last executing test programs: 1m29.348133946s ago: executing program 2 (id=7485): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001640)={r0, 0xffffffffffffffff, 0x3, 0x2000000, @void}, 0x10) 1m29.088066727s ago: executing program 2 (id=7488): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0xa, @vbi}) 1m28.882296719s ago: executing program 2 (id=7493): syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 1m28.627551951s ago: executing program 2 (id=7497): capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x0, 0x0, 0x1}) socket$isdn_base(0x22, 0x3, 0x0) 1m28.379962523s ago: executing program 2 (id=7501): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 1m27.34804161s ago: executing program 2 (id=7514): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140)={0x0, 0x2000000}, 0x8) 1m19.546597205s ago: executing program 4 (id=7609): syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2a0085e, &(0x7f0000000080)=ANY=[], 0xa, 0x229, &(0x7f0000000140)="$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") truncate(&(0x7f0000000640)='./file2\x00', 0xa00) 1m19.334514787s ago: executing program 4 (id=7611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) 1m19.141538668s ago: executing program 4 (id=7614): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000120097013dbd70000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00)'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x880) 1m18.621656682s ago: executing program 4 (id=7620): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m18.535818802s ago: executing program 4 (id=7621): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 1m17.390172681s ago: executing program 4 (id=7637): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x23, 0x3, 0xefa}) 1m17.166057722s ago: executing program 1 (id=7641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x70}}, 0x0) 1m17.023040083s ago: executing program 1 (id=7643): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1m16.858016855s ago: executing program 1 (id=7644): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x300, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1m16.687253326s ago: executing program 1 (id=7645): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000600)) 1m16.601446746s ago: executing program 1 (id=7646): r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @empty, 0x2}, 0x5a) 1m16.310702188s ago: executing program 1 (id=7647): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x50d, &(0x7f0000000b80)="$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") quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1m13.608422177s ago: executing program 3 (id=7688): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4}}) 1m13.548391278s ago: executing program 3 (id=7689): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(r0, &(0x7f0000000240)=@x25, &(0x7f0000000040)=0x80) 1m13.494468798s ago: executing program 3 (id=7690): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000080000000000000000000000000000000b7"]) 1m13.437759849s ago: executing program 3 (id=7691): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000040)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@check_relaxed}, {@cruft}, {@overriderock}, {@overriderock}, {@check_strict}, {}, {@block={'block', 0x3d, 0x800}}, {@cruft}, {@unhide}, {@cruft}, {@mode={'mode', 0x3d, 0x8}}, {@map_acorn}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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") statfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000440)=""/229) 1m13.29062755s ago: executing program 3 (id=7692): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 1m12.331423107s ago: executing program 3 (id=7693): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2, 0xffffffffffffffff, 0x54) 1m11.255411944s ago: executing program 32 (id=7514): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140)={0x0, 0x2000000}, 0x8) 1m1.255027055s ago: executing program 33 (id=7637): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x23, 0x3, 0xefa}) 1m0.253651682s ago: executing program 34 (id=7647): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x50d, &(0x7f0000000b80)="$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") quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 56.198563661s ago: executing program 35 (id=7693): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2, 0xffffffffffffffff, 0x54) 3.122581427s ago: executing program 0 (id=8513): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newlink={0x170, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_VF_PORTS={0xdc, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xa, 0x2, 'PPPPPP'}, @IFLA_PORT_PROFILE={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @IFLA_PORT_VF={0x8, 0x1, 0xeb}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7090333443bfe1a156083a1e909fa568"}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "cefc099939e93927d52d75ff98a471a1"}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x0, 0x6, 0x5}, @IFLA_PORT_PROFILE={0xb, 0x2, 'taprio\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8d}, @IFLA_PORT_HOST_UUID={0x38, 0x5, "31293e43a8917d01b5e39653a8529bb9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x10}, @IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "71b85bc0563581815e8f8ebffaea7ac7"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}, {0x4}]}, @IFLA_NET_NS_FD={0x8}, @IFLA_EVENT={0x8, 0x2c, 0x7}, @IFLA_NET_NS_PID={0x8}, @IFLA_EVENT={0x8, 0x2c, 0x7f}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f2bf6cc8a434ede4a395acff22177cfd"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6bf10b334d157efa7b1767d6a0c3f3fc"}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x1}, 0x4892) 3.091642378s ago: executing program 8 (id=8514): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000001c0)) 2.87086684s ago: executing program 0 (id=8517): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x5, 0x6}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 2.8179995s ago: executing program 8 (id=8518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) 2.701048381s ago: executing program 0 (id=8521): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x10400, &(0x7f0000000180)={[{@creator={'creator', 0x3d, "afed7d07"}}, {@part}, {@barrier}, {@creator={'creator', 0x3d, "4156cef9"}}, {@force}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@barrier}]}, 0x1, 0x6e4, &(0x7f0000000240)="$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") chdir(&(0x7f0000000f40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 2.560535531s ago: executing program 8 (id=8522): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.373673473s ago: executing program 0 (id=8525): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x10042, &(0x7f000000b040)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@discard_size={'discard', 0x3d, 0xaffa}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@uid}, {@errors_remount}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x623a, &(0x7f0000002780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) 1.744889818s ago: executing program 6 (id=8534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b8034"], 0xf8}}, 0x0) 1.493472119s ago: executing program 6 (id=8537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}]}}}]}, 0x44}}, 0x0) 1.3689208s ago: executing program 7 (id=8538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x60}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 1.291093941s ago: executing program 5 (id=8539): r0 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}) 1.181013422s ago: executing program 7 (id=8540): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}]}, 0x48}}, 0x0) 1.139817402s ago: executing program 6 (id=8541): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000003e"], 0x18}}], 0x1, 0x5eae) 1.055210933s ago: executing program 5 (id=8542): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x9, {0x7fd, 0x3b, 0x747, 0x8001}, {0x4, 0xfffffffd, 0x18000, 0x5}, {0xcc, 0x2}}) 999.798513ms ago: executing program 0 (id=8543): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 992.959943ms ago: executing program 7 (id=8544): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 918.147033ms ago: executing program 6 (id=8545): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000078c0), 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000007900)={{0x3, 0x3, 0x1, 0x1, 0xfffffeff}, 0x2, 0xffffffffffffffff}) 876.225304ms ago: executing program 5 (id=8546): r0 = io_uring_setup(0x734a, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 761.522694ms ago: executing program 5 (id=8547): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./file1\x00', 0x1010801, &(0x7f0000000140)=ANY=[], 0x1, 0x216, &(0x7f00000001c0)="$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") creat(&(0x7f00000005c0)='./file0\x00', 0x0) 695.045255ms ago: executing program 8 (id=8548): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000280)) 609.325046ms ago: executing program 6 (id=8549): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r0, 0x10001, 0x0) 573.525116ms ago: executing program 7 (id=8550): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000640)={[&(0x7f0000000480)='\\3-\x00']}) 502.855996ms ago: executing program 8 (id=8551): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x3017, 0x0, 0x0, 0x0, 0x3, 0x1}) 360.241868ms ago: executing program 6 (id=8552): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 312.422048ms ago: executing program 5 (id=8553): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x3f8, 0x2e8, 0x2e8, 0x3f8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 'bond0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0xd, 0xc442f91221259124, 0x8}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00', {0x7b}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 288.532278ms ago: executing program 8 (id=8554): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x0, 0x558b, &(0x7f00000079c0)="$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") ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, 0x0) 204.426869ms ago: executing program 7 (id=8555): r0 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r0, 0x1, 0x3) 85.255999ms ago: executing program 5 (id=8556): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x4c882, 0x0) sendfile(r0, r0, 0x0, 0x20000000003f) 84.513759ms ago: executing program 0 (id=8566): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 7 (id=8557): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f00000004c0)={[{@errors_remount}, {@noquota}]}, 0x1, 0x5a8, &(0x7f0000000b80)="$eJzs3U9oHPUeAPDvzCbNa5v30sJ78N6jh/KeUKF0k/SPVk/pVSwUehC8xLDZhJBNNmY3tQk9pPciFhSVXupNQY+KiAfx4tGrF8WzIFpUmh5kZbK7aZtk4yZtsjX7+cBs5ze/2f1+f535/WZmM8MG0LWOZy9pxH8i4lISMfBAXU80Ko/X11u5c61wrycKSdRql39KIomIu3euFZrrJ41/D0fEckT8OyK+7I04mW6MW1lcmh4rlYrzjfJgdWZusLK4dGpqZmyyOFmcPfPsc+fOnz03fHp4LZNHdeO7m6/f+PqF2zc/+OjYcuGtsSRGor9R92A7Hqf6/0lvjKxbfnY3gnVQ0ukE2JFco3f1RsS/YiByj6mvAU++Wl9EDehSybb7/8EwZsB+0DwPyK5/m9NDJwjLu3v+8eOF+gVIFnelMdVreurfTcTfVq9NDv2SPHRlkl1vHtnd1OgCy9cjYqinZ+P+nzT2v50behwJsqu+uFDfUBu3f5pt/1c/bKy3fvzpb353+oia49/KhvEvXRv/ci3Gv0ttxvj95e/fbRn/esR/N42frMVPNomfRsQrbca/9dKn51vV1d6LOBGbx29Ktv5+eHBiqlQcqr9uGuPzE8ee36r9h1rEH9mi/dmyuTbb/8lXH/+v1WE0i//0/7fe/pvFz87B32gz/tG777/Yqi6LP96i/VvFz5bdbjP+MyPHv21zVQAAAAAAAAAAYBvS1XvZkjS/Np+m+Xz9Gd5/xqG0VK5UT06UF2bH6/e8HYne9G6tfqfVQL2cTEyVisON+3Gb5dPrymci4mhEvJk7uFrOF8ql8U43HgAAAAAAAAAAAAAAAAAAAJ4Qh9c9//9rrv78P9Al/OQ3dK+d9n/jBvz1PdyPk47lAew9x3HoXvo/dK9W/f/eZ3ucCLDnWh7/e/c2D2DvOf+H7qX/Q/da6/81f/uDbuP4DwAAAAAAAAAAAAAAAAAAAAAAAAAAu+LSxYvZVLt351ohK49fWVyYLl85NV6sTOdnFgr5Qnl+Lj9ZLk+WivlCeebPPq9ULs8NxezC1cFqsVIdrCwujc6UF2aro1MzY5PF0aJfFAEAAAAAAAAAAAAAAAAAAICN+lenJM1HRLo6n6b5fMTfI+JI9CYTU6XiUET8IyK+yfX2ZeXhTicNAAAAAAAAAAAAAAAAAAAA+0xlcWl6rFQqzm89k7axzv6biYjldUu29zmjv+1dzlmyO3p7svxI0ZPY863T09h5n4idZL/OdHhgAgAAAAAAAAAAAAAAAACALnT/od9tvvH6LiUEAAAAAAAAAAAAAAAAAAAAXSn9IXtNIuLEwFP962sPJCu5iL44EBGv3br89tWxanV+OFv+c261PiKq7zSWn+5E/kCbVmp10ezHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH2VxaXpsVKpOL/Dmb42PqfDTQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYkT8CAAD//5r11cM=") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) kernel console output (not intermixed with test programs): : USB disconnect, device number 92 [ 956.827841][T21973] loop3: detected capacity change from 0 to 32768 [ 956.852026][T21973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7537 (21973) [ 956.880569][T21973] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 956.914612][T21973] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 956.936839][T21973] BTRFS info (device loop3): using free space tree [ 956.954337][ T4294] usb 2-1: USB disconnect, device number 100 [ 957.085570][T21973] BTRFS info (device loop3): enabling ssd optimizations [ 957.174535][ T4256] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 957.642617][ T7] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 957.649645][ T7] ath9k_htc: Failed to initialize the device [ 957.672046][ T4294] usb 2-1: ath9k_htc: USB layer deinitialized [ 957.783325][T22004] loop4: detected capacity change from 0 to 32768 [ 957.813775][T22004] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.7544 (22004) [ 957.851104][T22013] loop1: detected capacity change from 0 to 128 [ 957.874653][T22004] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 957.878287][T22013] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 957.912172][T22004] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 957.939647][T22004] BTRFS info (device loop4): using free space tree [ 957.948508][T22013] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 958.001307][T22013] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 958.014443][T22014] loop3: detected capacity change from 0 to 4096 [ 958.098314][T22028] loop0: detected capacity change from 0 to 512 [ 958.106475][T22028] EXT4-fs: Ignoring removed i_version option [ 958.108427][T22013] Process accounting paused [ 958.112498][T22028] EXT4-fs: Ignoring removed mblk_io_submit option [ 958.133458][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 958.172250][T22028] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.7550: inode #13: comm syz.0.7550: iget: illegal inode # [ 958.264247][T22028] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.7550: couldn't read orphan inode 13 (err -117) [ 958.272917][T22004] BTRFS info (device loop4): enabling ssd optimizations [ 958.345964][T22028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 958.408635][T22028] EXT4-fs error (device loop0): __ext4_remount:6611: comm syz.0.7550: Abort forced by user [ 958.432999][ T4254] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 958.455071][T22028] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 958.522669][ T4256] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 958.529185][ T4256] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 958.698406][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 958.949954][T22055] loop1: detected capacity change from 0 to 64 [ 959.117352][T22057] loop3: detected capacity change from 0 to 2048 [ 959.141468][T22057] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 959.264595][T22063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7562'. [ 959.916000][T22090] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.948088][T22090] device bridge_slave_0 left promiscuous mode [ 959.980530][T22090] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.007437][T22090] net_ratelimit: 9 callbacks suppressed [ 960.007456][T22090] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 960.040867][T22091] loop3: detected capacity change from 0 to 4096 [ 960.048592][T22091] __ntfs_warning: 2 callbacks suppressed [ 960.048609][T22091] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 960.215997][T22091] ntfs: (device loop3): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 960.273729][T22091] ntfs: volume version 3.1. [ 960.445867][ T56] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 960.499692][T22108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7584'. [ 960.864437][T22122] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.892804][T22122] device