12055] netlink: 'syz.1.3365': attribute type 14 has an invalid length. [ 351.457656][T12055] netlink: 'syz.1.3365': attribute type 11 has an invalid length. [ 351.566615][T11908] device hsr_slave_0 entered promiscuous mode [ 351.687971][T11908] device hsr_slave_1 entered promiscuous mode [ 351.776070][T11908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.797999][T11908] Cannot create hsr debugfs directory [ 352.224778][T12104] loop1: detected capacity change from 0 to 1024 [ 352.324660][T12104] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 352.424901][T12104] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 352.468449][T12111] loop5: detected capacity change from 0 to 1024 [ 352.482111][T12104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 352.585063][T12104] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.3387: corrupted in-inode xattr [ 352.586327][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3392'. [ 352.850388][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 352.878965][ T41] hfsplus: b-tree write err: -5, ino 25 [ 352.884773][ T41] hfsplus: b-tree write err: -5, ino 4 [ 352.912547][ T41] hfsplus: b-tree write err: -5, ino 2 [ 353.274828][T11908] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 353.321484][T11908] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 353.440805][T11908] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 353.559011][T11908] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 354.050053][T11908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.110593][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.126306][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.170308][T11908] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.221621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.244542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.294533][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.301907][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.357970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.384960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.429267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.448675][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.455942][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.502889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 354.589052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.606850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.641443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.751270][T11908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.815740][T11908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.846837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.864681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.895559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.916864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.958537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.973817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 354.992897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.020065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.289022][ T26] audit: type=1800 audit(1790645019.696:137): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3414" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 355.396990][T12181] loop5: detected capacity change from 0 to 256 [ 355.409829][T12183] loop4: detected capacity change from 0 to 512 [ 355.449778][T12181] exfat: Deprecated parameter 'utf8' [ 355.485830][T12181] exfat: Deprecated parameter 'utf8' [ 355.513670][T12183] EXT4-fs: Ignoring removed bh option [ 355.553341][T12181] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 355.587975][T12183] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 355.650501][T12183] EXT4-fs (loop4): Test dummy encryption mode enabled [ 355.722065][T12183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 355.941318][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 356.303647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 356.313080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 356.355166][T11908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.716109][T12218] loop1: detected capacity change from 0 to 2048 [ 356.813639][T12218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.895280][T12225] netlink: 'syz.0.3428': attribute type 29 has an invalid length. [ 356.940953][T12225] netlink: 'syz.0.3428': attribute type 29 has an invalid length. [ 356.995522][T12227] netlink: 'syz.0.3428': attribute type 29 has an invalid length. [ 357.191200][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3431'. [ 357.237730][T12233] tipc: Started in network mode [ 357.242687][T12233] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 357.339991][T12233] tipc: Enabling of bearer rejected, failed to enable media [ 357.461803][T12242] ip_tables: iptables: counters copy to user failed while replacing table [ 358.168245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.187948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.238967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.265701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.305962][T11908] device veth0_vlan entered promiscuous mode [ 358.338463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.347743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.374400][T11908] device veth1_vlan entered promiscuous mode [ 358.495186][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.514681][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.544371][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.568431][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.607533][T11908] device veth0_macvtap entered promiscuous mode [ 358.697695][T11908] device veth1_macvtap entered promiscuous mode [ 358.737959][T12270] netlink: 'syz.1.3445': attribute type 1 has an invalid length. [ 358.748341][T12274] ip_tables: iptables: counters copy to user failed while replacing table [ 358.757085][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3445'. [ 358.916511][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.977416][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.017591][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.057432][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.076866][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.097439][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.135777][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.184438][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.225904][T11908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.250636][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 359.270442][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.298641][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.325902][T12293] loop4: detected capacity change from 0 to 764 [ 359.358292][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.411243][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.432514][T12293] rock: directory entry would overflow storage [ 359.460279][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.470584][T12293] rock: sig=0x4654, size=5, remaining=4 [ 359.492757][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.516409][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.567567][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.622763][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.647417][T11908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.677564][T11908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.727761][T11908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.778798][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.802686][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.806667][T12307] loop1: detected capacity change from 0 to 256 [ 359.837004][T11908] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.866556][T11908] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.894752][T12307] exfat: Deprecated parameter 'utf8' [ 359.900319][T11908] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.921652][T12307] exfat: Deprecated parameter 'namecase' [ 359.935187][T11908] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.944633][T12307] exfat: Deprecated parameter 'namecase' [ 359.964752][T12307] exfat: Deprecated parameter 'namecase' [ 360.015242][T12307] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 360.189524][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.207408][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.234683][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.341471][T12317] loop5: detected capacity change from 0 to 512 [ 360.402341][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.436900][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.474914][T12317] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 360.500172][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 360.588051][T12317] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.751931][T12317] Quota