last executing test programs: 5.448943081s ago: executing program 0 (id=278): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x101000, 0x0) 5.263613485s ago: executing program 0 (id=280): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xa04080, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x130a4cc, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRES64=r0, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) renameat2(r0, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 4.211623348s ago: executing program 0 (id=287): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfe33) 2.392858707s ago: executing program 0 (id=294): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file7\x00', 0x4000, &(0x7f0000000ac0)=ANY=[], 0x1, 0x1ff, &(0x7f00000008c0)="$eJzs3buKE1EYAOA/2VzFYjtBEEYstFrUJ1iRFcSAsJJCO0ErU+02WZvdx/AVfC8fQLZKI0fiTC7m5hrMjK7f1+Sf858/5zIwSZOTFLkvtz5Fp1OL+mEcxqgW+1GPiYsAAK6TUUrxNe1VPQ0AoET5539uTZdvJU8JANixV6/fvHjS6x0dZ1kn4vJi2B/289c8/+x57+hh9sP+rOpyOOzvTfOPssXvDuN8M24U+cd5fTZNtyKi34oH9/L8OPf0ZS/7ub4d73a8dgAAAAAAAAAAAAAAAAAAAAAAqMqdyCZWnu9zcLCY7xb5/GrufKCF83sacbtRXM6OB0rnZSwKAAAAAAAAAAAAAAAAAAAA/jGnZx8/vB0M3p/MgnZEzLc0VvRZH9SKN562tH6rvOygHtuVd4tlbjFordii3S6wu/rmXiWIxt9yd7YNsqWW+h/f8O7G7U1pHMTK8smxGGvLWxGxefT7x1eaajOWUqOU0uDz3ZPTs0gby2fPiHapTyQAAAAAAAAAAAAAAAAAAPh/zf3qe0mnigkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAVm//8/DpZbNgbnEXEzftl5MlYzOpWuFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOvrewAAAP//M04ZOg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x0) 2.183994902s ago: executing program 3 (id=297): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 1.938155677s ago: executing program 0 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x40000094, 0x0, 0x7}]}) 1.673560883s ago: executing program 1 (id=303): r0 = socket$pppl2tp(0x18, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = inotify_init1(0x800) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) 1.597051345s ago: executing program 1 (id=304): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000006280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x2, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) 1.464802848s ago: executing program 0 (id=305): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.424613029s ago: executing program 1 (id=306): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x22a03) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port1\x00', 0xeb, 0x1b1c07, 0xfffffffa, 0x7, 0xe35, 0xffff, 0x0, 0x0, 0x7, 0x8}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x1, 0x800, 0x800, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x7, 0x0, 0x40000000000000}, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) 1.409606769s ago: executing program 2 (id=307): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x20000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1.267983402s ago: executing program 2 (id=308): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) pwrite64(r0, &(0x7f00000002c0)="9986de71", 0x4, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x18, 0x4, 0x1000000000000}) 1.227459323s ago: executing program 3 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x200}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "042000", 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x1b59, 0x8}}}}}}}, 0x42) 977.192998ms ago: executing program 2 (id=310): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f00000000c0)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 923.72657ms ago: executing program 3 (id=311): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_settime(0xfffffff6, 0x0) 792.888082ms ago: executing program 2 (id=312): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) close(r0) 640.763416ms ago: executing program 2 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0xc4}, 0x20000000) 553.280158ms ago: executing program 3 (id=314): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4004, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x800, 0x0, 0x2, 0x0, 0x7ff, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x296, 0x1, 0xffffffff, 0x0, 0x5, 0x2000, 0xfa, 0xfffffffc, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x58c51ee, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffdfc, 0x0, 0x0, 0x7, 0x0, 0x7fff, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfffffffe, 0x9, 0x2, 0x1fc, 0x0, 0x3ff, 0x0, 0x3, 0x1, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0xffffffff, 0x0, 0x1000000, 0x80000, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0x6, 0x0, 0x4, 0xfffffffe, 0x0, 0x7, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x5, 0xfffffffc, 0x4, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0xffffffff, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x100, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xeb, 0x80000000, 0xd, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x10000, 0xff, 0x800, 0x3, 0x0, 0x2, 0xe3, 0xffffffff, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x101, 0x8000001e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x200000, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 486.406239ms ago: executing program 2 (id=315): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'veth0_to_bond\x00', 0x200}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000002fc0)="10") 427.96502ms ago: executing program 1 (id=316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 279.403124ms ago: executing program 3 (id=317): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100)) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x1, 0xadd, &(0x7f0000002480)="$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") 177.498156ms ago: executing program 1 (id=318): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 78.874368ms ago: executing program 1 (id=319): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x5a66, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x20e200, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=320): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000200)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 58.145768][ T5439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.159965][ T5439] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. syzkaller login: [ 78.246001][ T5765] cgroup: Unknown subsys name 'net' [ 78.367493][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.038477][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.751057][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.761532][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.769461][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.772410][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.779036][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.791568][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.798939][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.800607][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.812962][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.817891][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.825068][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.831162][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.837220][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.843490][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.850474][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.863210][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.871482][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.873276][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.881958][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.888870][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.894753][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.907617][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.910881][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.919030][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.425164][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 