bridge_slave_0 left promiscuous mode [ 960.899145][T22122] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.927498][T22122] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 961.286701][T22139] netlink: 'syz.4.7598': attribute type 39 has an invalid length. [ 961.835698][T22134] loop1: detected capacity change from 0 to 32768 [ 961.893780][T22134] ialloc: diAlloc returned -17! [ 961.949229][T22137] loop3: detected capacity change from 0 to 32768 [ 962.298580][T22156] loop4: detected capacity change from 0 to 64 [ 962.345937][T22156] Trying to free block not in datazone [ 962.360300][T22156] minix_free_block (loop4:21): bit already cleared [ 962.600278][T22149] loop0: detected capacity change from 0 to 32768 [ 962.637438][T22149] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.7603 (22149) [ 962.715368][T22149] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 962.744698][T22149] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 962.795567][T22149] BTRFS info (device loop0): force zlib compression, level 3 [ 962.824692][T22149] BTRFS info (device loop0): force clearing of disk cache [ 962.871363][T22149] BTRFS info (device loop0): setting nodatasum [ 962.894292][T22149] BTRFS info (device loop0): allowing degraded mounts [ 962.945399][T22149] BTRFS info (device loop0): enabling disk space caching [ 962.961690][T22149] BTRFS info (device loop0): disk space caching is enabled [ 963.065226][T22149] BTRFS info (device loop0): rebuilding free space tree [ 963.081508][T22149] BTRFS info (device loop0): disabling free space tree [ 963.088478][T22149] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 963.098468][T22149] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 963.172013][ T4249] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 963.439647][T22201] loop4: detected capacity change from 0 to 8 [ 963.641400][T22207] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.648955][T22201] SQUASHFS error: Failed to read block 0x106: -5 [ 963.665805][T22207] device bridge_slave_0 left promiscuous mode [ 963.677210][T22207] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.724367][T22207] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 963.776438][T22211] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7625'. [ 963.951413][T22215] loop3: detected capacity change from 0 to 64 [ 964.287080][T22227] cgroup: Unexpected value for 'cpuset_v2_mode' [ 964.334968][ T26] audit: type=1800 audit(17793570.963:47): pid=22201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7621" name="file2" dev="loop4" ino=6 res=0 errno=0 [ 965.031456][T22235] loop3: detected capacity change from 0 to 32768 [ 965.108820][T22235] XFS (loop3): Mounting V5 Filesystem [ 965.148793][T22243] loop0: detected capacity change from 0 to 32768 [ 965.160129][T22243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7642 (22243) [ 965.207237][T22243] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 965.243933][T22243] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 965.252631][T22243] BTRFS info (device loop0): force clearing of disk cache [ 965.271744][T22243] BTRFS info (device loop0): force zlib compression, level 3 [ 965.279588][T22243] BTRFS info (device loop0): enabling auto defrag [ 965.282106][T22235] XFS (loop3): Ending clean mount [ 965.297065][T22243] BTRFS info (device loop0): max_inline at 0 [ 965.308211][T22243] BTRFS info (device loop0): enabling disk space caching [ 965.318716][T22243] BTRFS info (device loop0): disk space caching is enabled [ 965.336262][T22235] XFS (loop3): Quotacheck needed: Please wait. [ 965.421747][T22235] XFS (loop3): Quotacheck: Done. [ 965.510195][T22274] loop1: detected capacity change from 0 to 512 [ 965.520096][ T4256] XFS (loop3): Unmounting Filesystem [ 965.536680][T22243] BTRFS info (device loop0): enabling ssd optimizations [ 965.547263][T22243] BTRFS info (device loop0): rebuilding free space tree [ 965.552192][T22274] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 965.577164][T22243] BTRFS info (device loop0): disabling free space tree [ 965.584115][T22243] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 965.595345][T22243] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 965.719418][ T4249] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 966.222403][T22293] netlink: 'syz.0.7653': attribute type 5 has an invalid length. [ 966.333916][T22297] netlink: 'syz.0.7655': attribute type 10 has an invalid length. [ 966.514537][ T26] audit: type=1326 audit(17793573.002:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22302 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9d58d169 code=0x7ffc0000 [ 966.536682][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.545847][ T26] audit: type=1326 audit(17793573.002:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22302 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9d58d169 code=0x7ffc0000 [ 966.575684][ T26] audit: type=1326 audit(17793573.002:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22302 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fea9d58d169 code=0x7ffc0000 [ 966.603735][ T26] audit: type=1326 audit(17793573.002:51): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=22302 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9d58d169 code=0x7ffc0000 [ 966.629741][ T26] audit: type=1326 audit(17793573.002:52): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=22302 comm="syz.0.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9d58d169 code=0x7ffc0000 [ 966.963328][T22314] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7648'. [ 967.469579][T22336] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7672'. [ 967.515557][T22338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7673'. [ 968.115015][T22364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7686'. [ 968.226497][ T6959] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 968.403247][T22374] loop3: detected capacity change from 0 to 1764 [ 968.419229][ T6959] usb 1-1: Using ep0 maxpacket: 32 [ 968.437128][ T6959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.453972][ T6959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.466356][ T6959] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 968.485024][ T6959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.508784][ T6959] usb 1-1: config 0 descriptor?? [ 968.521534][ T6959] hub 1-1:0.0: USB hub found [ 968.544981][T22376] loop3: detected capacity change from 0 to 8 [ 968.603880][T22376] SQUASHFS error: Failed to read block 0x106: -5 [ 968.739712][ T6959] hub 1-1:0.0: 26 ports detected [ 968.744983][ T6959] hub 1-1:0.0: insufficient power available to use all downstream ports [ 968.955131][ T6959] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 968.962169][ T6959] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 968.976063][ T6959] usbhid 1-1:0.0: can't add hid device: -71 [ 968.982553][ T6959] usbhid: probe of 1-1:0.0 failed with error -71 [ 969.018697][ T6959] usb 1-1: USB disconnect, device number 93 [ 969.443664][ T26] audit: type=1800 audit(17793575.743:53): pid=22376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7692" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 969.763486][T22386] loop0: detected capacity change from 0 to 16 [ 969.780258][T22386] erofs: (device loop0): mounted with root inode @ nid 36. [ 970.663784][ T6959] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 970.742462][T20065] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 970.752007][T20065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 970.760843][T20065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 970.769149][T20065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 970.779182][T20065] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 970.786594][T20065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 970.872747][ T6959] usb 1-1: Using ep0 maxpacket: 16 [ 970.880053][ T6959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 970.900778][ T6959] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 970.915838][ T6959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.924353][ T6959] usb 1-1: Product: syz [ 970.928566][ T6959] usb 1-1: Manufacturer: syz [ 970.939164][ T6959] usb 1-1: SerialNumber: syz [ 970.945975][T22410] chnl_net:caif_netlink_parms(): no params data found [ 970.955248][ T6959] usb 1-1: config 0 descriptor?? [ 970.969946][ T6959] hub 1-1:0.0: bad descriptor, ignoring hub [ 970.977089][ T6959] hub: probe of 1-1:0.0 failed with error -5 [ 971.000199][ T6959] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input76 [ 971.041127][T22410] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.048442][T22410] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.066487][T22410] device bridge_slave_0 entered promiscuous mode [ 971.078170][T22410] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.086322][T22410] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.094873][T22410] device bridge_slave_1 entered promiscuous mode [ 971.121474][T22410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.132892][T22410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.163496][T22410] team0: Port device team_slave_0 added [ 971.192158][T22410] team0: Port device team_slave_1 added [ 971.222354][T22410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.229322][T22410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.256199][T22410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.271270][T22410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.278479][T22410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.305706][T22410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.349556][T22410] device hsr_slave_0 entered promiscuous mode [ 971.356291][T22410] device hsr_slave_1 entered promiscuous mode [ 971.364556][T22410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 971.372231][T22410] Cannot create hsr debugfs directory [ 971.477868][ T6958] usb 1-1: USB disconnect, device number 94 [ 971.510219][T22410] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 971.519768][T22410] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 971.529351][T22410] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 971.539407][T22410] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 971.562961][T22410] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.570103][T22410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.577544][T22410] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.584659][T22410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.642724][T22410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.661907][T22410] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.669866][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 971.678597][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.687107][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.696250][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 971.717783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 971.728705][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.735875][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.748254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 971.757118][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.764241][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.788333][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 971.804457][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 971.813723][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 971.825905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 971.843652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 971.854240][T22410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 972.017198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 972.027462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 972.061277][T22410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.092592][T22423] netlink: 'syz.0.7711': attribute type 39 has an invalid length. [ 972.327356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 972.342510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 972.384591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 972.420104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 972.431921][T22410] device veth0_vlan entered promiscuous mode [ 972.455865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 972.470041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 972.480425][T22410] device veth1_vlan entered promiscuous mode [ 972.508700][T22432] loop0: detected capacity change from 0 to 2048 [ 972.530478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 972.541903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 972.550721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 972.559939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 972.571757][T22410] device veth0_macvtap entered promiscuous mode [ 972.572630][T22433] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 972.586525][T22410] device veth1_macvtap entered promiscuous mode [ 972.617858][T22410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.635551][T22410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.646664][T22410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.658040][T22410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.666134][T22432] NILFS (loop0): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 972.668445][T22410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.680731][T22432] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=13) [ 972.708723][T22432] Remounting filesystem read-only [ 972.709972][T22410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.713881][T22432] NILFS (loop0): error -5 truncating bmap (ino=13) [ 972.728791][T22410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.746649][T22410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.756622][T22410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.771668][T22410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.783192][T22410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.797160][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 972.806838][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 972.817534][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 972.821868][ T4249] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 972.826820][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 972.848227][T22410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.887480][T22410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.897352][T22410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.908101][T22410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.918044][T22410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.931561][T22410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.941490][T22410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.962810][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 972.979429][T22410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.989792][T22410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.000978][T22410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.012692][T22410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.025707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 973.039766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 973.056569][T22410] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.073745][T22410] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.083523][T22410] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.092735][T22410] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.220092][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.228303][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.262458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 973.274714][ T7837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.308952][ T7837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.325239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 973.431751][T22445] loop5: detected capacity change from 0 to 512 [ 973.440766][T22445] EXT4-fs: Ignoring removed mblk_io_submit option [ 973.480554][T22445] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 