error (device loop5): do_check_range: Getting block 773 out of range 1-5 [ 360.820739][T12317] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 360.894339][T12317] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.3461: Failed to acquire dquot type 1 [ 360.959150][T12317] EXT4-fs (loop5): Remounting filesystem read-only [ 361.037809][T12327] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:337: inode #15: comm syz.5.3461: verity file corrupted; can't find descriptor [ 361.066576][T12327] EXT4-fs (loop5): Remounting filesystem read-only [ 361.100440][T12327] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 361.301278][T11419] EXT4-fs (loop5): unmounting filesystem. [ 361.368851][T12345] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 361.398781][T12342] loop1: detected capacity change from 0 to 2048 [ 361.450276][T12342] NILFS (loop1): invalid segment: Magic number mismatch [ 361.486022][T12342] NILFS (loop1): trying rollback from an earlier position [ 361.558359][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3471'. [ 361.607687][T12349] tipc: Enabling of bearer rejected, failed to enable media [ 361.619762][T12342] NILFS (loop1): recovery complete [ 361.640514][T12352] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.717468][ T7683] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 362.909575][ T7683] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.925977][T12400] loop4: detected capacity change from 0 to 512 [ 362.943158][ T7683] usb 7-1: config 0 interface 0 has no altsetting 0 [ 362.976917][ T7683] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 362.991484][T12400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 363.067793][ T7683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.136309][ T7683] usb 7-1: config 0 descriptor?? [ 363.139658][T12400] EXT4-fs error (device loop4): ext4_xattr_set_entry:1619: inode #2: comm syz.4.3491: corrupted xattr entries [ 363.396441][T12410] tipc: Enabling of bearer rejected, failed to enable media [ 363.427508][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.442446][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 363.590947][ T7683] input: HID 1e7d:3264 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:1E7D:3264.000B/input/input21 [ 363.817234][ T7683] isku 0003:1E7D:3264.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.6-1/input0 [ 363.878425][ T7683] usb 7-1: USB disconnect, device number 2 [ 363.973268][T12382] loop5: detected capacity change from 0 to 40427 [ 364.050348][T12382] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 364.075226][T12382] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 364.153019][T12382] F2FS-fs (loop5): invalid crc value [ 364.181288][T12382] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 364.202574][T12423] fido_id[12423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 364.434941][T12382] F2FS-fs (loop5): recover fsync data on readonly fs [ 364.518809][T12382] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 364.576385][T12382] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30 [ 364.602499][T12382] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 364.722687][T12433] loop1: detected capacity change from 0 to 4096 [ 364.809149][T12433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 365.008688][T12446] netlink: 'syz.6.3506': attribute type 3 has an invalid length. [ 365.033850][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 365.312239][T12455] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3511'. [ 366.201890][T12479] loop5: detected capacity change from 0 to 512 [ 366.229413][T12448] loop4: detected capacity change from 0 to 32768 [ 366.260957][T12448] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.3508 (12448) [ 366.365319][T12448] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 366.383317][T12479] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.447584][T12448] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 366.456499][T12448] BTRFS info (device loop4): enabling disk space caching [ 366.463832][ T26] audit: type=1800 audit(1790645030.876:138): pid=12479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3519" name="file1" dev="loop5" ino=1048658 res=0 errno=0 [ 366.553169][T12448] BTRFS info (device loop4): force clearing of disk cache [ 366.577885][T12448] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 366.622011][T12448] BTRFS info (device loop4): use zstd compression, level 3 [ 366.678402][T12448] BTRFS info (device loop4): disk space caching is enabled [ 366.773406][T12500] tipc: Started in network mode [ 366.779005][T12500] tipc: Node identity , cluster identity 4711 [ 366.867797][T12500] tipc: Failed to set node id, please configure manually [ 366.877986][T12500] tipc: Enabling of bearer rejected, failed to enable media [ 366.995556][T12516] loop6: detected capacity change from 0 to 764 [ 367.018049][T12448] BTRFS info (device loop4): enabling ssd optimizations [ 367.027024][T12448] BTRFS info (device loop4): rebuilding free space tree [ 367.037604][ T4315] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 367.046344][T12448] BTRFS info (device loop4): disabling free space tree [ 367.053809][T12448] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 367.069687][T12448] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 367.098850][T12516] rock: directory entry would overflow storage [ 367.128973][T12516] rock: sig=0x4654, size=5, remaining=4 [ 367.249632][ T4315] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.272019][ T4315] usb 6-1: config 0 has no interface number 0 [ 367.311686][ T4315] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 367.354544][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.379870][ T4315] usb 6-1: Product: syz [ 367.398523][ T4315] usb 6-1: Manufacturer: syz [ 367.398724][ T7689] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 367.403204][ T4315] usb 6-1: SerialNumber: syz [ 367.420746][ T4315] usb 6-1: config 0 descriptor?? [ 367.457941][ T4315] usb 6-1: selecting invalid altsetting 1 [ 367.466671][ T4315] dvb_ttusb_budget: ttusb_init_controller: error [ 367.483220][ T4271] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 367.496973][ T4315] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 367.669268][ T7689] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 367.681773][ T7689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.712619][ T7689] usb 1-1: config 0 descriptor?? [ 367.750372][ T7689] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 367.890682][ T4315] DVB: Unable to find symbol stv0299_attach() [ 368.134958][ T4315] DVB: Unable to find symbol tda8083_attach() [ 368.151382][ T4315] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 368.208237][ T4315] usb 6-1: USB disconnect, device number 2 [ 368.374602][ T7689] gp8psk: usb out operation failed. [ 368.382140][ T7689] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 368.443645][ T7689] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 368.495221][ T7689] usb 1-1: USB disconnect, device number 18 [ 368.729455][T12556] tmpfs: Cannot retroactively limit inodes [ 368.886349][T12538] loop6: detected capacity change from 0 to 32768 [ 368.960509][T12538] JBD2: Ignoring recovery information on journal [ 369.016731][T12566] sp0: Synchronizing with TNC [ 369.066304][T12564] [U] è` [ 369.092614][T12538] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 369.118626][ T7689] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 369.309684][ T7689] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.341597][ T7689] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.388516][ T7689] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.452570][ T7689] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.483082][ T7689] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 369.525058][ T7689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.547217][T11908] ocfs2: Unmounting device (7,6) on (node local) [ 369.586723][ T7689] usb 5-1: config 0 descriptor?? [ 369.733009][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3553'. [ 370.044890][ T7689] samsung 0003:0419:0600.000C: unbalanced collection at end of report description [ 370.073367][ T7689] samsung 0003:0419:0600.000C: parse failed [ 370.112931][ T7689] samsung: probe of 0003:0419:0600.000C failed with error -22 [ 370.246925][ T4315] usb 5-1: USB disconnect, device number 21 [ 370.953558][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 371.022075][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3567'. [ 371.046473][T12635] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 371.140997][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3570'. [ 371.160284][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3570'. [ 371.203224][T12643] netlink: 'syz.6.3570': attribute type 18 has an invalid length. [ 371.290308][T12645] program syz.5.3571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.576087][T12653] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3574'. [ 