last executing test programs: 12.779498045s ago: executing program 4 (id=209): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9.996925686s ago: executing program 3 (id=229): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r3}, &(0x7f0000000040)=0x8) 9.080245046s ago: executing program 3 (id=230): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, 0x0) 8.625500529s ago: executing program 3 (id=233): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b9376000000000000000000000000000000000000000000020000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001"], 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 8.460695734s ago: executing program 3 (id=236): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0\x00', 0x101c04a, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 8.284514097s ago: executing program 3 (id=237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497", 0x1a}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/5, 0x5}, {&(0x7f0000000680)=""/112, 0x70}], 0x2}, 0x10150) 7.91626394s ago: executing program 3 (id=242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 7.617986815s ago: executing program 32 (id=242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 5.867669249s ago: executing program 4 (id=256): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000013c0)={0x20, 0x1, 0x3, "a78863"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)={0x20, 0x1, 0xd, "b68ef1c291785b8e54bef54eed"}, 0x0}) 3.905942226s ago: executing program 0 (id=262): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x1e, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000007c0)={0x11, 0x4, 0x70}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008d02"]) 3.56267685s ago: executing program 0 (id=266): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.308936142s ago: executing program 0 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234f1", 0x35}, {&(0x7f0000000100)="0c1a00000e80006558", 0x9}, {&(0x7f00000002c0)="8d09327c", 0x4}], 0x3) 3.137701694s ago: executing program 4 (id=271): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) getpid() mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000006c0)={r1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) 2.579981591s ago: executing program 0 (id=274): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) capset(0x0, 0x0) 2.536089621s ago: executing program 4 (id=275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='g', 0x1) recvfrom$inet6(r0, &(0x7f0000000180)=""/47, 0x78, 0x10062, 0x0, 0x0) 2.405996165s ago: executing program 0 (id=277): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setns(r2, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 2.159340425s ago: executing program 2 (id=278): r0 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 2.141035518s ago: executing program 4 (id=279): unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000002540)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x50, 0x80, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0xf7, {{0x5}, {0x5, 0x24, 0x0, 0x5faa}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x51d1, 0xecf, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xeb, 0xd, 0x1}}}}}]}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 2.03060853s ago: executing program 1 (id=280): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x20000040) 1.985148237s ago: executing program 2 (id=281): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000240)={{r0}, 0x7fffffffffffffff, 0x8, 0x100000001}) 1.864222589s ago: executing program 1 (id=282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000740)={0x0, 0xa51b, 0x80, 0x1, 0x8004}, &(0x7f0000000300)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000800)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x60, 0x0, r0, 0x0, 0x0, 0x0, 0x2141, 0x1}) 1.842037318s ago: executing program 2 (id=283): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) 1.716881012s ago: executing program 2 (id=284): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000380)={[{@dioread_nolock}, {@nojournal_checksum}, {@resuid}, {@user_xattr}, {@grpquota}, {@lazytime}, {@abort}, {@dioread_nolock}, {@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4e3e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x3, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file1\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 1.578401593s ago: executing program 2 (id=285): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x8c80, &(0x7f00000006c0)=ANY=[@ANYBLOB='fmask=00000000000000000000001,umask=00000000000020000000002,utf8,keep_last_dots,allow_utime=00000000000000000004001,errors=continue,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703835302c696f636861727365743d69736f383835392d312c006b95def57e2522c1bea829c23d304a63a4dbc03e4e15b41ada21c9a1dd3aad8a353a45e2fb41ed411833b1789f3d88f528c72dcbb5e1aea5dab11e69a77f2b692198fa6cd5c07eae4e91f2350fa2e360df77ba73081b1114f7c77978a4e105bf40f0bfca515e2bbb2552ca497c842e3ebb25e85344d0e964a97a3875dd9cc56d8fda567e4c9f0589ef0b"], 0x3, 0x1510, &(0x7f0000003640)="$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") r0 = open(&(0x7f0000000180)='./file1\x00', 0x64842, 0x8) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 1.338421394s ago: executing program 2 (id=286): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0xbf5, 0x2000402) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) 1.086552027s ago: executing program 1 (id=287): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d56911"], 0x34}], 0x1}, 0x0) 785.858236ms ago: executing program 1 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x88a8}, @void, @eth={@local, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x8, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x2f}]}}}}}}, 0x4a) 342.348324ms ago: executing program 4 (id=289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r2, r1, 0x4, r0}, 0x10) 331.858371ms ago: executing program 1 (id=290): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 113.141637ms ago: executing program 1 (id=291): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 0s ago: executing program 0 (id=292): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000001100)="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"/1453, 0x5ad, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x10000, 0x4) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. [ 85.730420][ T5810] cgroup: Unknown subsys name 'net' [ 85.878553][ T5810] cgroup: Unknown subsys name 'cpuset' [ 85.888729][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.632839][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.903693][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.912014][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.920173][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.920919][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.928813][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.945526][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.945601][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.953164][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.961556][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.970394][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.974980][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.981936][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.989542][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.002649][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.005255][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.018821][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.019685][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.033863][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.034029][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.041359][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.049587][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.061747][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.066261][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.069777][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.091996][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.878160][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 90.913805][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 90.942151][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 90.988619][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 91.029987][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 91.276819][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.284037][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.292149][ T5821] bridge_slave_0: entered allmulticast mode [ 91.300134][ T5821] bridge_slave_0: entered promiscuous mode [ 91.314156][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.321422][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.329038][ T5825] bridge_slave_0: entered allmulticast mode [ 91.336453][ T5825] bridge_slave_0: entered promiscuous mode [ 91.364729][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.371916][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.379703][ T5821] bridge_slave_1: entered allmulticast mode [ 91.387436][ T5821] bridge_slave_1: entered promiscuous