last executing test programs: 44.979291833s ago: executing program 1 (id=374): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x10000001, 0x0, &(0x7f0000000080)) 44.803297908s ago: executing program 1 (id=377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6e0", 0x2, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) shutdown(r0, 0x1) 44.664131651s ago: executing program 1 (id=379): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0x1000001, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x3, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9}) 44.464789677s ago: executing program 1 (id=383): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 43.864464323s ago: executing program 1 (id=386): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) 42.827201681s ago: executing program 1 (id=392): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 42.419030063s ago: executing program 32 (id=392): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xcc) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_io_uring_setup(0x574b, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 9.347782774s ago: executing program 0 (id=592): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, &(0x7f0000001140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) unshare(0x6e020100) 7.131812685s ago: executing program 0 (id=606): syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffffffffff8, 0x519002) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 4.880297387s ago: executing program 3 (id=618): setresgid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) 4.407175539s ago: executing program 4 (id=620): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010d2bbd70000200000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.301664942s ago: executing program 2 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd28, 0x80000000, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xc00000}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40086}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 4.265120493s ago: executing program 3 (id=622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 4.180132046s ago: executing program 4 (id=623): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0], 0x1, 0x1a1, &(0x7f0000000440)="$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") creat(&(0x7f00000004c0)='./file1\x00', 0x32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) chdir(&(0x7f0000000140)='./file0\x00') pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x275a, 0x0) 3.983806081s ago: executing program 2 (id=624): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 3.899985743s ago: executing program 3 (id=625): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f0000000500)=""/4075, 0xfeb) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 3.764754877s ago: executing program 2 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x2c}}, 0x24008844) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) 3.675185089s ago: executing program 4 (id=627): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094) 3.380576357s ago: executing program 0 (id=628): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 3.226013911s ago: executing program 2 (id=629): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000940)={r1, @in6={{0xa, 0x3, 0xffffffff, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) 2.804961653s ago: executing program 3 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00') 2.775030194s ago: executing program 0 (id=631): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xf9a}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000002a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="e687", 0x2}], 0x1, 0x0, 0x0, 0x44190}, 0x2004c001) 2.627733688s ago: executing program 4 (id=632): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000500)={0x20, 0xd, 0x4, "d76dffbc"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.605069789s ago: executing program 3 (id=633): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) 2.494832732s ago: executing program 0 (id=634): mkdir(&(0x7f0000000000)='./file0\x00', 0x11a) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x24000408) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'wlan1\x00', 0x103}) 2.287760107s ago: executing program 3 (id=635): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000840, &(0x7f0000000700)=ANY=[@ANYBLOB='gid=forget,umask=00000000000000000000003,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000043620,gid=ignore,iocharset=euc-jp,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6164696e6963622c6d6f64653d30303030303030303030303030303030303030303030332c6e6f7374726963742c009b801a9990a34c426430bf3757fbcea5d9a21b29b4ae2c6d10e74873111016bc74ff654722640a72d8cc5e210fef2b359e9e61ade82c60025773de99df3af6548534bfdef68d88ae15c726"], 0xfe, 0xc2d, &(0x7f0000000f40)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) 2.286460217s ago: executing program 0 (id=636): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000012000000000000000a002700726690ebef0000250000000000bb4523ec7d06167621c4230fd7f50e88ee795c2dc24d2c2cd800b31a6f5794737bcffef0e6ec165edae2a02de64a982407bc6769ce478cc64ea3275fdb9b365388b1aeaf463aa29d02362257854961c3620f62b262d95a766de3e1d54836e42f25df4486026e1e8c"], 0x24}], 0x1}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.940761707s ago: executing program 33 (id=635): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000840, &(0x7f0000000700)=ANY=[@ANYBLOB='gid=forget,umask=00000000000000000000003,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000043620,gid=ignore,iocharset=euc-jp,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6164696e6963622c6d6f64653d30303030303030303030303030303030303030303030332c6e6f7374726963742c009b801a9990a34c426430bf3757fbcea5d9a21b29b4ae2c6d10e74873111016bc74ff654722640a72d8cc5e210fef2b359e9e61ade82c60025773de99df3af6548534bfdef68d88ae15c726"], 0xfe, 0xc2d, &(0x7f0000000f40)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) 1.934228257s ago: executing program 2 (id=638): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1819011, 0x0, 0x43, 0x0, &(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 358.83044ms ago: executing program 4 (id=639): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r2, @ANYBLOB="08000b00e0000001080002"], 0x60}}, 0x814) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 107.481837ms ago: executing program 2 (id=640): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r2 = dup3(r1, r0, 0x80000) write$binfmt_register(r2, 0x0, 0x0) 0s ago: executing program 4 (id=641): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'fo\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x69}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. syzkaller login: [ 80.172442][ T5759] cgroup: Unknown subsys name 'net' [ 80.319551][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.014570][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.598657][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.607137][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.614976][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.623334][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.632086][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.639566][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.671061][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.679815][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.689467][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.699036][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.753291][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.754049][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.764056][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.775016][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.779534][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.783688][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.794089][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.804504][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.814210][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.822273][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.830613][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.838708][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.841560][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.853983][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.314621][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.348873][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.401553][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 84.565166][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.593268][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.601233][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.608769][ T5776] bridge_slave_0: entered allmulticast mode [ 84.616510][ T5776] bridge_slave_0: entered promiscuous mode [ 84.652555][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.659835][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.667391][ T5775] bridge_slave_0: entered allmulticast mode [ 84.674756][ T5775] bridge_slave_0: entered promiscuous mode [ 84.705481][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.714815][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.722898][ T5776] bridge_slave_1: entered allmulticast mode [ 84.729937][ T5776] bridge_slave_1: entered promiscuous mode [ 84.759732][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.768131][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.776099][ T5775] bridge_slave_1: entered allmulticast mode [ 84.783627][ T5775] bridge_slave_1: entered promiscuous mode [ 84.803808][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.811157][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.818341][ T5771] bridge_slave_0: entered allmulticast mode [ 84.828368][ T5771] bridge_slave_0: entered promiscuous mode [ 84.888511][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.895974][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.906175][ T5771] bridge_slave_1: entered allmulticast mode [ 84.913325][ T5771] bridge_slave_1: entered promiscuous mode [ 84.934241][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.947129][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.969933][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.003850][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.011173][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.018352][ T5774] bridge_slave_0: entered allmulticast mode [ 85.025702][ T5774] bridge_slave_0: entered promiscuous mode [ 85.034787][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.042084][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.049463][ T5774] bridge_slave_1: entered allmulticast mode [ 85.056585][ T5774] bridge_slave_1: entered promiscuous mode [ 85.066375][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.078188][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.101161][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.136509][ T5776] team0: Port device team_slave_0 added [ 85.179068][ T5776] team0: Port device team_slave_1 added [ 85.199405][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.212372][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.224555][ T5775] team0: Port device team_slave_0 added [ 85.234657][ T5775] team0: Port device team_slave_1 added [ 85.257215][ T5771] team0: Port device team_slave_0 added [ 85.306730][ T5771] team0: Port device team_slave_1 added [ 85.335713][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.342937][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.369028][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.406547][ T5774] team0: Port device team_slave_0 added [ 85.414981][ T5774] team0: Port device team_slave_1 added [ 85.422421][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.429397][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.455969][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.468051][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.476427][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.503582][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.523482][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.533187][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.559540][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.592926][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.599941][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.629036][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.665323][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.672583][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.700542][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.712775][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.719768][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.747477][ T5778] Bluetooth: hci0: command tx timeout [ 85.753743][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.793753][ T5776] hsr_slave_0: entered promiscuous mode [ 85.801322][ T5776] hsr_slave_1: entered promiscuous mode [ 85.815851][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.823272][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.849766][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.880367][ T5778] Bluetooth: hci3: command tx timeout [ 85.886148][ T5778] Bluetooth: hci1: command tx timeout [ 85.892284][ T51] Bluetooth: hci2: command tx timeout [ 85.895397][ T5775] hsr_slave_0: entered promiscuous mode [ 85.904623][ T5775] hsr_slave_1: entered promiscuous mode [ 