372.888024][T12704] loop6: detected capacity change from 0 to 2048 [ 372.914284][T12704] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 372.957432][ T7689] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 373.005778][T12704] NILFS (loop6): mounting unchecked fs [ 373.050414][ T4420] udevd[4420]: incorrect nilfs2 checksum on /dev/loop6 [ 373.071412][T12704] NILFS (loop6): recovery complete [ 373.108130][T12708] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.159189][ T7689] usb 2-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 373.186840][ T7689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.219050][ T7689] usb 2-1: config 0 descriptor?? [ 373.523105][T12682] loop4: detected capacity change from 0 to 32768 [ 373.547706][T12721] program syz.6.3599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.636403][ T7689] smartjoyplus 0003:0925:8888.000D: unknown main item tag 0x0 [ 373.662413][ T7689] smartjoyplus 0003:0925:8888.000D: unknown main item tag 0x0 [ 373.714143][ T7689] smartjoyplus 0003:0925:8888.000D: unknown main item tag 0x0 [ 373.780835][ T7689] smartjoyplus 0003:0925:8888.000D: unknown main item tag 0x0 [ 373.795941][T12731] tipc: Enabling of bearer rejected, failed to enable media [ 373.817792][ T7689] smartjoyplus 0003:0925:8888.000D: unknown main item tag 0x0 [ 373.825543][ T7689] smartjoyplus 0003:0925:8888.000D: unknown main item tag 0x0 [ 373.904639][ T7689] smartjoyplus 0003:0925:8888.000D: unknown main item tag 0x0 [ 373.945184][ T7689] smartjoyplus 0003:0925:8888.000D: unknown main item tag 0x0 [ 373.966115][ T7689] smartjoyplus 0003:0925:8888.000D: hidraw0: USB HID vef.fd Device [HID 0925:8888] on usb-dummy_hcd.1-1/input0 [ 374.032728][ T7689] smartjoyplus 0003:0925:8888.000D: no output reports found [ 374.056329][ T7689] usb 2-1: USB disconnect, device number 14 [ 374.091214][T12682] XFS (loop4): Mounting V5 Filesystem [ 374.111125][T12740] xt_hashlimit: size too large, truncated to 1048576 [ 374.243948][T12747] loop5: detected capacity change from 0 to 512 [ 374.247131][T12682] XFS (loop4): Ending clean mount [ 374.267635][T12747] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 374.312411][T12747] EXT4-fs (loop5): 1 truncate cleaned up [ 374.342391][T12747] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 374.397832][ T5831] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 374.426451][ T26] audit: type=1800 audit(1790645038.836:139): pid=12682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3587" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 374.437907][T12742] fido_id[12742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 374.627681][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 374.637644][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.645807][ T5831] usb 1-1: config 0 has no interface number 0 [ 374.674422][ T5831] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.695340][ T4271] XFS (loop4): Unmounting Filesystem [ 374.723682][ T5831] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.753413][ T5831] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.773306][T11419] EXT4-fs (loop5): unmounting filesystem. [ 374.776764][ T5831] usb 1-1: config 0 interface 1 has no altsetting 0 [ 374.795304][ T5831] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 374.814250][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.843910][ T5831] usb 1-1: config 0 descriptor?? [ 374.888977][ T5831] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 375.283184][ T5831] elan 0003:04F3:074D.000E: failed to start in urb: -90 [ 375.480927][ T5831] elan 0003:04F3:074D.000E: Set report error for parm 6: -71 [ 375.498304][ T5831] elan 0003:04F3:074D.000E: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.0-1/input1 [ 375.527517][ T5831] elan 0003:04F3:074D.000E: Input device is not registered [ 375.563082][ T5831] elan: probe of 0003:04F3:074D.000E failed with error -119 [ 375.611319][ T5831] usb 1-1: USB disconnect, device number 19 [ 375.722927][T12772] loop5: detected capacity change from 0 to 128 [ 375.801045][T12772] qnx6: unable to set blocksize [ 375.981889][T12773] fido_id[12773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 376.968270][T12798] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3621'. [ 376.985025][T12775] loop4: detected capacity change from 0 to 40427 [ 377.043994][T12775] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 377.070086][T12775] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 377.106600][T12775] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 377.195845][T12775] F2FS-fs (loop4): Found nat_bits in checkpoint [ 377.359901][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3622'. [ 377.380020][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3622'. [ 377.433015][T12808] netlink: 'syz.1.3622': attribute type 19 has an invalid length. [ 377.451821][T12775] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 377.459427][T12808] netlink: 'syz.1.3622': attribute type 20 has an invalid length. [ 377.477826][T12775] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 377.517775][T12811] tipc: Enabling of bearer rejected, failed to enable media [ 377.771323][T12818] loop5: detected capacity change from 0 to 512 [ 377.912296][T12822] loop1: detected capacity change from 0 to 64 [ 378.015095][T12822] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 378.128431][T12822] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 378.167467][ T6896] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 378.379157][ T6896] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.408240][ T6896] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 378.442385][ T6896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 378.488818][ T6896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 378.545803][ T6896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 378.601254][ T6896] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 378.632014][ T6896] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 378.660101][ T6896] usb 1-1: Product: syz [ 378.675221][ T6896] usb 1-1: Manufacturer: syz [ 378.718201][ T6896] cdc_wdm 1-1:1.0: skipping garbage [ 378.723481][ T6896] cdc_wdm 1-1:1.0: skipping garbage [ 378.772474][ T6896] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 378.802219][ T6896] cdc_wdm 1-1:1.0: Unknown control protocol [ 378.807697][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.814587][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.843324][T12836] loop5: detected capacity change from 0 to 2048 [ 378.920055][T12836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.169091][ T6896] usb 1-1: USB disconnect, device number 20 [ 380.016445][T12834] loop1: detected capacity change from 0 to 40427 [ 380.057776][T12834] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 380.070831][T12834] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 380.104289][T12834] F2FS-fs (loop1): Found nat_bits in checkpoint [ 380.220113][T12834] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 380.284627][T12834] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 380.460451][ T26] audit: type=1800 audit(1790645044.876:140): pid=12834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3632" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 380.653926][ T4272] syz-executor: attempt to access beyond end of device [ 380.653926][ T4272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 381.107101][ T26] audit: type=1326 audit(1790645045.516:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.3649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9e159 code=0x7ffc0000 [ 381.212947][ T26] audit: type=1326 audit(1790645045.546:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.3649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9e159 code=0x7ffc0000 [ 381.225461][T12886] loop4: detected capacity change from 0 to 4096 [ 381.277456][ T26] audit: type=1326 audit(1790645045.546:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.3649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9e159 code=0x7ffc0000 [ 381.387658][T12894] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 381.395154][ T26] audit: type=1326 audit(1790645045.546:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.3649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9e159 code=0x7ffc0000 [ 381.505672][ T3934] device veth1_vlan left promiscuous mode [ 381.575040][ T26] audit: type=1326 audit(1790645045.546:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.3649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ffacff9e159 code=0x7ffc0000 [ 381.677523][ T26] audit: type=1326 audit(1790645045.546:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.3649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9e159 code=0x7ffc0000 [ 381.814535][ T26] audit: type=1326 audit(1790645045.546:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.3649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9e159 