mode [ 91.401103][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.408556][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.415837][ T5825] bridge_slave_1: entered allmulticast mode [ 91.423234][ T5825] bridge_slave_1: entered promiscuous mode [ 91.512421][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.519736][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.527550][ T5820] bridge_slave_0: entered allmulticast mode [ 91.535057][ T5820] bridge_slave_0: entered promiscuous mode [ 91.583583][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.591053][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.598430][ T5823] bridge_slave_0: entered allmulticast mode [ 91.606230][ T5823] bridge_slave_0: entered promiscuous mode [ 91.614014][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.621756][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.629090][ T5820] bridge_slave_1: entered allmulticast mode [ 91.636472][ T5820] bridge_slave_1: entered promiscuous mode [ 91.646745][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.658266][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.665982][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.673182][ T5822] bridge_slave_0: entered allmulticast mode [ 91.680840][ T5822] bridge_slave_0: entered promiscuous mode [ 91.691614][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.701036][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.708315][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.715820][ T5823] bridge_slave_1: entered allmulticast mode [ 91.723150][ T5823] bridge_slave_1: entered promiscuous mode [ 91.760555][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.785547][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.792791][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.800346][ T5822] bridge_slave_1: entered allmulticast mode [ 91.807718][ T5822] bridge_slave_1: entered promiscuous mode [ 91.817340][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.941503][ T5825] team0: Port device team_slave_0 added [ 91.950633][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.964135][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.976640][ T5821] team0: Port device team_slave_0 added [ 91.985739][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.997414][ T5825] team0: Port device team_slave_1 added [ 92.005916][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.031569][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.043791][ T5821] team0: Port device team_slave_1 added [ 92.052399][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.068135][ T10] cfg80211: failed to load regulatory.db [ 92.135399][ T5839] Bluetooth: hci2: command tx timeout [ 92.141350][ T5839] Bluetooth: hci0: command tx timeout [ 92.142783][ T5143] Bluetooth: hci4: command tx timeout [ 92.147841][ T5839] Bluetooth: hci3: command tx timeout [ 92.152806][ T5826] Bluetooth: hci1: command tx timeout [ 92.208965][ T5823] team0: Port device team_slave_0 added [ 92.231755][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.238791][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.265148][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.279755][ T5822] team0: Port device team_slave_0 added [ 92.286693][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.293677][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.320289][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.334050][ T5823] team0: Port device team_slave_1 added [ 92.357395][ T5820] team0: Port device team_slave_0 added [ 92.364047][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.371211][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.397285][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.411006][ T5822] team0: Port device team_slave_1 added [ 92.432595][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.439927][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.466808][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.495593][ T5820] team0: Port device team_slave_1 added [ 92.502079][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.509116][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.535804][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.575058][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.582086][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.608563][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.638313][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.645560][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.672526][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.711201][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.719209][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.745570][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.817658][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.824699][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.850882][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.863776][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.870887][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.896837][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.946218][ T5823] hsr_slave_0: entered promiscuous mode [ 92.952971][ T5823] hsr_slave_1: entered promiscuous mode [ 93.010771][ T5821] hsr_slave_0: entered promiscuous mode [ 93.017874][ T5821] hsr_slave_1: entered promiscuous mode [ 93.024158][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 93.030507][ T5821] Cannot create hsr debugfs directory [ 93.072064][ T5825] hsr_slave_0: entered promiscuous mode [ 93.078662][ T5825] hsr_slave_1: entered promiscuous mode [ 93.085311][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 93.091071][ T5825] Cannot create hsr debugfs directory [ 93.171528][ T5822] hsr_slave_0: entered promiscuous mode [ 93.182346][ T5822] hsr_slave_1: entered promiscuous mode [ 93.189003][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 93.195361][ T5822] Cannot create hsr debugfs directory [ 93.265077][ T5820] hsr_slave_0: entered promiscuous mode [ 93.271637][ T5820] hsr_slave_1: entered promiscuous mode [ 93.278263][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 93.284024][ T5820] Cannot create hsr debugfs directory [ 93.798046][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.826495][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.838545][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.850555][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.915333][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.927864][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.939438][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.953225][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.048397][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.059321][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.071831][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.083230][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.203954][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.219189][ T5826] Bluetooth: hci1: command tx timeout [ 94.219378][ T52] Bluetooth: hci4: command tx timeout [ 94.228672][ T5826] Bluetooth: hci3: command tx timeout [ 94.235936][ T5839] Bluetooth: hci2: command tx timeout [ 94.236424][ T5143] Bluetooth: hci0: command tx timeout [ 94.251853][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.287741][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.298560][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.408694][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.428223][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.449315][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.467859][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.481480][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.492557][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.523852][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.545952][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.562466][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.602094][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.609430][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.630912][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.638163][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.663147][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.670379][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.695484][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.705250][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.712426][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.761584][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.769109][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.813060][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.820255][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.942972][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.022147][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.050873][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.058219][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.128237][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.135507][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.259543][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.339622][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.360408][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.383545][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.410164][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.417624][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.458541][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.465920][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.546639][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.678406][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.851048][ T5825] veth0_vlan: entered promiscuous mode [ 95.900382][ T5820] veth0_vlan: entered promiscuous mode [ 95.955393][ T5825] veth1_vlan: entered promiscuous mode [ 95.971583][ T5820] veth1_vlan: entered promiscuous mode [ 96.046356][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.110800][ T5820] veth0_macvtap: entered promiscuous mode [ 96.126702][ T5825] veth0_macvtap: entered promiscuous mode [ 96.155605][ T5820] veth1_macvtap: entered promiscuous mode [ 96.167748][ T5825] veth1_macvtap: entered promiscuous mode [ 96.232125][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.258484][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.283103][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.297086][ T5143] Bluetooth: hci0: command tx timeout [ 96.304835][ T52] Bluetooth: hci4: command tx timeout [ 96.305527][ T5143] Bluetooth: hci3: command tx timeout [ 96.310278][ T52] Bluetooth: hci2: command tx timeout [ 96.316347][ T5143] Bluetooth: hci1: command tx timeout [ 96.323501][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.356637][ T5823] veth0_vlan: entered promiscuous mode [ 96.380274][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.392236][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.402252][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.433144][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.461798][ T5821] veth0_vlan: entered promiscuous mode [ 96.471050][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.481387][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.491040][ T5823] veth1_vlan: entered promiscuous mode [ 96.519642][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.531407][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.552565][ T5821] veth1_vlan: entered promiscuous mode [ 96.569437][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.616091][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.625465][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.729530][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.730305][ T5823] veth0_macvtap: entered promiscuous mode [ 96.739556][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.765911][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.769139][ T5823] veth1_macvtap: entered promiscuous mode [ 96.773990][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.793119][ T5822] veth0_vlan: entered promiscuous mode [ 96.853911][ T5822] veth1_vlan: entered promiscuous mode [ 96.884938][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.888741][ T5821] veth0_macvtap: entered promiscuous mode [ 96.892804][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.923873][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.936826][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.963151][ T5821] veth1_macvtap: entered promiscuous mode [ 97.040354][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.069920][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.080853][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.093100][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.122787][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.135274][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.145736][ T5822] veth0_macvtap: entered promiscuous mode [ 97.165286][ T5940] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3'. [ 97.170741][ T5822] veth1_macvtap: entered promiscuous mode [ 97.174200][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 97.211654][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.241665][ T804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.252657][ T804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.271287][ T804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.364180][ T804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.399921][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.483831][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.570889][ T1106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.631857][ T1106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.653778][ T1106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.669788][ T1106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.687625][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.698331][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.904533][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.912428][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.963379][ T804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.985970][ T804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.108533][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.128330][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.176408][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.204424][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.325125][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.333046][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.375183][ T5143] Bluetooth: hci2: command tx timeout [ 98.381212][ T5143] Bluetooth: hci3: command tx timeout [ 98.384016][ T52] Bluetooth: hci1: command tx timeout [ 98.388250][ T5143] Bluetooth: hci4: command tx timeout [ 98.392795][ T52] Bluetooth: hci0: command tx timeout [ 98.728340][ T5975] loop3: detected capacity change from 0 to 1024 [ 98.903798][ T5975] hfsplus: xattr searching failed [ 98.947169][ T5975] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 98.968764][ T5975] hfsplus: xattr searching failed [ 99.016533][ T5975] hfsplus: xattr searching failed [ 99.845675][ T5982] loop2: detected capacity change from 0 to 32768 [ 99.909990][ T5982] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.18 (5982) [ 99.955442][ T6001] loop1: detected capacity change from 0 to 1024 [ 100.028940][ T5982] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.085335][ T5982] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 100.098538][ T6001] hfsplus: trying to free free bnode 0(1) [ 100.345161][ T804] hfsplus: b-tree write err: -5, ino 4 [ 100.380207][ T5982] BTRFS info (device loop2): enabling ssd optimizations [ 100.418190][ T5982] BTRFS info (device loop2): turning on async discard [ 100.426548][ T5982] BTRFS info (device loop2): enabling free space tree [ 100.591002][ T6028] loop1: detected capacity change from 0 to 64 [ 100.594166][ T5982] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 100.622674][ T6027] loop0: detected capacity change from 0 to 128 [ 100.663609][ T6027] ======================================================= [ 100.663609][ T6027] WARNING: The mand mount option has been deprecated and [ 100.663609][ T6027] and is ignored by this kernel. Remove the mand [ 100.663609][ T6027] option from the mount to silence this warning. [ 100.663609][ T6027] ======================================================= [ 100.721195][ T6031] loop4: detected capacity change from 0 to 512 [ 100.781365][ T6027] EXT4-fs (loop0): Test dummy encryption mode enabled [ 100.802294][ T6031] EXT4-fs (loop4): Test dummy encryption mode enabled [ 100.825657][ T6031] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.929508][ T6031] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.965064][ T6031] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.32: bad orphan inode 131083 [ 100.988346][ T6027] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.051031][ T6027] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.066483][ T5820] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.093410][ T6031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.152793][ T6027] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 101.198037][ T6031] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 101.387825][ T5825] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.420378][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.108522][ T6061] loop1: detected capacity change from 0 to 512 [ 102.168275][ T6061] EXT4-fs (loop1): 1 truncate cleaned up [ 102.211380][ T6061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.336171][ T6060] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.41: bg 0: block 465: padding at end of block bitmap is not set [ 102.589315][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.766595][ T6068] dlm: non-version read from control device 216 [ 102.875487][ T6050] loop0: detected capacity change from 0 to 131072 [ 102.887739][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.927024][ T6050] F2FS-fs (loop0): invalid crc value [ 103.055985][ T6050] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 103.071356][ T6050] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 103.138832][ T6068] dlm: non-version read from