973.502639][T22445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 973.517614][T22445] System zones: 1-12 [ 973.527623][T22445] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.7710: corrupted in-inode xattr [ 973.551386][T22445] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.7710: couldn't read orphan inode 15 (err -117) [ 973.566515][T22445] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 973.672776][T22410] EXT4-fs (loop5): unmounting filesystem. [ 973.859149][T22462] loop5: detected capacity change from 0 to 128 [ 973.890745][T22462] FAT-fs (loop5): Directory bread(block 32) failed [ 973.903377][T22462] FAT-fs (loop5): Directory bread(block 33) failed [ 973.914590][T22462] FAT-fs (loop5): Directory bread(block 34) failed [ 973.921169][T22462] FAT-fs (loop5): Directory bread(block 35) failed [ 973.935788][T22462] FAT-fs (loop5): Directory bread(block 36) failed [ 973.942360][T22462] FAT-fs (loop5): Directory bread(block 37) failed [ 973.949849][T22462] FAT-fs (loop5): Directory bread(block 38) failed [ 973.956751][T22462] FAT-fs (loop5): Directory bread(block 39) failed [ 973.963482][T22462] FAT-fs (loop5): Directory bread(block 40) failed [ 973.982676][T22462] FAT-fs (loop5): Directory bread(block 41) failed [ 973.996877][T22465] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 974.016456][T22465] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING [ 974.327057][T22473] 9pnet_fd: p9_fd_create_tcp (22473): problem connecting socket to 127.0.0.1 [ 974.568776][T22469] loop0: detected capacity change from 0 to 32768 [ 974.639060][T22469] ERROR: (device loop0): duplicateIXtree: [ 974.639060][T22469] [ 974.650016][T22469] ERROR: (device loop0): remounting filesystem as read-only [ 974.883185][T22485] loop5: detected capacity change from 0 to 4096 [ 974.891386][T22485] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 975.098038][T22487] loop5: detected capacity change from 0 to 4096 [ 975.175949][ T4264] Bluetooth: hci5: command 0x041b tx timeout [ 975.227849][T22487] ntfs3: loop5: ino=5, "/" directory corrupted [ 975.252797][T22487] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 975.641767][T22503] loop0: detected capacity change from 0 to 1024 [ 975.697997][ T9] hfsplus: b-tree write err: -5, ino 4 [ 975.863571][T22509] loop0: detected capacity change from 0 to 164 [ 975.870464][T20625] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 975.964747][T22511] loop0: detected capacity change from 0 to 512 [ 975.992701][T22511] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 976.040503][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 976.073244][T20625] usb 6-1: Using ep0 maxpacket: 32 [ 976.086667][T20625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.110814][T20625] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.129539][T20625] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 976.143335][T20625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.167816][T20625] usb 6-1: config 0 descriptor?? [ 976.178759][T20625] hub 6-1:0.0: USB hub found [ 976.397381][T20625] hub 6-1:0.0: 26 ports detected [ 976.404833][T20625] hub 6-1:0.0: insufficient power available to use all downstream ports [ 976.423327][T22523] netlink: 'syz.0.7751': attribute type 3 has an invalid length. [ 976.503731][T22525] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 976.514146][T22525] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 976.622227][T20625] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 976.628649][T20625] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 976.655206][T20625] usbhid 6-1:0.0: can't add hid device: -71 [ 976.665731][T20625] usbhid: probe of 6-1:0.0 failed with error -71 [ 976.724358][T20625] usb 6-1: USB disconnect, device number 2 [ 977.291951][T22540] loop0: detected capacity change from 0 to 4096 [ 977.310967][T22540] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 977.399504][ T4264] Bluetooth: hci5: command 0x040f tx timeout [ 977.637640][T22549] 9pnet_fd: p9_fd_create_tcp (22549): problem connecting socket to 127.0.0.1 [ 978.105304][T22555] loop5: detected capacity change from 0 to 32768 [ 978.113226][T22555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.7766 (22555) [ 978.137265][T22555] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 978.150581][T22555] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 978.162891][T22555] BTRFS info (device loop5): force clearing of disk cache [ 978.171616][T22555] BTRFS info (device loop5): force zlib compression, level 3 [ 978.182429][T22555] BTRFS info (device loop5): enabling auto defrag [ 978.188932][T22555] BTRFS info (device loop5): max_inline at 0 [ 978.216955][T22555] BTRFS info (device loop5): enabling disk space caching [ 978.224366][T22555] BTRFS info (device loop5): disk space caching is enabled [ 978.327369][T22559] loop0: detected capacity change from 0 to 32768 [ 978.384817][T22559] XFS (loop0): Mounting V5 Filesystem [ 978.390960][T22555] BTRFS info (device loop5): enabling ssd optimizations [ 978.402695][T22555] BTRFS info (device loop5): rebuilding free space tree [ 978.420829][T22555] BTRFS info (device loop5): disabling free space tree [ 978.428393][T22555] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 978.438656][T22555] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 978.449377][T22559] XFS (loop0): Ending clean mount [ 978.475428][T22559] XFS (loop0): Quotacheck needed: Please wait. [ 978.540372][T22410] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 978.540760][T22559] XFS (loop0): Quotacheck: Done. [ 978.755345][ T4249] XFS (loop0): Unmounting Filesystem [ 978.794138][ T26] audit: type=1400 audit(17793584.498:54): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=22587 comm="syz.5.7768" [ 979.475312][T22606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7780'. [ 979.484463][T22606] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7780'. [ 979.609774][T22612] netlink: 'syz.5.7782': attribute type 2 has an invalid length. [ 979.628262][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 979.634598][T22612] netlink: 'syz.5.7782': attribute type 3 has an invalid length. [ 979.791429][T22620] device bridge1 entered promiscuous mode [ 980.100862][T22632] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7791'. [ 980.433590][T22646] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 980.444872][T22646] XFS (loop0): SB validate failed with error -5. [ 980.590718][T22654] loop5: detected capacity change from 0 to 256 [ 980.656962][T22654] FAT-fs (loop5): Directory bread(block 64) failed [ 980.681015][T22654] FAT-fs (loop5): Directory bread(block 65) failed [ 980.693402][T22654] FAT-fs (loop5): Directory bread(block 66) failed [ 980.709871][T22654] FAT-fs (loop5): Directory bread(block 67) failed [ 980.717538][T22654] FAT-fs (loop5): Directory bread(block 68) failed [ 980.724496][T22654] FAT-fs (loop5): Directory bread(block 69) failed [ 980.731118][T22654] FAT-fs (loop5): Directory bread(block 70) failed [ 980.738501][T22654] FAT-fs (loop5): Directory bread(block 71) failed [ 980.759982][T22654] FAT-fs (loop5): Directory bread(block 72) failed [ 980.776514][T22654] FAT-fs (loop5): Directory bread(block 73) failed [ 980.944907][ T4264] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 980.957082][ T4264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 980.966574][ T4264] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 980.974510][ T4264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 980.982377][ T4264] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 980.989654][ T4264] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 981.107427][T22664] loop5: detected capacity change from 0 to 512 [ 981.186996][T22664] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 981.261665][T22410] EXT4-fs (loop5): unmounting filesystem. [ 981.264347][T22657] chnl_net:caif_netlink_parms(): no params data found [ 981.322635][ T6957] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 981.416729][T22657] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.454559][T22657] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.465398][T22657] device bridge_slave_0 entered promiscuous mode [ 981.475884][T22657] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.483222][T22657] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.491487][T22657] device bridge_slave_1 entered promiscuous mode [ 981.536200][ T6957] usb 1-1: Using ep0 maxpacket: 8 [ 981.548488][ T6957] usb 1-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=af.02 [ 981.575367][ T6957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.592230][ T6957] usb 1-1: config 0 descriptor?? [ 981.602499][T22657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 981.636495][T22657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.706861][T22657] team0: Port device team_slave_0 added [ 981.726663][T22657] team0: Port device team_slave_1 added [ 981.818861][ T6957] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 981.838482][T22657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.845605][T22657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.872759][T22657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.888220][T22657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.906374][T22657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.954019][T22657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.047909][T22657] device hsr_slave_0 entered promiscuous mode [ 982.050549][ T6957] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 982.073881][T22657] device hsr_slave_1 entered promiscuous mode [ 982.080589][T22657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.089539][ T6957] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 982.089817][T22657] Cannot create hsr debugfs directory [ 982.123883][ T6957] asix: probe of 1-1:0.0 failed with error -71 [ 982.143418][ T6957] usb 1-1: USB disconnect, device number 95 [ 982.185738][ T4265] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 982.195455][ T4265] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 982.204631][ T4265] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 982.212444][ T4265] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 982.219945][ T4265] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 982.229185][ T4265] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 982.383305][T22657] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 982.397846][T22657] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 982.409528][T22657] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 982.419648][T22657] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 982.544448][T22657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.562079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 982.578572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 982.590953][T22686] chnl_net:caif_netlink_parms(): no params data found [ 982.609860][T22657] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.635433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 982.648799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 982.685267][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.692491][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.718255][T22691] loop0: detected capacity change from 0 to 256 [ 982.750116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 982.756932][T22691] FAT-fs (loop0): Directory bread(block 64) failed [ 982.764079][T22691] FAT-fs (loop0): Directory bread(block 65) failed [ 982.766494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 982.785686][T22691] FAT-fs (loop0): Directory bread(block 66) failed [ 982.796603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 982.813826][T22691] FAT-fs (loop0): Directory bread(block 67) failed [ 982.823521][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.830688][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.838618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 982.857728][T22691] FAT-fs (loop0): Directory bread(block 68) failed [ 982.878736][T22691] FAT-fs (loop0): Directory bread(block 69) failed [ 982.889964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 982.898456][T22691] FAT-fs (loop0): Directory bread(block 70) failed [ 982.907570][T22691] FAT-fs (loop0): Directory bread(block 71) failed [ 982.910643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 982.922181][T22691] FAT-fs (loop0): Directory bread(block 72) failed [ 982.933364][T22691] FAT-fs (loop0): Directory bread(block 73) failed [ 982.936597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 982.959123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 982.968065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 982.977353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 983.065486][T22686] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.077120][T22686] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.096236][T22686] device bridge_slave_0 entered promiscuous mode [ 983.129346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 983.137961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 983.153355][T22657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 983.183920][T22657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 983.201244][T22686] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.210535][T22686] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.219348][T20065] Bluetooth: hci6: command 0x0409 tx timeout [ 983.245879][T22686] device bridge_slave_1 entered promiscuous mode [ 983.258395][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 983.276423][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 983.393841][T22686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.417078][T22686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.522872][T22686] team0: Port device team_slave_0 added [ 983.538407][T22686] team0: Port device team_slave_1 added [ 983.585404][T22713] Cannot find add_set index 0 as target [ 983.620551][T22686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.642302][T22686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.706272][T22686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.727911][T22686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.734884][T22686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.866804][T22686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.897505][T22722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7823'. [ 983.915634][T22722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7823'. [ 983.930193][T22722] netlink: 'syz.0.7823': attribute type 6 has an invalid length. [ 983.961146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 983.973893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 984.020518][T22657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.063400][T22686] device hsr_slave_0 entered promiscuous mode [ 984.087303][T22686] device hsr_slave_1 entered promiscuous mode [ 984.113022][T22686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 984.120632][T22686] Cannot create hsr debugfs directory [ 984.154455][T22727] netlink: 'syz.0.7826': attribute type 2 has an invalid length. [ 984.416370][T20065] Bluetooth: hci7: command 0x0409 tx timeout [ 984.496902][T22686] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 984.525201][T22738] loop5: detected capacity change from 0 to 4096 [ 984.568436][T22738] ntfs: volume version 3.1. [ 984.574652][T22686] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 984.611384][T22686] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 984.634178][T22738] ntfs: (device loop5): ntfs_nlstoucs(): Name using character set cp936 contains characters that cannot be converted to Unicode. [ 984.670216][T22738] ntfs: (device loop5): ntfs_lookup(): Failed to convert name to Unicode. [ 984.671734][T22686] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 984.970855][T22747] loop0: detected capacity change from 0 to 256 [ 985.024326][T22686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.061010][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 985.105937][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 985.164001][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 985.175719][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 