code=0x7ffc0000 [ 381.840182][T12899] loop6: detected capacity change from 0 to 4096 [ 381.924103][ T26] audit: type=1326 audit(1790645045.546:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.3649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9e159 code=0x7ffc0000 [ 381.980770][T12906] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 382.106174][ T26] audit: type=1326 audit(1790645045.546:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.0.3649" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffacff9e159 code=0x7ffc0000 [ 382.352284][T12918] netlink: 'syz.6.3658': attribute type 30 has an invalid length. [ 382.541277][T12922] loop4: detected capacity change from 0 to 16 [ 382.657477][T12922] erofs: (device loop4): mounted with root inode @ nid 36. [ 382.706663][T12929] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3663'. [ 382.725022][T12884] loop5: detected capacity change from 0 to 40427 [ 382.817201][T12884] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 382.836851][T12884] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 382.917908][T12884] F2FS-fs (loop5): invalid crc value [ 382.949660][T12884] F2FS-fs (loop5): Found nat_bits in checkpoint [ 383.149440][T12884] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 383.172434][T12884] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 383.461930][T11419] syz-executor: attempt to access beyond end of device [ 383.461930][T11419] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 384.093381][ T4317] Process accounting resumed [ 384.202186][T12954] Process accounting resumed [ 384.244892][T12942] loop1: detected capacity change from 0 to 32768 [ 384.385385][T12942] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 384.645955][T12970] tipc: Enabling of bearer rejected, failed to enable media [ 384.677113][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 384.995918][T12979] loop5: detected capacity change from 0 to 2048 [ 385.132179][T12979] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 385.168850][T12988] loop4: detected capacity change from 0 to 64 [ 385.389660][T11419] EXT4-fs (loop5): unmounting filesystem. [ 385.477890][ T4317] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 385.748202][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.775527][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.798566][T13006] loop6: detected capacity change from 0 to 512 [ 385.826308][ T4317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.872285][ T4317] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 385.903424][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.917640][T13006] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 385.926810][ T4317] usb 2-1: config 0 descriptor?? [ 385.932936][T13006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 386.014426][T13006] System zones: 0-1, 15-15, 18-18, 34-34 [ 386.049308][T13006] EXT4-fs (loop6): orphan cleanup on readonly fs [ 386.104647][T13006] __quota_error: 6 callbacks suppressed [ 386.104665][T13006] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 386.157603][T13006] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 386.237862][T13006] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 386.263044][T13006] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3688: bg 0: block 40: padding at end of block bitmap is not set [ 386.336391][T13006] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 386.357277][T13006] EXT4-fs (loop6): 1 truncate cleaned up [ 386.363568][T13006] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 386.439306][ T4317] input: HID 04b4:0001 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04B4:0001.000F/input/input23 [ 386.564406][ T4317] cypress 0003:04B4:0001.000F: input,hidraw0: USB HID v0.00 Joystick [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 386.568232][T13030] loop4: detected capacity change from 0 to 256 [ 386.577512][T13006] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 386.597721][T13006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 386.673124][T13030] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 386.690248][ T4317] usb 2-1: USB disconnect, device number 15 [ 386.814962][T11908] EXT4-fs (loop6): unmounting filesystem. [ 386.879068][T13008] loop5: detected capacity change from 0 to 32768 [ 386.904624][T13008] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.3689 (13008) [ 387.000572][T13008] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 387.033081][T13031] fido_id[13031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 387.054231][T13008] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 387.100496][T13008] BTRFS info (device loop5): enabling disk space caching [ 387.125017][T13008] BTRFS info (device loop5): force clearing of disk cache [ 387.182312][T13008] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 387.248065][T13008] BTRFS info (device loop5): use zstd compression, level 3 [ 387.255381][T13008] BTRFS info (device loop5): disk space caching is enabled [ 387.291566][T13037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3697'. [ 387.534262][T13044] loop6: detected capacity change from 0 to 4096 [ 387.717519][T13008] BTRFS info (device loop5): enabling ssd optimizations [ 387.746977][T13008] BTRFS info (device loop5): rebuilding free space tree [ 387.790939][T13008] BTRFS info (device loop5): disabling free space tree [ 387.799824][T13008] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 387.813445][T13008] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 387.916541][ T26] audit: type=1800 audit(1790645052.326:156): pid=13044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3698" name="file1" dev="loop6" ino=0 res=0 errno=0 [ 388.186185][T11419] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 389.157627][T13098] usb usb8: usbfs: process 13098 (syz.4.3713) did not claim interface 7 before use [ 389.834658][T13119] loop1: detected capacity change from 0 to 4096 [ 390.040784][ T26] audit: type=1800 audit(1790645054.456:157): pid=13119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3720" name="file1" dev="loop1" ino=0 res=0 errno=0 [ 390.633273][T13146] loop4: detected capacity change from 0 to 1024 [ 391.053319][T13157] loop4: detected capacity change from 0 to 256 [ 391.090394][T13157] exfat: Deprecated parameter 'utf8' [ 391.127820][T13157] exfat: Deprecated parameter 'namecase' [ 391.133599][T13157] exfat: Deprecated parameter 'namecase' [ 391.148452][ T151] kernel write not supported for file /input/mice (pid: 151 comm: kworker/1:3) [ 391.177210][T13157] exfat: Deprecated parameter 'namecase' [ 391.233419][T13157] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 391.317484][T13164] loop1: detected capacity change from 0 to 2048 [ 391.403319][T13164] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 391.451495][T13164] UDF-fs: Scanning with blocksize 512 failed [ 391.497871][T13170] loop6: detected capacity change from 0 to 256 [ 391.541774][T13164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.568040][T13170] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 391.794189][T13179] loop5: detected capacity change from 0 to 256 [ 392.144684][T13185] genirq: Flags mismatch irq 10. 00000000 (das16m1) vs. 00000080 (virtio2) [ 392.337272][T11520] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.611955][T11520] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.890365][T13205] loop5: detected capacity change from 0 to 512 [ 392.984762][T11520] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.024302][T13205] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.3755: Unrecognised inode hash code 255 [ 393.102995][T13205] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3755: Corrupt directory, running e2fsck is recommended [ 393.154282][T13205] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 393.234731][T13205] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.3755: corrupted in-inode xattr [ 393.249502][T11520] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.282929][T13205] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.3755: couldn't read orphan inode 15 (err -117) [ 393.352618][T13205] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 393.418198][T13205] EXT4-fs error (device loop5): ext4_empty_dir:3147: inode #2: block 4: comm syz.5.3755: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 393.477803][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.489021][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.497535][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.508760][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.517949][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 393.525921][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.528300][T13205] EXT4-fs warning (device loop5): ext4_empty_dir:3149: inode #2: comm syz.5.3755: directory missing '.' [ 393.655532][T13209] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 393.847722][T11419] EXT4-fs (loop5): unmounting filesystem. [ 