85.911752][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.919601][ T5775] Cannot create hsr debugfs directory [ 86.004337][ T5771] hsr_slave_0: entered promiscuous mode [ 86.011755][ T5771] hsr_slave_1: entered promiscuous mode [ 86.018355][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.026070][ T5771] Cannot create hsr debugfs directory [ 86.084187][ T5774] hsr_slave_0: entered promiscuous mode [ 86.092436][ T5774] hsr_slave_1: entered promiscuous mode [ 86.098673][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.106436][ T5774] Cannot create hsr debugfs directory [ 86.499445][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.523910][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.536324][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.547164][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.632665][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.644398][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.673002][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.695689][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.764842][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.785003][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.812693][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.825867][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.907686][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.917786][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.928863][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.943399][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.966129][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.069372][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.117118][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.138308][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.145768][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.198016][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.219443][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.226711][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.295449][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.302703][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.361131][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.368331][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.427184][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.499470][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.554743][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.578627][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.585894][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.599745][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.607002][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.637017][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.717162][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.753497][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.760714][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.801225][ T5778] Bluetooth: hci0: command tx timeout [ 87.846405][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.853668][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.961798][ T5778] Bluetooth: hci3: command tx timeout [ 87.967295][ T5778] Bluetooth: hci1: command tx timeout [ 87.973066][ T51] Bluetooth: hci2: command tx timeout [ 88.164146][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.218297][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.328192][ T5776] veth0_vlan: entered promiscuous mode [ 88.396641][ T5776] veth1_vlan: entered promiscuous mode [ 88.510594][ T5776] veth0_macvtap: entered promiscuous mode [ 88.547787][ T5776] veth1_macvtap: entered promiscuous mode [ 88.607046][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.622368][ T5774] veth0_vlan: entered promiscuous mode [ 88.632081][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.649881][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.671896][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.692565][ T5774] veth1_vlan: entered promiscuous mode [ 88.724048][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.733102][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.743380][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.752578][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.891602][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.899685][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.961797][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.966013][ T5774] veth0_macvtap: entered promiscuous mode [ 88.978695][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.999114][ T5775] veth0_vlan: entered promiscuous mode [ 89.018937][ T5774] veth1_macvtap: entered promiscuous mode [ 89.039976][ T5771] veth0_vlan: entered promiscuous mode [ 89.078132][ T5775] veth1_vlan: entered promiscuous mode [ 89.103223][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.121264][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.137592][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.167175][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.180858][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.202195][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.215977][ T5771] veth1_vlan: entered promiscuous mode [ 89.275506][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.292011][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.302981][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.313399][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.344003][ T5775] veth0_macvtap: entered promiscuous mode [ 89.422545][ T5775] veth1_macvtap: entered promiscuous mode [ 89.506093][ T5771] veth0_macvtap: entered promiscuous mode [ 89.560068][ T5771] veth1_macvtap: entered promiscuous mode [ 89.571575][ T5840] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.589604][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.608396][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.618467][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.629283][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.642951][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.660082][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.668861][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.714755][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.737164][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.749726][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.760751][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.778880][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.825598][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.840790][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.854656][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.865661][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.882313][ T5082] Bluetooth: hci0: command tx timeout [ 89.889660][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.907445][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.929043][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.946594][ T5844] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6'. [ 89.962702][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.980283][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.998825][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.008196][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.026277][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.033679][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.045784][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.056441][ T5082] Bluetooth: hci1: command tx timeout [ 90.062076][ T5082] Bluetooth: hci2: command tx timeout [ 90.062524][ T5778] Bluetooth: hci3: command tx timeout [ 90.069811][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.080287][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.087640][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.101345][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.117251][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.131635][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.143785][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.153178][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.162167][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.171197][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.229721][ T5846] syz.0.7[5846]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.354650][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.367505][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.479313][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.492186][ T5846] loop0: detected capacity change from 0 to 8192 [ 90.501304][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.583609][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.622942][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.641475][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.664592][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.271725][ T5857] loop0: detected capacity change from 0 to 4096 [ 91.328201][ T5857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.342234][ T5860] process 'syz.2.10' launched '/dev/fd/4' with NULL argv: empty string added [ 91.400297][ T5857] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.9: reserved inode found cleared - inode=1 [ 91.499900][ T5857] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.649647][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.960848][ T5778] Bluetooth: hci0: command tx timeout [ 92.001515][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.121600][ T5778] Bluetooth: hci2: command tx timeout [ 92.128174][ T51] Bluetooth: hci1: command tx timeout [ 92.129639][ T5082] Bluetooth: hci3: command tx timeout [ 92.156368][ T967] cfg80211: failed to load regulatory.db [ 92.234777][ T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.244052][ T23] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 92.254846][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.264313][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 92.276057][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 92.296668][ T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.325164][ T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.338489][ T23] usb 2-1: Product: syz [ 92.352284][ T23] usb 2-1: Manufacturer: syz [ 92.387540][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 92.400287][ T23] cdc_wdm 2-1:1.0: skipping garbage [ 92.419856][ T23] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 92.437993][ T23] cdc_wdm 2-1:1.0: Unknown control protocol [ 92.725954][ T5876] loop2: detected capacity change from 0 to 32768 [ 92.803559][ T5876] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 92.927771][ T5876] XFS (loop2): Ending clean mount [ 92.962541][ T5876] XFS (loop2): Quotacheck needed: Please wait. [ 93.084063][ T5876] XFS (loop2): Quotacheck: Done. [ 93.114441][ T967] usb 2-1: USB disconnect, device number 2 [ 93.277305][ T5775] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 93.480922][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.680591][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 93.722981][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.737866][ T9] usb 4-1: config 179 has no interface number 0 [ 93.748111][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 93.766324][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 93.798588][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.817013][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 93.836757][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 93.902952][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 93.947375][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.004691][ T5895] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.540145][ T787] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 94.912624][ T5761] usb 4-1: USB disconnect, device number 2 [ 94.912623][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 94.926993][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 94.935825][ T5761] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 95.029735][ T5905] loop2: detected capacity change from 0 to 40427 [ 95.087717][ T5905] F2FS-fs (loop2): invalid crc value [ 95.122721][ T5905] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.284958][ T5905] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.434149][ T5905] syz.2.24: attempt to access beyond end of device [ 95.434149][ T5905] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.487910][ T5775] syz-executor: attempt to access beyond end of device [ 95.487910][ T5775] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 95.506676][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 95.570577][ T5918] loop0: detected capacity change from 0 to 32768 [ 95.614533][ T5918] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 95.686036][ T5931] loop3: detected capacity change from 0 to 512 [ 95.731383][ T5931] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.30: corrupted in-inode xattr: invalid ea_ino [ 95.744298][ T5918] XFS (loop0): Ending clean mount [ 95.822895][ T5931] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.30: couldn't read orphan inode 15 (err -117) [ 95.864158][ T5931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.947702][ T5918] syz.0.28 (5918) used greatest stack depth: 20712 bytes left [ 96.029174][ T5776] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 96.092236][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.055338][ T5963] loop1: detected capacity change from 0 to 128 [ 97.107983][ T5963] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 97.181550][ T5963] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.215096][ T5963] ext2 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.260329][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.394948][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.474974][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.503715][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.528756][ T23] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 97.552390][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.592497][ T23] usb 4-1: config 0 descriptor?? [ 97.944675][ T5979] loop1: detected capacity change from 0 to 128 [ 98.019771][ T23] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 98.050414][ T23] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 98.089880][ T23] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0001/input/input6 [ 98.156604][ T23] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 98.287056][ T787] usb 4-1: USB disconnect, device number 3 [ 98.338072][ T5965] syz.2.43: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 98.367140][ T5965] CPU: 0 PID: 5965 Comm: syz.2.43 Not tainted syzkaller #0 [ 98.374416][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.384547][ T5965] Call Trace: [ 98.387886][ T5965] [ 98.390885][ T5965] dump_stack_lvl+0x18c/0x250 [ 98.395653][ T5965] ? show_regs_print_info+0x20/0x20 [ 98.401031][ T5965] ? load_image+0x420/0x420 [ 98.405598][ T5965] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 98.412078][ T5965] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 98.418640][ T5965] warn_alloc+0x246/0x340 [ 98.419080][ T5985] fido_id[5985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 98.423047][ T5965] ? zone_watermark_ok_safe+0x230/0x230 [ 98.423118][ T5965] ? _raw_spin_unlock+0x28/0x40 [ 98.423149][ T5965] ? netlink_rcv_skb+0x241/0x4d0 [ 98.423184][ T5965] __vmalloc_node_range+0x662/0x1330 [ 98.458226][ T5965] ? __asan_memset+0x22/0x40 [ 98.462918][ T5965] ? free_vm_area+0x50/0x50 [ 98.467501][ T5965] ? kvmalloc_node+0x70/0x180 [ 98.472253][ T5965] ? rcu_is_watching+0x15/0xb0 [ 98.477088][ T5965] ? kvmalloc_node+0x70/0x180 [ 98.481874][ T5965] ? trace_kmalloc+0x1f/0x90 [ 98.486515][ T5965] kvmalloc_node+0x13f/0x180 [ 98.491153][ T5965] ? hash_ipportnet6_resize+0x28f/0x1e50 [ 98.496851][ T5965] hash_ipportnet6_resize+0x28f/0x1e50 [ 98.502399][ T5965] ? lockdep_hardirqs_on+0x98/0x150 [ 98.507677][ T5965] call_ad+0x454/0xb40 [ 98.511816][ T5965] ? ip_set_ad+0x9c0/0x9c0 [ 98.516304][ T5965] ? __nla_parse+0x40/0x50 [ 98.520782][ T5965] ip_set_ad+0x81a/0x9c0 [ 98.525095][ T5965] ? ip_set_dump_done+0x1e0/0x1e0 [ 98.530184][ T5965] ? rcu_is_watching+0x15/0xb0 [ 98.535079][ T5965] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 98.540168][ T5965] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.546300][ T5965] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 98.551590][ T5965] ? nfnetlink_unbind+0x160/0x160 [ 98.556703][ T5965] ? __dev_queue_xmit+0x19a3/0x3660 [ 98.561979][ T5965] ? __netlink_deliver_tap+0x5ab/0x830 [ 98.567510][ T5965] ? netlink_deliver_tap+0x19c/0x1b0 [ 98.572905][ T5965] ? netlink_unicast+0x72c/0x8d0 [ 98.578289][ T5965] ? netlink_sendmsg+0x8d0/0xbf0 [ 98.583298][ T5965] ? ____sys_sendmsg+0x5ba/0x960 [ 98.588297][ T5965] ? ___sys_sendmsg+0x2a6/0x360 [ 98.593204][ T5965] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 98.598280][ T5965] ? do_syscall_64+0x55/0xa0 [ 98.602943][ T5965] netlink_rcv_skb+0x241/0x4d0 [ 98.607807][ T5965] ? nfnetlink_unbind+0x160/0x160 [ 98.612906][ T5965] ? netlink_ack+0x1180/0x1180 [ 98.617751][ T5965] ? apparmor_capable+0x137/0x1a0 [ 98.622838][ T5965] ? bpf_lsm_capable+0x9/0x10 [ 98.627584][ T5965] ? security_capable+0x89/0xb0 [ 98.632496][ T5965] nfnetlink_rcv+0x2c9/0x24a0 [ 98.637224][ T5965] ? __local_bh_enable_ip+0x13a/0x1c0 [ 98.642711][ T5965] ? lockdep_hardirqs_on+0x98/0x150 [ 98.647952][ T5965] ? __local_bh_enable_ip+0x13a/0x1c0 [ 98.653357][ T5965] ? _local_bh_enable+0xa0/0xa0 [ 98.658229][ T5965] ? __dev_queue_xmit+0x265/0x3660 [ 98.663372][ T5965] ? __dev_queue_xmit+0x265/0x3660 [ 98.668529][ T5965] ? __dev_queue_xmit+0x1b2c/0x3660 [ 98.673749][ T5965] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 98.679346][ T5965] ? __dev_queue_xmit+0x265/0x3660 [ 98.684516][ T5965] ? ref_tracker_free+0x690/0x840 [ 98.689567][ T5965] ? refcount_inc+0x70/0x70 [ 98.694098][ T5965] ? __asan_memcpy+0x40/0x70 [ 98.698744][ T5965] ? __skb_clone+0x63/0x790 [ 98.703284][ T5965] ? __skb_clone+0x480/0x790 [ 98.707902][ T5965] ? __netlink_deliver_tap+0x7e8/0x830 [ 98.713390][ T5965] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.718613][ T5965] ? __lock_acquire+0x7d40/0x7d40 [ 98.723662][ T5965] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.728888][ T5965] netlink_unicast+0x751/0x8d0 [ 98.733707][ T5965] netlink_sendmsg+0x8d0/0xbf0 [ 98.738539][ T5965] ? netlink_getsockopt+0x590/0x590 [ 98.743858][ T5965] ? aa_sock_msg_perm+0x94/0x150 [ 98.748822][ T5965] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 98.754134][ T5965] ? security_socket_sendmsg+0x80/0xa0 [ 98.759623][ T5965] ? netlink_getsockopt+0x590/0x590 [ 98.764865][ T5965] ____sys_sendmsg+0x5ba/0x960 [ 98.769656][ T5965] ? __asan_memset+0x22/0x40 [ 98.774278][ T5965] ? __sys_sendmsg_sock+0x30/0x30 [ 98.779346][ T5965] ? __import_iovec+0x5f2/0x850 [ 98.784269][ T5965] ? import_iovec+0x73/0xa0 [ 98.788820][ T5965] ___sys_sendmsg+0x2a6/0x360 [ 98.793528][ T5965] ? __sys_sendmsg+0x2a0/0x2a0 [ 98.798355][ T5965] __se_sys_sendmsg+0x1c2/0x2b0 [ 98.803223][ T5965] ? __x64_sys_sendmsg+0x80/0x80 [ 98.808205][ T5965] ? lockdep_hardirqs_on+0x98/0x150 [ 98.813427][ T5965] do_syscall_64+0x55/0xa0 [ 98.817866][ T5965] ? clear_bhb_loop+0x40/0x90 [ 98.822609][ T5965] ? clear_bhb_loop+0x40/0x90 [ 98.827305][ T5965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.833220][ T5965] RIP: 0033:0x7fde4e39cdd9 [ 98.837661][ T5965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.857378][ T5965] RSP: 002b:00007fde4f2e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.865835][ T5965] RAX: ffffffffffffffda RBX: 00007fde4e615fa0 RCX: 00007fde4e39cdd9 [ 98.873928][ T5965] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 98.881949][ T5965] RBP: 00007fde4e432d69 R08: 0000000000000000 R09: 0000000000000000 [ 98.889989][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.898120][ T5965] R13: 00007fde4e616038 R14: 00007fde4e615fa0 R15: 00007fff72361e48 [ 98.906126][ T5965] [ 98.932785][ T5965] Mem-Info: [ 98.935984][ T5965] active_anon:5638 inactive_anon:0 isolated_anon:0 [ 98.935984][ T5965] active_file:1105 inactive_file:39964 isolated_file:0 [ 98.935984][ T5965] unevictable:768 dirty:1813 writeback:0 [ 98.935984][ T5965] slab_reclaimable:10100 slab_unreclaimable:92835 [ 98.935984][ T5965] mapped:24507 shmem:1379 pagetables:600 [ 98.935984][ T5965] sec_pagetables:0 bounce:0 [ 98.935984][ T5965] kernel_misc_reclaimable:0 [ 98.935984][ T5965] free:1358159 free_pcp:14137 free_cma:0 [ 98.981309][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.020387][ T5965] Node 0 active_anon:22252kB inactive_anon:0kB active_file:4420kB inactive_file:159656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98028kB dirty:7240kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10308kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no [ 99.093735][ T5965] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 99.148088][ T5965] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.200290][ T5990] loop1: detected capacity change from 0 to 2048 [ 99.208311][ T5965] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 99.214950][ T5965] Node 0 DMA32 free:1520284kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23452kB inactive_anon:0kB active_file:4420kB inactive_file:158820kB unevictable:1536kB writepending:7232kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:34520kB local_pcp:19432kB free_cma:0kB [ 99.245960][ T5965] lowmem_reserve[]: 0 0 0 0 0 [ 99.251854][ T5965] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:12kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 99.279699][ T5965] lowmem_reserve[]: 0 0 0 0 0 [ 99.284601][ T5965] Node 1 Normal free:3896544kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21304kB local_pcp:10520kB free_cma:0kB [ 99.332934][ T5965] lowmem_reserve[]: 0 0 0 0 0 [ 99.337886][ T5965] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.352065][ T5965] Node 0 DMA32: 171*4kB (M) 784*8kB (UM) 157*16kB (UME) 67*32kB (UM) 33*64kB (M) 14*128kB (M) 6*256kB (UM) 8*512kB (UME) 6*1024kB (ME) 3*2048kB (UM) 363*4096kB (M) = 1520284kB [ 99.372335][ T5965] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 99.395500][ T5990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.400396][ T5965] Node 1 Normal: 188*4kB (UME) 52*8kB (UME) 41*16kB (UME) 48*32kB (UME) 19*64kB (UE) 6*128kB (UME) 0*256kB 2*512kB (ME) 1*1024kB (U) 1*2048kB (U) 949*4096kB (M) = 3896544kB [ 99.463487][ T5965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.474629][ T5965] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.485054][ T5965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.500283][ T5965] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.509673][ T5965] 42702 total pagecache pages [ 99.540788][ T5965] 0 pages in swap cache [ 99.545023][ T5965] Free swap = 124984kB [ 99.549336][ T5965] Total swap = 124996kB [ 99.556797][ T5965] 2097051 pages RAM [ 99.560967][ T5965] 0 pages HighMem/MovableOnly [ 99.565738][ T5965] 416927 pages reserved [ 99.569942][ T5965] 0 pages cma reserved [ 99.601963][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.412222][ T6001] loop3: detected capacity change from 0 to 32768 [ 100.504637][ T6001] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.769728][ T6001] XFS (loop3): Ending clean mount [ 100.807803][ T6001] XFS (loop3): Quotacheck needed: Please wait. [ 100.901045][ T6001] XFS (loop3): Quotacheck: Done. [ 101.165922][ T6036] ======================================================= [ 101.165922][ T6036] WARNING: The mand mount option has been deprecated and [ 101.165922][ T6036] and is ignored by this kernel. Remove the mand [ 101.165922][ T6036] option from the mount to silence this warning. [ 101.165922][ T6036] ======================================================= [ 101.200870][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.329912][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 102.650201][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.717622][ T6062] loop2: detected capacity change from 0 to 32768 [ 102.775277][ T6062] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 102.789097][ T6061] loop1: detected capacity change from 0 to 40427 [ 102.825156][ T6061] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 102.844324][ T6061] F2FS-fs (loop1): Image doesn't support compression [ 102.852229][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.870237][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.892141][ T23] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.905312][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.917918][ T23] usb 1-1: SerialNumber: syz [ 102.920615][ T6061] F2FS-fs (loop1): Image doesn't support compression [ 102.939891][ T6062] XFS (loop2): Ending clean mount [ 102.945158][ T6061] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 102.948074][ T6061] F2FS-fs (loop1): invalid crc value [ 102.997759][ T6061] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.187707][ T28] audit: type=1800 audit(1777613816.932:2): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.74" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 103.228488][ T23] usb 1-1: 0:2 : does not exist [ 103.237390][ T6062] XFS (loop2): User initiated shutdown received. [ 103.268719][ T6062] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 103.282481][ T6061] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.293971][ T6062] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 103.366082][ T23] usb 1-1: USB disconnect, device number 2 [ 103.431000][ T5775] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 103.479353][ T28] audit: type=1800 audit(1777613817.222:3): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.76" name="bus" dev="loop1" ino=14 res=0 errno=0 [ 103.618253][ T5771] syz-executor: attempt to access beyond end of device [ 103.618253][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 103.650300][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 103.678575][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 104.140560][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.333308][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 104.352643][ T23] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 104.380475][ T23] usb 1-1: config 179 has no interface number 0 [ 104.403100][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 104.478632][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 104.541731][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.660309][ T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 104.729239][ T23] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.783553][ T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 104.811497][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.842136][ T6092] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.890999][ T6111] "syz.2.90" (6111) uses obsolete ecb(arc4) skcipher [ 104.928497][ T6111] trusted_key: syz.2.90 sent an empty control message without MSG_MORE. [ 105.308596][ T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7 [ 