last executing test programs: 3m41.077121256s ago: executing program 4 (id=78): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="010000000000000000090000000000f8", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}}, 0x0) 3m40.543357873s ago: executing program 4 (id=81): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x20) 3m39.933554153s ago: executing program 4 (id=84): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 3m39.102442961s ago: executing program 4 (id=87): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000400)='./file0/file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 3m38.555186006s ago: executing program 4 (id=90): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x4}, 0x2) 3m36.632580706s ago: executing program 4 (id=97): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 3m35.008783864s ago: executing program 32 (id=97): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 2m28.598435912s ago: executing program 2 (id=353): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000700)={0x0, 0x0, 0x2}, &(0x7f0000000240)=[{}, {}]) 2m26.920817116s ago: executing program 2 (id=356): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 2m26.148423529s ago: executing program 2 (id=361): socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) 2m25.41486058s ago: executing program 2 (id=364): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000300), 0x3, 0x470, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) 2m23.520443796s ago: executing program 2 (id=371): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000001ec0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) 2m21.49268907s ago: executing program 2 (id=377): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000041080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m18.59043657s ago: executing program 33 (id=377): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000041080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 17.630482329s ago: executing program 5 (id=915): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000000, 0x0, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)='b', 0x1, 0x4, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) 16.710576489s ago: executing program 5 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000a00)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 16.188882894s ago: executing program 5 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x80000000, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sync() sync() 15.029621415s ago: executing program 5 (id=928): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 14.312979184s ago: executing program 5 (id=933): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) 13.50723972s ago: executing program 5 (id=939): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x4}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 11.631520792s ago: executing program 34 (id=939): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x4}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 7.188462863s ago: executing program 1 (id=966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003cc0)="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", 0x1026}], 0x1, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000010}], 0x1, 0x20049001) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4095, 0xfff}, {&(0x7f00000002c0)=""/39, 0x27}], 0x2}, 0x2) 6.072658696s ago: executing program 6 (id=961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c004}, 0x40000) 6.0685897s ago: executing program 1 (id=971): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 5.290426563s ago: executing program 3 (id=962): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local}) pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10000) 5.286927033s ago: executing program 6 (id=973): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r1, r1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000180)='./file1\x00'}, 0x18) 3.518523513s ago: executing program 0 (id=970): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x28803, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000140)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000"]) 3.072212984s ago: executing program 0 (id=972): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.065830027s ago: executing program 3 (id=983): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x7a8) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2.664248582s ago: executing program 1 (id=974): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0xe3, 0x4) 2.653040566s ago: executing program 3 (id=975): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.122576743s ago: executing program 1 (id=976): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r1, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 1.63796443s ago: executing program 1 (id=977): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200007, 0x801, 0x4, 0x7}) fanotify_init(0xf00, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.562609591s ago: executing program 0 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@uqnoenforce}]}, 0x1, 0x990f, &(0x7f0000013080)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x35) 964.755258ms ago: executing program 6 (id=980): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 961.626949ms ago: executing program 3 (id=981): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 914.90921ms ago: executing program 1 (id=982): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000440)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 250.257237ms ago: executing program 6 (id=984): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xb2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 69.34722ms ago: executing program 0 (id=985): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 0s ago: executing program 3 (id=986): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001b40)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) kernel console output (not intermixed with test programs): face [ 216.056016][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.124606][ T13] bond0 (unregistering): Released all slaves [ 216.833802][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.843717][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.861659][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.880514][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.909234][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.130324][ T1064] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 217.162848][ T13] hsr_slave_0: left promiscuous mode [ 217.212194][ T13] hsr_slave_1: left promiscuous mode [ 217.230390][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.244144][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.287008][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.330550][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.349981][ T1064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 217.403003][ T1064] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 217.431712][ T13] veth1_macvtap: left promiscuous mode [ 217.437401][ T13] veth0_macvtap: left promiscuous mode [ 217.455450][ T1064] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 217.481081][ T13] veth1_vlan: left promiscuous mode [ 217.486608][ T13] veth0_vlan: left promiscuous mode [ 217.506158][ T1064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.557050][ T1064] usb 3-1: config 0 descriptor?? [ 217.587820][ T6272] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.931038][ T1064] usbhid 3-1:0.0: can't add hid device: -71 [ 217.937573][ T1064] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 217.983185][ T1064] usb 3-1: USB disconnect, device number 6 [ 218.367761][ T6280] loop1: detected capacity change from 0 to 8192 [ 218.410333][ T1064] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 218.586975][ T1064] usb 3-1: Using ep0 maxpacket: 32 [ 218.647842][ T1064] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 218.667964][ T1064] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 218.688232][ T1064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.744632][ T1064] usb 3-1: config 0 descriptor?? [ 218.963734][ T6290] loop3: detected capacity change from 0 to 64 [ 219.010208][ T5781] Bluetooth: hci4: command tx timeout [ 219.286137][ T1064] hid-rmi 0003:06CB:81A7.0003: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 219.400525][ T5403] usb 3-1: USB disconnect, device number 7 [ 219.769234][ T13] team0 (unregistering): Port device team_slave_1 removed [ 219.923666][ T6295] fido_id[6295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 219.963411][ T13] team0 (unregistering): Port device team_slave_0 removed [ 220.995946][ T6313] loop3: detected capacity change from 0 to 128 [ 221.091141][ T5781] Bluetooth: hci4: command tx timeout [ 221.263142][ T6313] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.346512][ T6313] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.078046][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.540777][ T6328] mkiss: ax0: crc mode is auto. [ 223.171640][ T5781] Bluetooth: hci4: command tx timeout [ 223.640885][ T6332] loop3: detected capacity change from 0 to 40427 [ 223.679430][ T6332] F2FS-fs (loop3): invalid crc value [ 223.973425][ T6332] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 223.987698][ T6332] F2FS-fs (loop3): Start checkpoint disabled! [ 224.000165][ T6332] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 224.008872][ T6332] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 224.255611][ T6348] netlink: 'syz.2.130': attribute type 6 has an invalid length. [ 224.294825][ T6268] chnl_net:caif_netlink_parms(): no params data found [ 225.250317][ T5781] Bluetooth: hci4: command tx timeout [ 226.217447][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.280472][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.299049][ T6268] bridge_slave_0: entered allmulticast mode [ 226.345806][ T6268] bridge_slave_0: entered promiscuous mode [ 226.416724][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.441292][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.448956][ T6268] bridge_slave_1: entered allmulticast mode [ 226.478312][ T6268] bridge_slave_1: entered promiscuous mode [ 226.567596][ T6377] loop2: detected capacity change from 0 to 512 [ 226.744348][ T6377] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.811876][ T6268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.861280][ T6377] EXT4-fs (loop2): orphan cleanup on readonly fs [ 226.880766][ T6377] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.138: bad orphan inode 15 [ 226.898414][ T6268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.972043][ T6377] loop2: lost filesystem error report for type 5 error -117 [ 226.977597][ T6377] ext4_test_bit(bit=14, block=18) = 1 [ 226.985408][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 226.985494][ C0] EXT4-fs (loop2): initial error at time 1772029154: ext4_orphan_get:1417 [ 226.985602][ C0] EXT4-fs (loop2): last error at time 1772029154: ext4_orphan_get:1417 [ 227.071160][ T6377] is_bad_inode(inode)=0 [ 227.075493][ T6377] NEXT_ORPHAN(inode)=1023 [ 227.113047][ T6377] max_ino=32 [ 227.117429][ T6377] i_nlink=0 [ 227.133272][ T6377] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2970: inode #15: comm syz.2.138: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 227.158239][ T6268] team0: Port device team_slave_0 added [ 227.161535][ T6383] syz.0.141 uses obsolete (PF_INET,SOCK_PACKET) [ 227.190537][ T6377] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.193835][ T6268] team0: Port device team_slave_1 added [ 227.196381][ T6377] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 227.315717][ T6377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 227.527225][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.551442][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.650054][ T6268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.723495][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.758536][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.760972][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.840650][ T6268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.918056][ T6389] loop0: detected capacity change from 0 to 164 [ 227.985074][ T6389] isofs_fill_super: root inode is not a directory. Corrupted media? [ 228.114301][ T1064] kernel write not supported for file /sg0 (pid: 1064 comm: kworker/1:3) [ 228.152128][ T6393] loop2: detected capacity change from 0 to 128 [ 228.256135][ T6393] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.268524][ T6268] hsr_slave_0: entered promiscuous mode [ 228.274805][ T6268] hsr_slave_1: entered promiscuous mode [ 228.322931][ T6393] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.362672][ T6391] loop3: detected capacity change from 0 to 2048 [ 228.478798][ T6391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.505459][ T6391] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.514085][ T6393] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 18: comm syz.2.144: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=0 [ 228.619004][ T6393] EXT4-fs error (device loop2) in do_split:2027: Corrupt filesystem [ 229.058798][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.098848][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.108011][ T6404] loop0: detected capacity change from 0 to 256 [ 229.394250][ T6404] FAT-fs (loop0): Directory bread(block 64) failed [ 229.430180][ T6404] FAT-fs (loop0): Directory bread(block 65) failed [ 229.437083][ T6404] FAT-fs (loop0): Directory bread(block 66) failed [ 229.530130][ T6404] FAT-fs (loop0): Directory bread(block 67) failed [ 229.537003][ T6404] FAT-fs (loop0): Directory bread(block 68) failed [ 229.620074][ T6404] FAT-fs (loop0): Directory bread(block 69) failed [ 229.626928][ T6404] FAT-fs (loop0): Directory bread(block 70) failed [ 229.698131][ T6404] FAT-fs (loop0): Directory bread(block 71) failed [ 229.739367][ T6404] FAT-fs (loop0): Directory bread(block 72) failed [ 229.763342][ T6411] Invalid argument reading file caps for ./file0 [ 229.799459][ T6404] FAT-fs (loop0): Directory bread(block 73) failed [ 230.393872][ T6421] loop2: detected capacity change from 0 to 512 [ 230.400488][ T6268] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.447241][ T6268] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.529267][ T6421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.651717][ T6268] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.675831][ T29] audit: type=1800 audit(1772029158.172:5): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.151" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 230.847295][ T6268] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.076052][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.553783][ T6440] input: syz1 as /devices/virtual/input/input8 [ 232.301227][ T6268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.478115][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.603950][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.611457][ T5921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.781619][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.789075][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.900364][ T6479] ALSA: mixer_oss: invalid OSS volume ':' [ 234.906301][ T6479] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 234.909074][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.981273][ T6479] ALSA: mixer_oss: invalid OSS volume '5' [ 234.987196][ T6479] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 235.090466][ T6479] ALSA: mixer_oss: invalid OSS volume '6' [ 235.150169][ T6479] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 235.201113][ T6479] ALSA: mixer_oss: invalid OSS volume '7' [ 235.792467][ T6493] loop0: detected capacity change from 0 to 1024 [ 235.912546][ T6493] hfsplus: b-tree write err: -5, ino 2 [ 235.961991][ T6493] hfsplus: b-tree write err: -5, ino 2 [ 235.985811][ T6493] hfsplus: b-tree write err: -5, ino 27 [ 236.351210][ T5921] hfsplus: b-tree write err: -5, ino 25 [ 236.357244][ T5921] hfsplus: b-tree write err: -5, ino 4 [ 236.403940][ T5921] hfsplus: b-tree write err: -5, ino 2 [ 236.415529][ T5921] hfsplus: b-tree write err: -5, ino 27 [ 237.423474][ T6268] veth0_vlan: entered promiscuous mode [ 237.576508][ T6268] veth1_vlan: entered promiscuous mode [ 238.183372][ T6268] veth0_macvtap: entered promiscuous mode [ 238.312458][ T6268] veth1_macvtap: entered promiscuous mode [ 238.400839][ T6529] loop1: detected capacity change from 0 to 512 [ 238.519918][ T6522] loop2: detected capacity change from 0 to 4096 [ 238.560686][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.583307][ T6529] EXT4-fs (loop1): 1 orphan inode deleted [ 238.677338][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.699102][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.872403][ T6529] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.184: invalid indirect mapped block 234881024 (level 0) [ 238.896409][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.957633][ T6529] EXT4-fs (loop1): Remounting filesystem read-only [ 238.962722][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.018902][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.033894][ T6522] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 239.052185][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.457836][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.879545][ T6543] loop1: detected capacity change from 0 to 256 [ 241.674167][ T6561] loop0: detected capacity change from 0 to 512 [ 241.924963][ T6561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.049603][ T6561] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.321217][ T29] audit: type=1800 audit(1772029169.812:6): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.192" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 243.067487][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.350661][ T6579] loop1: detected capacity change from 0 to 512 [ 243.451823][ T6579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.595563][ T6579] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.747123][ T6585] tun0: tun_chr_ioctl cmd 1074025675 [ 243.790555][ T6579] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 252 (only 1 groups) [ 243.805250][ T6585] tun0: persist enabled [ 243.826051][ T6585] tun0: tun_chr_ioctl cmd 1074025675 [ 243.877116][ T6585] tun0: persist disabled [ 244.057325][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.961087][ T1064] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 245.140379][ T1064] usb 4-1: Using ep0 maxpacket: 8 [ 245.178212][ T6612] sctp: [Deprecated]: syz.1.205 (pid 6612) Use of int in max_burst socket option deprecated. [ 245.178212][ T6612] Use struct sctp_assoc_value instead [ 245.201738][ T1064] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 245.280614][ T1064] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.320084][ T1064] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.350211][ T1064] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.390418][ T1064] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.420280][ T1064] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.688713][ T1064] usb 4-1: usb_control_msg returned -32 [ 245.713531][ T1064] usbtmc 4-1:16.0: can't read capabilities [ 246.012287][ T6618] loop2: detected capacity change from 0 to 4096 [ 246.158909][ T6627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.170252][ T1064] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 246.266867][ T6629] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 246.371722][ T1064] usb 1-1: Using ep0 maxpacket: 32 [ 246.404082][ T1064] usb 1-1: config 0 interface 0 has no altsetting 0 [ 246.432170][ T1064] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 246.462444][ T1064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.480889][ T1064] usb 1-1: Product: syz [ 246.485249][ T1064] usb 1-1: Manufacturer: syz [ 246.512477][ T1064] usb 1-1: SerialNumber: syz [ 246.539074][ T1064] usb 1-1: config 0 descriptor?? [ 246.712150][ T5921] ntfs3(loop2): ino=5, mi_enum_attr [ 247.004564][ T1064] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 247.126435][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.164280][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.562254][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.610138][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.648852][ T1064] usb 1-1: USB disconnect, device number 3 [ 247.929714][ T30] usb 4-1: USB disconnect, device number 2 [ 248.419062][ T6648] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 248.795110][ T6656] mmap: syz.1.218 (6656) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 249.320584][ T6662] loop2: detected capacity change from 0 to 2048 [ 249.368370][ T6662] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.570058][ T30] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 249.777069][ T30] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.857000][ T30] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 249.890215][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.898429][ T30] usb 1-1: Product: syz [ 249.950188][ T5403] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 249.950432][ T30] usb 1-1: Manufacturer: syz [ 249.984142][ T30] usb 1-1: SerialNumber: syz [ 250.011199][ T30] usb 1-1: config 0 descriptor?? [ 250.087043][ T30] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 250.109681][ T6672] netlink: 824 bytes leftover after parsing attributes in process `syz.2.225'. [ 250.151237][ T5403] usb 6-1: Using ep0 maxpacket: 8 [ 250.153385][ T6672] netlink: 824 bytes leftover after parsing attributes in process `syz.2.225'. [ 250.204159][ T5403] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 250.208648][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 250.237693][ T5403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 250.274662][ T5403] usb 6-1: Product: syz [ 250.279032][ T5403] usb 6-1: Manufacturer: syz [ 250.323190][ T5403] usb 6-1: SerialNumber: syz [ 250.388995][ T5403] usb 6-1: config 0 descriptor?? [ 250.433256][ T6670] loop1: detected capacity change from 0 to 4096 [ 250.466224][ T5403] gspca_main: sq905-2.14.0 probing 2770:9120 [ 250.497252][ T6670] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 250.905663][ T30] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 250.920516][ T6670] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 