393.854263][T11520] tipc: Disabling bearer [ 393.881362][T11520] tipc: Left network mode [ 394.321205][T13241] loop5: detected capacity change from 0 to 1024 [ 394.835987][T13215] chnl_net:caif_netlink_parms(): no params data found [ 394.923290][T13247] loop5: detected capacity change from 0 to 4096 [ 394.975402][T13247] EXT4-fs: inline encryption not supported [ 395.000397][T13247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 395.019821][T13247] EXT4-fs (loop5): Test dummy encryption mode enabled [ 395.080739][T13247] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 395.118072][T13247] System zones: 0-5 [ 395.155575][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.188262][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.198720][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.215249][T13247] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 395.224693][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.233561][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 395.241429][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 395.587422][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 396.190623][T13215] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.208625][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.236952][T13215] device bridge_slave_0 entered promiscuous mode [ 396.236992][T13247] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 396.319603][T13215] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.327743][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.336815][T13215] device bridge_slave_1 entered promiscuous mode [ 396.438385][T11419] EXT4-fs (loop5): unmounting filesystem. [ 396.836095][T13215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.900134][T13215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.219325][T13215] team0: Port device team_slave_0 added [ 397.267671][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 397.285729][T13215] team0: Port device team_slave_1 added [ 397.387823][ T7687] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 397.416043][T13215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.460873][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.488550][T13215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.537870][T13215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.548677][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.607511][ T7687] usb 6-1: Using ep0 maxpacket: 8 [ 397.616874][ T7687] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 397.652296][ T7687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.660419][T13215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.667578][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 397.711917][ T7687] usb 6-1: Product: syz [ 397.716533][ T7687] usb 6-1: Manufacturer: syz [ 397.730557][ T7687] usb 6-1: SerialNumber: syz [ 397.738104][ T8321] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 397.757800][ T7687] usb 6-1: config 0 descriptor?? [ 397.833513][T11520] device hsr_slave_0 left promiscuous mode [ 397.895037][T11520] device hsr_slave_1 left promiscuous mode [ 397.907880][T11520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.915436][T11520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.926590][T11520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.934753][T11520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.943027][T11520] device bridge_slave_1 left promiscuous mode [ 397.950733][T11520] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.960690][ T8321] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 397.972112][ T8321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.986125][T11520] device bridge_slave_0 left promiscuous mode [ 397.991565][ T7687] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 398.001481][T11520] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.036730][ T8321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.048696][ T8321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 398.063626][ T8321] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 398.072875][ T8321] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 398.082262][ T8321] usb 1-1: Manufacturer: syz [ 398.108384][ T8321] usb 1-1: config 0 descriptor?? [ 398.119432][T11520] device veth1_macvtap left promiscuous mode [ 398.125685][T11520] device veth0_macvtap left promiscuous mode [ 398.142985][T11520] device veth1_vlan left promiscuous mode [ 398.157450][T11520] device veth0_vlan left promiscuous mode [ 398.408926][ T7687] usb write operation failed. (-71) [ 398.429008][ T7687] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 398.443373][T11520] bond1 (unregistering): Released all slaves [ 398.445460][ T7687] dvbdev: DVB: registering new adapter (Terratec H7) [ 398.458874][ T7687] usb 6-1: media controller created [ 398.484520][ T7687] usb read operation failed. (-71) [ 398.531381][ T8321] appleir 0003:05AC:8243.0010: item fetching failed at offset 0/1 [ 398.542822][ T8321] appleir 0003:05AC:8243.0010: parse failed [ 398.550408][ T7687] usb write operation failed. (-71) [ 398.557056][ T8321] appleir: probe of 0003:05AC:8243.0010 failed with error -22 [ 398.575978][ T7687] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5 [ 398.590225][ T7687] usb 6-1: USB disconnect, device number 3 [ 398.765202][ T5831] usb 1-1: USB disconnect, device number 21 [ 398.948839][T11520] team0 (unregistering): Port device macvlan1 removed [ 399.354446][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 399.754714][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 399.824436][T11520] team0 (unregistering): Port device team_slave_1 removed [ 399.906140][T11520] team0 (unregistering): Port device team_slave_0 removed [ 399.979545][T11520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.072393][T11520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.084245][ T5831] infiniband syz1: ib_query_port failed (-19) [ 400.691047][T11520] bond0 (unregistering): Released all slaves [ 400.826869][T13251] chnl_net:caif_netlink_parms(): no params data found [ 400.848131][ T4317] bond0 speed is unknown, defaulting to 1000 [ 400.863347][T13354] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 400.951552][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'. [ 400.969090][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3803'. [ 401.052127][T13215] device hsr_slave_0 entered promiscuous mode [ 401.061922][T13364] loop5: detected capacity change from 0 to 512 [ 401.080871][T13364] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.099354][T13215] device hsr_slave_1 entered promiscuous mode [ 401.106317][T13215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.114629][T13215] Cannot create hsr debugfs directory [ 401.225685][T13364] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 401.432656][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 401.445073][T13372] loop5: detected capacity change from 0 to 1024 [ 401.607698][T13251] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.677893][T13251] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.730193][T13251] device bridge_slave_0 entered promiscuous mode [ 401.755835][T13251] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.783400][T13380] loop5: detected capacity change from 0 to 512 [ 401.797698][T13251] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.806229][T13251] device bridge_slave_1 entered promiscuous mode [ 401.826975][T13380] EXT4-fs: Ignoring removed bh option [ 401.837907][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 401.956320][T13385] netlink: 'syz.0.3813': attribute type 29 has an invalid length. [ 401.968108][T13380] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c128, mo2=0002] [ 401.976163][T13380] System zones: 1-12 [ 401.982305][T13380] EXT4-fs (loop5): 1 truncate cleaned up [ 401.988215][T13380] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 402.004754][ T26] audit: type=1800 audit(1790645066.416:158): pid=13380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3811" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 402.072058][T13385] netlink: 'syz.0.3813': attribute type 29 has an invalid length. [ 402.118992][T13251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.147010][T13391] netlink: 'syz.0.3813': attribute type 29 has an invalid length. [ 402.196188][T13251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.211260][T11419] EXT4-fs (loop5): unmounting filesystem. [ 402.330712][T13251] team0: Port device team_slave_0 added [ 402.425580][T13251] team0: Port device team_slave_1 added [ 402.434211][T13395] loop1: detected capacity change from 0 to 4096 [ 402.457570][T13395] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 402.534987][T13251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.546381][T13251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.589581][T13251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.656526][T13251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.663978][T13251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.750613][T13251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.966156][T13412] loop1: detected capacity change from 0 to 1764 [ 403.041950][T11520] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.274092][T11520] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.320897][T13215] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 403.366783][T13251] device hsr_slave_0 entered promiscuous mode [ 403.413596][T13251] device hsr_slave_1 entered promiscuous mode [ 403.428038][T13251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.444169][T13251] Cannot create hsr debugfs directory [ 403.473184][T13427] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3824'. [ 403.497875][T13215] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 403.508051][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 403.675259][T11520] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.703850][T13215] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 403.821428][T13442] Bluetooth: MGMT ver 1.22 [ 403.842407][T11520] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.908282][T13215] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 404.273216][T13456] loop5: detected capacity change from 0 to 256 [ 404.343554][ T26] audit: type=1800 audit(1790645068.756:159): pid=13459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3833" name="dbroot" dev="configfs" ino=63034 res=0 errno=0 [ 404.543957][T13215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.784229][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3836'. [ 404.811024][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3836'. [ 404.844830][T13479] netlink: 'syz.1.3836': attribute type 6 has an invalid length. [ 404.873627][T13479] netlink: 'syz.1.3836': attribute type 5 has an invalid length. [ 404.895225][T13251] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 404.994973][T13251] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 405.058700][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.066752][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.191238][T13251] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 405.284983][T13215] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.307982][T13251] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 405.429966][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.448145][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 405.468497][ T4338] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.475846][ T4338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.536408][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.561376][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.600393][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 405.642222][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.649572][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.683657][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.833069][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.891558][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.929790][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 406.070706][T13512] loop1: detected capacity change from 0 to 32768 [ 406.081217][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 406.091658][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 406.133489][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 406.205529][T13215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.270499][T13215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.431744][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 406.452140][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.481117][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 406.509919][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.627757][ T8321] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 406.688845][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 406.705872][T13251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.832891][ T8321] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.860282][ T8321] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.905540][ T8321] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.936720][ T8321] usb 2-1: config 0 interface 0 has no altsetting 0 [ 406.953976][ T8321] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 406.981182][ T8321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.008076][ T8321] usb 2-1: config 0 descriptor?? [ 407.158888][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 407.182051][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 407.241604][T13251] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.309239][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 407.338413][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 407.376672][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.383923][ T6183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.414184][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 407.473614][ T8321] hkems 0003:2006:0118.0011: unbalanced collection at end of report description [ 407.508706][ T8321] hkems 0003:2006:0118.0011: parse failed [ 407.514562][ T8321] hkems: probe of 0003:2006:0118.0011 failed with error -22 [ 407.664254][T13581] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3856'. [ 407.681891][ T7] usb 2-1: USB disconnect, device number 16 [ 407.700910][T13581] tipc: Enabling of bearer rejected, media not registered [ 407.711993][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 407.742436][ T6183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 407.788316][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.795479][ T6183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.832666][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.897100][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 407.917863][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 407.925453][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.970618][T13215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.002774][T11520] device hsr_slave_0 left promiscuous mode [ 408.018189][T11520] device hsr_slave_1 left promiscuous mode [ 408.035242][T11520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.068501][T11520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.096991][T11520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.110183][T11520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.145520][T11520] device bridge_slave_1 left promiscuous mode [ 408.157751][T11520] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.196857][T11520] device bridge_slave_0 left promiscuous mode [ 408.205217][T11520] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.408710][T11520] device veth1_macvtap left promiscuous mode [ 408.425238][T11520] device veth0_macvtap left promiscuous mode [ 408.441462][T11520] device veth1_vlan left promiscuous mode [ 408.475111][T11520] device veth0_vlan left promiscuous mode [ 408.566220][T13628] loop1: detected capacity change from 0 to 128 [ 408.650288][T13628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 408.682662][T13628] ext4 filesystem being mounted at /816/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.702863][T13628] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.3866: No space for directory leaf checksum. Please run e2fsck -D. [ 408.745604][T13628] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.3866: Directory block failed checksum [ 408.840462][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 408.984484][T13611] loop5: detected capacity change from 0 to 32768 [ 409.000154][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3869'. [ 409.041919][T13611] XFS (loop5): Mounting V5 Filesystem [ 409.143363][T13611] XFS (loop5): Ending clean mount [ 409.200210][ T26] audit: type=1800 audit(1790645073.616:160): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3860" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 409.276155][T11419] XFS (loop5): Unmounting Filesystem [ 409.738045][T13656] loop5: detected capacity change from 0 to 512 [ 409.745480][T13656] EXT4-fs: Ignoring removed nobh option [ 409.765363][T13656] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 409.778415][T13656] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 409.801112][T13656] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.3870: inode has both inline data and extents flags [ 409.836251][T13656] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.3870: couldn't read orphan inode 13 (err -117) [ 409.859228][T13656] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 409.914583][T13656] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 409.998871][T11419] EXT4-fs (loop5): unmounting filesystem. [ 410.085339][ T26] audit: type=1326 audit(1790645074.496:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.5.3871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad91f9e159 code=0x7ffc0000 [ 410.112204][ T26] audit: type=1326 