82.484195][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 82.581388][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 82.604278][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 82.637380][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.645636][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.653254][ T5777] bridge_slave_0: entered allmulticast mode [ 82.660460][ T5777] bridge_slave_0: entered promiscuous mode [ 82.676837][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.684114][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.692176][ T5777] bridge_slave_1: entered allmulticast mode [ 82.699582][ T5777] bridge_slave_1: entered promiscuous mode [ 82.726149][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.733474][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.740969][ T5778] bridge_slave_0: entered allmulticast mode [ 82.748408][ T5778] bridge_slave_0: entered promiscuous mode [ 82.790526][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.797751][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.805360][ T5778] bridge_slave_1: entered allmulticast mode [ 82.812870][ T5778] bridge_slave_1: entered promiscuous mode [ 82.858720][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.896871][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.924440][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.956738][ T5777] team0: Port device team_slave_0 added [ 82.976086][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.019676][ T5777] team0: Port device team_slave_1 added [ 83.051041][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.058196][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.065971][ T5780] bridge_slave_0: entered allmulticast mode [ 83.073803][ T5780] bridge_slave_0: entered promiscuous mode [ 83.084644][ T5778] team0: Port device team_slave_0 added [ 83.104234][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.111602][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.119434][ T5779] bridge_slave_0: entered allmulticast mode [ 83.126796][ T5779] bridge_slave_0: entered promiscuous mode [ 83.134631][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.144693][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.152230][ T5780] bridge_slave_1: entered allmulticast mode [ 83.159824][ T5780] bridge_slave_1: entered promiscuous mode [ 83.178553][ T5778] team0: Port device team_slave_1 added [ 83.197389][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.207600][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.214884][ T5779] bridge_slave_1: entered allmulticast mode [ 83.222597][ T5779] bridge_slave_1: entered promiscuous mode [ 83.252837][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.263269][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.289667][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.315431][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.345588][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.352864][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.379041][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.400623][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.407636][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.433683][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.446665][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.453815][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.479994][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.496389][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.515769][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.566106][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.611617][ T5780] team0: Port device team_slave_0 added [ 83.645118][ T5777] hsr_slave_0: entered promiscuous mode [ 83.651783][ T5777] hsr_slave_1: entered promiscuous mode [ 83.672568][ T5780] team0: Port device team_slave_1 added [ 83.685416][ T5778] hsr_slave_0: entered promiscuous mode [ 83.693008][ T5778] hsr_slave_1: entered promiscuous mode [ 83.699820][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.707727][ T5778] Cannot create hsr debugfs directory [ 83.716586][ T5779] team0: Port device team_slave_0 added [ 83.726266][ T5779] team0: Port device team_slave_1 added [ 83.766131][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.773507][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.802671][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.837902][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.845337][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.871472][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.912115][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.919397][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.945928][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.959344][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.966322][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.993290][ T5791] Bluetooth: hci3: command tx timeout [ 83.993350][ T5787] Bluetooth: hci1: command tx timeout [ 84.000491][ T5791] Bluetooth: hci0: command tx timeout [ 84.005187][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.049942][ T5791] Bluetooth: hci2: command tx timeout [ 84.145541][ T5779] hsr_slave_0: entered promiscuous mode [ 84.153675][ T5779] hsr_slave_1: entered promiscuous mode [ 84.160394][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.167984][ T5779] Cannot create hsr debugfs directory [ 84.199945][ T5780] hsr_slave_0: entered promiscuous mode [ 84.207182][ T5780] hsr_slave_1: entered promiscuous mode [ 84.214400][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.222555][ T5780] Cannot create hsr debugfs directory [ 84.589698][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.601991][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.625180][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.637562][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.718273][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.733182][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.744053][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.775307][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.857959][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.868689][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.893403][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.911049][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.932015][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.028359][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.055293][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.066741][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.081235][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.094772][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.102212][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.119704][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.155008][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.162235][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.216546][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.282670][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.345268][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.352452][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.387242][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.394468][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.447450][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.508023][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.528454][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.552488][ T5779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.564706][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.587684][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.594964][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.631696][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.653346][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.660587][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.723311][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.730612][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.754428][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.761674][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.836830][ T5778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.857649][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.947798][ T5780] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.975470][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.056385][ T5791] Bluetooth: hci1: command tx timeout [ 86.056406][ T5787] Bluetooth: hci3: command tx timeout [ 86.068925][ T5786] Bluetooth: hci0: command tx timeout [ 86.082606][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.132451][ T5791] Bluetooth: hci2: command tx timeout [ 86.196736][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.302948][ T5777] veth0_vlan: entered promiscuous mode [ 86.342402][ T5777] veth1_vlan: entered promiscuous mode [ 86.362084][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.436886][ T5777] veth0_macvtap: entered promiscuous mode [ 86.466874][ T5779] veth0_vlan: entered promiscuous mode [ 86.484077][ T5777] veth1_macvtap: entered promiscuous mode [ 86.525777][ T5779] veth1_vlan: entered promiscuous mode [ 86.549441][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.567251][ T5778] veth0_vlan: entered promiscuous mode [ 86.583099][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.608503][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.620861][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.631108][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.639931][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.664917][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.686898][ T5778] veth1_vlan: entered promiscuous mode [ 86.777742][ T5779] veth0_macvtap: entered promiscuous mode [ 86.788645][ T5778] veth0_macvtap: entered promiscuous mode [ 86.817184][ T5778] veth1_macvtap: entered promiscuous mode [ 86.861834][ T5779] veth1_macvtap: entered promiscuous mode [ 86.887863][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.900728][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.921589][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.934091][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.946732][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.990214][ T5780] veth0_vlan: entered promiscuous mode [ 87.023276][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.033951][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.046637][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.057745][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.070851][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.079828][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.099953][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.121646][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.143750][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.169222][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.178040][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.188399][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.215110][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.228027][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.258841][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.278905][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.290861][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.303379][ T5780] veth1_vlan: entered promiscuous mode [ 87.318016][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.335508][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.415603][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.432061][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.441410][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.450435][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.671556][ T5780] veth0_macvtap: entered promiscuous mode [ 87.689372][ T5843] ======================================================= [ 87.689372][ T5843] WARNING: The mand mount option has been deprecated and [ 87.689372][ T5843] and is ignored by this kernel. Remove the mand [ 87.689372][ T5843] option from the mount to silence this warning. [ 87.689372][ T5843] ======================================================= [ 87.716737][ T5780] veth1_macvtap: entered promiscuous mode [ 87.784479][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.802138][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.813021][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.848948][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.868924][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.881198][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.892409][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.904669][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.940601][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.009982][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.033213][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.053645][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.070170][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.081114][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.091982][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.120506][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.129144][ T5791] Bluetooth: hci1: command tx timeout [ 88.131838][ T5787] Bluetooth: hci3: command tx timeout [ 88.134658][ T5791] Bluetooth: hci0: command tx timeout [ 88.160378][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.170446][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.180430][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.189534][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.209241][ T5791] Bluetooth: hci2: command tx timeout [ 88.298291][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.326286][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.344580][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.375449][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.556096][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.573043][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.633527][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.656968][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.809261][ T5855] syz.3.9[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.814269][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.872728][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.881681][ T5855] loop3: detected capacity change from 0 to 512 [ 88.938094][ T5855] EXT4-fs: Ignoring removed nobh option [ 89.032855][ T5855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.051555][ T5858] loop2: detected capacity change from 0 to 4096 [ 89.123830][ T5855] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.9: ea_inode file size=0 entry size=6 [ 89.140201][ T5855] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.154400][ T5855] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.9: iget: bad extra_isize 90 (inode size 256) [ 89.171237][ T5855] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.9: error while reading EA inode 11 err=-117 [ 89.184745][ T5855] EXT4-fs (loop3): 1 orphan inode deleted [ 89.192756][ T5855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.440267][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.571649][ T5868] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.931969][ T5875] loop2: detected capacity change from 0 to 512 [ 90.049710][ T5875] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 90.160773][ T5875] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 90.208938][ T5791] Bluetooth: hci3: command tx timeout [ 90.210429][ T5787] Bluetooth: hci1: command tx timeout [ 90.214387][ T5791] Bluetooth: hci0: command tx timeout [ 90.289520][ T5791] Bluetooth: hci2: command tx timeout [ 90.309775][ T788] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.412228][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 90.530152][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.562387][ T788] usb 2-1: config 0 has no interfaces? [ 90.573141][ T788] usb 2-1: New USB device found, idVendor=04b8, idProduct=02f9, bcdDevice= 0.40 [ 90.598550][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.627611][ T788] usb 2-1: Product: syz [ 90.643071][ T788] usb 2-1: Manufacturer: syz [ 90.647769][ T788] usb 2-1: SerialNumber: syz [ 90.685880][ T788] usb 2-1: config 0 descriptor?? [ 90.692004][ T28] audit: type=1800 audit(1786397163.248:2): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18" name="host_addr" dev="configfs" ino=7015 res=0 errno=0 [ 90.879131][ T5821] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.024701][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.050393][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.086355][ T5791] Bluetooth: hci1: Malformed LE Event: 0x0d [ 91.092766][ T8] usb 2-1: USB disconnect, device number 2 [ 91.101194][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 91.124496][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.148919][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.163144][ T5821] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 91.175726][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.204542][ T5821] usb 3-1: config 0 descriptor?? [ 91.289015][ T5820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.311316][ T5904] loop0: detected capacity change from 0 to 256 [ 91.319496][ T5904] exfat: Deprecated parameter 'namecase' [ 91.325673][ T5904] exfat: Deprecated parameter 'namecase' [ 91.350370][ T5904] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 91.501604][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 91.513192][ T5820] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 91.528023][ T5906] loop0: detected capacity change from 0 to 512 [ 91.534984][ T5820] usb 4-1: config 0 has no interface number 0 [ 91.541339][ T5820] usb 4-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 91.571239][ T5820] usb 4-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 91.582978][ T5820] usb 4-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 91.583732][ T5906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c198, mo2=0002] [ 91.593818][ T5820] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.593846][ T5820] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.607987][ T5820] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 91.634389][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.642540][ T5820] usb 4-1: Product: syz [ 91.646787][ T5820] usb 4-1: Manufacturer: syz [ 91.652880][ T5820] usb 4-1: SerialNumber: syz [ 91.670614][ T5820] usb 4-1: config 0 descriptor?? [ 91.689069][ T5897] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 91.714245][ T5820] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 91.722908][ T5906] System zones: 1-12 [ 91.727047][ T5821] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 91.769049][ T5906] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.25: corrupted in-inode xattr: e_value size too large [ 91.837122][ T5906] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.25: couldn't read orphan inode 15 (err -117) [ 91.856225][ T5906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.958710][ T5906] EXT4-fs (loop0): shut down requested (2) [ 92.042520][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.072196][ T5897] block device autoloading is deprecated and will be removed. [ 92.082717][ T788] usb 3-1: USB disconnect, device number 2 [ 92.094788][ T5897] syz.3.21: attempt to access beyond end of device [ 92.094788][ T5897] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 92.147902][ T27] cfg80211: failed to load regulatory.db [ 92.226007][ T5821] usb 4-1: USB disconnect, device number 2 [ 92.404451][ T5921] loop1: detected capacity change from 0 to 736 [ 92.919341][ T5767] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5767 comm: kworker/1:3) [ 93.358001][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.367027][ T5948] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 93.570814][ T5955] syz.0.44 uses obsolete (PF_INET,SOCK_PACKET) [ 93.578882][ T28] audit: type=1326 audit(1786397166.128:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.2.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279e0d9 code=0x7ffc0000 [ 93.602556][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.661921][ T28] audit: type=1326 audit(1786397166.178:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.2.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279e0d9 code=0x7ffc0000 [ 93.685617][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.693762][ T28] audit: type=1326 audit(1786397166.188:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.2.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279e0d9 code=0x7ffc0000 [ 93.722245][ T28] audit: type=1326 audit(1786397166.188:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.2.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279e0d9 code=0x7ffc0000 [ 93.770998][ T28] audit: type=1326 audit(1786397166.188:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.2.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe74279e0d9 code=0x7ffc0000 [ 93.837356][ T28] audit: type=1326 audit(1786397166.188:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.2.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279e0d9 code=0x7ffc0000 [ 93.918853][ T28] audit: type=1326 audit(1786397166.188:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.2.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279e0d9 code=0x7ffc0000 [ 93.967408][ T5963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.48'. [ 94.016541][ T28] audit: type=1326 audit(1786397166.188:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.2.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279e0d9 code=0x7ffc0000 [ 94.040321][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.079219][ T28] audit: type=1326 audit(1786397166.188:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.2.46" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe74279e0d9 code=0x7ffc0000 [ 94.123339][ T5966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 94.437147][ T5981] loop2: detected capacity change from 0 to 512 [ 94.459316][ T5981] EXT4-fs: Ignoring removed nobh option [ 94.500228][ T5981] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.534319][ T5981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.621598][ T5981] EXT4-fs (loop2): 1 truncate cleaned up [ 94.680661][ T5981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.821401][ T5979] ./file0: Can't open blockdev [ 95.032980][ T5997] loop3: detected capacity change from 0 to 2048 [ 95.118959][ T5997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.208067][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.304625][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.64'. [ 95.314565][ T6003] Zero length message leads to an empty skb [ 95.319071][ T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.508884][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 95.518531][ T788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.530608][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.545740][ T788] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 95.567456][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.576713][ T788] usb 2-1: Product: syz [ 95.585654][ T788] usb 2-1: Manufacturer: syz [ 95.590716][ T788] usb 2-1: SerialNumber: syz [ 95.610546][ T788] usb 2-1: config 0 descriptor?? [ 95.872542][ T788] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 95.944291][ T5820] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.138834][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 96.158997][ T788] rc_core: IR keymap rc-imon-pad not found [ 96.169955][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.176309][ T788] Registered IR keymap rc-empty [ 96.181673][ T5820] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.206393][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.215054][ T788] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 96.215078][ T788] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 96.262399][ T788] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 96.281909][ T5820] usb 3-1: config 0 descriptor?? [ 96.300435][ T788] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 96.318835][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.340364][ T788] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:3> initialized [ 96.518700][ T5820] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 96.539745][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.579215][ C1] imon 2-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 2, intf0) [ 96.590866][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.611944][ T27] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 96.621931][ T27] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 96.633488][ T27] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 96.647484][ T27] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 96.670956][ T27] usb 1-1: config 1 interface 1 has no altsetting 0 [ 96.696832][ T27] usb 1-1: string descriptor 0 read error: -22 [ 96.708978][ T27] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 96.724515][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.780579][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 96.783659][ T5820] usb 2-1: USB disconnect, device number 3 [ 96.905098][ T6026] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 97.231302][ T27] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 97.484476][ T5820] usb 3-1: USB disconnect, device number 3 [ 97.705688][ T27] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 97.754577][ T27] usb 1-1: USB disconnect, device number 2 [ 97.790816][ T6038] loop1: detected capacity change from 0 to 8192 [ 99.347862][ T6089] loop3: detected capacity change from 0 to 256 [ 99.450043][ T6089] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 99.559264][ T6089] exFAT-fs (loop3): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 99.569774][ T6089] exFAT-fs (loop3): Filesystem has been set read-only [ 99.805387][ T6097] loop3: detected capacity change from 0 to 1024 [ 99.905349][ T6073] loop1: detected capacity change from 0 to 40427 [ 99.948963][ T6073] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 99.976427][ T6101] loop2: detected capacity change from 0 to 256 [ 99.998792][ T6073] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 100.007623][ T6073] F2FS-fs (loop1): heap/no_heap options were deprecated [ 100.033137][ T6073] F2FS-fs (loop1): extra_attr or flexible_inline_xattr feature is off [ 100.071675][ T6101] FAT-fs (loop2): Directory bread(block 64) failed [ 100.078587][ T6101] FAT-fs (loop2): Directory bread(block 65) failed [ 100.085358][ T6101] FAT-fs (loop2): Directory bread(block 66) failed [ 100.092038][ T6101] FAT-fs (loop2): Directory bread(block 67) failed [ 100.098697][ T6101] FAT-fs (loop2): Directory bread(block 68) failed [ 100.105392][ T6101] FAT-fs (loop2): Directory bread(block 69) failed [ 100.112122][ T6101] FAT-fs (loop2): Directory bread(block 70) failed [ 100.118693][ T6101] FAT-fs (loop2): Directory bread(block 71) failed [ 100.125431][ T6101] FAT-fs (loop2): Directory bread(block 72) failed [ 100.133022][ T6101] FAT-fs (loop2): Directory bread(block 73) failed [ 100.544015][ T6107] loop1: detected capacity change from 0 to 2048 [ 100.609406][ T6107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.134101][ T6111] loop2: detected capacity change from 0 to 32768 [ 101.306370][ T6111] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.519011][ T6111] XFS (loop2): Ending clean mount [ 101.938145][ T6123] input: syz0 as /devices/virtual/input/input7 [ 101.948743][ C1] sched: RT throttling activated [ 102.594753][ T5777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 102.874115][ T6109] loop0: detected capacity change from 0 to 262144 [ 102.983367][ T6109] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.069443][ T6109] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.264511][ T6158] tipc: Started in network mode [ 104.276885][ T6158] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 104.287091][ T6158] tipc: Enabled bearer , priority 0 [ 104.327022][ T6157] loop3: detected capacity change from 0 to 1024 [ 104.345135][ T6157] EXT4-fs: Ignoring removed orlov option [ 104.491494][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.638790][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 104.638808][ T28] audit: type=1800 audit(1786397177.198:27): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.128" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 104.778381][ T6157] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.401021][ T788] tipc: Node number set to 43690 [ 105.476348][ T6163] loop2: detected capacity change from 0 to 32768 [ 105.657940][ T6163] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 105.657940][ T6163] [ 105.701133][ T6163] ERROR: (device loop2): remounting filesystem as read-only [ 105.733170][ T6163] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 105.733170][ T6163] [ 106.228809][ T6176] hsr0: entered allmulticast mode [ 106.240108][ T6176] hsr_slave_0: entered allmulticast mode [ 106.245852][ T6176] hsr_slave_1: entered allmulticast mode [ 106.279123][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 106.294076][ T6177] hsr_slave_0: left promiscuous mode [ 106.326627][ T6177] hsr_slave_1: left promiscuous mode [ 106.492648][ T6177] hsr0 (unregistering): left allmulticast mode [ 106.724348][ T6191] jffs2: notice: (6191) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.215676][ T6211] loop0: detected capacity change from 0 to 512 [ 107.244474][ T6211] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.148: corrupted in-inode xattr: e_value out of bounds [ 107.287511][ T6211] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.148: couldn't read orphan inode 15 (err -117) [ 107.342834][ T6211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.442909][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.724999][ T6217] loop0: detected capacity change from 0 to 1024 [ 107.732643][ T6221] Bluetooth: MGMT ver 1.22 [ 107.997050][ T6205] loop1: detected capacity change from 0 to 40427 [ 108.026759][ T6205] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 108.036345][ T6205] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 108.093369][ T6205] F2FS-fs (loop1): invalid crc_offset: 1 [ 108.280241][ T6205] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 108.297672][ T6205] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.467060][ T5791] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 108.485371][ T6239] netlink: 56 bytes leftover after parsing attributes in process `syz.3.158'. [ 108.551994][ T6205] syz.1.145: attempt to access beyond end of device [ 108.551994][ T6205] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 108.678022][ T6246] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 108.709831][ T5779] syz-executor: attempt to access beyond end of device [ 108.709831][ T5779] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.747086][ T5779] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 109.048175][ T6254] loop0: detected capacity change from 0 to 2048 [ 109.143882][ T6254] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 109.160412][ T6258] input: syz0 as /devices/virtual/input/input8 [ 109.189630][ T6254] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 109.217883][ T6254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.751394][ T6271] netlink: 316 bytes leftover after parsing attributes in process `syz.0.170'. [ 109.929208][ T6274] loop1: detected capacity change from 0 to 4096 [ 109.947006][ T6274] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 110.159710][ T6274] ntfs3: loop1: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 110.247589][ T6274] ntfs3: loop1: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 110.311722][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.376809][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.571224][ T6292] loop0: detected capacity change from 0 to 1024 [ 110.579889][ T6292] EXT4-fs: Ignoring removed nobh option [ 110.602540][ T6292] EXT4-fs: Ignoring removed bh option [ 110.608055][ T6292] EXT4-fs: Ignoring removed nobh option [ 110.636922][ T6292] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 110.673934][ T6290] loop2: detected capacity change from 0 to 8192 [ 110.748666][ T6290] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.751683][ T6292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.789007][ T6290] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 110.832300][ T6290] REISERFS (device loop2): using ordered data mode [ 110.877227][ T6290] reiserfs: using flush barriers [ 110.919509][ T6290] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.993132][ T6290] REISERFS (device loop2): checking transaction log (loop2) [ 111.064391][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.198196][ T6307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 111.280305][ T6290] REISERFS (device loop2): Using tea hash to sort names [ 111.329831][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.338406][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.366745][ T6290] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 111.436227][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.649171][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.744314][ T6317] loop1: detected capacity change from 0 to 2048 [ 111.785610][ T6317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.887881][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.899072][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.915420][ T8] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 111.924626][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.937707][ T8] usb 1-1: config 0 descriptor?? [ 111.969233][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.064348][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.214417][ T6328] lo: entered allmulticast mode [ 112.223424][ T6327] lo: left allmulticast mode [ 112.407173][ T8] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 112.437997][ T8] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 112.468894][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.547867][ T8] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 112.566702][ T8] hid-steam 0003:28DE:1142.0002: No HID_FEATURE_REPORT submitted - nothing to read [ 112.625784][ T8] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 112.689679][ T8] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 112.759205][ T8] usb 1-1: USB disconnect, device number 3 [ 112.807617][ T8] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 112.892155][ T6326] loop3: detected capacity change from 0 to 32768 [ 112.942311][ T6326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.192 (6326) [ 112.972877][ T6338] fido_id[6338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 113.060635][ T6326] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.096349][ T6326] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 113.136050][ T6326] BTRFS info (device loop3): using free space tree [ 113.309090][ T6326] BTRFS info (device loop3): enabling ssd optimizations [ 113.348497][ T6326] BTRFS info (device loop3): auto enabling async discard [ 113.497215][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.823665][ T6345] loop1: detected capacity change from 0 to 32768 [ 113.888604][ T6345] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 113.933554][ T6345] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.952029][ T5778] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.309855][ T6345] XFS (loop1): Ending clean mount [ 114.353812][ T6345] XFS (loop1): Quotacheck needed: Please wait. [ 114.371933][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.381454][ T6378] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 114.524000][ T6345] XFS (loop1): Quotacheck: Done. [ 114.539661][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.641310][ T6363] loop2: detected capacity change from 0 to 32768 [ 114.744360][ T6381] hugetlbfs: syz.3.204 (6381): Using mlock ulimits for SHM_HUGETLB is obsolete [ 114.813480][ T6363] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.155132][ T6363] XFS (loop2): Ending clean mount [ 115.191123][ T6363] XFS (loop2): Quotacheck needed: Please wait. [ 115.198094][ T5779] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.318842][ T6363] XFS (loop2): Quotacheck: Done. [ 115.589877][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.774746][ T6401] loop3: detected capacity change from 0 to 4096 [ 115.829668][ T6401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.859368][ T6401] EXT4-fs (loop3): shut down requested (0) [ 115.867766][ T6405] loop1: detected capacity change from 0 to 64 [ 115.964500][ T6405] capability: warning: `syz.1.208' uses deprecated v2 capabilities in a way that may be insecure [ 116.005760][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.133079][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.454116][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.619611][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.714165][ T788] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 116.745887][ T6414] loop0: detected capacity change from 0 to 1024 [ 116.772769][ T788] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.052159][ T5821] Process accounting resumed [ 117.423265][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.660046][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.738377][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.122791][ T6441] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 118.148948][ T6441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.156763][ T6441] IPv6: NLM_F_CREATE should be set when creating new route [ 118.164213][ T6441] IPv6: NLM_F_CREATE should be set when creating new route [ 118.194993][ T6444] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 118.228254][ T6444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.388918][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.467104][ T6427] loop0: detected capacity change from 0 to 40427 [ 118.509056][ T6427] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 118.516878][ T6427] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 118.560303][ T6427] F2FS-fs (loop0): invalid crc value [ 118.604739][ T6427] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.715358][ T6427] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 118.715458][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.757053][ T6457] overlayfs: maximum fs stacking depth exceeded [ 118.758882][ T6427] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.953613][ T3523] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 118.969906][ T6461] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 118.985967][ T3523] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 119.035268][ T6447] loop2: detected capacity change from 0 to 32768 [ 119.058983][ T6447] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.226 (6447) [ 119.108088][ T6447] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.138875][ T5767] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.146629][ T6447] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 119.185088][ T6447] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 119.205472][ T6447] BTRFS info (device loop2): use zstd compression, level 3 [ 119.224263][ T6447] BTRFS info (device loop2): use no compression [ 119.234389][ T6447] BTRFS info (device loop2): using free space tree [ 119.336942][ T6447] BTRFS info (device loop2): enabling ssd optimizations [ 119.349476][ T6447] BTRFS info (device loop2): auto enabling async discard [ 119.368309][ T5767] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.379828][ T5767] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.392616][ T5767] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.417124][ T5767] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 119.448134][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.456571][ T5767] usb 4-1: Product: syz [ 119.466714][ T5767] usb 4-1: Manufacturer: syz [ 119.476854][ T5767] usb 4-1: SerialNumber: syz [ 119.507314][ T5767] hub 4-1:1.0: bad descriptor, ignoring hub [ 119.524408][ T5767] hub: probe of 4-1:1.0 failed with error -5 [ 119.736987][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.746316][ T5767] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 119.907800][ T5777] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.231619][ T6492] loop1: detected capacity change from 0 to 128 [ 120.284288][ T6492] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 120.299632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.397111][ T6459] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 120.672288][ T6497] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 120.769155][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.794910][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.851758][ T6503] gadgetfs: bound to dummy_udc driver [ 120.945157][ T8] usb 4-1: USB disconnect, device number 3 [ 120.964604][ T8] usblp0: removed [ 121.135401][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 121.536906][ T6520] loop1: detected capacity change from 0 to 128 [ 121.597760][ T6520] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 121.624232][ T6520] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.825143][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.867908][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 121.916094][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.924243][ T788] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.000085][ T6531] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.250'. [ 122.119538][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 122.135760][ T27] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 122.150950][ T788] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 122.169271][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.177789][ T788] usb 4-1: config 0 has no interface number 0 [ 122.195227][ T788] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 122.219252][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.249436][ T788] usb 4-1: Product: syz [ 122.260179][ T788] usb 4-1: Manufacturer: syz [ 122.278905][ T788] usb 4-1: SerialNumber: syz [ 122.301035][ T788] usb 4-1: config 0 descriptor?? [ 122.323803][ T788] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 122.393369][ T6539] loop1: detected capacity change from 0 to 512 [ 122.458469][ T6539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.484702][ T6539] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.559694][ T788] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 122.592769][ T788] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 122.729950][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.848198][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.866873][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.881313][ T27] cxacru 1-1:1.0: wrong cm 0xa0 in response to cm 0x91 [ 122.889041][ T27] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 122.900658][ T27] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 122.912971][ T27] cxacru: probe of 1-1:1.0 failed with error -5 [ 122.929918][ T27] usb 1-1: USB disconnect, device number 4 [ 122.945903][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.005367][ T6546] loop2: detected capacity change from 0 to 2048 [ 123.063651][ T6546] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 123.157196][ T28] audit: type=1800 audit(1786397195.718:28): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.258" name=420C5664B27921B14DC1DB8892FD32D0AD7BC946813591AD8DEFF4B05F60CEA0DA7710A8 dev="loop2" ino=1368 res=0 errno=0 [ 123.190545][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 123.191562][ T5820] usb 4-1: USB disconnect, device number 4 [ 123.229173][ T5820] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 123.261015][ T5820] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 123.282394][ T5820] quatech2 4-1:0.51: device disconnected [ 123.711654][ T6551] loop1: detected capacity change from 0 to 32768 [ 123.783436][ T6551] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.810548][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.838880][ T5820] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.892132][ T6551] XFS (loop1): Ending clean mount [ 123.909142][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.054132][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.066540][ T5820] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 124.078132][ T5820] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 124.121075][ T5820] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 124.158079][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.179894][ T5820] usb 3-1: Product: syz [ 124.184156][ T5820] usb 3-1: Manufacturer: syz [ 124.228323][ T5820] usb 3-1: SerialNumber: syz [ 124.256476][ T5820] usb 3-1: config 0 descriptor?? [ 124.286459][ T5820] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 124.629530][ T6582] loop0: detected capacity change from 0 to 512 [ 124.659847][ T6582] EXT4-fs: inline encryption not supported [ 124.665785][ T6582] EXT4-fs: Ignoring removed oldalloc option [ 124.712253][ T6582] EXT4-fs (loop0): 1 truncate cleaned up [ 124.731633][ T6582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.936788][ T788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.997763][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.387643][ T5821] usb 3-1: USB disconnect, device number 4 [ 125.438435][ T28] audit: type=1800 audit(1786397197.998:29): pid=6603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.278" name="local" dev="configfs" ino=10287 res=0 errno=0 [ 125.558922][ T5820] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.683251][ T6609] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 125.750431][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 125.759369][ T5820] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 125.768487][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.796194][ T5820] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 126.015068][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.167236][ T6607] loop0: detected capacity change from 0 to 40427 [ 126.197098][ T6607] F2FS-fs (loop0): invalid crc value [ 126.213766][ T6607] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.342100][ T6607] F2FS-fs (loop0): Start checkpoint disabled! [ 126.369055][ T6607] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 126.663194][ T1322] kworker/u4:7: attempt to access beyond end of device [ 