985.199845][T22686] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.230490][T22657] device veth0_vlan entered promiscuous mode [ 985.273182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 985.294732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 985.311493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 985.320365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 985.328247][T22757] loop5: detected capacity change from 0 to 512 [ 985.338990][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.347846][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.368637][T22757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 985.388807][T22757] EXT4-fs (loop5): orphan cleanup on readonly fs [ 985.400326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 985.410824][T22757] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.7838: bg 0: block 328: padding at end of block bitmap is not set [ 985.415884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 985.438293][T20065] Bluetooth: hci6: command 0x041b tx timeout [ 985.448048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 985.456211][T22757] EXT4-fs (loop5): Remounting filesystem read-only [ 985.462828][T22757] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 985.472582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 985.481626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 985.490198][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.497355][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.505433][T22757] EXT4-fs (loop5): Remounting filesystem read-only [ 985.512009][T22757] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.7838: invalid indirect mapped block 65280 (level 0) [ 985.530066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 985.538475][T22757] EXT4-fs (loop5): Remounting filesystem read-only [ 985.556081][T22757] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.7838: attempt to clear invalid blocks 33619980 len 1 [ 985.570820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 985.589202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 985.606899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 985.615061][T22757] EXT4-fs (loop5): Remounting filesystem read-only [ 985.631904][T22757] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.7838: invalid indirect mapped block 1819239214 (level 0) [ 985.650663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 985.668946][T22757] EXT4-fs (loop5): Remounting filesystem read-only [ 985.698896][T22657] device veth1_vlan entered promiscuous mode [ 985.714281][T22757] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.7838: invalid indirect mapped block 1819239214 (level 1) [ 985.718250][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 985.741367][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 985.750277][T22757] EXT4-fs (loop5): Remounting filesystem read-only [ 985.756952][T22757] EXT4-fs (loop5): 1 orphan inode deleted [ 985.767057][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 985.775134][T22757] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 985.784898][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 985.799782][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 985.808874][T22757] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.7838: Unrecognised inode hash code 15 [ 985.823792][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 985.834600][T22686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 985.845870][T22757] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.7838: Corrupt directory, running e2fsck is recommended [ 985.912175][T22657] device veth0_macvtap entered promiscuous mode [ 985.931151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 985.940622][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 985.962041][T22410] EXT4-fs (loop5): unmounting filesystem. [ 985.986839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 986.044114][T22657] device veth1_macvtap entered promiscuous mode [ 986.072828][T22764] netlink: 'syz.0.7848': attribute type 21 has an invalid length. [ 986.134227][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.190378][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.226982][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.243294][ T4265] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 986.256274][ T4265] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 986.272510][ T4265] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 986.282056][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.295525][ T4265] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 986.303244][ T4265] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 986.310725][ T4265] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 986.317917][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.400817][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.410691][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.497104][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.517896][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.539389][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.549272][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.560096][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.572213][T22657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.594907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 986.613643][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 986.638426][ T4265] Bluetooth: hci7: command 0x041b tx timeout [ 986.678616][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 986.700378][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.721845][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.742513][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.752989][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.763831][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.774291][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.817867][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.838664][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.848527][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.872519][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.892545][T22657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.913710][T22657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.926072][T22657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.933891][T22767] loop5: detected capacity change from 0 to 32768 [ 986.987910][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 987.013909][T22767] ERROR: (device loop5): duplicateIXtree: [ 987.013909][T22767] [ 987.014266][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 987.047445][T22657] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.058078][T22767] ERROR: (device loop5): remounting filesystem as read-only [ 987.065292][T22657] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.075547][T22657] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.087885][T22657] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.129730][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 987.137273][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 987.169149][T22686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.392789][ T7837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.416090][ T7837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.441905][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 987.506628][T22783] loop0: detected capacity change from 0 to 64 [ 987.551038][T22783] hfs: keylen 94 too large [ 987.597825][T22783] hfs: request for non-existent node 1818584064 in B*Tree [ 987.605998][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.634793][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.660520][T22783] hfs: request for non-existent node 1818584064 in B*Tree [ 987.668003][ T4265] Bluetooth: hci6: command 0x040f tx timeout [ 987.699020][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 987.751168][T22768] chnl_net:caif_netlink_parms(): no params data found [ 988.111779][T22768] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.148408][T22768] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.167829][T22768] device bridge_slave_0 entered promiscuous mode [ 988.185399][T22768] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.192982][T22768] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.212412][T22768] device bridge_slave_1 entered promiscuous mode [ 988.239936][T20835] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 988.281198][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 988.315998][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 988.383263][T22768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.423889][T22686] device veth0_vlan entered promiscuous mode [ 988.453911][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 988.462438][T20835] usb 1-1: Using ep0 maxpacket: 8 [ 988.470496][T20835] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 988.483789][T20835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.496160][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 988.505081][T20835] usb 1-1: config 0 has no interface number 0 [ 988.515897][T20835] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 988.519650][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 988.527144][ T4265] Bluetooth: hci8: command 0x0409 tx timeout [ 988.559635][T20835] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 988.572457][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 988.591948][T20835] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 988.605369][T20835] usb 1-1: config 0 interface 52 has no altsetting 0 [ 988.615305][T20835] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 988.630077][T20835] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 988.638555][T20835] usb 1-1: Product: syz [ 988.643092][T20835] usb 1-1: SerialNumber: syz [ 988.657926][T22768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.668487][T20835] usb 1-1: config 0 descriptor?? [ 988.674426][T22809] loop5: detected capacity change from 0 to 8 [ 988.681902][T22686] device veth1_vlan entered promiscuous mode [ 988.789693][T22768] team0: Port device team_slave_0 added [ 988.804692][T22800] loop6: detected capacity change from 0 to 32768 [ 988.818872][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 988.832104][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 988.845848][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 988.855331][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 988.863483][ T4265] Bluetooth: hci7: command 0x040f tx timeout [ 988.874476][T22686] device veth0_macvtap entered promiscuous mode [ 988.885039][T22768] team0: Port device team_slave_1 added [ 988.904326][T20835] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input77 [ 988.918207][T22800] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 988.927835][ T3608] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 988.928845][T22686] device veth1_macvtap entered promiscuous mode [ 988.946375][T22800] XFS (loop6): Mounting V5 Filesystem [ 988.977382][T22800] XFS (loop6): Ending clean mount [ 988.984797][T22800] XFS (loop6): Quotacheck needed: Please wait. [ 988.987412][ T3608] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 989.004671][T22768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.024914][T22768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.040980][T20625] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 989.066121][T22800] XFS (loop6): Quotacheck: Done. [ 989.076644][T22768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.085940][T19141] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 989.128692][T22768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.151716][T22768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.151774][ T3608] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 989.213950][ T6491] usb 1-1: USB disconnect, device number 96 [ 989.241672][T22768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.264833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 989.266334][T22657] XFS (loop6): Unmounting Filesystem [ 989.290223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 989.309916][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.320640][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.334642][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.346349][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.356261][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.361655][T20625] usb 6-1: Using ep0 maxpacket: 8 [ 989.366872][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.385060][T20625] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 989.385181][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.404345][T20625] usb 6-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 989.404411][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.414803][T20625] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 989.424557][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.424579][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.424608][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.449129][T20625] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 989.459509][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.484778][T20625] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 989.489029][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.510586][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.519123][T20625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.525255][T22686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.531602][T20625] usb 6-1: Product: syz [ 989.540345][T20625] usb 6-1: Manufacturer: syz [ 989.550204][T20625] usb 6-1: SerialNumber: syz [ 989.551708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 989.566490][T20625] usb 6-1: config 0 descriptor?? [ 989.574890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.595172][T20625] cdc_ncm 6-1:0.0: skipping garbage [ 989.597306][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.600795][T20625] cdc_ncm 6-1:0.0: CDC Union missing and no IAD found [ 989.617869][T20625] cdc_ncm 6-1:0.0: bind() failure [ 989.622748][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.656751][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.667361][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.678840][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.689384][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.699364][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.709884][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.720160][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.730696][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.740611][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.751146][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.761029][T22686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.771670][T22686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.801702][T22686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.809106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 989.843631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 989.885974][ T4265] Bluetooth: hci6: command 0x0419 tx timeout [ 989.899853][ T9744] usb 6-1: USB disconnect, device number 3 [ 989.966982][T22686] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.986178][T22686] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.005306][T22686] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.024502][T22686] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.083997][T22819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.196040][T22768] device hsr_slave_0 entered promiscuous mode [ 990.229217][T22768] device hsr_slave_1 entered promiscuous mode [ 990.259894][T22768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.279717][T22768] Cannot create hsr debugfs directory [ 990.617526][T22836] Illegal XDP return value 4294967262 on prog (id 513) dev N/A, expect packet loss! [ 990.630517][ T7837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.655065][ T7837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.699340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 