control device 216 [ 103.170556][ T6068] dlm: non-version read from control device 216 [ 103.205229][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.211496][ T6068] dlm: non-version read from control device 216 [ 103.248083][ T6068] dlm: non-version read from control device 216 [ 103.264634][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.273369][ T6068] dlm: non-version read from control device 216 [ 103.301243][ T6068] dlm: non-version read from control device 216 [ 103.314436][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.351511][ T6068] dlm: non-version read from control device 216 [ 103.374425][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.374468][ T6068] dlm: non-version read from control device 216 [ 103.410976][ T6068] dlm: non-version read from control device 216 [ 103.431180][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.444435][ T6068] dlm: non-version read from control device 216 [ 103.450875][ T6068] dlm: non-version read from control device 216 [ 103.475821][ T6068] dlm: non-version read from control device 216 [ 103.486251][ T24] usb 4-1: config 0 descriptor?? [ 103.504822][ T6068] dlm: non-version read from control device 216 [ 103.541943][ T6068] dlm: non-version read from control device 216 [ 103.624281][ T6068] dlm: non-version read from control device 216 [ 103.716730][ T6068] dlm: non-version read from control device 216 [ 103.953257][ T24] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 104.123603][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 104.254177][ T24] usb 4-1: USB disconnect, device number 2 [ 104.429955][ T6090] fido_id[6090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 104.542298][ T6096] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 104.562101][ T6096] netlink: 17 bytes leftover after parsing attributes in process `syz.1.54'. [ 105.125099][ T6105] loop2: detected capacity change from 0 to 128 [ 105.182641][ T6105] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.287094][ T6105] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.377702][ T6105] syz.2.58 (pid 6105) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 105.463046][ T5820] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.673018][ T6095] loop4: detected capacity change from 0 to 32768 [ 105.710641][ T6095] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.55 (6095) [ 105.756223][ T6099] loop1: detected capacity change from 0 to 32768 [ 105.826047][ T6095] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 105.849407][ T6095] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 105.858592][ T6095] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 105.897006][ T6099] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.142748][ T6123] netlink: 'syz.0.48': attribute type 4 has an invalid length. [ 106.267147][ T6128] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.462032][ T6095] BTRFS info (device loop4): rebuilding free space tree [ 106.498266][ T6099] XFS (loop1): Ending clean mount [ 106.521350][ T6095] BTRFS info (device loop4): disabling free space tree [ 106.539173][ T6095] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 106.576712][ T6099] XFS (loop1): Quotacheck needed: Please wait. [ 106.594448][ T6095] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.678742][ T6095] BTRFS info (device loop4): enabling ssd optimizations [ 106.711409][ T6095] BTRFS info (device loop4): turning on async discard [ 106.738892][ T6095] BTRFS info (device loop4): enabling disk space caching [ 106.763639][ T6095] BTRFS info (device loop4): force clearing of disk cache [ 106.773074][ T6141] netlink: 'syz.0.61': attribute type 2 has an invalid length. [ 106.788620][ T6095] BTRFS info (device loop4): use zstd compression, level 3 [ 106.804267][ T6141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.61'. [ 106.820943][ T6099] XFS (loop1): Quotacheck: Done. [ 107.167720][ T5821] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.591288][ T5823] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 107.996068][ T6157] syz.4.64 uses obsolete (PF_INET,SOCK_PACKET) [ 108.279353][ T6161] Invalid ELF header magic: != ELF [ 108.583049][ T6165] loop4: detected capacity change from 0 to 128 [ 108.676456][ T6165] EXT4-fs (loop4): Test dummy encryption mode enabled [ 108.722983][ T6165] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.746834][ T6165] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.047730][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.216541][ T6175] loop4: detected capacity change from 0 to 128 [ 109.327459][ T6175] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.481570][ T6175] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.761680][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.016347][ T6194] loop2: detected capacity change from 0 to 256 [ 110.047659][ T6194] exfat: Deprecated parameter 'utf8' [ 110.064940][ T6194] exfat: Deprecated parameter 'utf8' [ 110.077826][ T6194] exfat: Deprecated parameter 'utf8' [ 110.084646][ T794] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.131943][ T6194] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 110.215438][ T6200] loop3: detected capacity change from 0 to 512 [ 110.260571][ T794] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 110.265016][ T6200] FAT-fs (loop3): unable to read block(708132732928) for building NFS inode [ 110.300541][ T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.319569][ T794] usb 1-1: Product: syz [ 110.323831][ T794] usb 1-1: Manufacturer: syz [ 110.350880][ T794] usb 1-1: SerialNumber: syz [ 110.380937][ T794] usb 1-1: config 0 descriptor?? [ 110.417667][ T794] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 110.433629][ T6204] IPv4: Oversized IP packet from 127.202.26.0 [ 110.548972][ T6206] loop3: detected capacity change from 0 to 512 [ 110.585311][ T6206] EXT4-fs: Ignoring removed oldalloc option [ 110.648268][ T6209] loop4: detected capacity change from 0 to 1024 [ 110.658456][ T6206] EXT4-fs (loop3): 1 truncate cleaned up [ 110.773578][ T6206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.812843][ T6209] syz.4.88: attempt to access beyond end of device [ 110.812843][ T6209] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 110.938216][ T6209] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 110.972798][ T6209] hfsplus: unable to mark blocks free: error -5 [ 111.001976][ T6219] syz.4.88: attempt to access beyond end of device [ 111.001976][ T6219] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 111.002257][ T6209] hfsplus: can't free extent: start 0, count 1 [ 111.045825][ T6219] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 111.092908][ T6219] hfsplus: unable to mark blocks free: error -5 [ 111.101638][ T6219] hfsplus: can't free extent: start 133, count 1 [ 111.322356][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.641080][ T794] gspca_sunplus: reg_r err -71 [ 111.646406][ T794] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 111.731991][ T794] usb 1-1: USB disconnect, device number 2 [ 111.822671][ T6231] loop2: detected capacity change from 0 to 512 [ 111.853290][ T6231] EXT4-fs: Ignoring removed bh option [ 111.958885][ T6231] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 112.099874][ T6231] EXT4-fs (loop2): 1 truncate cleaned up [ 112.133991][ T6231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.761258][ T6242] tmpfs: Too small a size for current use [ 113.022634][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.158834][ T6227] loop4: detected capacity change from 0 to 32768 [ 113.173337][ T6244] loop3: detected capacity change from 0 to 1024 [ 113.206576][ T6227] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.93 (6227) [ 113.270032][ T6244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.383331][ T6227] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.409617][ T6244] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.100: Allocating blocks 385-513 which overlap fs metadata [ 113.444752][ T6227] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 113.458343][ T6243] EXT4-fs (loop3): pa ffff8880306d9000: logic 16, phys. 129, len 24 [ 113.466781][ T6243] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 113.625070][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.683267][ T6227] BTRFS info (device loop4): enabling ssd optimizations [ 113.704448][ T6227] BTRFS info (device loop4): turning on async discard [ 113.725217][ T6227] BTRFS info (device loop4): enabling free space tree [ 114.227227][ T5823] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.146558][ T6285] loop0: detected capacity change from 0 to 4096 [ 115.871838][ T6298] loop3: detected capacity change from 0 to 2048 [ 115.946071][ T6298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.034498][ T5955] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.069915][ T6292] loop2: detected capacity change from 0 to 32768 [ 116.083426][ T6292] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.114 (6292) [ 116.159934][ T6292] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.194443][ T6292] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 116.203072][ T6292] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 116.219788][ T5955] usb 