250.923817][ T30] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 250.962645][ T6670] ntfs3(loop1): Failed to load $Extend (-22). [ 250.992792][ T6670] ntfs3(loop1): Failed to initialize $Extend. [ 251.027485][ T30] usb 1-1: USB disconnect, device number 4 [ 251.122710][ T6670] ntfs3(loop1): ino=0, attr_set_size_ex [ 251.191945][ T6670] ntfs3(loop1): ino=0, attr_set_size_ex [ 251.244409][ T6670] ntfs3(loop1): ino=0, attr_set_size_ex [ 251.300324][ T5403] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 251.308098][ T5403] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 251.440260][ T5403] usb 6-1: USB disconnect, device number 2 [ 252.560527][ T6682] loop2: detected capacity change from 0 to 32768 [ 252.736198][ T6682] JBD2: Ignoring recovery information on journal [ 252.923151][ T6682] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 253.147453][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 253.277184][ T6691] loop5: detected capacity change from 0 to 4096 [ 253.526952][ T6691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.007092][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.532686][ T5781] Bluetooth: hci0: command 0x2016 tx timeout [ 255.354985][ T6731] loop5: detected capacity change from 0 to 256 [ 255.790778][ T6737] sctp: [Deprecated]: syz.0.246 (pid 6737) Use of int in max_burst socket option. [ 255.790778][ T6737] Use struct sctp_assoc_value instead [ 256.612481][ T5070] Bluetooth: hci0: command 0x2016 tx timeout [ 256.973246][ T5403] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 257.027796][ T6758] loop1: detected capacity change from 0 to 512 [ 257.113982][ T6758] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.253: inode has both inline data and extents flags [ 257.141124][ T6758] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.141950][ T6758] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.253: couldn't read orphan inode 15 (err -117) [ 257.151482][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 257.151566][ C1] EXT4-fs (loop1): initial error at time 1772029184: ext4_orphan_get:1391: inode 15 [ 257.151717][ C1] EXT4-fs (loop1): last error at time 1772029184: ext4_orphan_get:1391: inode 15 [ 257.240954][ T5403] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 257.266438][ T5403] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 257.287584][ T6758] loop1: lost filesystem error report for type 5 error -117 [ 257.291302][ T6758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.326470][ T5403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.383508][ T5403] usb 3-1: config 0 descriptor?? [ 257.390629][ T6755] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 257.944623][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.948611][ T6768] loop0: detected capacity change from 0 to 2048 [ 258.024311][ T5403] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf3 found [ 258.048718][ T5403] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf4 found [ 258.160095][ T5403] usb 3-1: USB disconnect, device number 8 [ 258.180874][ T6772] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.261517][ T6768] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 258.335049][ T6768] Remounting filesystem read-only [ 259.024577][ T6777] xt_CT: No such helper "netbios-ns" [ 259.250265][ T5070] Bluetooth: hci4: command 0x0405 tx timeout [ 259.553318][ T6786] loop2: detected capacity change from 0 to 2048 [ 259.563921][ T6789] input: syz0 as /devices/virtual/input/input9 [ 259.756964][ T6786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.911633][ T29] audit: type=1800 audit(1772029187.412:7): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.262" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 260.441894][ T133] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 260.536046][ T133] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 256 with error 28 [ 260.599034][ T133] EXT4-fs (loop2): This should not happen!! Data will be lost [ 260.599034][ T133] [ 260.637408][ T133] EXT4-fs (loop2): Total free blocks count 0 [ 260.660008][ T133] EXT4-fs (loop2): Free/Dirty block details [ 260.666078][ T133] EXT4-fs (loop2): free_blocks=2415919104 [ 260.719975][ T133] EXT4-fs (loop2): dirty_blocks=256 [ 260.736060][ T133] EXT4-fs (loop2): Block reservation details [ 260.777498][ T133] EXT4-fs (loop2): i_reserved_data_blocks=16 [ 260.883119][ T6807] loop5: detected capacity change from 0 to 4096 [ 260.951174][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.952392][ T6807] EXT4-fs (loop5): Test dummy encryption mode enabled [ 261.030752][ T6807] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 261.035385][ T6812] loop3: detected capacity change from 0 to 256 [ 261.220022][ T6807] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 261.228694][ T6807] System zones: 0-5 [ 261.341276][ T6807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.699118][ T6812] FAT-fs (loop3): Directory bread(block 64) failed [ 261.794609][ T6812] FAT-fs (loop3): Directory bread(block 65) failed [ 261.839098][ T6812] FAT-fs (loop3): Directory bread(block 66) failed [ 261.905600][ T6812] FAT-fs (loop3): Directory bread(block 67) failed [ 261.972581][ T6812] FAT-fs (loop3): Directory bread(block 68) failed [ 261.979303][ T6812] FAT-fs (loop3): Directory bread(block 69) failed [ 262.057722][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.070165][ T6812] FAT-fs (loop3): Directory bread(block 70) failed [ 262.076866][ T6812] FAT-fs (loop3): Directory bread(block 71) failed [ 262.179635][ T6812] FAT-fs (loop3): Directory bread(block 72) failed [ 262.186720][ T6812] FAT-fs (loop3): Directory