105.594480][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 105.621446][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.650714][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.669223][ T6128] ipvlan2: entered allmulticast mode [ 105.682272][ T6128] syz_tun: entered allmulticast mode [ 105.873990][ T6132] batadv0: entered promiscuous mode [ 105.874202][ T6132] macsec1: entered promiscuous mode [ 105.874372][ T6132] macsec1: entered allmulticast mode [ 105.874386][ T6132] batadv0: entered allmulticast mode [ 105.898286][ T6132] batadv0: left allmulticast mode [ 105.898610][ T6132] batadv0: left promiscuous mode [ 106.245229][ T6136] loop2: detected capacity change from 0 to 512 [ 106.295754][ T6136] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.348551][ T6136] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.394138][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 106.402536][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 106.411215][ T23] usb 1-1: USB disconnect, device number 3 [ 106.418698][ T23] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 106.453992][ T6136] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.471118][ T6142] "syz.1.103" (6142) uses obsolete ecb(arc4) skcipher [ 106.541166][ T6136] EXT4-fs (loop2): 1 truncate cleaned up [ 106.548194][ T6136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.874042][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.018480][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'. [ 107.451253][ T6166] loop0: detected capacity change from 0 to 4096 [ 107.479967][ T6166] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 107.503372][ T6166] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 107.529173][ T6166] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 107.547451][ T6166] ntfs: volume version 3.1. [ 107.654529][ T6166] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 107.666675][ T6166] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 107.807680][ T42] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 107.836405][ T5776] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 108.087519][ T6178] syz.1.118 uses obsolete (PF_INET,SOCK_PACKET) [ 108.756863][ T6190] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 109.037021][ T6197] loop1: detected capacity change from 0 to 512 [ 109.503383][ T6197] EXT4-fs (loop1): Test dummy encryption mode enabled [ 109.543403][ T6197] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.699587][ T5771] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 109.712130][ T6212] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 109.720911][ T6212] syzkaller1: Refused to change device type [ 110.993511][ T787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.122178][ T6228] loop0: detected capacity change from 0 to 32768 [ 111.149204][ T6228] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 111.199457][ T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.242076][ T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.242098][ T6228] XFS (loop0): Ending clean mount [ 111.277817][ T6228] XFS (loop0): Quotacheck needed: Please wait. [ 111.301814][ T787] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.330611][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.367601][ T787] usb 2-1: SerialNumber: syz [ 111.379115][ T6228] XFS (loop0): Quotacheck: Done. [ 111.626974][ T787] usb 2-1: 0:2 : does not exist [ 111.697176][ T787] usb 2-1: USB disconnect, device number 3 [ 111.766883][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.987258][ T5776] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.251050][ T6251] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.723366][ T6261] loop3: detected capacity change from 0 to 256 [ 112.809705][ T6261] FAT-fs (loop3): Directory bread(block 64) failed [ 112.816937][ T6261] FAT-fs (loop3): Directory bread(block 65) failed [ 112.827134][ T6261] FAT-fs (loop3): Directory bread(block 66) failed [ 112.836227][ T6261] FAT-fs (loop3): Directory bread(block 67) failed [ 112.846420][ T6261] FAT-fs (loop3): Directory bread(block 68) failed [ 112.855817][ T6261] FAT-fs (loop3): Directory bread(block 69) failed [ 112.865260][ T6261] FAT-fs (loop3): Directory bread(block 70) failed [ 112.874749][ T6261] FAT-fs (loop3): Directory bread(block 71) failed [ 112.885223][ T6261] FAT-fs (loop3): Directory bread(block 72) failed [ 112.896829][ T6261] FAT-fs (loop3): Directory bread(block 73) failed [ 113.079018][ T1138] kworker/u4:5: attempt to access beyond end of device [ 113.079018][ T1138] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 113.079355][ T28] audit: type=1800 audit(1777613826.822:4): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.145" name="file1" dev="loop3" ino=1048593 res=0 errno=0 [ 113.128471][ T6263] loop1: detected capacity change from 0 to 1024 [ 113.138298][ T6263] EXT4-fs: Ignoring removed bh option [ 113.225543][ T6263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.300333][ T6263] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.630998][ T42] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 2) [ 113.677599][ T42] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 113.710387][ T42] EXT4-fs (loop1): This should not happen!! Data will be lost [ 113.710387][ T42] [ 113.737219][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.038648][ T6281] loop3: detected capacity change from 0 to 4096 [ 114.062775][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.103496][ T6281] NILFS (loop3): invalid segment: Checksum error in segment payload [ 114.122400][ T6281] NILFS (loop3): trying rollback from an earlier position [ 114.171298][ T6281] NILFS (loop3): recovery complete [ 114.196559][ T6284] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.260981][ T23] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 114.275225][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.315013][ T23] usb 1-1: config 0 descriptor?? [ 114.645250][ T6292] loop3: detected capacity change from 0 to 256 [ 114.658907][ T6292] exfat: Deprecated parameter 'namecase' [ 114.700726][ T6292] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 114.768619][ T6294] warning: `syz.1.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.324632][ T6311] loop2: detected capacity change from 0 to 4096 [ 115.547608][ T23] usb 1-1: Cannot set autoneg [ 115.581473][ T23] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 115.598502][ T23] usb 1-1: USB disconnect, device number 4 [ 115.841423][ T6321] netlink: 'syz.3.165': attribute type 3 has an invalid length. [ 116.397913][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 116.525971][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.635187][ T6331] loop1: detected capacity change from 0 to 32768 [ 116.707376][ T6331] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 116.722727][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.733927][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.747945][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.761574][ T27] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.770747][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.781897][ T27] usb 1-1: config 0 descriptor?? [ 116.862569][ T6331] XFS (loop1): Ending clean mount [ 116.905469][ T6331] XFS (loop1): Quotacheck needed: Please wait. [ 116.994003][ T6331] XFS (loop1): Quotacheck: Done. [ 117.209024][ T6362] loop5: detected capacity change from 0 to 7 [ 117.268899][ T6362] Dev loop5: unable to read RDB block 7 [ 117.272962][ T27] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 117.290481][ T6362] loop5: AHDI p4 [ 117.294256][ T6362] loop5: partition table partially beyond EOD, truncated [ 117.314886][ T27] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 117.351917][ T27] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 117.540713][ T5771] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 117.600296][ T27] usb 1-1: USB disconnect, device number 5 [ 117.985479][ T6374] loop1: detected capacity change from 0 to 128 [ 118.016711][ T6374] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.055842][ T6374] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.073763][ T6374] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.187898][ T6377] loop3: detected capacity change from 0 to 4096 [ 118.379532][ T6377] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 118.478474][ T6377] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 118.609582][ T6390] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 118.766200][ T6374] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 118.962812][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.147710][ T6460] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.197692][ T6460] netlink: 'syz.2.199': attribute type 12 has an invalid length. [ 120.210368][ T6460] netlink: 'syz.2.199': attribute type 29 has an invalid length. [ 120.223183][ T6460] netlink: 148 bytes leftover after parsing attributes in process `syz.2.199'. [ 120.252201][ T6460] netlink: 'syz.2.199': attribute type 1 has an invalid length. [ 120.275977][ T6460] netlink: 15 bytes leftover after parsing attributes in process `syz.2.199'. [ 120.306496][ T6460] Zero length message leads to an empty skb [ 120.318170][ T6428] loop1: detected capacity change from 0 to 32768 [ 120.348632][ T6428] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.191 (6428) [ 120.455954][ T6428] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.488325][ T6428] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 120.516126][ T6428] BTRFS info (device loop1): setting nodatasum [ 120.529096][ T6428] BTRFS info (device loop1): force zlib compression, level 3 [ 120.559424][ T6428] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 120.586384][ T6428] BTRFS info (device loop1): use lzo compression, level 0 [ 120.621279][ T6428] BTRFS info (device loop1): turning on flush-on-commit [ 120.628326][ T6428] BTRFS info (device loop1): enabling auto defrag [ 120.670654][ T6428] BTRFS info (device loop1): max_inline at 4096 [ 120.677010][ T6428] BTRFS info (device loop1): using free space tree [ 120.835593][ T6428] BTRFS info (device loop1): enabling ssd optimizations [ 121.643155][ T6498] loop3: detected capacity change from 0 to 4096 [ 121.659207][ T5771] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.741596][ T6501] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.389737][ T6514] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 123.052207][ T6537] loop0: detected capacity change from 0 to 512 [ 123.068102][ T6537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.082382][ T6539] input: syz0 as /devices/virtual/input/input9 [ 123.160738][ T6537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.179246][ T6537] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.230436][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.361439][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.420278][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 123.438925][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.472304][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.499253][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 123.520382][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 123.539841][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.569448][ T8] usb 4-1: config 0 descriptor?? [ 123.876622][ T6544] loop1: detected capacity change from 0 to 40427 [ 123.901819][ T6544] F2FS-fs (loop1): invalid crc value [ 123.917219][ T6544] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.058880][ T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input10 [ 124.079495][ T6544] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.149239][ T6544] syz.1.234: attempt to access beyond end of device [ 124.149239][ T6544] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.173286][ T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input11 [ 124.216009][ T6544] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 124.300294][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.344013][ T8] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 124.422618][ T8] usb 4-1: USB disconnect, device number 4 [ 124.476103][ T6558] fido_id[6558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 124.534799][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 124.557007][ T23] usb 3-1: config 0 has no interfaces? [ 124.576350][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 124.597721][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.636260][ T23] usb 3-1: Product: syz [ 124.649059][ T23] usb 3-1: Manufacturer: syz [ 124.662077][ T23] usb 3-1: SerialNumber: syz [ 124.676272][ T23] usb 3-1: config 0 descriptor?? [ 124.891051][ T5816] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.909764][ T23] usb 3-1: USB disconnect, device number 2 [ 125.068038][ T6564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.090373][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 125.142768][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.169501][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.188877][ T5816] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 125.201681][ T5816] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 125.223119][ T5816] usb 1-1: Manufacturer: syz [ 125.241551][ T5816] usb 1-1: config 0 descriptor?? [ 125.708450][ T5816] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.0004/input/input12 [ 125.831462][ T5816] creative-sb0540 0003:041E:3100.0004: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 125.981600][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.999480][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.077856][ T8] usb 1-1: USB disconnect, device number 6 [ 126.137536][ T6587] fido_id[6587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 126.246412][ T6581] loop1: detected capacity change from 0 to 32768 [ 126.262683][ T6581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.240 (6581) [ 126.297291][ T6581] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.308405][ T6581] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 126.321524][ T6581] BTRFS info (device loop1): allowing degraded mounts [ 126.334371][ T6581] BTRFS info (device loop1): turning on flush-on-commit [ 126.341806][ T6581] BTRFS info (device loop1): max_inline at 0 [ 126.348024][ T6581] BTRFS info (device loop1): setting nodatasum [ 126.354688][ T6581] BTRFS info (device loop1): turning on sync discard [ 126.365424][ T6581] BTRFS info (device loop1): setting datasum [ 126.373173][ T6581] BTRFS info (device loop1): using free space tree [ 126.439635][ T6581] BTRFS info (device loop1): enabling ssd optimizations [ 126.945972][ T5771] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.332987][ T6620] mmap: syz.0.249 (6620) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 127.630551][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.840841][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 127.873884][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.902441][ T8] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 127.939088][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 127.965578][ T8] usb 4-1: New USB device strings: Mfr=1, Product=21, SerialNumber=3 [ 127.990920][ T8] usb 4-1: Product: syz [ 127.999129][ T8] usb 4-1: Manufacturer: syz [ 128.007232][ T8] usb 4-1: SerialNumber: syz [ 128.046785][ T6642] loop0: detected capacity change from 0 to 128 [ 128.197875][ T28] audit: type=1800 audit(1777613841.942:5): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.259" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1048596 res=0 errno=0 [ 128.431461][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 128.477148][ T6637] loop1: detected capacity change from 0 to 32768 [ 128.494113][ T6637] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.256 (6637) [ 128.536734][ T6637] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.564381][ T6637] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 128.576261][ T8] usb 4-1: USB disconnect, device number 5 [ 128.595596][ T6637] BTRFS info (device loop1): setting nodatasum [ 128.622526][ T6637] BTRFS info (device loop1): force zlib compression, level 3 [ 128.631430][ T6637] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 128.650943][ T6637] BTRFS info (device loop1): use lzo compression, level 0 [ 128.658207][ T6637] BTRFS info (device loop1): turning on flush-on-commit [ 128.676540][ T6637] BTRFS info (device loop1): enabling auto defrag [ 128.710390][ T6637] BTRFS info (device loop1): max_inline at 4096 [ 128.724516][ T6637] BTRFS info (device loop1): using free space tree [ 128.809564][ T6637] BTRFS info (device loop1): enabling ssd optimizations [ 128.907445][ T28] audit: type=1800 audit(1777613842.652:6): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.256" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 129.579502][ T5771] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.816503][ T5761] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.010143][ T5761] usb 1-1: Using ep0 maxpacket: 8 [ 130.031522][ T5761] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 130.042135][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.050881][ T5761] usb 1-1: Product: syz [ 130.055225][ T5761] usb 1-1: Manufacturer: syz [ 130.059871][ T5761] usb 1-1: SerialNumber: syz [ 130.086533][ T5761] usb 1-1: config 0 descriptor?? [ 130.111911][ T5761] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 130.128866][ T6675] loop2: detected capacity change from 0 to 32768 [ 130.209086][ T6675] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 130.387277][ T6675] XFS (loop2): Ending clean mount [ 130.419736][ T6675] XFS (loop2): Quotacheck needed: Please wait. [ 130.559208][ T6675] XFS (loop2): Quotacheck: Done. [ 130.831267][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 131.303460][ T6720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.277'. [ 131.344107][ T5761] gspca_sonixj: reg_w1 err -71 [ 131.400605][ T5761] sonixj: probe of 1-1:0.0 failed with error -71 [ 131.413962][ T5761] usb 1-1: USB disconnect, device number 7 [ 132.200462][ T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 132.285294][ T6752] loop0: detected capacity change from 0 to 128 [ 132.329171][ T6752] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 132.373715][ T6752] hpfs: filesystem error: improperly stopped [ 132.379811][ T6752] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 132.396468][ T6752] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 132.409722][ T6752] hpfs: You really don't want any checks? You are crazy... [ 132.417371][ T23] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 132.434470][ T23] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 132.448874][ T6752] hpfs: hpfs_map_sector(): read error [ 132.460217][ T23] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.473772][ T6752] hpfs: code page support is disabled [ 132.483568][ T6752] hpfs: hpfs_map_4sectors(): unaligned read [ 132.489931][ T6752] hpfs: hpfs_map_4sectors(): unaligned read [ 132.496095][ T23] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 132.509253][ T23] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 132.518501][ T6752] hpfs: filesystem error: unable to find root dir [ 132.525649][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.564053][ T6743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.787409][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.800701][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.826648][ T23] usbhid 3-1:2.0: can't add hid device: -71 [ 132.834947][ T23] usbhid: probe of 3-1:2.0 failed with error -71 [ 132.861172][ T23] usb 3-1: USB disconnect, device number 3 [ 132.990495][ T787] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 133.087354][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.096780][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.184087][ T787] usb 1-1: config 4 has an invalid interface number: 121 but max is 0 [ 133.193581][ T787] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 133.204299][ T787] usb 1-1: config 4 has no interface number 0 [ 133.210933][ T787] usb 1-1: config 4 interface 121 has no altsetting 0 [ 133.221553][ T787] usb 1-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 133.231022][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.239072][ T787] usb 1-1: Product: syz [ 133.243950][ T787] usb 1-1: Manufacturer: syz [ 133.248591][ T787] usb 1-1: SerialNumber: syz [ 133.376026][ T6763] loop1: detected capacity change from 0 to 2048 [ 133.410372][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.443654][ T6763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.469333][ T6763] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.540531][ T787] usb 1-1: USB disconnect, device number 8 [ 133.620242][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 133.651376][ T23] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 133.671418][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.680234][ T23] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.700173][ T23] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 133.725903][ T23] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 133.737991][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.010501][ T5761] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.173506][ T23] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.196394][ T23] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.205747][ T23] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.216846][ T23] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.225161][ T23] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.235169][ T5761] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 134.244273][ T5761] usb 4-1: config 0 has no interface number 0 [ 134.250867][ T5761] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 134.265181][ T23] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 134.286367][ T5761] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 134.305956][ T23] hid-thrustmaster 0003:044F:B65D.0005: setup data couldn't be sent [ 134.316751][ T5761] usb 4-1: config 0 interface 255 has no altsetting 0 [ 134.340383][ T5761] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.353698][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.366047][ T5761] usb 4-1: config 0 descriptor?? [ 134.386690][ C1] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71 [ 134.401760][ T23] usb 3-1: USB disconnect, device number 4 [ 134.422624][ T5761] cp210x 4-1:0.255: cp210x converter detected [ 134.483852][ T6784] fido_id[6784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 134.843520][ T6781] loop1: detected capacity change from 0 to 40427 [ 134.851737][ T5761] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 134.885729][ T6781] F2FS-fs (loop1): invalid crc value [ 134.897485][ T6781] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.052145][ T6781] F2FS-fs (loop1): Start checkpoint disabled! [ 135.064459][ T5761] cp210x 4-1:0.255: GPIO initialisation failed: -19 [ 135.077047][ T5761] usb 4-1: cp210x converter now attached to ttyUSB0 [ 135.101297][ T6781] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 135.131684][ T6793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.310'. [ 135.313587][ T5761] usb 4-1: USB disconnect, device number 6 [ 135.334775][ T5761] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 135.338614][ T6442] kworker/u4:15: attempt to access beyond end of device [ 135.338614][ T6442] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 135.362162][ T5761] cp210x 4-1:0.255: device disconnected [ 135.392171][ T6442] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 135.405346][ T6442] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 135.533452][ T6800] Bluetooth: MGMT ver 1.22 [ 136.250541][ T5816] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.440226][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 136.447746][ T5816] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 136.465621][ T6810] loop0: detected capacity change from 0 to 32768 [ 136.471313][ T5816] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.492462][ T5816] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.503013][ T5816] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.515317][ T6810] loop0: p1 p3 < > [ 136.535980][ T5816] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.563624][ T5816] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.608483][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.757492][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 136.905037][ T5816] usb 4-1: usb_control_msg returned -32 [ 136.930038][ T5816] usbtmc 4-1:16.0: can't read capabilities [ 137.009921][ T6830] loop0: detected capacity change from 0 to 128 [ 137.032717][ T6830] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.055910][ T6830] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.112123][ T5816] usb 4-1: USB disconnect, device number 7 [ 137.155472][ T5766] udevd[5766]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 137.196935][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 137.245634][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.384430][ T6864] "syz.3.340" (6864) uses obsolete ecb(arc4) skcipher [ 138.453383][ T6865] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 138.562714][ T6870] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 138.672492][ T6870] bond1: entered promiscuous mode [ 138.731716][ T6870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.903439][ T6875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.940780][ T6875] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 138.966827][ T6875] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 138.993404][ T6875] bond1: (slave vcan1): making interface the new active one [ 139.025605][ T6875] vcan1: entered promiscuous mode [ 139.054097][ T6875] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 139.242578][ T6884] loop1: detected capacity change from 0 to 64 [ 139.478313][ T6886] dccp_invalid_packet: P.Data Offset(4) too small [ 139.708000][ T6880] loop3: detected capacity change from 0 to 32768 [ 139.794700][ T6880] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 139.950054][ T6880] XFS (loop3): Ending clean mount [ 140.026921][ T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.132497][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 140.260698][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 140.280454][ T787] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 140.328421][ T787] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 140.352130][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.386265][ T787] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 140.396700][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.432240][ T787] usb 3-1: Product: syz [ 140.436499][ T787] usb 3-1: Manufacturer: syz [ 140.450359][ T787] usb 3-1: SerialNumber: syz [ 140.474726][ T787] usb 3-1: config 0 descriptor?? [ 140.699294][ T6914] loop1: detected capacity change from 0 to 512 [ 140.726012][ T787] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 140.729280][ T6914] EXT4-fs: Ignoring