audit(1790645074.496:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.5.3871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad91f9e159 code=0x7ffc0000 [ 410.136741][ T26] audit: type=1326 audit(1790645074.496:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.5.3871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad91f9e159 code=0x7ffc0000 [ 410.161639][ T26] audit: type=1326 audit(1790645074.496:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.5.3871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fad91f9e159 code=0x7ffc0000 [ 410.234524][ T26] audit: type=1326 audit(1790645074.496:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.5.3871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad91f9e159 code=0x7ffc0000 [ 410.259404][ T26] audit: type=1326 audit(1790645074.496:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.5.3871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad91f9e159 code=0x7ffc0000 [ 410.305561][ T26] audit: type=1326 audit(1790645074.496:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.5.3871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad91f9e159 code=0x7ffc0000 [ 410.351748][ T26] audit: type=1326 audit(1790645074.496:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.5.3871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fad91f9e159 code=0x7ffc0000 [ 410.384294][ T26] audit: type=1326 audit(1790645074.496:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.5.3871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad91f9e159 code=0x7ffc0000 [ 410.481161][T13672] CIFS: Unable to determine destination address [ 410.521981][T11520] team0 (unregistering): Port device team_slave_1 removed [ 410.608799][T11520] team0 (unregistering): Port device team_slave_0 removed [ 410.676534][T11520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.743058][T11520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.254124][T11520] bond0 (unregistering): Released all slaves [ 411.391201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 411.406529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.416341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 411.440798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 411.492957][T13251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.564968][T13251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.629194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 411.639555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 411.688326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.722099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 411.750776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.800087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 411.984160][T13696] loop5: detected capacity change from 0 to 764 [ 412.025531][T13698] netlink: 'syz.1.3880': attribute type 49 has an invalid length. [ 412.064464][T13696] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 412.464609][T13716] loop5: detected capacity change from 0 to 128 [ 412.618458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 412.646538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 412.734944][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 412.760700][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.812611][T13215] device veth0_vlan entered promiscuous mode [ 412.821823][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.850904][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.907969][T13215] device veth1_vlan entered promiscuous mode [ 413.044366][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 413.065164][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 413.108828][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 413.127742][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 413.155035][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 413.183877][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 413.249124][T13215] device veth0_macvtap entered promiscuous mode [ 413.273906][T13251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.292140][T13215] device veth1_macvtap entered promiscuous mode [ 413.337243][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.375160][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.422922][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.463098][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.484133][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.526859][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.559098][T13215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.566509][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 413.622046][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 413.662380][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 413.699439][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 413.735623][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.756264][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.775229][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.786959][ T5831] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 413.794991][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.806179][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.817145][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.829541][T13215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.837176][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.858393][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.893060][T13215] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.922458][T13215] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.942180][T13215] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.953168][T13215] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.983909][ T5831] usb 6-1: Using ep0 maxpacket: 16 [ 413.992614][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.044867][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.070080][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.103100][ T5831] usb 6-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 0.00 [ 414.137421][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.155630][ T5831] usb 6-1: config 0 descriptor?? [ 414.286691][T13739] loop1: detected capacity change from 0 to 32768 [ 414.418288][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.457737][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.494439][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.514040][T13739] XFS (loop1): Mounting V5 Filesystem [ 414.580598][T11520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.630240][T11520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.643672][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.652709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 414.660233][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.668267][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.672441][T13739] XFS (loop1): Ending clean mount [ 414.692222][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.714788][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.727646][ T7] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 414.757452][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.776494][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.813821][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 414.817366][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.830426][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.850552][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.870829][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.872272][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.884723][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.897948][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.905842][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.920101][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.927518][ T5831] hid-multitouch 0003:0004:0000.0012: unknown main item tag 0x0 [ 414.942366][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.945971][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 414.951795][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.973274][ T5831] hid-multitouch 0003:0004:0000.0012: hidraw0: USB HID v0.00 Device [HID 0004:0000] on usb-dummy_hcd.5-1/input0 [ 414.985515][ T7] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 414.985549][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.991683][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 415.011431][ T7] usb 1-1: config 0 descriptor?? [ 415.021928][ T5831] usb 6-1: USB disconnect, device number 4 [ 415.065305][ T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 415.080985][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 415.105960][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 415.134556][ T4272] XFS (loop1): Unmounting Filesystem [ 415.155726][T13251] device veth0_vlan entered promiscuous mode [ 415.156082][ T7] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 415.202594][ T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 415.215695][T13251] device veth1_vlan entered promiscuous mode [ 415.217932][ T7] usb 1-1: media controller created [ 415.307429][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.316833][T13783] dvb-usb: bulk message failed: -22 (2/0) [ 415.373992][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 415.395516][T13811] fido_id[13811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 415.438850][ T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 415.486589][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 415.501194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 415.551618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 415.556533][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 415.576505][ T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 415.584591][T13251] device veth0_macvtap entered promiscuous mode [ 415.631408][ T7] usb 1-1: USB disconnect, device number 22 [ 415.645852][T13251] device veth1_macvtap entered promiscuous mode [ 415.708061][T13251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.739731][T13251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.763387][T13251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.784310][T13251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.806803][T13251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.830616][T13251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.851061][T13251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.877522][T13251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.900265][T13251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.958154][T13251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.986712][T13251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.008004][T13251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.013465][ T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 416.062522][T13251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.087464][T13251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.127831][T13251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.148435][T13251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.197750][T13251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.303885][T13251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.337683][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 416.346742][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 416.379599][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 416.414723][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 416.454487][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 416.476898][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 416.481171][T13871] loop5: detected capacity change from 0 to 512 [ 416.495166][T13251] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.510639][T13251] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.522030][T13251] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.534741][T13251] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.567654][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3899'. [ 416.576687][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3899'. [ 416.590686][T13871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.719801][T13871] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 416.764539][T13871] EXT4-fs (loop5): 1 truncate cleaned up [ 416.772472][T13871] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 416.819795][T13871] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #2: block 4: comm syz.5.3902: lblock 0 mapped to illegal pblock 4 (length 1) [ 416.851266][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.887834][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.916376][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 417.020573][T13895] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 417.022467][T11419] EXT4-fs (loop5): unmounting filesystem. [ 417.032501][T13895] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 417.032598][T13895] CPU: 1 PID: 13895 Comm: syz.7.3903 Not tainted syzkaller #0 [ 417.032618][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 417.032629][T13895] RIP: 0010:hidpp_raw_hidpp_event+0x23d9/0x3420 [ 417.032758][T13895] Code: 8d 5c 24 02 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 4d 89 ee 0f 85 1b 0f 00 00 44 0f b6 2b 49 8d 5f 02 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 19 0f 00 00 0f b6 03 0f b6 d8 44 89 ef [ 417.032795][T13895] RSP: 0018:ffffc90004c1fa00 EFLAGS: 00010246 [ 417.032814][T13895] RAX: 0000000000000000 RBX: 0000000000000002 RCX: dffffc0000000000 [ 417.032827][T13895] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802ee59838 [ 417.032839][T13895] RBP: ffffc90004c1fb40 R08: ffff88802ee5983f R09: 1ffff11005dcb307 [ 417.032853][T13895] R10: dffffc0000000000 R11: ffffed1005dcb308 R12: ffff8880770b80b6 [ 417.032866][T13895] R13: 0000000000000041 R14: dffffc0000000000 R15: 0000000000000000 [ 417.032880][T13895] FS: 00007fe5d8f036c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 417.032898][T13895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.032912][T13895] CR2: 0000001b2dc21ff8 CR3: 00000000580ae000 CR4: 00000000003506e0 [ 417.032930][T13895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 417.032942][T13895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 417.177207][T13895] Call Trace: [ 417.180600][T13895] [ 417.183660][T13895] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 417.189756][T13895] ? __lock_acquire+0x7c40/0x7c40 [ 417.194813][T13895] ? hidpp_ff_range_store+0x190/0x190 [ 417.200217][T13895] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 417.206193][T13895] ? lockdep_hardirqs_on+0x94/0x140 [ 417.211693][T13895] hidpp_raw_event+0x155/0x1740 [ 417.216556][T13895] ? __might_fault+0xa6/0x120 [ 417.221294][T13895] hid_input_report+0x3fe/0x4f0 [ 417.226220][T13895] ? hidpp_remove+0x90/0x90 [ 417.230735][T13895] uhid_dev_input2+0xb1/0x130 [ 417.235418][T13895] uhid_char_write+0x376/0xaf0 [ 417.240190][T13895] ? uhid_char_read+0x870/0x870 [ 417.245043][T13895] vfs_write+0x2dc/0x9a0 [ 417.249383][T13895] ? file_end_write+0x250/0x250 [ 417.254244][T13895] ? __fget_files+0x28/0x460 [ 417.258923][T13895] ? __fget_files+0x3fc/0x460 [ 417.263613][T13895] ? __fdget_pos+0x1d4/0x360 [ 417.268215][T13895] ? ksys_write+0x70/0x260 [ 417.272646][T13895] ksys_write+0x14d/0x260 [ 417.276990][T13895] ? __ia32_sys_read+0x80/0x80 [ 417.281768][T13895] ? lockdep_hardirqs_on+0x94/0x140 [ 417.286978][T13895] do_syscall_64+0x4c/0xa0 [ 417.291411][T13895] ? clear_bhb_loop+0x60/0xb0 [ 417.296105][T13895] ? clear_bhb_loop+0x60/0xb0 [ 417.300810][T13895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.306772][T13895] RIP: 0033:0x7fe5d7f9e159 [ 417.311377][T13895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.331012][T13895] RSP: 002b:00007fe5d8f03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 417.339443][T13895] RAX: ffffffffffffffda RBX: 00007fe5d8225fa0 RCX: 00007fe5d7f9e159 [ 417.347428][T13895] RDX: 000000000000000d RSI: 0000200000000380 RDI: 0000000000000003 [ 417.355428][T13895] RBP: 00007fe5d803506b R08: 0000000000000000 R09: 0000000000000000 [ 417.363418][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.371411][T13895] R13: 00007fe5d8226038 R14: 00007fe5d8225fa0 R15: 00007ffc41ffa6c8 [ 417.379400][T13895] [ 417.382427][T13895] Modules linked in: [ 417.414121][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.417703][T13895] ---[ end trace 0000000000000000 ]--- [ 417.427710][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.448128][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 417.457099][T13895] RIP: 0010:hidpp_raw_hidpp_event+0x23d9/0x3420 [ 417.466932][T13895] Code: 8d 5c 24 02 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 4d 89 ee 0f 85 1b 0f 00 00 44 0f b6 2b 49 8d 5f 02 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 19 0f 00 00 0f b6 03 0f b6 d8 44 89 ef [ 417.489025][T13895] RSP: 0018:ffffc90004c1fa00 EFLAGS: 00010246 [ 417.495291][T13895] RAX: 0000000000000000 RBX: 0000000000000002 RCX: dffffc0000000000 [ 417.505243][T13895] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802ee59838 [ 417.522359][T13895] RBP: ffffc90004c1fb40 R08: ffff88802ee5983f R09: 1ffff11005dcb307 [ 417.531322][T13895] R10: dffffc0000000000 R11: ffffed1005dcb308 R12: ffff8880770b80b6 [ 417.539989][T13895] R13: 0000000000000041 R14: dffffc0000000000 R15: 0000000000000000 [ 417.550004][T13895] FS: 00007fe5d8f036c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 417.560101][T13895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.572103][T13895] CR2: 00007f2f181ee000 CR3: 00000000580ae000 CR4: 00000000003506f0 [ 417.580917][T13895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 417.591094][T13895] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 417.599710][T13895] Kernel panic - not syncing: Fatal exception [ 417.606224][T13895] Kernel Offset: disabled [ 417.610558][T13895] Rebooting in 86400 seconds..