126.663194][ T1322] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 126.686712][ T1322] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 126.695446][ T1322] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 126.711335][ T1322] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 126.844276][ T5820] gspca_nw80x: reg_w err -71 [ 126.855694][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.865166][ T5820] nw80x: probe of 4-1:16.0 failed with error -71 [ 126.890698][ T5820] usb 4-1: USB disconnect, device number 5 [ 126.984920][ T6621] loop1: detected capacity change from 0 to 32768 [ 127.090613][ T6621] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 127.135666][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.225670][ T6621] XFS (loop1): Ending clean mount [ 127.405120][ T5779] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 127.969294][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.977509][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.209587][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.603482][ T6653] loop0: detected capacity change from 0 to 256 [ 129.249437][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.589984][ T6684] loop2: detected capacity change from 0 to 512 [ 129.613230][ T6684] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.658549][ T6684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.676566][ T6684] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.681507][ T5820] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.802912][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.911549][ T5820] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.932726][ T5820] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 129.944467][ T5820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.953673][ T5820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 129.993229][ T5820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.026657][ T5820] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.045435][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.067693][ T5820] usb 1-1: Product: syz [ 130.078543][ T5820] usb 1-1: Manufacturer: syz [ 130.107321][ T5820] cdc_wdm 1-1:1.0: skipping garbage [ 130.120754][ T5820] cdc_wdm 1-1:1.0: skipping garbage [ 130.145746][ T5820] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 130.159506][ T5820] cdc_wdm 1-1:1.0: Unknown control protocol [ 130.294933][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.351166][ T6699] input: syz0 as /devices/virtual/input/input10 [ 130.403775][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 130.404173][ T8] usb 1-1: USB disconnect, device number 5 [ 130.410953][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 130.422471][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 130.556581][ T6706] loop3: detected capacity change from 0 to 64 [ 130.659972][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.679660][ T6706] hfs: hfs: Invalid key length: 94 [ 130.776612][ T1322] ------------[ cut here ]------------ [ 130.783027][ T1322] kernel BUG at fs/hfs/inode.c:450! [ 130.790491][ T1322] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 130.796629][ T1322] CPU: 0 PID: 1322 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 130.804193][ T1322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.814297][ T1322] Workqueue: writeback wb_workfn (flush-7:3) [ 130.820331][ T1322] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 130.825908][ T1322] Code: c7 c1 00 73 33 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 73 33 97 e8 5f 10 84 ff e9 5e fe ff ff e8 45 8d 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 130.845539][ T1322] RSP: 0018:ffffc90004d37340 EFLAGS: 00010293 [ 130.851628][ T1322] RAX: ffffffff825be4db RBX: ffff88801b790ea8 RCX: ffff888024be9e00 [ 130.859645][ T1322] RDX: 0000000000000000 RSI: ffffffff8d339880 RDI: 0000000000000000 [ 130.867647][ T1322] RBP: ffffc90004d374d0 R08: ffff888024be9e00 R09: 0000000000000003 [ 130.875639][ T1322] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 130.883633][ T1322] R13: 1ffff920009a6e6c R14: ffff88801b790e58 R15: 0000000000000000 [ 130.891655][ T1322] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 130.900606][ T1322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.907207][ T1322] CR2: 00007f839575da08 CR3: 0000000062795000 CR4: 00000000003506f0 [ 130.915203][ T1322] Call Trace: [ 130.918510][ T1322] [ 130.921458][ T1322] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 130.926868][ T1322] ? __rwlock_init+0x150/0x150 [ 130.931661][ T1322] __writeback_single_inode+0x720/0xee0 [ 130.937250][ T1322] writeback_sb_inodes+0x813/0x1020 [ 130.942487][ T1322] ? queue_io+0x530/0x530 [ 130.946861][ T1322] ? move_expired_inodes+0x726/0x770 [ 130.952185][ T1322] ? rcu_is_watching+0x15/0xb0 [ 130.956980][ T1322] ? queue_io+0x3ba/0x530 [ 130.961338][ T1322] wb_writeback+0x45e/0xbe0 [ 130.965875][ T1322] ? queue_io+0x2e1/0x530 [ 130.970239][ T1322] ? percpu_ref_tryget+0x250/0x250 [ 130.975384][ T1322] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 130.981391][ T1322] ? __lock_acquire+0x7d80/0x7d80 [ 130.986446][ T1322] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.991684][ T1322] wb_workfn+0x400/0xe60 [ 130.995977][ T1322] ? inode_wait_for_writeback+0x230/0x230 [ 131.001728][ T1322] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 131.007758][ T1322] ? lockdep_hardirqs_on+0x98/0x150 [ 131.013073][ T1322] ? read_lock_is_recursive+0x20/0x20 [ 131.018473][ T1322] ? process_scheduled_works+0x975/0x1600 [ 131.024219][ T1322] ? process_scheduled_works+0x975/0x1600 [ 131.029969][ T1322] process_scheduled_works+0xa60/0x1600 [ 131.035552][ T1322] ? worker_attach_to_pool+0x370/0x370 [ 131.041038][ T1322] ? assign_work+0x3cc/0x5d0 [ 131.045656][ T1322] worker_thread+0xa5e/0xfe0 [ 131.050280][ T1322] kthread+0x2fa/0x390 [ 131.054459][ T1322] ? pr_cont_work+0x550/0x550 [ 131.059164][ T1322] ? kthread_blkcg+0xd0/0xd0 [ 131.063791][ T1322] ret_from_fork+0x48/0x80 [ 131.068230][ T1322] ? kthread_blkcg+0xd0/0xd0 [ 131.072847][ T1322] ret_from_fork_asm+0x11/0x20 [ 131.077664][ T1322] [ 131.080717][ T1322] Modules linked in: [ 131.084752][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.093277][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.118853][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 131.126825][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.143333][ T27] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 131.152922][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.164222][ T1322] ---[ end trace 0000000000000000 ]--- [ 131.171182][ T27] usb 3-1: config 0 descriptor?? [ 131.178309][ T1322] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 131.195675][ T1322] Code: c7 c1 00 73 33 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 73 33 97 e8 5f 10 84 ff e9 5e fe ff ff e8 45 8d 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 131.231226][ T1322] RSP: 0018:ffffc90004d37340 EFLAGS: 00010293 [ 131.237426][ T1322] RAX: ffffffff825be4db RBX: ffff88801b790ea8 RCX: ffff888024be9e00 [ 131.246369][ T1322] RDX: 0000000000000000 RSI: ffffffff8d339880 RDI: 0000000000000000 [ 131.254904][ T1322] RBP: ffffc90004d374d0 R08: ffff888024be9e00 R09: 0000000000000003 [ 131.263197][ T1322] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 131.285193][ T1322] R13: 1ffff920009a6e6c R14: ffff88801b790e58 R15: 0000000000000000 [ 131.294627][ T1322] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 131.305315][ T1322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.314033][ T1322] CR2: 00007f83949eb7c0 CR3: 000000002ed57000 CR4: 00000000003506f0 [ 131.323888][ T1322] Kernel panic - not syncing: Fatal exception [ 131.330020][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.330591][ T1322] Kernel Offset: disabled [ 131.343009][ T1322] Rebooting in 86400 seconds..