removed bh option [ 140.792922][ T6914] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 140.825010][ T6914] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.357: corrupted in-inode xattr: e_value size too large [ 140.860579][ T6914] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.357: couldn't read orphan inode 15 (err -117) [ 140.989066][ T6914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.089315][ T787] usb 3-1: USB disconnect, device number 5 [ 141.262248][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.414590][ T6923] loop1: detected capacity change from 0 to 128 [ 141.438567][ T6923] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 141.491543][ T6923] hpfs: filesystem error: improperly stopped [ 141.508172][ T6923] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 141.526219][ T6923] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 141.560468][ T6923] hpfs: You really don't want any checks? You are crazy... [ 141.568231][ T6923] hpfs: hpfs_map_sector(): read error [ 141.588782][ T6923] hpfs: code page support is disabled [ 141.598638][ T6923] hpfs: hpfs_map_4sectors(): unaligned read [ 141.610283][ T6923] hpfs: hpfs_map_4sectors(): unaligned read [ 141.616269][ T6923] hpfs: filesystem error: unable to find root dir [ 143.318151][ T6980] loop1: detected capacity change from 0 to 512 [ 143.382796][ T6980] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 143.404144][ T6980] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.383: corrupted in-inode xattr: e_value size too large [ 143.423256][ T6980] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.383: couldn't read orphan inode 15 (err -117) [ 143.443839][ T6980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.669043][ T6980] overlayfs: upper fs needs to support d_type. [ 143.833741][ T5771] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 143.882988][ T5771] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 143.907457][ T5771] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 143.934088][ T5771] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 143.958237][ T5771] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 144.003680][ T5771] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 144.025415][ T5771] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 144.049576][ T5771] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 144.071177][ T5771] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 144.111771][ T5771] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 144.740934][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.864694][ T6435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.999456][ T6435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.144678][ T6435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.298144][ T6435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.833669][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.870465][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.883714][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.897228][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.922755][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.930416][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.505854][ T7017] chnl_net:caif_netlink_parms(): no params data found [ 146.652794][ T6993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.279719][ T7017] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.299402][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.309865][ T7017] bridge_slave_0: entered allmulticast mode [ 147.330064][ T7017] bridge_slave_0: entered promiscuous mode [ 147.394333][ T7017] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.419460][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.454948][ T7017] bridge_slave_1: entered allmulticast mode [ 147.485876][ T7017] bridge_slave_1: entered promiscuous mode [ 147.769180][ T7017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.824529][ T7017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.902337][ T6435] hsr_slave_0: left promiscuous mode [ 147.914166][ T7069] loop0: detected capacity change from 0 to 4096 [ 147.927411][ T6435] hsr_slave_1: left promiscuous mode [ 147.956830][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.961825][ T5778] Bluetooth: hci0: command tx timeout [ 147.990307][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.057231][ T6435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.100342][ T6435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.133401][ T6435] bridge_slave_1: left allmulticast mode [ 148.153468][ T6435] bridge_slave_1: left promiscuous mode [ 148.169107][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.207934][ T6435] bridge_slave_0: left allmulticast mode [ 148.222735][ T6435] bridge_slave_0: left promiscuous mode [ 148.249598][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.426925][ T6435] veth1_macvtap: left promiscuous mode [ 148.455827][ T6435] veth0_macvtap: left promiscuous mode [ 148.473135][ T6435] veth1_vlan: left promiscuous mode [ 148.490400][ T6435] veth0_vlan: left promiscuous mode [ 148.692018][ T7082] loop2: detected capacity change from 0 to 8192 [ 148.734694][ T7082] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 148.796050][ T7082] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 148.865086][ T7082] REISERFS (device loop2): using ordered data mode [ 148.896211][ T7082] reiserfs: using flush barriers [ 148.925485][ T7082] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.959340][ T7082] REISERFS (device loop2): checking transaction log (loop2) [ 149.207231][ T7082] REISERFS (device loop2): Using tea hash to sort names [ 149.222099][ T7082] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 150.040452][ T5778] Bluetooth: hci0: command tx timeout [ 150.273019][ T6435] team0 (unregistering): Port device team_slave_1 removed [ 150.354868][ T7090] loop2: detected capacity change from 0 to 40427 [ 150.368973][ T7090] F2FS-fs (loop2): invalid crc value [ 150.381529][ T7090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.395632][ T6435] team0 (unregistering): Port device team_slave_0 removed [ 150.457834][ T7090] F2FS-fs (loop2): Start checkpoint disabled! [ 150.500305][ T6435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.508876][ T7090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 150.654606][ T6435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.838614][ T11] kworker/u4:0: attempt to access beyond end of device [ 150.838614][ T11] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 150.878307][ T11] kworker/u4:0: attempt to access beyond end of device [ 150.878307][ T11] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 150.895029][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 150.904455][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 150.912542][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 151.355527][ T6435] bond0 (unregistering): Released all slaves [ 151.717254][ T7017] team0: Port device team_slave_0 added [ 151.754460][ T7017] team0: Port device team_slave_1 added [ 151.908272][ T7105] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 151.917831][ T7105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.417'. [ 151.940755][ T7017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.947838][ T7017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.005198][ T7017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.025978][ T7017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.035031][ T7017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.061909][ T7017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.120620][ T5778] Bluetooth: hci0: command tx timeout [ 152.288771][ T7017] hsr_slave_0: entered promiscuous mode [ 152.310713][ T7017] hsr_slave_1: entered promiscuous mode [ 152.324822][ T7017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.340184][ T7017] Cannot create hsr debugfs directory [ 152.486376][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.692101][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 152.727427][ T8] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 152.753198][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.762051][ T8] usb 1-1: Product: syz [ 152.766433][ T8] usb 1-1: Manufacturer: syz [ 152.771505][ T8] usb 1-1: SerialNumber: syz [ 152.790626][ T8] usb 1-1: config 0 descriptor?? [ 152.905878][ T7017] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.934838][ T7017] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.955932][ T7017] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.984183][ T7017] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 153.036503][ T8] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 153.308568][ T7017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.363418][ T7017] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.412518][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.419824][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.513046][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.520292][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.597004][ T7017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.608354][ T7143] loop2: detected capacity change from 0 to 512 [ 153.616262][ T7017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.792963][ T7143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.822101][ T7143] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.853887][ T8] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 153.895560][ T8] usb 1-1: USB disconnect, device number 9 [ 153.935688][ T7150] loop3: detected capacity change from 0 to 128 [ 153.982433][ T7150] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.062625][ T7150] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.103981][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.204071][ T5778] Bluetooth: hci0: command tx timeout [ 154.448469][ T7017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.672532][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 154.726027][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.432'. [ 154.780884][ T787] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.972286][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 154.992406][ T787] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 155.015852][ T787] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.044230][ T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.074218][ T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.100944][ T787] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.143157][ T787] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.165440][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.358406][ T7017] veth0_vlan: entered promiscuous mode [ 155.399828][ T7017] veth1_vlan: entered promiscuous mode [ 155.431889][ T787] usb 4-1: usb_control_msg returned -32 [ 155.460488][ T787] usbtmc 4-1:16.0: can't read capabilities [ 155.510978][ T7017] veth0_macvtap: entered promiscuous mode [ 155.564087][ T7017] veth1_macvtap: entered promiscuous mode [ 155.623040][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.645300][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.655866][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.673370][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.685980][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.698998][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.717803][ T7017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.743283][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.759969][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.777302][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.795090][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.809544][ T7017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.840650][ T7017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.864063][ T7017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.903127][ T7017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.913214][ T7017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.925369][ T7017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.934682][ T7017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.111638][ T8] usb 4-1: USB disconnect, device number 8 [ 156.162136][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.192704][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.248376][ T6440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.265718][ T6440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.741190][ T7221] netlink: 'syz.4.440': attribute type 14 has an invalid length. [ 156.749016][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 156.823767][ T7221] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.833372][ T7221] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.843728][ T7221] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.852916][ T7221] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.935549][ T7221] netlink: 'syz.4.440': attribute type 14 has an invalid length. [ 156.999127][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 157.406141][ T7238] loop0: detected capacity change from 0 to 4096 [ 157.440788][ T7238] NILFS (loop0): unrecognized mount option "01777777777777777777777" [ 157.701697][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 157.882161][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.983217][ T7262] Bluetooth: MGMT ver 1.22 [ 157.987760][ T7262] Bluetooth: hci0: service_discovery: too big uuid_count value 4467 [ 158.141242][ T8] usb 3-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 