990.741214][ T4265] Bluetooth: hci8: command 0x041b tx timeout [ 990.777055][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.806434][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.856919][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 990.882809][T22768] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 990.926703][T22768] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 990.948079][ T26] audit: type=1326 audit(17793595.863:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22841 comm="syz.5.7866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056418d169 code=0x7ffc0000 [ 991.001138][T22768] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 991.014430][ T26] audit: type=1326 audit(17793595.873:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22841 comm="syz.5.7866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f056418d169 code=0x7ffc0000 [ 991.020496][T22768] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 991.055689][ T26] audit: type=1326 audit(17793595.873:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22841 comm="syz.5.7866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056418d169 code=0x7ffc0000 [ 991.083149][ T4265] Bluetooth: hci7: command 0x0419 tx timeout [ 991.202517][ T26] audit: type=1326 audit(17793595.873:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22841 comm="syz.5.7866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056418d169 code=0x7ffc0000 [ 991.461191][T22768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.504695][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 991.541848][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 991.554237][T22859] loop5: detected capacity change from 0 to 1024 [ 991.569098][T22768] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.609388][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 991.647496][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 991.680898][T22859] hfsplus: request for non-existent node 768 in B*Tree [ 991.689940][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.697114][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.713578][T22859] hfsplus: request for non-existent node 768 in B*Tree [ 991.725055][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 991.763526][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 991.799447][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 991.829949][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.837154][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.899688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 991.917119][ T34] hfsplus: b-tree write err: -5, ino 4 [ 991.969064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 992.007948][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 992.041081][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 992.081927][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 992.111806][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.118146][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.125057][ T26] audit: type=1326 audit(17793596.958:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.7.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d77d8d169 code=0x7ffc0000 [ 992.152410][ T26] audit: type=1326 audit(17793596.958:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.7.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f7d77d8d169 code=0x7ffc0000 [ 992.160357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 992.175349][ T26] audit: type=1326 audit(17793596.958:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.7.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d77d8d169 code=0x7ffc0000 [ 992.211000][ T26] audit: type=1326 audit(17793596.958:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.7.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d77d8d169 code=0x7ffc0000 [ 992.238847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 992.329638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 992.340363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 992.380342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 992.409309][ T9744] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 992.427185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 992.466112][T22768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 992.499891][T22886] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7885'. [ 992.595479][T22889] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7887'. [ 992.622471][ T9744] usb 7-1: Using ep0 maxpacket: 8 [ 992.631039][ T9744] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.665652][ T9744] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 992.675404][T22891] loop5: detected capacity change from 0 to 2048 [ 992.708119][ T9744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.716166][ T9744] usb 7-1: Product: syz [ 992.762041][ T9744] usb 7-1: Manufacturer: syz [ 992.788366][ T9744] usb 7-1: SerialNumber: syz [ 992.805475][T22897] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 992.834696][ T9744] usb 7-1: config 0 descriptor?? [ 992.855580][ T9744] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 992.889818][T22891] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12 [ 992.918078][ T9744] usb 7-1: selecting invalid altsetting 1 [ 992.964703][T20065] Bluetooth: hci8: command 0x040f tx timeout [ 992.973940][T22891] Remounting filesystem read-only [ 992.994095][T22900] loop7: detected capacity change from 0 to 512 [ 993.038101][T22900] EXT4-fs: Ignoring removed oldalloc option [ 993.195229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 993.230042][T22900] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 993.240091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 993.286233][T22768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.300540][ T9744] usb 7-1: USB disconnect, device number 2 [ 993.428628][T22686] EXT4-fs (loop7): unmounting filesystem. [ 993.522597][T22914] rdma_rxe: rxe creation allowed on top of a real device only [ 993.902176][T22930] loop0: detected capacity change from 0 to 512 [ 993.954892][T22930] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 993.966793][T22930] EXT4-fs (loop0): orphan cleanup on readonly fs [ 993.988128][T22930] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 994.025420][T22934] netlink: 'syz.6.7901': attribute type 39 has an invalid length. [ 994.134475][T22930] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 994.180499][T22930] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.7900: Failed to acquire dquot type 1 [ 994.220919][T22930] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7900: bg 0: block 40: padding at end of block bitmap is not set [ 994.258312][T22930] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 994.285162][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 994.285835][T22930] EXT4-fs (loop0): 1 truncate cleaned up [ 994.305372][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 994.310154][T22930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 994.406845][T22768] device veth0_vlan entered promiscuous mode [ 994.448523][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 994.458413][ T1121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 994.491020][T22768] device veth1_vlan entered promiscuous mode [ 994.513055][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.523933][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.550442][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 994.569985][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 994.629568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 994.644461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 994.685133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 994.721069][T22768] device veth0_macvtap entered promiscuous mode [ 994.739981][T22945] device vxcan3 entered promiscuous mode [ 994.784119][T22768] device veth1_macvtap entered promiscuous mode [ 994.792613][ T6490] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 994.836546][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.857286][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.877945][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.899389][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.909358][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.963156][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.995013][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.019811][ T6490] usb 8-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 995.038412][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.048394][ T6490] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.070010][ T6490] usb 8-1: Product: syz [ 995.074398][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.085017][ T6490] usb 8-1: Manufacturer: syz [ 995.089650][ T6490] usb 8-1: SerialNumber: syz [ 995.095025][T22923] loop5: detected capacity change from 0 to 32768 [ 995.101624][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.113962][ T6490] usb 8-1: config 0 descriptor?? [ 995.121851][T22923] gfs2: fsid=([{{{+: Trying to join cluster "lock_nolock", "([{{{+" [ 995.143308][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.155028][T22923] gfs2: fsid=([{{{+: Now mounting FS (format 0)... [ 995.161797][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.179176][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.191487][T20065] Bluetooth: hci8: command 0x0419 tx timeout [ 995.214172][T22923] gfs2: fsid=([{{{+.0: journal 0 mapped with 22 extents in 0ms [ 995.224388][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.242454][T20623] gfs2: fsid=([{{{+.0: jid=0, already locked for use [ 995.252213][T20623] gfs2: fsid=([{{{+.0: jid=0: Looking at journal... [ 995.265648][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.305638][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.340114][T20623] gfs2: fsid=([{{{+.0: jid=0: Journal head lookup took 82ms [ 995.357764][T22768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.358618][ T6490] usb 8-1: USB disconnect, device number 2 [ 995.393107][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.412744][T20623] gfs2: fsid=([{{{+.0: jid=0: Done [ 995.416812][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 995.426475][T22923] gfs2: fsid=([{{{+.0: first mount done, others may mount [ 995.435093][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 995.483009][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.516149][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.538012][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.559881][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.579908][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.593458][T22943] loop6: detected capacity change from 0 to 32768 [ 995.601894][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.646369][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.678115][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.695782][T22947] loop0: detected capacity change from 0 to 32768 [ 995.712584][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.713412][T22947] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7907 (22947) [ 995.744310][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.765149][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.776234][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.788939][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.799853][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.803609][T22947] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 995.815213][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.831081][T22947] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 995.839763][T22947] BTRFS info (device loop0): using free space tree [ 995.846628][T22768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.863789][T22768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.909938][T22768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.924861][T22768] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.943144][T22768] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.006307][T22768] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.070320][T22768] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.135951][T22947] BTRFS info (device loop0): enabling ssd optimizations [ 996.155698][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 996.175472][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 996.433103][ T4249] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 996.451698][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.475995][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.590370][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 996.614177][ T7837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.674110][ T7837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.853718][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 997.205734][T22992] netlink: 'syz.5.7919': attribute type 10 has an invalid length. [ 997.241634][T22992] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 997.305367][T22992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 997.370207][T22996] netlink: 'syz.0.7913': attribute type 3 has an invalid length. [ 997.443141][T23000] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 997.635347][T23008] loop0: detected capacity change from 0 to 1024 [ 997.670872][T23008] EXT4-fs: Ignoring removed bh option [ 997.767219][T23008] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 997.863701][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 998.007675][T23022] loop0: detected capacity change from 0 to 256 [ 998.030432][ T6957] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 998.094748][T23022] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 998.164121][T23022] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 998.182830][T23022] exFAT-fs (loop0): Filesystem has been set read-only [ 998.227644][ T6957] usb 6-1: unable to get BOS descriptor or descriptor too short [ 998.257422][ T6957] usb 6-1: config 247 has an invalid interface number: 141 but max is 0 [ 998.265827][ T6957] usb 6-1: config 247 has no interface number 0 [ 998.308529][ T6957] usb 6-1: config 247 interface 141 has no altsetting 0 [ 998.370708][ T6957] usb 6-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 998.406881][ T6957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.414936][ T6957] usb 6-1: Product: syz [ 998.433225][ T6957] usb 6-1: Manufacturer: syz [ 998.438505][ T6957] usb 6-1: SerialNumber: syz [ 998.489657][T23034] netlink: 'syz.8.7938': attribute type 29 has an invalid length. [ 998.529786][T23034] netlink: 'syz.8.7938': attribute type 29 has an invalid length. [ 998.698985][ T6957] hso 6-1:247.141: Not our interface [ 998.736406][ T6957] usb 6-1: USB disconnect, device number 4 [ 998.788352][T23040] device vlan0 entered promiscuous mode [ 999.264047][T23061] loop7: detected capacity change from 0 to 64 [ 999.369780][T23061] syz.7.7950: attempt to access beyond end of device [ 999.369780][T23061] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 999.406056][T23061] Buffer I/O error on dev loop7, logical block 512, async page read [ 999.438316][T23061] syz.7.7950: attempt to access beyond end of device [ 999.438316][T23061] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 999.497635][T23061] Buffer I/O error on dev loop7, logical block 56576, async page read [ 999.749750][T23074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7956'. [ 1000.968854][T23119] loop5: detected capacity change from 0 to 256 [ 1000.995951][T23121] netlink: 'syz.0.7981': attribute type 10 has an invalid length. [ 1001.132891][T23119] FAT-fs (loop5): Directory bread(block 64) failed [ 1001.174992][T23119] FAT-fs (loop5): Directory bread(block 65) failed [ 1001.199135][T23119] FAT-fs (loop5): Directory bread(block 66) failed [ 1001.218905][T23119] FAT-fs (loop5): Directory bread(block 67) failed [ 1001.226462][T23119] FAT-fs (loop5): Directory bread(block 68) failed [ 1001.282505][T23119] FAT-fs (loop5): Directory bread(block 69) failed [ 1001.293109][T23119] FAT-fs (loop5): Directory bread(block 70) failed [ 1001.304905][T23119] FAT-fs (loop5): Directory