1-1: Using ep0 maxpacket: 32 [ 116.244913][ T5955] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.253059][ T5955] usb 1-1: config 0 has no interface number 0 [ 116.283421][ T5955] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.294716][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.307575][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.325335][ T5955] usb 1-1: Product: syz [ 116.329580][ T5955] usb 1-1: Manufacturer: syz [ 116.334208][ T5955] usb 1-1: SerialNumber: syz [ 116.361264][ T5955] usb 1-1: config 0 descriptor?? [ 116.396134][ T6292] BTRFS info (device loop2): rebuilding free space tree [ 116.432228][ T5955] smsc95xx v2.0.0 [ 116.436356][ T5955] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 116.457434][ T6292] BTRFS info (device loop2): disabling free space tree [ 116.465216][ T5955] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 116.466642][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.495716][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.501166][ T6292] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.518656][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.553978][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.557562][ T6292] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.576166][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.596277][ T10] usb 4-1: config 0 descriptor?? [ 116.628721][ T6292] BTRFS info (device loop2): setting nodatasum [ 116.639931][ T6288] loop4: detected capacity change from 0 to 40427 [ 116.646696][ T6292] BTRFS info (device loop2): setting nodatacow [ 116.653086][ T6292] BTRFS info (device loop2): enabling ssd optimizations [ 116.661027][ T6292] BTRFS info (device loop2): using spread ssd allocation scheme [ 116.679293][ T6292] BTRFS info (device loop2): turning off barriers [ 116.700964][ T6292] BTRFS info (device loop2): enabling disk space caching [ 116.721007][ T6292] BTRFS info (device loop2): force clearing of disk cache [ 116.904485][ T30] audit: type=1800 audit(1762470080.706:2): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.114" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 116.971892][ T6288] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 117.005476][ T5820] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.030861][ T10] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 117.043731][ T6288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.080697][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 117.327909][ T5870] usb 4-1: USB disconnect, device number 3 [ 117.335567][ T6302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 117.379983][ T5955] usb 1-1: USB disconnect, device number 3 [ 117.479749][ T5823] syz-executor: attempt to access beyond end of device [ 117.479749][ T5823] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.537243][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 117.537287][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.537317][ T5823] Call Trace: [ 117.537326][ T5823] [ 117.537336][ T5823] dump_stack_lvl+0x189/0x250 [ 117.537378][ T5823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.537410][ T5823] ? __pfx_queue_work_on+0x10/0x10 [ 117.537436][ T5823] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 117.537462][ T5823] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 117.537504][ T5823] f2fs_handle_critical_error+0x37c/0x540 [ 117.537546][ T5823] f2fs_write_end_io+0x886/0xb60 [ 117.537593][ T5823] __submit_merged_bio+0x27a/0x6a0 [ 117.537633][ T5823] __submit_merged_write_cond+0x255/0x530 [ 117.537674][ T5823] f2fs_write_data_pages+0x261d/0x3000 [ 117.537741][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 117.537861][ T5823] ? __lock_acquire+0xab9/0xd20 [ 117.537902][ T5823] ? do_raw_spin_lock+0x121/0x290 [ 117.537940][ T5823] ? do_raw_spin_unlock+0x122/0x240 [ 117.537962][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 117.537985][ T5823] do_writepages+0x32e/0x550 [ 117.538031][ T5823] ? do_raw_spin_unlock+0x122/0x240 [ 117.538060][ T5823] filemap_fdatawrite+0x199/0x240 [ 117.538091][ T5823] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 117.538187][ T5823] ? do_raw_spin_unlock+0x122/0x240 [ 117.538215][ T5823] f2fs_sync_dirty_inodes+0x31f/0x830 [ 117.538265][ T5823] f2fs_write_checkpoint+0x93e/0x2440 [ 117.538289][ T5823] ? __lock_acquire+0xab9/0xd20 [ 117.538355][ T5823] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 117.538456][ T5823] kill_f2fs_super+0x2cc/0x6d0 [ 117.538490][ T5823] ? __pfx_kill_f2fs_super+0x10/0x10 [ 117.538538][ T5823] ? shrinker_free+0x2ce/0x3e0 [ 117.538569][ T5823] deactivate_locked_super+0xbc/0x130 [ 117.538597][ T5823] cleanup_mnt+0x425/0x4c0 [ 117.538620][ T5823] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.538652][ T5823] task_work_run+0x1d4/0x260 [ 117.538679][ T5823] ? __pfx_task_work_run+0x10/0x10 [ 117.538709][ T5823] ? exit_to_user_mode_loop+0x55/0x4f0 [ 117.538741][ T5823] exit_to_user_mode_loop+0xff/0x4f0 [ 117.538766][ T5823] ? rcu_is_watching+0x15/0xb0 [ 117.538804][ T5823] do_syscall_64+0x2e9/0xfa0 [ 117.538833][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.538854][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 117.538881][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.538901][ T5823] RIP: 0033:0x7f95f4f909f7 [ 117.538927][ T5823] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 117.538944][ T5823] RSP: 002b:00007ffdca83e718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 117.538966][ T5823] RAX: 0000000000000000 RBX: 00007f95f5011d7d RCX: 00007f95f4f909f7 [ 117.538979][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdca83e7d0 [ 117.538992][ T5823] RBP: 00007ffdca83e7d0 R08: 0000000000000000 R09: 0000000000000000 [ 117.539004][ T5823] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdca83f860 [ 117.539017][ T5823] R13: 00007f95f5011d7d R14: 000000000001ca3c R15: 00007ffdca83f8a0 [ 117.539058][ T5823] [ 117.539067][ T5823] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 117.694451][ T5955] IPVS: starting estimator thread 0... [ 118.106958][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.116215][ T6326] IPVS: using max 25 ests per chain, 60000 per kthread [ 118.162989][ T6332] loop2: detected capacity change from 0 to 1024 [ 118.171382][ T6332] EXT4-fs: Ignoring removed orlov option [ 118.231752][ T6332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.260704][ T30] audit: type=1800 audit(1762470082.076:3): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.121" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 118.329576][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.361783][ T804] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.466982][ T6342] loop3: detected capacity change from 0 to 128 [ 118.502131][ T6342] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.558776][ T6342] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.646409][ T1106] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.734536][ T6346] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.508597][ T6356] loop3: detected capacity change from 0 to 32768 [ 119.579762][ T6372] loop2: detected capacity change from 0 to 128 [ 119.594041][ T5824] loop3: p9 p11 p16 [ 119.606533][ T6372] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.619685][ T6375] loop1: detected capacity change from 0 to 128 [ 119.677018][ T6375] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 119.677620][ T6372] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.699305][ T6356] loop3: p9 p11 p16 [ 119.705573][ T6375] hpfs: filesystem error: improperly stopped [ 119.712690][ T6375] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 119.724504][ T6375] hpfs: You really don't want any checks? You are crazy... [ 119.733312][ T6375] hpfs: hpfs_map_sector(): read error [ 119.738960][ T6375] hpfs: code page support is disabled [ 119.747683][ T6375] hpfs: hpfs_map_4sectors(): unaligned read [ 119.754883][ T6375] hpfs: hpfs_map_4sectors(): unaligned read [ 119.762611][ T6375] hpfs: filesystem error: unable to find root dir [ 119.862482][ T5820] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.228217][ T6387] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 120.375712][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 120.382136][ T5833] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 120.440367][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 120.455396][ T6018] udevd[6018]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 120.458112][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 120.818292][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 120.839588][ T6401] input: syz0 as /devices/virtual/input/input7 [ 120.863111][ T6018] udevd[6018]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 120.895437][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 120.924877][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.940814][ T6406] syzkaller1: entered promiscuous mode [ 120.967132][ T6406] syzkaller1: entered allmulticast mode [ 121.106804][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 121.117726][ T5870] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 121.174214][ T5870] usb 2-1: config 0 has no interface number 0 [ 121.189270][ T5870] usb 2-1: config 0 interface 184 has no altsetting 0 [ 121.223718][ T5870] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.253735][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.304918][ T5870] usb 2-1: Product: syz [ 121.309165][ T5870] usb 2-1: Manufacturer: syz [ 121.313793][ T5870] usb 2-1: SerialNumber: syz [ 121.361675][ T5870] usb 2-1: config 0 descriptor?? [ 121.402746][ T5870] smsc75xx v1.0.0 [ 121.947245][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 121.967774][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 122.041743][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 122.053176][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.072282][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.078754][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 122.101494][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.129621][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.175510][ T6432] Zero length message leads to an empty skb [ 122.420182][ T5870] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 122.457589][ T6440] loop4: detected capacity change from 0 to 2048 [ 122.558561][ T6446] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.625920][ T5870] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 122.654832][ T5870] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 122.696785][ T5870] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 122.726447][ T5870] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 122.764906][ T5870] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 122.868744][ T5870] usb 2-1: USB disconnect, device number 2 [ 123.207114][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.228738][ T6464] loop0: detected capacity change from 0 to 4096 [ 123.276572][ T6464] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 123.373799][ T6464] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 123.392184][ T6464] ntfs3(loop0): mft corrupted [ 123.393271][ T5870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.397623][ T6464] ntfs3(loop0): Failed to load $Extend (-22). [ 123.435031][ T6464] ntfs3(loop0): Failed to initialize $Extend. [ 123.444601][ T5870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.457331][ T6471] loop3: detected capacity change from 0 to 512 [ 123.481208][ T6473] netlink: 'syz.1.178': attribute type 39 has an invalid length. [ 123.488694][ T5870] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.501493][ T6471] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.510580][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.544922][ T5870] usb 3-1: Product: syz [ 123.551689][ T6471] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 123.558197][ T5870] usb 3-1: Manufacturer: syz [ 123.570607][ T5870] usb 3-1: SerialNumber: syz [ 123.593911][ T6471] EXT4-fs (loop3): 1 truncate cleaned up [ 123.610409][ T6471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.759154][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.808951][ T5870] cdc_ncm 3-1:1.0: bind() failure [ 124.826840][ T5870] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 124.833746][ T5870] cdc_ncm 3-1:1.1: bind() failure [ 124.888288][ T5870] usb 3-1: USB disconnect, device number 2 [ 125.178887][ T6486] loop3: detected capacity change from 0 to 40427 [ 125.245555][ T6486] F2FS-fs (loop3): invalid crc value [ 125.281456][ T6498] loop4: detected capacity change from 0 to 32768 [ 125.316780][ T6504] loop1: detected capacity change from 0 to 128 [ 125.346440][ T6504] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 125.497814][ T30] audit: type=1800 audit(1762470089.316:4): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.187" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 125.523151][ T6486] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 125.575835][ T6486] F2FS-fs (loop3): Start checkpoint disabled! [ 125.618060][ T6504] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 125.639218][ T6486] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 125.657485][ T6504] FAT-fs (loop1): Filesystem has been set read-only [ 125.675009][ T6486] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 125.682895][ T6504] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 125.840569][ T30] audit: type=1800 audit(1762470089.646:5): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.183" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 125.875494][ T6486] syz.3.183: attempt to access beyond end of device [ 125.875494][ T6486] loop3: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 125.946257][ T6486] syz.3.183: attempt to access beyond end of device [ 125.946257][ T6486] loop3: rw=2049, sector=77824, nr_sectors = 800 limit=40427 [ 126.072738][ T6498] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root [ 126.072738][ T6498] [ 126.089552][ T6513] loop1: detected capacity change from 0 to 1024 [ 126.114483][ T6498] ERROR: (device loop4): remounting filesystem as read-only [ 126.117045][ T804] kworker/u8:5: attempt to access beyond end of device [ 126.117045][ T804] loop3: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 126.174269][ T6518] loop2: detected capacity change from 0 to 256 [ 126.196004][ T804] CPU: 1 UID: 0 PID: 804 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 126.196033][ T804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.196046][ T804] Workqueue: writeback wb_workfn (flush-7:3) [ 126.196085][ T804] Call Trace: [ 126.196092][ T804] [ 126.196101][ T804] dump_stack_lvl+0x189/0x250 [ 126.196137][ T804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.196167][ T804] ? __pfx_queue_work_on+0x10/0x10 [ 126.196193][ T804] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 126.196216][ T804] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 126.196253][ T804] f2fs_handle_critical_error+0x37c/0x540 [ 126.196292][ T804] f2fs_write_end_io+0x886/0xb60 [ 126.196331][ T804] __submit_merged_bio+0x27a/0x6a0 [ 126.196367][ T804] __submit_merged_write_cond+0x255/0x530 [ 126.196405][ T804] f2fs_write_data_pages+0x261d/0x3000 [ 126.196423][ T804] ? kasan_quarantine_put+0xdd/0x220 [ 126.196478][ T804] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.196513][ T804] ? trace_cfg80211_return_bss+0x7a/0x1f0 [ 126.196624][ T804] ? unwind_next_frame+0xa5/0x2390 [ 126.196657][ T804] ? unwind_next_frame+0x19ae/0x2390 [ 126.196690][ T804] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 126.196711][ T804] do_writepages+0x32e/0x550 [ 126.196746][ T804] ? reacquire_held_locks+0x127/0x1d0 [ 126.196775][ T804] ? writeback_sb_inodes+0x3bc/0x1950 [ 126.196809][ T804] __writeback_single_inode+0x143/0x12d0 [ 126.196838][ T804] ? do_raw_spin_unlock+0x122/0x240 [ 126.196863][ T804] writeback_sb_inodes+0x984/0x1950 [ 126.196927][ T804] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 126.196999][ T804] ? rcu_is_watching+0x15/0xb0 [ 126.197040][ T804] wb_writeback+0x43b/0xaf0 [ 126.197075][ T804] ? queue_io+0x3c1/0x590 [ 126.197104][ T804] ? __pfx_wb_writeback+0x10/0x10 [ 126.197139][ T804] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.197167][ T804] wb_workfn+0x409/0xef0 [ 126.197205][ T804] ? __pfx_wb_workfn+0x10/0x10 [ 126.197232][ T804] ? __lock_acquire+0xab9/0xd20 [ 126.197269][ T804] ? process_one_work+0x868/0x15d0 [ 126.197301][ T804] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.197327][ T804] ? process_one_work+0x868/0x15d0 [ 126.197351][ T804] process_one_work+0x94a/0x15d0 [ 126.197375][ T804] ? __lock_acquire+0xab9/0xd20 [ 126.197421][ T804] ? __pfx_process_one_work+0x10/0x10 [ 126.197457][ T804] ? assign_work+0x3a1/0x410 [ 126.197487][ T804] worker_thread+0x9b0/0xee0 [ 126.197542][ T804] kthread+0x711/0x8a0 [ 126.197565][ T804] ? __pfx_worker_thread+0x10/0x10 [ 126.197591][ T804] ? __pfx_kthread+0x10/0x10 [ 126.197611][ T804] ? _raw_spin_unlock_irq+0x23/0x50 [ 126.197633][ T804] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.197663][ T804] ? __pfx_kthread+0x10/0x10 [ 126.197683][ T804] ret_from_fork+0x599/0xb30 [ 126.197711][ T804] ? __pfx_ret_from_fork+0x10/0x10 [ 126.197748][ T804] ? __switch_to_asm+0x39/0x70 [ 126.197765][ T804] ? __switch_to_asm+0x33/0x70 [ 126.197783][ T804] ? __pfx_kthread+0x10/0x10 [ 126.197803][ T804] ret_from_fork_asm+0x1a/0x30 [ 126.197842][ T804] [ 126.197850][ T804] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 126.655534][ T6513] hfsplus: xattr searching failed [ 126.708390][ T30] audit: type=1800 audit(1762470090.516:6): pid=6513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.192" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 126.803718][ T12] hfsplus: bad catalog file entry [ 126.825552][ T12] hfsplus: b-tree write err: -5, ino 3 [ 127.070383][ T30] audit: type=1326 audit(1762470090.886:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.2.202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effa438f6c9 code=0x0 [ 127.388487][ T6544] loop1: detected capacity change from 0 to 64 [ 127.840087][ T6558] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 127.925479][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 127.964584][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.045026][ T5955] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.093240][ T6565] loop2: detected capacity change from 0 to 1024 [ 