158.166937][ T8] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.206694][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.228927][ T8] usb 3-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 158.255118][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.322455][ T8] usb 3-1: config 0 descriptor?? [ 158.770472][ T7249] loop2: detected capacity change from 0 to 512 [ 158.827323][ T7249] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.449: iget: bad i_size value: 38620345925642 [ 158.900821][ T7249] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.449: couldn't read orphan inode 15 (err -117) [ 158.920632][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.015860][ T7249] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.083985][ T8] thrustmaster 0003:044F:B651.0006: unknown main item tag 0x0 [ 159.100213][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 159.112325][ T27] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 159.124398][ T8] thrustmaster 0003:044F:B651.0006: unknown main item tag 0x0 [ 159.150325][ T8] thrustmaster 0003:044F:B651.0006: unknown main item tag 0x0 [ 159.152545][ T27] usb 1-1: config 0 has no interface number 0 [ 159.157907][ T8] thrustmaster 0003:044F:B651.0006: unknown main item tag 0x0 [ 159.185417][ T27] usb 1-1: config 0 interface 12 has no altsetting 0 [ 159.201239][ T7288] loop3: detected capacity change from 0 to 736 [ 159.211408][ T8] thrustmaster 0003:044F:B651.0006: unknown main item tag 0x0 [ 159.218975][ T8] thrustmaster 0003:044F:B651.0006: unknown main item tag 0x0 [ 159.242707][ T27] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 159.270298][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.280491][ T8] thrustmaster 0003:044F:B651.0006: item fetching failed at offset 17/40 [ 159.306451][ T27] usb 1-1: Product: syz [ 159.321475][ T27] usb 1-1: Manufacturer: syz [ 159.326163][ T27] usb 1-1: SerialNumber: syz [ 159.333648][ T8] thrustmaster 0003:044F:B651.0006: parse failed [ 159.356881][ T27] usb 1-1: config 0 descriptor?? [ 159.370378][ T8] thrustmaster: probe of 0003:044F:B651.0006 failed with error -22 [ 159.408767][ T8] usb 3-1: USB disconnect, device number 6 [ 159.731458][ T7298] sctp: [Deprecated]: syz.4.462 (pid 7298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.731458][ T7298] Use struct sctp_sack_info instead [ 159.889676][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 160.208549][ T7309] ipvlan2: entered promiscuous mode [ 160.249409][ T7309] team0: Device ipvlan2 failed to register rx_handler [ 160.630222][ T27] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: f8 failed: -71 [ 160.687285][ T27] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 160.708831][ T27] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 160.739166][ T27] f81534: probe of 1-1:0.12 failed with error -71 [ 160.769323][ T27] usb 1-1: USB disconnect, device number 10 [ 161.025108][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 161.231065][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 161.268626][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.320550][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.362725][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.380192][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.398574][ T23] usb 5-1: Product: syz [ 161.408779][ T23] usb 5-1: Manufacturer: syz [ 161.418827][ T23] usb 5-1: SerialNumber: syz [ 161.681474][ T23] usb 5-1: 0:2 : does not exist [ 161.724278][ T23] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 161.800580][ T23] usb 5-1: USB disconnect, device number 2 [ 161.975657][ T6835] udevd[6835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.800609][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 164.023021][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.052789][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.073259][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.130007][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 164.143931][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 164.176142][ T8] usb 1-1: Product: syz [ 164.190242][ T8] usb 1-1: Manufacturer: syz [ 164.205173][ T8] usb 1-1: SerialNumber: syz [ 164.467452][ T8] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 164.713254][ T27] usb 1-1: USB disconnect, device number 11 [ 164.727588][ T27] usblp0: removed [ 165.106871][ T7406] Invalid argument reading file caps for ./file0 [ 165.308181][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 165.518806][ T7414] loop4: detected capacity change from 0 to 128 [ 166.490051][ T7427] loop2: detected capacity change from 0 to 164 [ 166.530316][ T7427] rock: directory entry would overflow storage [ 166.559612][ T7427] rock: sig=0x66, size=4, remaining=3 [ 166.618708][ T7427] rock: directory entry would overflow storage [ 166.652684][ T7427] rock: sig=0x66, size=4, remaining=3 [ 167.060398][ T7301] Set syz1 is full, maxelem 65536 reached [ 167.135972][ T7439] binder: 7438:7439 ioctl c0306201 0 returned -14 [ 167.148798][ T7439] binder: 7438:7439 ioctl c0306201 2000000001c0 returned -14 [ 167.180242][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.318061][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.510'. [ 167.330936][ T7446] delete_channel: no stack [ 167.380292][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 167.396102][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.407504][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.417588][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 167.433974][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 167.447577][ T23] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 167.457961][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.481588][ T23] hub 3-1:1.0: bad descriptor, ignoring hub [ 167.500908][ T23] hub: probe of 3-1:1.0 failed with error -5 [ 167.507531][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 167.523990][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 167.537803][ T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 167.547655][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 168.203887][ T7465] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 168.225790][ T7434] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 168.425760][ T7474] bridge0: port 3(syz_tun) entered blocking state [ 168.436753][ T7434] usb 3-1: device firmware changed [ 168.442468][ T7474] bridge0: port 3(syz_tun) entered disabled state [ 168.452454][ T7434] cdc_wdm 3-1:1.0: Error autopm - -16 [ 168.458620][ T8] usb 3-1: USB disconnect, device number 7 [ 168.465462][ T7474] syz_tun: entered allmulticast mode [ 168.478520][ T7474] syz_tun: entered promiscuous mode [ 168.493155][ T7474] bridge0: port 3(syz_tun) entered blocking state [ 168.500256][ T7474] bridge0: port 3(syz_tun) entered forwarding state [ 168.511676][ T7476] netlink: 'syz.0.522': attribute type 10 has an invalid length. [ 168.536194][ T7476] bridge0: port 3(syz_tun) entered disabled state [ 168.543453][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.552997][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.631119][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 168.654095][ T7476] bridge0: port 3(syz_tun) entered blocking state [ 168.660789][ T7476] bridge0: port 3(syz_tun) entered forwarding state [ 168.669169][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.676473][ T7476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.684076][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.692382][ T7476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.734308][ T7476] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 168.810340][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 168.850926][ T8] usb 3-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 168.866493][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.883563][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.910460][ T8] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 168.919596][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.978424][ T8] hub 3-1:1.0: bad descriptor, ignoring hub [ 169.000596][ T8] hub: probe of 3-1:1.0 failed with error -5 [ 169.007218][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 169.050928][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 169.056240][ T8] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 169.401881][ T9] usb 3-1: USB disconnect, device number 8 [ 169.874520][ T7510] sctp: [Deprecated]: syz.0.534 (pid 7510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.874520][ T7510] Use struct sctp_sack_info instead [ 170.100197][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 170.292026][ T9] usb 4-1: config 0 has no interfaces? [ 170.314984][ T9] usb 4-1: New USB device found, idVendor=23c5, idProduct=8699, bcdDevice=f8.85 [ 170.350018][ T9] usb 4-1: New USB device strings: Mfr=200, Product=24, SerialNumber=3 [ 170.371306][ T9] usb 4-1: Product: syz [ 170.375568][ T9] usb 4-1: Manufacturer: syz [ 170.385280][ T9] usb 4-1: SerialNumber: syz [ 170.393880][ T9] usb 4-1: config 0 descriptor?? [ 170.478973][ T28] audit: type=1326 audit(1777613884.222:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.540" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f009159cdd9 code=0x0 [ 170.672266][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 170.692330][ T27] usb 4-1: USB disconnect, device number 9 [ 170.871911][ T7545] loop2: detected capacity change from 0 to 128 [ 170.887229][ T7545] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 170.905155][ T7545] hpfs: filesystem error: improperly stopped [ 170.917372][ T7545] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 170.926303][ T7545] hpfs: You really don't want any checks? You are crazy... [ 170.938935][ T7545] hpfs: hpfs_map_sector(): read error [ 170.944481][ T7545] hpfs: code page support is disabled [ 170.955051][ T7545] hpfs: hpfs_map_4sectors(): unaligned read [ 170.961613][ T7545] hpfs: hpfs_map_4sectors(): unaligned read [ 170.967657][ T7545] hpfs: filesystem error: unable to find root dir [ 171.209465][ T7548] loop2: detected capacity change from 0 to 2048 [ 171.356324][ T7548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.404278][ T7556] loop4: detected capacity change from 0 to 1024 [ 171.491208][ T7556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.593053][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.659766][ T7561] netlink: 35 bytes leftover after parsing attributes in process `syz.0.547'. [ 171.669202][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 171.685405][ T7017] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.420202][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 172.600363][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 172.617138][ T8] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.629237][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 172.637313][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.644294][ T8] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 172.654145][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.664879][ T8] usb 1-1: config 0 descriptor?? [ 172.830312][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 172.855849][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 172.865503][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.881697][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.901855][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.932570][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.948673][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.957983][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.178758][ T8] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 173.210869][ T9] usb 4-1: usb_control_msg returned -32 [ 173.238738][ T9] usbtmc 4-1:16.0: can't read capabilities [ 173.346237][ T7590] netlink: 'syz.2.559': attribute type 25 has an invalid length. [ 173.395986][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 173.432752][ T7590] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.441895][ T7590] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.451080][ T7590] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.459830][ T7590] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.485559][ T7590] netlink: 'syz.2.559': attribute type 25 has an invalid length. [ 173.493673][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 173.603153][ T27] usb 1-1: USB disconnect, device number 12 [ 173.804950][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 174.000286][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 174.007753][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.025068][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.047470][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.067080][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.084891][ T23] usb 5-1: Product: syz [ 174.093747][ T23] usb 5-1: Manufacturer: syz [ 174.098425][ T23] usb 5-1: SerialNumber: syz [ 174.245750][ T9] usb 4-1: USB disconnect, device number 10 [ 174.369420][ T23] usb 5-1: 0:2 : does not exist [ 174.397273][ T23] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 174.470001][ T23] usb 5-1: USB disconnect, device number 3 [ 174.538127][ T6835] udevd[6835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.219842][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 175.239022][ T7636] netlink: 'syz.3.571': attribute type 26 has an invalid length. [ 175.267568][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 175.383878][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 175.413024][ T7636] netlink: 'syz.3.571': attribute type 26 has an invalid length. [ 175.435808][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 175.694546][ T7646] loop4: detected capacity change from 0 to 1024 [ 175.714740][ T7646] ext4: Unknown parameter 'nojournal' [ 176.112437][ T7665] loop0: detected capacity change from 0 to 512 [ 177.302345][ T7670] loop3: detected capacity change from 0 to 40427 [ 177.322886][ T7670] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 177.338842][ T7670] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 177.372608][ T7670] F2FS-fs (loop3): invalid crc value [ 177.550540][ T7670] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 177.557755][ T7670] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 177.770491][ T5774] syz-executor: attempt to access beyond end of device [ 177.770491][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.816274][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 178.695571][ T7738] loop4: detected capacity change from 0 to 128 [ 178.758477][ T7738] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 178.868072][ T7738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.461576][ T7761] loop4: detected capacity change from 0 to 40427 [ 180.522506][ T7761] F2FS-fs (loop4): invalid crc value [ 180.672815][ T7792] mac80211_hwsim hwsim8 : renamed from wlan1 (while UP) [ 180.788787][ T7761] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.951949][ T5816] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 181.066302][ T7017] syz-executor: attempt to access beyond end of device [ 181.066302][ T7017] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.089269][ T7017] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 181.150248][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 181.179417][ T5816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.211542][ T5816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 181.241072][ T5816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 181.270510][ T5816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 181.304986][ T5816] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 181.330979][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.390472][ T5816] hub 1-1:1.0: bad descriptor, ignoring hub [ 181.396470][ T5816] hub: probe of 1-1:1.0 failed with error -5 [ 181.417305][ T5816] cdc_wdm 1-1:1.0: skipping garbage [ 181.437004][ T5816] cdc_wdm 1-1:1.0: skipping garbage [ 181.471860][ T5816] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 181.477864][ T5816] cdc_wdm 1-1:1.0: Unknown control protocol [ 182.065531][ T7830] netlink: 'syz.2.614': attribute type 3 has an invalid length. [ 182.176818][ T7817] loop3: detected capacity change from 0 to 32768 [ 182.410878][ T7794] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 182.468266][ T7840] loop2: detected capacity change from 0 to 512 [ 182.521707][ T7840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.577979][ T7840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.626779][ T7840] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.670838][ T7794] usb 1-1: device firmware changed [ 182.700501][ T7794] cdc_wdm 1-1:1.0: Error autopm - -16 [ 182.714759][ T27] usb 1-1: USB disconnect, device number 13 [ 182.903410][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.930209][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 183.142568][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 183.151832][ T27] usb 1-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 183.192540][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 183.212889][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.276924][ T27] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 183.307038][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.357698][ T27] hub 1-1:1.0: bad descriptor, ignoring hub [ 183.390379][ T27] hub: probe of 1-1:1.0 failed with error -5 [ 183.397032][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 183.426113][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 183.438664][ T27] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 183.494963][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 183.559483][ T7867] loop4: detected capacity change from 0 to 64 [ 183.791762][ T5816] usb 1-1: USB disconnect, device number 14 [ 184.191072][ T7880] bond0: (slave bond_slave_0): Releasing backup interface [ 184.232432][ T7882] netlink: 44 bytes leftover after parsing attributes in process `syz.4.627'. [ 184.263108][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.270890][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.318865][ T7887] netlink: 44 bytes leftover after parsing attributes in process `syz.4.627'. [ 184.389784][ T7892] loop0: detected capacity change from 0 to 128 [ 184.431326][ T7892] EXT4-fs (loop0): Test dummy encryption mode enabled [ 184.481532][ T7892] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.503923][ T7892] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.755907][ T7892] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 184.869167][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.226153][ T7912] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 185.305642][ T5816] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 185.522115][ T5816] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 185.547316][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.567544][ T5816] usb 5-1: Product: syz [ 185.576601][ T5816] usb 5-1: Manufacturer: syz [ 185.591354][ T5816] usb 5-1: SerialNumber: syz [ 185.710183][ T787] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 185.847431][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 185.881190][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 185.910459][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 185.926114][ T787] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.950209][ T787] usb 1-1: config 179 has no interface number 0 [ 185.956639][ T787] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 185.980273][ T787] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 186.009816][ T787] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.030139][ T787] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 186.063477][ T787] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.090187][ T787] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.110196][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.140722][ T7916] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 186.324820][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.350655][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.370530][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.381487][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.399101][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.407359][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.530695][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 186.565466][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 186.598445][ T5816] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 186.610031][ T7919] loop2: detected capacity change from 0 to 32768 [ 186.628478][ T5816] lan78xx: probe of 5-1:1.0 failed with error -71 [ 186.650928][ T5816] usb 5-1: USB disconnect, device number 4 [ 186.664624][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14 [ 186.888366][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.897775][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.007816][ T7919] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 187.195601][ T7921] chnl_net:caif_netlink_parms(): no params data found [ 187.247873][ T27] usb 1-1: USB disconnect, device number 15 [ 187.248124][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 187.262386][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 187.292728][ T27] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 187.399404][ T7930] netlink: 'syz.4.639': attribute type 11 has an invalid length. [ 187.411468][ T7919] VFS: Lookup of '' in ocfs2 loop2 would have caused loop [ 187.430004][ T7930] netlink: 56 bytes leftover after parsing attributes in process `syz.4.639'. [ 187.468071][ T7919] syz.2.638 (7919) used greatest stack depth: 18768 bytes left [ 187.478711][ T7930] netlink: 'syz.4.639': attribute type 11 has an invalid length. [ 187.490190][ T7930] netlink: 56 bytes leftover after parsing attributes in process `syz.4.639'. [ 187.515963][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.524507][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.531968][ T7921] bridge_slave_0: entered allmulticast mode [ 187.539822][ T7921] bridge_slave_0: entered promiscuous mode [ 187.549594][ T7930] netlink: 'syz.4.639': attribute type 11 has an invalid length. [ 187.565575][ T7930] netlink: 56 bytes leftover after parsing attributes in process `syz.4.639'. [ 187.576099][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.596060][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.611485][ T7921] bridge_slave_1: entered allmulticast mode [ 187.623001][ T7921] bridge_slave_1: entered promiscuous mode [ 187.647530][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 187.714435][ T5775] VFS: Busy inodes after unmount of loop2 (ocfs2) [ 187.714665][ T5775] ------------[ cut here ]------------ [ 187.727420][ T5775] kernel BUG at fs/super.c:697! [ 187.734974][ T7921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.750450][ T7921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.760772][ T5761] IPVS: starting estimator thread 0... [ 187.790338][ T5775] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 187.796504][ T5775] CPU: 0 PID: 5775 Comm: syz-executor Not tainted syzkaller #0 [ 187.804105][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.814203][ T5775] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 187.820437][ T5775] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ac 59 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 20 ad d7 8a 48 89 de e8 03 dd 8b 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 187.840105][ T5775] RSP: 0018:ffffc9000454fd20 EFLAGS: 00010246 [ 187.846227][ T5775] RAX: 000000000000002f RBX: ffff88802ecda660 RCX: 48ab128addac0f00 [ 187.854251][ T5775] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 187.862280][ T5775] RBP: 1ffff11005d9b4f2 R08: ffffc9000454fa27 R09: 1ffff920008a9f44 [ 187.870312][ T5775] R10: dffffc0000000000 R11: fffff520008a9f45 R12: 0000000000000000 [ 187.878326][ T5775] R13: dffffc0000000000 R14: ffffffff8d635120 R15: ffff88802ecda790 [ 187.886356][ T5775] FS: 000055555c5c7500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 187.895333][ T5775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.902015][ T5775] CR2: 000000110c31b725 CR3: 0000000061783000 CR4: 00000000003506f0 [ 187.910030][ T5775] Call Trace: [ 187.913354][ T5775] [ 187.916333][ T5775] kill_block_super+0x44/0x90 [ 187.921080][ T5775] deactivate_locked_super+0x97/0x100 [ 187.926550][ T5775] cleanup_mnt+0x43b/0x4d0 [ 187.931024][ T5775] task_work_run+0x1d4/0x260 [ 187.935667][ T5775] ? task_work_cancel+0x220/0x220 [ 187.940742][ T5775] ? exit_to_user_mode_loop+0x3b/0x110 [ 187.946249][ T5775] exit_to_user_mode_loop+0xe6/0x110 [ 187.951599][ T5775] exit_to_user_mode_prepare+0xee/0x180 [ 187.957202][ T5775] syscall_exit_to_user_mode+0x1a/0x50 [ 187.962728][ T5775] do_syscall_64+0x61/0xa0 [ 187.967182][ T5775] ? clear_bhb_loop+0x40/0x90 [ 187.971904][ T5775] ? clear_bhb_loop+0x40/0x90 [ 187.976639][ T5775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.982586][ T5775] RIP: 0033:0x7fde4e39e017 [ 187.987055][ T5775] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 188.006720][ T5775] RSP: 002b:00007fff723610b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 188.015209][ T5775] RAX: 0000000000000000 RBX: 00007fde4e432120 RCX: 00007fde4e39e017 [ 188.023251][ T5775] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff72361170 [ 188.031277][ T5775] RBP: 00007fff72361170 R08: 00007fff72362170 R09: 00000000ffffffff [ 188.039295][ T5775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff72362200 [ 188.047325][ T5775] R13: 00007fde4e432120 R14: 000000000002dbff R15: 00007fff72362240 [ 188.055353][ T5775] [ 188.058407][ T5775] Modules linked in: [ 188.071108][ T7921] team0: Port device team_slave_0 added [ 188.083585][ T5775] ---[ end trace 0000000000000000 ]--- [ 188.089117][ T5775] RIP: 0010:generic_shutdown_super+0x2ad/0x2b0 [ 188.130297][ T5775] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ac 59 f0 ff 49 8b 16 48 81 c3 60 06 00 00 48 c7 c7 20 ad d7 8a 48 89 de e8 03 dd 8b 08 <0f> 0b 90 66 0f 1f 00 55 41 57 41 56 53 48 89 fb 49 bf 00 00 00 00 [ 188.161409][ T7935] IPVS: using max 34 ests per chain, 81600 per kthread [ 188.201011][ T5775] RSP: 0018:ffffc9000454fd20 EFLAGS: 00010246 [ 188.207201][ T5775] RAX: 000000000000002f RBX: ffff88802ecda660 RCX: 48ab128addac0f00 [ 188.230145][ T5775] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 188.238269][ T5775] RBP: 1ffff11005d9b4f2 R08: ffffc9000454fa27 R09: 1ffff920008a9f44 [ 188.250501][ T5775] R10: dffffc0000000000 R11: fffff520008a9f45 R12: 0000000000000000 [ 188.258546][ T5775] R13: dffffc0000000000 R14: ffffffff8d635120 R15: ffff88802ecda790 [ 188.290139][ T5775] FS: 000055555c5c7500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 188.299172][ T5775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.320148][ T5775] CR2: 00005555727969e8 CR3: 0000000061783000 CR4: 00000000003506e0 [ 188.328219][ T5775] Kernel panic - not syncing: Fatal exception [ 188.334884][ T5775] Kernel Offset: disabled [ 188.339224][ T5775] Rebooting in 86400 seconds..