bread(block 71) failed [ 1001.311552][T23119] FAT-fs (loop5): Directory bread(block 72) failed [ 1001.318985][T23119] FAT-fs (loop5): Directory bread(block 73) failed [ 1001.437733][T23105] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1001.450513][ T26] audit: type=1800 audit(17793605.685:63): pid=23119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7980" name="file1" dev="loop5" ino=1048616 res=0 errno=0 [ 1001.549205][ T22] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1001.762768][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 1001.770149][ T22] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 1001.811975][ T22] usb 1-1: config 0 has no interface number 0 [ 1001.820127][ T22] usb 1-1: config 0 interface 110 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1001.856632][ T22] usb 1-1: New USB device found, idVendor=0f11, idProduct=20a0, bcdDevice=8e.7e [ 1001.891877][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.902079][ T22] usb 1-1: Product: syz [ 1001.915168][ T22] usb 1-1: Manufacturer: syz [ 1001.934483][ T22] usb 1-1: SerialNumber: syz [ 1001.962779][ T22] usb 1-1: config 0 descriptor?? [ 1001.977779][ T22] ldusb 1-1:0.110: Interrupt in endpoint not found [ 1002.094168][ T6958] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1002.192173][ T22] usb 1-1: USB disconnect, device number 97 [ 1002.243965][T20835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1002.276096][T20625] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1002.297264][ T6958] usb 6-1: Using ep0 maxpacket: 16 [ 1002.305646][ T6958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1002.338403][ T6958] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1002.352381][ T6958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.360433][ T6958] usb 6-1: Product: syz [ 1002.365165][ T6958] usb 6-1: Manufacturer: syz [ 1002.370919][ T6958] usb 6-1: SerialNumber: syz [ 1002.381336][ T6958] usb 6-1: config 0 descriptor?? [ 1002.402970][ T6958] hub 6-1:0.0: bad descriptor, ignoring hub [ 1002.413676][ T6958] hub: probe of 6-1:0.0 failed with error -5 [ 1002.434797][ T6958] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input78 [ 1002.470381][T20835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1002.481152][T20625] usb 8-1: Using ep0 maxpacket: 32 [ 1002.488925][T20625] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1002.515298][T20625] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1002.529005][T20835] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1002.559577][T20625] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1002.560328][T20835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.581176][T20625] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.599849][T20625] usb 8-1: config 0 descriptor?? [ 1002.609821][T20835] usb 7-1: Product: syz [ 1002.614022][T20835] usb 7-1: Manufacturer: syz [ 1002.616172][T23147] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1002.630143][T20625] hub 8-1:0.0: USB hub found [ 1002.647842][T20835] usb 7-1: SerialNumber: syz [ 1002.664238][T20835] usb 7-1: config 0 descriptor?? [ 1002.758441][T23150] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7994'. [ 1002.833960][ T22] usb 6-1: USB disconnect, device number 5 [ 1002.867733][T20625] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1002.914929][T20625] usbhid 8-1:0.0: can't add hid device: -71 [ 1002.959829][T20625] usbhid: probe of 8-1:0.0 failed with error -71 [ 1003.017681][T20625] usb 8-1: USB disconnect, device number 3 [ 1003.157373][ T129] usb 7-1: USB disconnect, device number 3 [ 1003.468143][T23165] loop8: detected capacity change from 0 to 256 [ 1003.517247][T23165] exfat: Deprecated parameter 'namecase' [ 1003.585485][T23165] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1003.623041][T20835] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1003.851295][T20835] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1003.882380][T20835] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.916509][T20835] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1003.963531][T20835] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1004.005157][T20835] usb 1-1: Product: syz [ 1004.034688][T20835] usb 1-1: Manufacturer: syz [ 1004.059061][T20835] hub 1-1:4.0: USB hub found [ 1004.272378][T20835] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 1004.382196][T23187] netlink: 476 bytes leftover after parsing attributes in process `syz.6.8011'. [ 1004.605211][T23193] xt_l2tp: wrong L2TP version: 0 [ 1004.613056][T23194] netlink: 404 bytes leftover after parsing attributes in process `syz.6.8013'. [ 1004.650000][ T6958] usb 1-1: USB disconnect, device number 98 [ 1004.657336][T23194] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8013'. [ 1004.673430][T23194] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8013'. [ 1004.684880][T23194] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8013'. [ 1004.909446][T23173] loop7: detected capacity change from 0 to 32768 [ 1004.915256][T23200] loop8: detected capacity change from 0 to 256 [ 1004.988996][T23173] ERROR: (device loop7): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 1004.988996][T23173] [ 1005.066351][T23173] ERROR: (device loop7): remounting filesystem as read-only [ 1005.137176][T23173] ERROR: (device loop7): jfs_rename: [ 1005.137176][T23173] [ 1005.287487][T23211] dlm: no locking on control device [ 1005.302131][T22686] ERROR: (device loop7): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1005.302131][T22686] [ 1005.807067][T23228] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8023'. [ 1005.854785][T23228] unsupported nlmsg_type 40 [ 1005.915184][T23223] xt_CT: No such helper "syz0" [ 1006.846397][T23269] xt_TCPMSS: Only works on TCP SYN packets [ 1006.862942][T23267] loop7: detected capacity change from 0 to 256 [ 1006.869969][T23267] exfat: Deprecated parameter 'namecase' [ 1006.952599][T23267] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1007.752782][T23304] loop6: detected capacity change from 0 to 128 [ 1007.810626][T23304] befs: (loop6): invalid magic header [ 1008.352392][T23322] loop0: detected capacity change from 0 to 2048 [ 1008.393132][T23322] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1008.416875][T23327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8077'. [ 1008.446272][T23322] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1008.487722][T23322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1008.834423][T23332] loop8: detected capacity change from 0 to 4096 [ 1008.927534][T23332] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1008.995672][T23310] loop5: detected capacity change from 0 to 32768 [ 1009.119581][T23332] EXT4-fs error (device loop8): ext4_empty_dir:3154: inode #12: block 80: comm syz.8.8081: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1009.175535][T23310] ERROR: (device loop5): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 1009.175535][T23310] [ 1009.207666][T23332] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #12: comm syz.8.8081: directory missing '..' [ 1009.256935][T23310] ERROR: (device loop5): remounting filesystem as read-only [ 1009.277128][T23310] ERROR: (device loop5): jfs_rename: [ 1009.277128][T23310] [ 1009.342254][T22768] EXT4-fs (loop8): unmounting filesystem. [ 1009.435769][T22410] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1009.435769][T22410] [ 1009.953779][T23372] loop0: detected capacity change from 0 to 64 [ 1010.174115][T23381] netlink: 'syz.5.8103': attribute type 21 has an invalid length. [ 1010.461326][T23395] loop6: detected capacity change from 0 to 8 [ 1010.632147][T23399] Cannot find set identified by id 0 to match [ 1010.807008][ T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1011.021036][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 1011.041471][ T22] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1011.068749][ T22] usb 7-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 1011.106494][ T22] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 1011.126423][ T22] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1011.183600][ T22] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1011.220320][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.247530][ T22] usb 7-1: Product: syz [ 1011.274103][ T22] usb 7-1: Manufacturer: syz [ 1011.298889][ T22] usb 7-1: SerialNumber: syz [ 1011.319292][ T22] usb 7-1: config 0 descriptor?? [ 1011.364239][ T22] cdc_ncm 7-1:0.0: skipping garbage [ 1011.369549][ T22] cdc_ncm 7-1:0.0: CDC Union missing and no IAD found [ 1011.370232][T23425] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8126'. [ 1011.403846][ T22] cdc_ncm 7-1:0.0: bind() failure [ 1011.587680][ T6495] usb 7-1: USB disconnect, device number 4 [ 1012.057310][T23439] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1012.083427][T23423] loop0: detected capacity change from 0 to 32768 [ 1012.101935][T23423] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.8125 (23423) [ 1012.186443][T23423] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1012.225717][T23423] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1012.271895][T23423] BTRFS info (device loop0): turning off barriers [ 1012.300110][T23423] BTRFS info (device loop0): turning on sync discard [ 1012.330725][T23423] BTRFS info (device loop0): use zlib compression, level 3 [ 1012.347791][T23423] BTRFS info (device loop0): ignoring data csums [ 1012.367903][T23423] BTRFS info (device loop0): metadata ratio 1 [ 1012.374034][T23423] BTRFS info (device loop0): force zlib compression, level 3 [ 1012.427379][T23423] BTRFS info (device loop0): using free space tree [ 1012.681983][T23423] BTRFS info (device loop0: state C): enabling ssd optimizations [ 1013.167544][T23482] IPv6: sit1: Disabled Multicast RS [ 1013.174059][ T4249] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1013.227245][T23484] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1013.351642][T23484] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1013.577840][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8150'. [ 1013.918450][ T6495] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1014.121163][ T6495] usb 8-1: Using ep0 maxpacket: 8 [ 1014.128128][ T6495] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1014.155259][T23511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8159'. [ 1014.165694][ T6495] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1014.198314][ T6495] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1014.216320][ T6495] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1014.265440][ T6495] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1014.289707][ T6495] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1014.309171][ T6495] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.333933][ T6495] usb 8-1: config 0 descriptor?? [ 1014.340372][T23493] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1014.455253][T23520] loop8: detected capacity change from 0 to 16 [ 1014.467486][T23520] erofs: (device loop8): mounted with root inode @ nid 36. [ 1014.499262][T23520] erofs: (device loop8): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1014.528410][T23520] erofs: (device loop8): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 1014.585987][T23520] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 1014.734218][T23524] loop0: detected capacity change from 0 to 512 [ 1014.806858][T23524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1014.853163][ T22] usb 8-1: USB disconnect, device number 4 [ 1014.862159][ T4265] Bluetooth: hci9: Opcode 0x0c03 failed: -19 [ 1014.912898][T23524] EXT4-fs (loop0): 1 truncate cleaned up [ 1014.918600][T23524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1014.986961][T23534] loop5: detected capacity change from 0 to 256 [ 1014.996570][T23534] exfat: Deprecated parameter 'namecase' [ 1015.002764][T23534] exfat: Deprecated parameter 'utf8' [ 1015.048679][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 1015.055492][T23534] exfat: Deprecated parameter 'namecase' [ 1015.141594][T23534] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1016.070474][T23568] loop6: detected capacity change from 0 to 512 [ 1016.111883][T23568] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1016.201032][T23568] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.8184: bad orphan inode 16 [ 1016.222804][T23568] ext4_test_bit(bit=15, block=4) = 0 [ 1016.229117][T23568] EXT4-fs (loop6): 1 orphan inode deleted [ 1016.235084][T23568] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1016.281161][T23568] EXT4-fs error (device loop6): __ext4_new_inode:1075: comm syz.6.8184: reserved inode found cleared - inode=1 [ 1016.339918][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8190'. [ 1016.494855][T22657] EXT4-fs (loop6): unmounting filesystem. [ 1016.691364][T23593] loop0: detected capacity change from 0 to 512 [ 1016.761478][T23593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1016.803089][T23593] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.8198: invalid size [ 1016.900831][ T6491] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1016.977045][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 1017.103843][ T6491] usb 7-1: Using ep0 maxpacket: 32 [ 1017.114292][ T6491] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1017.126530][ T6491] usb 7-1: config 0 has no interface number 0 [ 1017.135193][ T6491] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1017.145065][ T6491] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.155241][ T6491] usb 7-1: Product: syz [ 1017.167702][ T6491] usb 7-1: Manufacturer: syz [ 1017.174981][ T6491] usb 7-1: SerialNumber: syz [ 1017.204306][ T6491] usb 7-1: config 0 descriptor?? [ 1017.223762][ T6491] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1017.232759][ T6491] usb 7-1: selecting invalid altsetting 1 [ 1017.254444][ T6491] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1017.269532][ T6491] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1017.281172][ T6491] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1017.297950][ T6491] usb 7-1: media controller created [ 1017.308514][T23607] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 1, id = 0 [ 1017.333309][ T6491] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1017.655050][ T6491] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1017.748778][ T6491] usb 7-1: USB disconnect, device number 5 [ 1017.954697][ T26] audit: type=1326 audit(17793621.119:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23622 comm="syz.7.8211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d77d8d169 code=0x7ffc0000 [ 1018.010075][ T26] audit: type=1326 audit(17793621.119:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23622 comm="syz.7.8211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d77d8d169 code=0x7ffc0000 [ 1018.070920][T23625] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8212'. [ 1018.091576][ T26] audit: type=1326 audit(17793621.156:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23622 comm="syz.7.8211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7d77d8d169 code=0x7ffc0000 [ 1018.117165][ T26] audit: type=1326 audit(17793621.156:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23622 comm="syz.7.8211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d77d8d169 code=0x7ffc0000 [ 1018.142191][ T26] audit: type=1326 audit(17793621.156:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23622 comm="syz.7.8211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d77d8d169 code=0x7ffc0000 [ 1018.164304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.197922][T23627] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8213'. [ 1018.681056][T23643] loop6: detected capacity change from 0 to 164 [ 1018.811724][T23649] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8224'. [ 1018.856548][T23648] loop8: detected capacity change from 0 to 1024 [ 1019.230634][ T26] audit: type=1326 audit(17793622.316:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23662 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9d58d169 code=0x7ffc0000 [ 1019.277301][T23665] syz.7.8232 (23665): /proc/23663/oom_adj is deprecated, please use /proc/23663/oom_score_adj instead. [ 1019.357255][ T26] audit: type=1326 audit(17793622.363:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23662 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fea9d58d169 code=0x7ffc0000 [ 1019.445158][ T26] audit: type=1326 audit(17793622.363:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23662 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9d58d169 code=0x7ffc0000 [ 1019.544009][T23667] loop8: detected capacity change from 0 to 4096 [ 1019.550575][ T26] audit: type=1326 audit(17793622.363:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23662 comm="syz.0.