128.103908][ T6561] bridge_slave_1: left allmulticast mode [ 128.122400][ T6561] bridge_slave_1: left promiscuous mode [ 128.154501][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 128.170561][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.176920][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 128.205736][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.218771][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.231453][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.241640][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 128.246502][ T6561] bridge_slave_0: left allmulticast mode [ 128.248783][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.261012][ T6561] bridge_slave_0: left promiscuous mode [ 128.268380][ T5955] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 128.280907][ T5955] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 128.289912][ T5955] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 128.299556][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.306014][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.324401][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.341572][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.351058][ T5955] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.363779][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 128.398611][ T5955] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 128.404026][ T6569] netlink: 'syz.0.215': attribute type 4 has an invalid length. [ 128.417605][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.440069][ T5955] usb 5-1: config 0 descriptor?? [ 128.445319][ T5884] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.594731][ T24] usb 2-1: usb_control_msg returned -32 [ 128.600543][ T24] usbtmc 2-1:16.0: can't read capabilities [ 128.610012][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 128.629883][ T5884] usb 3-1: config 0 has no interfaces? [ 128.646112][ T5884] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.b2 [ 128.664885][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.689343][ T5955] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 128.724724][ T5884] usb 3-1: config 0 descriptor?? [ 128.734749][ T5955] usb 5-1: USB disconnect, device number 2 [ 128.795842][ T5955] usblp1: removed [ 128.970913][ T6582] loop0: detected capacity change from 0 to 512 [ 128.996590][ T24] usb 3-1: USB disconnect, device number 3 [ 129.026157][ T6582] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.235709][ T5955] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.394943][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 129.411803][ T5955] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.422116][ T5955] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.432291][ T5955] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.442111][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.466951][ T5955] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.479331][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.495880][ T5955] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 129.514848][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.540367][ T5955] usb 5-1: config 0 descriptor?? [ 129.562296][ T1106] hfsplus: b-tree write err: -5, ino 4 [ 129.778173][ T5955] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 130.028224][ T5955] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.187014][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.198502][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.212043][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.231058][ T5955] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.254730][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.287586][ T5955] usb 3-1: config 0 descriptor?? [ 130.433892][ T6588] syz.3.223 (6588): drop_caches: 2 [ 130.775097][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.936818][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 130.947473][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 130.957369][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 130.967237][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 130.979638][ T24] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 130.988813][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.996893][ T24] usb 1-1: Product: syz [ 131.001103][ T24] usb 1-1: Manufacturer: syz [ 131.005807][ T24] usb 1-1: SerialNumber: syz [ 131.014976][ T24] usb 1-1: config 0 descriptor?? [ 131.023025][ T24] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 131.235170][ T24] scsi host1: usb-storage 1-1:0.0 [ 131.250189][ T24] usb 1-1: USB disconnect, device number 4 [ 131.897764][ T6619] netlink: 68 bytes leftover after parsing attributes in process `syz.3.233'. [ 131.910100][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 131.931860][ T6621] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.057208][ T6626] loop3: detected capacity change from 0 to 256 [ 132.086994][ T6623] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 132.125436][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 132.157706][ T6627] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 132.166460][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 132.197899][ T5822] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 132.207511][ T5822] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 132.639077][ T804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.641121][ T6638] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.788804][ T804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.912298][ T804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.025880][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 133.030021][ T804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.047832][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 133.057191][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 133.079244][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 133.087289][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 133.761511][ T804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.773689][ T804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.788401][ T804] bond0 (unregistering): Released all slaves [ 133.971754][ T30] audit: type=1326 audit(1762470097.786:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe09b8f6c9 code=0x7ffc0000 [ 133.999318][ T30] audit: type=1326 audit(1762470097.786:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe09b8f6c9 code=0x7ffc0000 [ 134.023285][ T30] audit: type=1326 audit(1762470097.786:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7efe09b8f6c9 code=0x7ffc0000 [ 134.050261][ T30] audit: type=1326 audit(1762470097.786:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe09b8f6c9 code=0x7ffc0000 [ 134.086286][ T30] audit: type=1326 audit(1762470097.786:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe09b8f6c9 code=0x7ffc0000 [ 134.141699][ T30] audit: type=1326 audit(1762470097.786:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7efe09b8f6c9 code=0x7ffc0000 [ 134.176590][ T30] audit: type=1326 audit(1762470097.786:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe09b8f6c9 code=0x7ffc0000 [ 134.206222][ T30] audit: type=1326 audit(1762470097.786:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe09b8f6c9 code=0x7ffc0000 [ 134.231221][ T30] audit: type=1326 audit(1762470097.786:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7efe09b8f6c9 code=0x7ffc0000 [ 134.342826][ T30] audit: type=1326 audit(1762470097.786:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.0.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe09b8f6c9 code=0x7ffc0000 [ 134.355440][ T6664] tls_set_device_offload: netdev not found [ 134.395437][ T6589] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 134.437131][ T5955] plantronics 0003:047F:FFFF.0003: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 134.464205][ T5955] usb 3-1: USB disconnect, device number 4 [ 134.540830][ T794] usb 2-1: USB disconnect, device number 3 [ 134.570644][ T5870] usb 5-1: USB disconnect, device number 3 [ 134.615364][ T5870] usblp1: removed [ 134.751262][ T6668] fido_id[6668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 135.063683][ T804] hsr_slave_0: left promiscuous mode [ 135.077828][ T804] hsr_slave_1: left promiscuous mode [ 135.086382][ T804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.103453][ T804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.113393][ T5988] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.130536][ T804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.142066][ T804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.175288][ T5833] Bluetooth: hci2: command tx timeout [ 135.202690][ T804] veth1_macvtap: left promiscuous mode [ 135.216886][ T804] veth0_macvtap: left promiscuous mode [ 135.231043][ T804] veth1_vlan: left promiscuous mode [ 135.241903][ T804] veth0_vlan: left promiscuous mode [ 135.258198][ T6698] Bluetooth: MGMT ver 1.23 [ 135.277732][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.319465][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.356202][ T5988] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 135.386742][ T5988] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.412807][ T5988] usb 5-1: Manufacturer: syz [ 135.436272][ T5988] usb 5-1: config 0 descriptor?? [ 135.890312][ T5988] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 135.898108][ T5988] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 135.910508][ T5988] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 135.921119][ T5988] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 135.928492][ T5988] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 135.936690][ T5988] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 135.945933][ T5988] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 135.967960][ T5988] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 136.007758][ T804] team0 (unregistering): Port device team_slave_1 removed [ 136.048513][ T804] team0 (unregistering): Port device team_slave_0 removed [ 136.552366][ T6642] chnl_net:caif_netlink_parms(): no params data found [ 136.700324][ T5988] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 136.740782][ T5988] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 136.767010][ T5988] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 136.821952][ T5988] usb 5-1: USB disconnect, device number 4 [ 137.059539][ T6717] fido_id[6717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 137.182836][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.197574][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.215028][ T6642] bridge_slave_0: entered allmulticast mode [ 137.223080][ T6642] bridge_slave_0: entered promiscuous mode [ 137.260508][ T5833] Bluetooth: hci2: command tx timeout [ 137.277441][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.304518][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.311842][ T6642] bridge_slave_1: entered allmulticast mode [ 137.376210][ T6642] bridge_slave_1: entered promiscuous mode [ 137.487512][ T6742] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 137.579438][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.612443][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.866340][ T6642] team0: Port device team_slave_0 added [ 137.904036][ T6642] team0: Port device team_slave_1 added [ 138.122490][ T6762] loop1: detected capacity change from 0 to 512 [ 138.152253][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.158176][ T6762] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.165483][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.213892][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.248547][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.308066][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.345011][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.356326][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.413378][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.698083][ T6642] hsr_slave_0: entered promiscuous mode [ 138.718215][ T6642] hsr_slave_1: entered promiscuous mode [ 138.727874][ T6642] debugfs: 'hsr0' already exists in 'hsr' [ 138.743947][ T6642] Cannot create hsr debugfs directory [ 138.774477][ T5988] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 139.339606][ T5833] Bluetooth: hci2: command tx timeout [ 139.532502][ T5988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 139.587311][ T5988] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 139.623023][ T5988] usb 5-1: can't read configurations, error -71 [ 140.524985][ T5870] ------------[ cut here ]------------ [ 140.531150][ T5870] WARNING: ./include/linux/ns_common.h:255 at destroy_super_work+0x15c/0x1a0, CPU#0: kworker/0:3/5870 [ 140.542614][ T5870] Modules linked in: [ 140.547273][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 140.557421][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.568361][ T5870] Workqueue: events destroy_super_work [ 140.573894][ T5870] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 140.579965][ T5870] Code: f4 62 ff 48 81 c3 a8 fc ff ff 48 89 df e8 ec f4 62 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8a 7c e1 ff e8 25 73 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 17 73 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 140.600230][ T5870] RSP: 0018:ffffc900047ffa48 EFLAGS: 00010293 [ 140.606458][ T5870] RAX: ffffffff823b0b7b RBX: ffff888058d5a898 RCX: ffff888029e0bd00 [ 140.614574][ T5870] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.622593][ T5870] RBP: 0000000000000004 R08: ffff88807e9d8193 R09: 1ffff1100fd3b032 [ 140.630810][ T5870] R10: dffffc0000000000 R11: ffffed100fd3b033 R12: ffff88807e9d8190 [ 140.638894][ T5870] R13: dffffc0000000000 R14: ffff888058d5a000 R15: ffff88807e9d8000 [ 140.647340][ T5870] FS: 0000000000000000(0000) GS:ffff888125ec5000(0000) knlGS:0000000000000000 [ 140.656950][ T5870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.661464][ T6642] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.663573][ T5870] CR2: 0000001b30d1bff8 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 140.663605][ T5870] Call Trace: [ 140.663617][ T5870] [ 140.663630][ T5870] ? process_one_work+0x868/0x15d0 [ 140.690894][ T5870] process_one_work+0x94a/0x15d0 [ 140.696134][ T5870] ? __lock_acquire+0xab9/0xd20 [ 140.701076][ T5870] ? __pfx_process_one_work+0x10/0x10 [ 140.706588][ T5870] ? assign_work+0x3a1/0x410 [ 140.711233][ T5870] worker_thread+0x9b0/0xee0 [ 140.716131][ T5870] kthread+0x711/0x8a0 [ 140.722597][ T5870] ? __pfx_worker_thread+0x10/0x10 [ 140.727958][ T5870] ? __pfx_kthread+0x10/0x10 [ 140.732605][ T5870] ? _raw_spin_unlock_irq+0x23/0x50 [ 140.738387][ T5870] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.743699][ T5870] ? __pfx_kthread+0x10/0x10 [ 140.748408][ T5870] ret_from_fork+0x599/0xb30 [ 140.753441][ T5870] ? __pfx_ret_from_fork+0x10/0x10 [ 140.759077][ T5870] ? __switch_to_asm+0x39/0x70 [ 140.764021][ T5870] ? __switch_to_asm+0x33/0x70 [ 140.769131][ T5870] ? __pfx_kthread+0x10/0x10 [ 140.773897][ T5870] ret_from_fork_asm+0x1a/0x30 [ 140.778880][ T5870] [ 140.781953][ T5870] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.789274][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 140.798698][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.808829][ T5870] Workqueue: events destroy_super_work [ 140.814323][ T5870] Call Trace: [ 140.817619][ T5870] [ 140.820594][ T5870] dump_stack_lvl+0x99/0x250 [ 140.825314][ T5870] ? __asan_memcpy+0x40/0x70 [ 140.829950][ T5870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.835191][ T5870] ? __pfx__printk+0x10/0x10 [ 140.839817][ T5870] vpanic+0x237/0x6d0 [ 140.843816][ T5870] ? __pfx_vpanic+0x10/0x10 [ 140.848329][ T5870] ? is_bpf_text_address+0x292/0x2b0 [ 140.853743][ T5870] ? is_bpf_text_address+0x26/0x2b0 [ 140.858971][ T5870] panic+0xb9/0xc0 [ 140.862705][ T5870] ? __pfx_panic+0x10/0x10 [ 140.867142][ T5870] ? ret_from_fork_asm+0x1a/0x30 [ 140.872097][ T5870] __warn+0x334/0x4c0 [ 140.876089][ T5870] ? destroy_super_work+0x15c/0x1a0 [ 140.881306][ T5870] ? destroy_super_work+0x15c/0x1a0 [ 140.886520][ T5870] report_bug+0x2be/0x4f0 [ 140.890870][ T5870] ? destroy_super_work+0x15c/0x1a0 [ 140.896099][ T5870] ? destroy_super_work+0x15c/0x1a0 [ 140.901338][ T5870] ? destroy_super_work+0x15e/0x1a0 [ 140.906575][ T5870] handle_bug+0x84/0x160 [ 140.910937][ T5870] exc_invalid_op+0x1a/0x50 [ 140.915501][ T5870] asm_exc_invalid_op+0x1a/0x20 [ 140.920373][ T5870] RIP: 0010:destroy_super_work+0x15c/0x1a0 [ 140.926201][ T5870] Code: f4 62 ff 48 81 c3 a8 fc ff ff 48 89 df e8 ec f4 62 ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8a 7c e1 ff e8 25 73 86 ff 90 <0f> 0b 90 e9 6d ff ff ff e8 17 73 86 ff 4c 89 e7 be 03 00 00 00 e8 [ 140.945921][ T5870] RSP: 0018:ffffc900047ffa48 EFLAGS: 00010293 [ 140.952188][ T5870] RAX: ffffffff823b0b7b RBX: ffff888058d5a898 RCX: ffff888029e0bd00 [ 140.960258][ T5870] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 140.969025][ T5870] RBP: 0000000000000004 R08: ffff88807e9d8193 R09: 1ffff1100fd3b032 [ 140.977010][ T5870] R10: dffffc0000000000 R11: ffffed100fd3b033 R12: ffff88807e9d8190 [ 140.985004][ T5870] R13: dffffc0000000000 R14: ffff888058d5a000 R15: ffff88807e9d8000 [ 140.993027][ T5870] ? destroy_super_work+0x15b/0x1a0 [ 140.998270][ T5870] ? destroy_super_work+0x15b/0x1a0 [ 141.003507][ T5870] ? process_one_work+0x868/0x15d0 [ 141.008651][ T5870] process_one_work+0x94a/0x15d0 [ 141.013613][ T5870] ? __lock_acquire+0xab9/0xd20 [ 141.018589][ T5870] ? __pfx_process_one_work+0x10/0x10 [ 141.023999][ T5870] ? assign_work+0x3a1/0x410 [ 141.028629][ T5870] worker_thread+0x9b0/0xee0 [ 141.033275][ T5870] kthread+0x711/0x8a0 [ 141.037367][ T5870] ? __pfx_worker_thread+0x10/0x10 [ 141.042500][ T5870] ? __pfx_kthread+0x10/0x10 [ 141.047276][ T5870] ? _raw_spin_unlock_irq+0x23/0x50 [ 141.052519][ T5870] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.057739][ T5870] ? __pfx_kthread+0x10/0x10 [ 141.062344][ T5870] ret_from_fork+0x599/0xb30 [ 141.066994][ T5870] ? __pfx_ret_from_fork+0x10/0x10 [ 141.072134][ T5870] ? __switch_to_asm+0x39/0x70 [ 141.076908][ T5870] ? __switch_to_asm+0x33/0x70 [ 141.081702][ T5870] ? __pfx_kthread+0x10/0x10 [ 141.086329][ T5870] ret_from_fork_asm+0x1a/0x30 [ 141.091135][ T5870] [ 141.094471][ T5870] Kernel Offset: disabled [ 141.098801][ T5870] Rebooting in 86400 seconds..