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea9d58d169 code=0x7ffc0000 [ 1019.584050][T23674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8237'. [ 1019.626097][T23667] ntfs: (device loop8): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1019.665473][T23667] ntfs: volume version 3.1. [ 1019.824349][T23679] loop6: detected capacity change from 0 to 1024 [ 1019.997594][T23679] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1020.108097][T23679] EXT4-fs error (device loop6): ext4_xattr_set_entry:1619: inode #15: comm syz.6.8239: corrupted xattr entries [ 1020.381324][T22657] EXT4-fs (loop6): unmounting filesystem. [ 1021.373790][T23733] loop0: detected capacity change from 0 to 4096 [ 1021.450805][T23708] loop8: detected capacity change from 0 to 32768 [ 1021.550024][T23708] ERROR: (device loop8): diNewExt: no free extents [ 1021.550024][T23708] [ 1021.599301][T23708] ERROR: (device loop8): remounting filesystem as read-only [ 1021.643555][T23708] ialloc: diAlloc returned -5! [ 1022.353883][T23765] loop5: detected capacity change from 0 to 4096 [ 1022.374383][ T6491] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1022.383226][T23765] ntfs3: loop5: ino=3, Correct links count -> 2. [ 1022.399076][T23765] ntfs3: loop5: Failed to load $Volume. [ 1022.470211][ T4339] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1022.502677][ T6495] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1022.588894][T23778] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1022.606662][ T6491] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 1022.620207][ T6491] usb 8-1: config 0 has no interface number 0 [ 1022.651355][ T6491] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1022.692166][ T6491] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1022.705841][ T6495] usb 9-1: Using ep0 maxpacket: 32 [ 1022.713493][ T6495] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1022.729739][ T6491] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1022.747550][ T6495] usb 9-1: config 0 has no interface number 0 [ 1022.754164][ T6491] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.767577][ T6495] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1022.787833][ T6491] usb 8-1: Product: syz [ 1022.793587][ T6495] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.816433][ T6491] usb 8-1: Manufacturer: syz [ 1022.821087][ T6491] usb 8-1: SerialNumber: syz [ 1022.836977][ T6495] usb 9-1: Product: syz [ 1022.842347][ T6495] usb 9-1: Manufacturer: syz [ 1022.866955][ T6491] usb 8-1: config 0 descriptor?? [ 1022.892341][ T6495] usb 9-1: SerialNumber: syz [ 1022.903751][T23761] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1022.915037][ T6495] usb 9-1: config 0 descriptor?? [ 1022.923017][ T6491] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1022.956962][ T6495] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1022.967094][ T6491] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1022.987006][ T6495] usb 9-1: selecting invalid altsetting 1 [ 1023.036181][ T6495] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1023.113039][ T6495] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1023.143257][ T6495] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1023.204608][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1023.220467][T23793] loop5: detected capacity change from 0 to 512 [ 1023.227055][ T6495] usb 9-1: media controller created [ 1023.266636][ T6495] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1023.305532][T23793] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1023.343710][T23793] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.8288: corrupted in-inode xattr [ 1023.420252][ T6957] usb 8-1: USB disconnect, device number 5 [ 1023.426921][T23793] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.8288: couldn't read orphan inode 15 (err -117) [ 1023.439720][ T6957] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1023.468326][ T6957] cyberjack 8-1:0.69: device disconnected [ 1023.481219][T23793] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1023.583965][ T6495] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1023.662503][T22410] EXT4-fs (loop5): unmounting filesystem. [ 1023.702867][ T6495] usb 9-1: USB disconnect, device number 2 [ 1024.101646][T23818] loop6: detected capacity change from 0 to 128 [ 1024.242836][T23820] loop7: detected capacity change from 0 to 2048 [ 1024.270865][T23824] loop0: detected capacity change from 0 to 512 [ 1024.284523][T23820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1024.333106][T23824] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1024.418396][T23824] EXT4-fs (loop0): 1 truncate cleaned up [ 1024.427093][T23824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1024.495356][T23830] loop8: detected capacity change from 0 to 256 [ 1024.679308][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 1024.892834][T23844] libceph: resolve '40.' (ret=-3): failed [ 1025.206639][T23855] loop7: detected capacity change from 0 to 764 [ 1025.336790][T23855] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1025.396353][T23855] Symlink component flag not implemented [ 1025.434885][T23855] Symlink component flag not implemented (122) [ 1026.180480][T23885] netlink: 'syz.8.8334': attribute type 21 has an invalid length. [ 1026.212406][T23885] netlink: 128 bytes leftover after parsing attributes in process `syz.8.8334'. [ 1026.228216][T23885] netlink: 'syz.8.8334': attribute type 4 has an invalid length. [ 1026.276846][T23885] netlink: 'syz.8.8334': attribute type 5 has an invalid length. [ 1026.308605][T23885] netlink: 3 bytes leftover after parsing attributes in process `syz.8.8334'. [ 1026.852961][T23912] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1026.859537][T23912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1026.878526][T23912] vhci_hcd vhci_hcd.0: Device attached [ 1027.050411][T23912] loop6: detected capacity change from 0 to 4096 [ 1027.090012][T23912] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 1027.177849][T20835] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1027.305968][T23913] vhci_hcd: connection reset by peer [ 1027.311700][ T5406] vhci_hcd: stop threads [ 1027.317867][ T5406] vhci_hcd: release socket [ 1027.338882][ T5406] vhci_hcd: disconnect device [ 1027.516138][T23930] loop7: detected capacity change from 0 to 4096 [ 1027.535209][T23935] loop0: detected capacity change from 0 to 8 [ 1027.565267][T23930] ntfs3: loop7: ino=3, Correct links count -> 2. [ 1027.572533][T23935] SQUASHFS error: Unable to read inode 0xe3 [ 1027.602480][T23930] ntfs3: loop7: Failed to load $Volume. [ 1027.810524][T23941] loop8: detected capacity change from 0 to 256 [ 1027.833729][T23945] device gretap0 entered promiscuous mode [ 1027.857802][T23941] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1027.912636][T23945] netlink: 'syz.7.8362': attribute type 2 has an invalid length. [ 1027.955168][T23945] netlink: 9 bytes leftover after parsing attributes in process `syz.7.8362'. [ 1027.980666][T23941] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 1028.070015][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 1028.070033][ T26] audit: type=1800 audit(17793630.585:73): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8361" name="file0" dev="loop8" ino=1048621 res=0 errno=0 [ 1028.566292][ T93] block nbd7: Attempted send on invalid socket [ 1028.572563][ T93] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1028.797666][T23980] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8377'. [ 1028.824980][T23976] loop8: detected capacity change from 0 to 4096 [ 1028.838751][T23980] netlink: 'syz.0.8377': attribute type 1 has an invalid length. [ 1028.861535][T23976] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1029.030652][T23984] IPVS: length: 182 != 8 [ 1029.041716][T23976] ntfs3: loop8: failed to convert "c46c" to macceltic [ 1029.390768][T23995] loop6: detected capacity change from 0 to 2048 [ 1029.437828][T23995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1029.953864][ T6958] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1030.170725][ T6958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1030.199725][ T6958] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1030.231108][ T6958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1030.252680][ T6958] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1030.273610][ T6958] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1030.301007][ T6958] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.323891][T24021] loop0: detected capacity change from 0 to 4096 [ 1030.326033][ T6958] usb 9-1: config 0 descriptor?? [ 1030.365329][T24021] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1030.468071][T24021] ntfs: volume version 3.1. [ 1030.522486][T24021] ntfs: (device loop0): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 1030.559512][ T6958] hdpvr 9-1:0.0: firmware version 0x34 dated .:&ij &usR,[L", [ 1030.591492][ T6958] hdpvr 9-1:0.0: untested firmware, the driver might not work. [ 1030.623472][T24032] netlink: 'syz.7.8401': attribute type 1 has an invalid length. [ 1030.640027][T24032] netlink: 'syz.7.8401': attribute type 1 has an invalid length. [ 1030.784907][ T6958] hdpvr 9-1:0.0: device init failed [ 1030.798217][ T6958] hdpvr: probe of 9-1:0.0 failed with error -12 [ 1030.841387][ T6958] usb 9-1: USB disconnect, device number 3 [ 1030.844963][T24038] loop5: detected capacity change from 0 to 164 [ 1031.215484][T20625] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1031.382187][T24050] loop5: detected capacity change from 0 to 32768 [ 1031.412571][T24050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.8409 (24050) [ 1031.427114][T20625] usb 1-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 1031.459290][T20625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 10 [ 1031.486420][T24054] loop7: detected capacity change from 0 to 256 [ 1031.507899][T20625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24677, setting to 1024 [ 1031.514641][T24050] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1031.534826][T20625] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1031.557696][T24050] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1031.566401][T24050] BTRFS info (device loop5): enabling disk space caching [ 1031.578923][T24050] BTRFS info (device loop5): enabling auto defrag [ 1031.585450][T24050] BTRFS info (device loop5): doing ref verification [ 1031.596582][T24054] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1031.630488][T20625] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1031.640866][T24050] BTRFS info (device loop5): use no compression [ 1031.662094][T24050] BTRFS info (device loop5): force clearing of disk cache [ 1031.678093][T20625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.696414][T24050] BTRFS info (device loop5): turning on sync discard [ 1031.704793][T24050] BTRFS info (device loop5): disabling disk space caching [ 1031.715122][T20625] usb 1-1: config 0 descriptor?? [ 1031.900174][T24050] BTRFS info (device loop5): enabling ssd optimizations [ 1031.914616][T24050] BTRFS info (device loop5): rebuilding free space tree [ 1031.957990][T20625] ath6kl: Failed to submit usb control message: -71 [ 1031.982146][T20625] ath6kl: unable to send the bmi data to the device: -71 [ 1031.996957][T24050] BTRFS info (device loop5): disabling free space tree [ 1032.024064][T20625] ath6kl: Unable to send get target info: -71 [ 1032.032779][T24050] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1032.045002][T24050] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1032.057783][T20625] ath6kl: Failed to init ath6kl core: -71 [ 1032.116591][T24050] BTRFS info (device loop5: state M): enabling disk space caching [ 1032.139561][T24050] BTRFS info (device loop5: state M): doing ref verification [ 1032.209700][T24050] BTRFS info (device loop5: state M): use no compression [ 1032.217044][T20625] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 1032.218787][T24050] BTRFS info (device loop5: state M): force clearing of disk cache [ 1032.254075][T24050] BTRFS info (device loop5: state M): disabling disk space caching [ 1032.302969][T20625] usb 1-1: USB disconnect, device number 99 [ 1032.512334][T22410] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1032.658761][T20835] vhci_hcd: vhci_device speed not set [ 1032.897480][T24093] loop7: detected capacity change from 0 to 4096 [ 1032.961506][T24093] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 1033.053496][T24099] loop6: detected capacity change from 0 to 4096 [ 1033.062771][T24093] ntfs3: loop7: failed to convert "c46c" to macceltic [ 1033.862620][T24125] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8437'. [ 1033.894170][T24125] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8437'. [ 1033.973248][T24129] loop6: detected capacity change from 0 to 1024 [ 1034.179585][T24137] device netdevsim0 entered promiscuous mode [ 1034.202531][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8442'. [ 1034.230168][T24139] netlink: 'syz.8.8444': attribute type 10 has an invalid length. [ 1034.389058][T24139] team0: Port device dummy0 added [ 1034.607411][T24152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8450'. [ 1034.950189][T24164] xt_HMARK: spi-set and port-set can't be combined [ 1035.060642][T24167] loop7: detected capacity change from 0 to 512 [ 1035.091223][T24167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1035.180569][T24167] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1035.493736][T22686] EXT4-fs (loop7): unmounting filesystem. [ 1035.720647][T24153] loop6: detected capacity change from 0 to 32768 [ 1035.768200][T24153] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1035.790585][T24153] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1035.941392][T22657] ocfs2: Unmounting device (7,6) on (node local) [ 1036.351047][T24214] netlink: 'syz.6.8478': attribute type 10 has an invalid length. [ 1036.556725][T24214] team0: Port device dummy0 added [ 1036.840582][T24232] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 1036.999856][T24232] device bond1 entered promiscuous mode [ 1037.005835][T24232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1037.216149][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8492'. [ 1037.546602][T24252] loop0: detected capacity change from 0 to 4096 [ 1037.554522][T24256] tmpfs: Bad value for 'mpol' [ 1037.574489][T24258] loop8: detected capacity change from 0 to 256 [ 1037.651177][T24262] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1037.726184][T24258] FAT-fs (loop8): Directory bread(block 64) failed [ 1037.778956][T24258] FAT-fs (loop8): Directory bread(block 65) failed [ 1037.785975][T24252] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 1037.791868][T24260] loop6: detected capacity change from 0 to 4096 [ 1037.806807][T24258] FAT-fs (loop8): Directory bread(block 66) failed [ 1037.823910][T24258] FAT-fs (loop8): Directory bread(block 67) failed [ 1037.832006][T24258] FAT-fs (loop8): Directory bread(block 68) failed [ 1037.833552][T24252] Remounting filesystem read-only [ 1037.856910][T24260] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1037.875237][T24258] FAT-fs (loop8): Directory bread(block 69) failed [ 1037.914992][T24258] FAT-fs (loop8): Directory bread(block 70) failed [ 1037.929341][T24258] FAT-fs (loop8): Directory bread(block 71) failed [ 1037.940263][T24258] FAT-fs (loop8): Directory bread(block 72) failed [ 1037.958195][T24260] ntfs: volume version 3.1. [ 1037.958493][T24258] FAT-fs (loop8): Directory bread(block 73) failed [ 1038.047453][T24260] ntfs: (device loop6): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 1038.086292][T24268] loop7: detected capacity change from 0 to 4096 [ 1038.128196][T24268] ntfs: (device loop7): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 1038.148730][ T129] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1038.181058][T24268] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1038.204836][T24268] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1038.258681][T24268] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1038.284619][T24268] ntfs: volume version 3.1. [ 1038.306208][T24268] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 1038.353981][T24268] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1038.377133][ T129] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.399427][ T129] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1038.422255][ T129] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1038.441654][T24268] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 1038.453020][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.461035][ T129] usb 6-1: Product: syz [ 1038.474322][T24268] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1038.506937][ T129] usb 6-1: Manufacturer: syz [ 1038.511592][ T129] usb 6-1: SerialNumber: syz [ 1038.567938][T24280] device netdevsim0 entered promiscuous mode [ 1038.614956][T24280] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1038.755010][ T129] usb 6-1: 0:2 : does not exist [ 1038.771886][T24284] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8513'. [ 1038.831329][ T129] usb 6-1: USB disconnect, device number 6 [ 1039.139975][ T4339] udevd[4339]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1039.221010][T24300] loop0: detected capacity change from 0 to 1024 [ 1039.434418][ T34] hfsplus: b-tree write err: -5, ino 4 [ 1039.444126][T24306] loop6: detected capacity change from 0 to 2048 [ 1039.515590][T24307] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1039.640037][ T129] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1039.789777][T24319] netlink: 'syz.5.8530': attribute type 10 has an invalid length. [ 1039.878807][ T129] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1039.899859][T24319] team0: Port device dummy0 added [ 1039.909206][ T129] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.968792][ T129] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1039.986633][T24323] loop7: detected capacity change from 0 to 64 [ 1039.989432][ T129] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.060030][ T129] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.100664][ T129] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1040.109770][ T129] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1040.141428][ T129] usb 9-1: Product: syz [ 1040.149512][ T129] usb 9-1: Manufacturer: syz [ 1040.187761][ T129] cdc_wdm 9-1:1.0: skipping garbage [ 1040.226462][ T129] cdc_wdm 9-1:1.0: skipping garbage [ 1040.266429][ T129] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1040.287987][ T129] cdc_wdm 9-1:1.0: Unknown control protocol [ 1040.402942][T24302] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 1040.434930][ T22] usb 9-1: USB disconnect, device number 4 [ 1040.613237][T24313] loop0: detected capacity change from 0 to 32768 [ 1040.926463][T24345] netlink: 'syz.7.8544': attribute type 10 has an invalid length. [ 1041.053786][T24345] team0: Port device dummy0 added [ 1041.177692][T24353] loop5: detected capacity change from 0 to 16 [ 1041.231149][T24353] erofs: (device loop5): mounted with root inode @ nid 36. [ 1041.279522][T24353] syz.5.8547: attempt to access beyond end of device [ 1041.279522][T24353] loop5: rw=0, sector=48, nr_sectors = 16 limit=16 [ 1041.774306][T24372] netlink: 'syz.0.8566': attribute type 10 has an invalid length. [ 1041.861435][T24372] team0: Cannot enslave team device to itself [ 1041.949623][T24376] loop7: detected capacity change from 0 to 1024 [ 1042.009141][T24376] ================================================================== [ 1042.017275][T24376] BUG: KASAN: use-after-free in __ext4_iget+0x2ee/0x3ee0 [ 1042.024342][T24376] Read of size 8 at addr ffff888072ab9310 by task syz.7.8557/24376 [ 1042.032258][T24376] [ 1042.034598][T24376] CPU: 1 PID: 24376 Comm: syz.7.8557 Not tainted 6.1.130-syzkaller #0 [ 1042.042771][T24376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1042.052848][T24376] Call Trace: [ 1042.056160][T24376] [ 1042.059128][T24376] dump_stack_lvl+0x1e3/0x2cb [ 1042.063836][T24376] ? nf_tcp_handle_invalid+0x647/0x647 [ 1042.069327][T24376] ? panic+0x764/0x764 [ 1042.073422][T24376] ? _printk+0xd1/0x111 [ 1042.077691][T24376] ? __virt_addr_valid+0x17f/0x530 [ 1042.082829][T24376] ? __virt_addr_valid+0x17f/0x530 [ 1042.087973][T24376] print_report+0x15f/0x4f0 [ 1042.092504][T24376] ? __virt_addr_valid+0x17f/0x530 [ 1042.097643][T24376] ? __virt_addr_valid+0x17f/0x530 [ 1042.102789][T24376] ? __virt_addr_valid+0x45b/0x530 [ 1042.107943][T24376] ? __phys_addr+0xb6/0x170 [ 1042.112481][T24376] ? __ext4_iget+0x2ee/0x3ee0 [ 1042.117196][T24376] kasan_report+0x136/0x160 [ 1042.121732][T24376] ? __ext4_iget+0x2ee/0x3ee0 [ 1042.126440][T24376] __ext4_iget+0x2ee/0x3ee0 [ 1042.130973][T24376] ? pwq_adjust_max_active+0x11b/0x550 [ 1042.136459][T24376] ? init_rescuer+0x23e/0x290 [ 1042.141164][T24376] ? alloc_workqueue+0xfb1/0x1160 [ 1042.146219][T24376] ? ext4_get_projid+0x140/0x140 [ 1042.151203][T24376] ? ext4_fill_super+0x6b0c/0x89e0 [ 1042.156446][T24376] ? mb_cache_create+0x459/0x560 [ 1042.161420][T24376] ext4_fill_super+0x6d87/0x89e0 [ 1042.166399][T24376] ? vsnprintf+0x1c70/0x1c70 [ 1042.171036][T24376] ? ext4_parse_test_dummy_encryption+0xa0/0xa0 [ 1042.177317][T24376] ? snprintf+0xd6/0x120 [ 1042.181597][T24376] ? set_blocksize+0x1c6/0x350 [ 1042.186397][T24376] get_tree_bdev+0x3fe/0x620 [ 1042.191046][T24376] ? ext4_parse_test_dummy_encryption+0xa0/0xa0 [ 1042.197322][T24376] vfs_get_tree+0x88/0x270 [ 1042.201771][T24376] do_new_mount+0x2ba/0xb40 [ 1042.206313][T24376] ? ns_capable+0x85/0xe0 [ 1042.210675][T24376] ? do_move_mount_old+0x160/0x160 [ 1042.215821][T24376] __se_sys_mount+0x2d5/0x3c0 [ 1042.220537][T24376] ? __x64_sys_mount+0xc0/0xc0 [ 1042.225336][T24376] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1042.231346][T24376] ? lockdep_hardirqs_on+0x94/0x130 [ 1042.236569][T24376] ? __x64_sys_mount+0x1c/0xc0 [ 1042.241370][T24376] do_syscall_64+0x3b/0xb0 [ 1042.245807][T24376] ? clear_bhb_loop+0x45/0xa0 [ 1042.250516][T24376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.256439][T24376] RIP: 0033:0x7f7d77d8e90a [ 1042.260878][T24376] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.280689][T24376] RSP: 002b:00007f7d78bdfe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1042.289133][T24376] RAX: ffffffffffffffda RBX: 00007f7d78bdfef0 RCX: 00007f7d77d8e90a [ 1042.297124][T24376] RDX: 00004000000000c0 RSI: 0000400000000480 RDI: 00007f7d78bdfeb0 [ 1042.305114][T24376] RBP: 00004000000000c0 R08: 00007f7d78bdfef0 R09: 0000000000018000 [ 1042.313191][T24376] R10: 0000000000018000 R11: 0000000000000246 R12: 0000400000000480 [ 1042.321190][T24376] R13: 00007f7d78bdfeb0 R14: 00000000000005a8 R15: 000000000000002c [ 1042.329199][T24376] [ 1042.332241][T24376] [ 1042.334578][T24376] Allocated by task 5749: [ 1042.338915][T24376] kasan_set_track+0x4b/0x70 [ 1042.343526][T24376] __kasan_slab_alloc+0x65/0x70 [ 1042.348399][T24376] slab_post_alloc_hook+0x52/0x3a0 [ 1042.353549][T24376] kmem_cache_alloc_lru+0x10c/0x2d0 [ 1042.358779][T24376] reiserfs_alloc_inode+0x26/0xc0 [ 1042.363835][T24376] new_inode_pseudo+0x61/0x1d0 [ 1042.368641][T24376] new_inode+0x25/0x1d0 [ 1042.372831][T24376] reiserfs_mkdir+0x1bc/0x8f0 [ 1042.377552][T24376] reiserfs_xattr_init+0x348/0x730 [ 1042.382686][T24376] reiserfs_fill_super+0x2203/0x2620 [ 1042.387999][T24376] mount_bdev+0x2c9/0x3f0 [ 1042.392360][T24376] legacy_get_tree+0xeb/0x180 [ 1042.397060][T24376] vfs_get_tree+0x88/0x270 [ 1042.401509][T24376] do_new_mount+0x2ba/0xb40 [ 1042.406039][T24376] __se_sys_mount+0x2d5/0x3c0 [ 1042.410751][T24376] do_syscall_64+0x3b/0xb0 [ 1042.415187][T24376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.421106][T24376] [ 1042.423442][T24376] Last potentially related work creation: [ 1042.429172][T24376] kasan_save_stack+0x3b/0x60 [ 1042.433876][T24376] __kasan_record_aux_stack+0xb0/0xc0 [ 1042.439277][T24376] call_rcu+0x163/0xa10 [ 1042.443454][T24376] evict+0x87d/0x930 [ 1042.447360][T24376] evict_inodes+0x668/0x700 [ 1042.451882][T24376] generic_shutdown_super+0x94/0x340 [ 1042.457191][T24376] kill_block_super+0x7a/0xe0 [ 1042.461896][T24376] deactivate_locked_super+0xa0/0x110 [ 1042.467291][T24376] cleanup_mnt+0x490/0x520 [ 1042.471732][T24376] task_work_run+0x246/0x300 [ 1042.476352][T24376] exit_to_user_mode_loop+0xde/0x100 [ 1042.481661][T24376] exit_to_user_mode_prepare+0xb1/0x140 [ 1042.484868][T24384] ip6t_REJECT: ECHOREPLY is not supported [ 1042.487233][T24376] syscall_exit_to_user_mode+0x60/0x270 [ 1042.487281][T24376] do_syscall_64+0x47/0xb0 [ 1042.487301][T24376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.508864][T24376] [ 1042.511210][T24376] The buggy address belongs to the object at ffff888072ab8d40 [ 1042.511210][T24376] which belongs to the cache reiser_inode_cache of size 1568 [ 1042.525979][T24376] The buggy address is located 1488 bytes inside of [ 1042.525979][T24376] 1568-byte region [ffff888072ab8d40, ffff888072ab9360) [ 1042.539452][T24376] [ 1042.541793][T24376] The buggy address belongs to the physical page: [ 1042.548231][T24376] page:ffffea0001caae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888072abea00 pfn:0x72ab8 [ 1042.559711][T24376] head:ffffea0001caae00 order:3 compound_mapcount:0 compound_pincount:0 [ 1042.568062][T24376] memcg:ffff88802fabc201 [ 1042.572325][T24376] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1042.580339][T24376] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801afad8c0 [ 1042.588945][T24376] raw: ffff888072abea00 0000000080130004 00000001ffffffff ffff88802fabc201 [ 1042.597541][T24376] page dumped because: kasan: bad access detected [ 1042.603973][T24376] page_owner tracks the page as allocated [ 1042.609697][T24376] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4393, tgid 4392 (syz.0.30), ts 83643737480, free_ts 83505971961 [ 1042.633864][T24376] post_alloc_hook+0x18d/0x1b0 [ 1042.638656][T24376] get_page_from_freelist+0x3731/0x38d0 [ 1042.644227][T24376] __alloc_pages+0x28d/0x770 [ 1042.648842][T24376] alloc_slab_page+0x6a/0x150 [ 1042.653559][T24376] new_slab+0x84/0x2d0 [ 1042.657659][T24376] ___slab_alloc+0xc20/0x1270 [ 1042.662361][T24376] kmem_cache_alloc_lru+0x1a5/0x2d0 [ 1042.667587][T24376] reiserfs_alloc_inode+0x26/0xc0 [ 1042.672639][T24376] iget5_locked+0x9c/0x270 [ 1042.677093][T24376] reiserfs_fill_super+0x12e0/0x2620 [ 1042.682413][T24376] mount_bdev+0x2c9/0x3f0 [ 1042.686776][T24376] legacy_get_tree+0xeb/0x180 [ 1042.691470][T24376] vfs_get_tree+0x88/0x270 [ 1042.695905][T24376] do_new_mount+0x2ba/0xb40 [ 1042.700432][T24376] __se_sys_mount+0x2d5/0x3c0 [ 1042.705136][T24376] do_syscall_64+0x3b/0xb0 [ 1042.709569][T24376] page last free stack trace: [ 1042.714248][T24376] free_unref_page_prepare+0x12a6/0x15b0 [ 1042.719907][T24376] free_unref_page+0x33/0x3e0 [ 1042.724611][T24376] __unfreeze_partials+0x1b7/0x210 [ 1042.729759][T24376] put_cpu_partial+0x17b/0x250 [ 1042.734559][T24376] qlist_free_all+0x76/0xe0 [ 1042.739096][T24376] kasan_quarantine_reduce+0x156/0x170 [ 1042.744592][T24376] __kasan_slab_alloc+0x1f/0x70 [ 1042.749470][T24376] slab_post_alloc_hook+0x52/0x3a0 [ 1042.754610][T24376] kmem_cache_alloc+0x10c/0x2d0 [ 1042.759485][T24376] getname_flags+0xb8/0x4f0 [ 1042.764011][T24376] user_path_at_empty+0x28/0x60 [ 1042.768901][T24376] do_utimes+0x111/0x270 [ 1042.773168][T24376] __x64_sys_utimensat+0x14b/0x250 [ 1042.778310][T24376] do_syscall_64+0x3b/0xb0 [ 1042.782770][T24376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.788688][T24376] [ 1042.791023][T24376] Memory state around the buggy address: [ 1042.796674][T24376] ffff888072ab9200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1042.804751][T24376] ffff888072ab9280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1042.812920][T24376] >ffff888072ab9300: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1042.820998][T24376] ^ [ 1042.825609][T24376] ffff888072ab9380: fc fc fc fc fc fc fc fc fc fc fc fc 00 00 00 00 [ 1042.833688][T24376] ffff888072ab9400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1042.841764][T24376] ================================================================== [ 1042.859535][T24376] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1042.866763][T24376] CPU: 0 PID: 24376 Comm: syz.7.8557 Not tainted 6.1.130-syzkaller #0 [ 1042.874942][T24376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1042.885028][T24376] Call Trace: [ 1042.888323][T24376] [ 1042.891277][T24376] dump_stack_lvl+0x1e3/0x2cb [ 1042.895980][T24376] ? nf_tcp_handle_invalid+0x647/0x647 [ 1042.901458][T24376] ? panic+0x764/0x764 [ 1042.905548][T24376] ? preempt_schedule_common+0xa6/0xd0 [ 1042.911037][T24376] ? vscnprintf+0x59/0x80 [ 1042.915396][T24376] panic+0x318/0x764 [ 1042.919328][T24376] ? check_panic_on_warn+0x1d/0xa0 [ 1042.924460][T24376] ? memcpy_page_flushcache+0xfc/0xfc [ 1042.929860][T24376] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1042.935859][T24376] ? _raw_spin_unlock+0x40/0x40 [ 1042.938570][T24366] loop8: detected capacity change from 0 to 40427 [ 1042.947137][T24376] ? print_report+0x4a3/0x4f0 [ 1042.951844][T24376] check_panic_on_warn+0x7e/0xa0 [ 1042.956809][T24376] ? __ext4_iget+0x2ee/0x3ee0 [ 1042.961514][T24376] end_report+0x66/0x110 [ 1042.965777][T24376] kasan_report+0x143/0x160 [ 1042.970306][T24376] ? __ext4_iget+0x2ee/0x3ee0 [ 1042.975029][T24376] __ext4_iget+0x2ee/0x3ee0 [ 1042.979564][T24376] ? pwq_adjust_max_active+0x11b/0x550 [ 1042.981851][T24366] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1042.981877][T24366] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1042.983721][T24366] F2FS-fs (loop8): invalid crc value [ 1043.006174][T24376] ? init_rescuer+0x23e/0x290 [ 1043.010878][T24376] ? alloc_workqueue+0xfb1/0x1160 [ 1043.015932][T24376] ? ext4_get_projid+0x140/0x140 [ 1043.020907][T24376] ? ext4_fill_super+0x6b0c/0x89e0 [ 1043.026056][T24376] ? mb_cache_create+0x459/0x560 [ 1043.031017][T24376] ext4_fill_super+0x6d87/0x89e0 [ 1043.035989][T24376] ? vsnprintf+0x1c70/0x1c70 [ 1043.040626][T24376] ? ext4_parse_test_dummy_encryption+0xa0/0xa0 [ 1043.046923][T24376] ? snprintf+0xd6/0x120 [ 1043.051200][T24376] ? set_blocksize+0x1c6/0x350 [ 1043.056089][T24376] get_tree_bdev+0x3fe/0x620 [ 1043.060715][T24376] ? ext4_parse_test_dummy_encryption+0xa0/0xa0 [ 1043.066990][T24376] vfs_get_tree+0x88/0x270 [ 1043.071789][T24376] do_new_mount+0x2ba/0xb40 [ 1043.076331][T24376] ? ns_capable+0x85/0xe0 [ 1043.080676][T24376] ? do_move_mount_old+0x160/0x160 [ 1043.085806][T24376] __se_sys_mount+0x2d5/0x3c0 [ 1043.090501][T24376] ? __x64_sys_mount+0xc0/0xc0 [ 1043.095284][T24376] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1043.101273][T24376] ? lockdep_hardirqs_on+0x94/0x130 [ 1043.106479][T24376] ? __x64_sys_mount+0x1c/0xc0 [ 1043.111256][T24376] do_syscall_64+0x3b/0xb0 [ 1043.115679][T24376] ? clear_bhb_loop+0x45/0xa0 [ 1043.120361][T24376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1043.126344][T24376] RIP: 0033:0x7f7d77d8e90a [ 1043.130760][T24376] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1043.150364][T24376] RSP: 002b:00007f7d78bdfe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1043.158781][T24376] RAX: ffffffffffffffda RBX: 00007f7d78bdfef0 RCX: 00007f7d77d8e90a [ 1043.166802][T24376] RDX: 00004000000000c0 RSI: 0000400000000480 RDI: 00007f7d78bdfeb0 [ 1043.174795][T24376] RBP: 00004000000000c0 R08: 00007f7d78bdfef0 R09: 0000000000018000 [ 1043.182863][T24376] R10: 0000000000018000 R11: 0000000000000246 R12: 0000400000000480 [ 1043.190839][T24376] R13: 00007f7d78bdfeb0 R14: 00000000000005a8 R15: 000000000000002c [ 1043.198820][T24376] [ 1043.202136][T24376] Kernel Offset: disabled [ 1043.206491][T24376] Rebooting in 86400 seconds..