bread(block 73) failed [ 262.445837][ T6833] loop1: detected capacity change from 0 to 128 [ 262.528962][ T6833] EXT4-fs: Ignoring removed nobh option [ 262.709590][ T6833] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.723029][ T6838] loop0: detected capacity change from 0 to 1024 [ 262.803179][ T6841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.813669][ T6833] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.401658][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.577415][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.280'. [ 264.604213][ T6852] loop1: detected capacity change from 0 to 32768 [ 264.633105][ T6852] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.281 (6852) [ 264.660538][ T6852] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 264.671821][ T6852] BTRFS info (device loop1): using blake2b checksum algorithm [ 264.772974][ T6855] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 265.010995][ T6852] BTRFS info (device loop1): enabling ssd optimizations [ 265.018326][ T6852] BTRFS info (device loop1): turning on async discard [ 265.025415][ T6852] BTRFS info (device loop1): enabling free space tree [ 265.222510][ T6852] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 265.442363][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.459944][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.019281][ T6919] loop0: detected capacity change from 0 to 32768 [ 269.065881][ T6927] loop1: detected capacity change from 0 to 512 [ 269.078166][ T6927] EXT4-fs: Ignoring removed bh option [ 270.073663][ T6919] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 270.082375][ T6919] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 270.093703][ T6927] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 270.261073][ T6927] EXT4-fs (loop1): 1 truncate cleaned up [ 270.391922][ T6927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.561162][ T29] audit: type=1800 audit(1772029198.042:8): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.302" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 270.587427][ T6919] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 19 (type: exp=4, found=1), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 270.603423][ T6919] CPU: 0 UID: 0 PID: 6919 Comm: syz.0.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.603574][ T6919] Tainted: [L]=SOFTLOCKUP [ 270.603619][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.603698][ T6919] Call Trace: [ 270.603745][ T6919] [ 270.603793][ T6919] __dump_stack+0x26/0x30 [ 270.603943][ T6919] dump_stack_lvl+0x14c/0x1c0 [ 270.604101][ T6919] dump_stack+0x1e/0x25 [ 270.604236][ T6919] gfs2_withdraw+0xd5/0x270 [ 270.604380][ T6919] gfs2_metatype_check_ii+0x113/0x140 [ 270.604537][ T6919] gfs2_meta_buffer+0x4b3/0x590 [ 270.604733][ T6919] inode_go_instantiate+0xd9/0x1ea0 [ 270.604871][ T6919] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 270.605059][ T6919] ? kmsan_get_metadata+0xf1/0x160 [ 270.605227][ T6919] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 270.605398][ T6919] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 270.605575][ T6919] ? __pfx_inode_go_instantiate+0x10/0x10 [ 270.605716][ T6919] gfs2_instantiate+0x24f/0x4b0 [ 270.605882][ T6919] gfs2_glock_wait+0x26a/0x3b0 [ 270.606052][ T6919] gfs2_glock_nq+0x152f/0x2d40 [ 270.606202][ T6919] ? kmsan_get_metadata+0xf1/0x160 [ 270.606410][ T6919] init_journal+0x1308/0x3970 [ 270.606587][ T6919] ? init_inodes+0x124/0x510 [ 270.606733][ T6919] ? init_inodes+0x124/0x510 [ 270.606891][ T6919] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 270.607077][ T6919] init_inodes+0x124/0x510 [ 270.607229][ T6919] gfs2_fill_super+0x3518/0x3ff0 [ 270.607381][ T6919] ? init_locking+0xed/0x500 [ 270.607562][ T6919] get_tree_bdev_flags+0x6e6/0x920 [ 270.607720][ T6919] ? __pfx_gfs2_fill_super+0x10/0x10 [ 270.607865][ T6919] ? __pfx_gfs2_fill_super+0x10/0x10 [ 270.608006][ T6919] ? __pfx_gfs2_get_tree+0x10/0x10 [ 270.608156][ T6919] get_tree_bdev+0x38/0x50 [ 270.608306][ T6919] gfs2_get_tree+0x57/0x350 [ 270.608452][ T6919] ? __pfx_gfs2_get_tree+0x10/0x10 [ 270.608598][ T6919] vfs_get_tree+0xb3/0x5d0 [ 270.608758][ T6919] do_new_mount+0x885/0x1dd0 [ 270.608917][ T6919] ? apparmor_capable+0x2a2/0x380 [ 270.609064][ T6919] ? kmsan_get_metadata+0xf1/0x160 [ 270.609231][ T6919] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 270.609430][ T6919] path_mount+0x7a2/0x20b0 [ 270.609605][ T6919] ? user_path_at+0x1fc/0x330 [ 270.609761][ T6919] __se_sys_mount+0x704/0x7f0 [ 270.609928][ T6919] ? kmsan_get_metadata+0xf1/0x160 [ 270.610119][ T6919] __x64_sys_mount+0xe4/0x150 [ 270.610303][ T6919] x64_sys_call+0x39f0/0x3ea0 [ 270.610461][ T6919] do_syscall_64+0x134/0xf80 [ 270.610623][ T6919] ? clear_bhb_loop+0x50/0xa0 [ 270.610760][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.610892][ T6919] RIP: 0033:0x7f049019d8ca [ 270.610985][ T6919] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.611090][ T6919] RSP: 002b:00007f048e3f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 270.611207][ T6919] RAX: ffffffffffffffda RBX: 00007f048e3f5ee0 RCX: 00007f049019d8ca [ 270.611299][ T6919] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f048e3f5ea0 [ 270.611385][ T6919] RBP: 0000200000000400 R08: 00007f048e3f5ee0 R09: 0000000000210401 [ 270.611470][ T6919] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000012500 [ 270.611549][ T6919] R13: 00007f048e3f5ea0 R14: 0000000000012600 R15: 0000200000000200 [ 270.611668][ T6919] [ 270.620383][ T6926] loop5: detected capacity change from 0 to 65536 [ 270.622913][ T6919] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 270.709142][ T6926] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 271.183216][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.247506][ T6926] XFS (loop5): Ending clean mount [ 271.265291][ T6926] XFS (loop5): Quotacheck needed: Please wait. [ 271.313362][ T6926] XFS (loop5): Quotacheck: Done. [ 271.578256][ T6268] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 273.132978][ T6965] loop1: detected capacity change from 0 to 1024 [ 273.273355][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 273.480030][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 273.524330][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 273.567310][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 273.613157][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.644746][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.760137][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 273.769409][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.793371][ T133] hfsplus: b-tree write err: -5, ino 3 [ 274.051850][ T10] usb 3-1: usb_control_msg returned -32 [ 274.057688][ T10] usbtmc 3-1:16.0: can't read capabilities [ 274.552578][ T6977] loop0: detected capacity change from 0 to 2048 [ 274.680704][ T6978] loop3: detected capacity change from 0 to 2048 [ 274.713362][ T6977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.836120][ T6983] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.968448][ T29] audit: type=1800 audit(1772029202.462:9): pid=6978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.317" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 275.100568][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.914535][ T30] IPVS: starting estimator thread 0... [ 276.030366][ T6994] IPVS: using max 240 ests per chain, 12000 per kthread [ 276.253411][ T30] usb 3-1: USB disconnect, device number 9 [ 277.368431][ T7015] loop0: detected capacity change from 0 to 164 [ 277.412144][ T7016] binder: 7013:7016 ioctl 400c620e 200000000140 returned -22 [ 277.438777][ T7015] Unable to read rock-ridge attributes [ 277.487054][ T7015] Unable to read rock-ridge attributes [ 277.530642][ T7015] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 277.627812][ T7023] loop1: detected capacity change from 0 to 256 [ 278.204525][ T29] audit: type=1326 audit(1772029205.672:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.2.338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba8819c629 code=0x0 [ 280.800117][ T30] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 280.985296][ T30] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 281.030431][ T30] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 281.080349][ T30] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 281.110163][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.517825][ T7053] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 281.638599][ T30] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 281.690643][ T30] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input10 [ 281.762517][ T30] input: failed to attach handler kbd to device input10, error: -5 [ 281.881828][ T30] usb 6-1: USB disconnect, device number 3 [ 281.883345][ T7057] loop3: detected capacity change from 0 to 1024 [ 282.348836][ T7057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 282.426375][ T29] audit: type=1326 audit(1772029209.922:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7064 comm="syz.2.353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba8819c629 code=0x0 [ 282.458698][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 282.566120][ T7072] loop5: detected capacity change from 0 to 512 [ 282.659982][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 282.686585][ T7072] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.354: inode has both inline data and extents flags [ 282.724129][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.772749][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.787787][ T7072] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.788687][ T7072] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.354: couldn't read orphan inode 15 (err -117) [ 282.798418][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 282.798500][ C0] EXT4-fs (loop5): initial error at time 1772029210: ext4_orphan_get:1391: inode 15 [ 282.798646][ C0] EXT4-fs (loop5): last error at time 1772029210: ext4_orphan_get:1391: inode 15 [ 282.885924][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 282.918238][ T7072] loop5: lost filesystem error report for type 5 error -117 [ 282.921779][ T7072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.943087][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.002607][ T10] usb 1-1: config 0 descriptor?? [ 283.104665][ T10] hub 1-1:0.0: USB hub found [ 283.360528][ T10] hub 1-1:0.0: 1 port detected [ 283.365853][ T29] audit: type=1800 audit(1772029210.842:12): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.354" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 283.493226][ T7077] loop1: detected capacity change from 0 to 32768 [ 283.505510][ T7077] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.355 (7077) [ 283.542909][ T7077] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.553503][ T7077] BTRFS info (device loop1): using crc32c checksum algorithm [ 283.561260][ T7077] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 283.594851][ T10] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 283.624127][ T10] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 283.739347][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 283.750571][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 283.773687][ T7077] BTRFS info (device loop1): rebuilding free space tree [ 283.813615][ T7077] BTRFS info (device loop1): disabling free space tree [ 283.820832][ T7077] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 283.826040][ T10] usb 1-1: USB disconnect, device number 5 [ 283.830881][ T7077] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 283.869194][ T7077] BTRFS info (device loop1): enabling ssd optimizations [ 283.876525][ T7077] BTRFS info (device loop1): enabling disk space caching [ 283.884831][ T7077] BTRFS info (device loop1): force clearing of disk cache [ 283.892277][ T7077] BTRFS info (device loop1): force zstd compression, level 3 [ 284.096454][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 284.102589][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.486875][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.306709][ T7108] input: syz1 as /devices/virtual/input/input11 [ 285.585067][ T7110] loop2: detected capacity change from 0 to 512 [ 285.921452][ T7110] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.065308][ T7110] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.364: bad orphan inode 131083 [ 286.119461][ T7110] loop2: lost filesystem error report for type 5 error -117 [ 286.119941][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 286.133923][ C0] EXT4-fs (loop2): initial error at time 1772029213: ext4_orphan_get:1417 [ 286.142715][ C0] EXT4-fs (loop2): last error at time 1772029213: ext4_orphan_get:1417 [ 286.172500][ T7110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.437007][ T7123] overlayfs: upper fs needs to support d_type. [ 287.094050][ T7126] Invalid argument reading file caps for ./file0 [ 287.472084][ T7130] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 287.715332][ T7135] bond_slave_0: entered promiscuous mode [ 287.721448][ T7135] bond_slave_1: entered promiscuous mode [ 287.802252][ T7135] macvlan2: entered promiscuous mode [ 287.816566][ T7135] bond0: entered promiscuous mode [ 287.928902][ T7135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.975330][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 287.975451][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 287.981797][ T49] Bluetooth: hci0: command 0x2016 tx timeout [ 287.988667][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 288.203365][ T7137] macvlan3: entered promiscuous mode [ 288.382714][ T7137] Zero length message leads to an empty skb [ 288.664695][ T1007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.730171][ T7069] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.790231][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 289.229219][ T1007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.460762][ T7141] loop1: detected capacity change from 0 to 32768 [ 289.475119][ T7141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.375 (7141) [ 289.501059][ T7141] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.511603][ T7141] BTRFS info (device loop1): using sha256 checksum algorithm [ 289.519334][ T7141] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 289.621489][ T30] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 289.633376][ T1007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.700082][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.754382][ T30] usb 4-1: Product: syz [ 289.758744][ T30] usb 4-1: Manufacturer: syz [ 289.796539][ T7141] BTRFS info (device loop1): rebuilding free space tree [ 289.850331][ T30] usb 4-1: SerialNumber: syz [ 289.871155][ T7141] BTRFS info (device loop1): disabling free space tree [ 289.881242][ T7141] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 289.894139][ T7141] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 289.918475][ T30] usb 4-1: config 0 descriptor?? [ 289.928167][ T7141] BTRFS info (device loop1): checking UUID tree [ 289.935941][ T7141] BTRFS info (device loop1): setting nodatasum [ 289.942433][ T7141] BTRFS info (device loop1): setting nodatacow [ 289.948808][ T7141] BTRFS info (device loop1): enabling ssd optimizations [ 289.956481][ T7141] BTRFS info (device loop1): enabling disk space caching [ 289.963795][ T7141] BTRFS info (device loop1): force clearing of disk cache [ 289.971286][ T7141] BTRFS info (device loop1): enabling auto defrag [ 290.166792][ T1007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.205103][ T7162] loop0: detected capacity change from 0 to 512 [ 290.369350][ T13] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 290.384390][ T7162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.496112][ T7162] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.582905][ T30] usb 4-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (88) [ 290.634148][ T7162] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.378: corrupted inode contents [ 290.665135][ T5774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 290.742323][ T7162] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.378: mark_inode_dirty error [ 290.811524][ T30] usb 4-1: Firmware: build [ 290.850744][ T7162] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.378: corrupted inode contents [ 290.882025][ T7162] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.378: mark_inode_dirty error [ 290.986300][ T7167] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.378: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 290.986300][ T7167] [ 291.220354][ T30] usb 4-1: failed to fetch extended address, random address set [ 291.228218][ T30] usb 4-1: atusb_probe: initialization failed, error = -524 [ 291.292097][ T30] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 291.312702][ T1007] bridge_slave_1: left allmulticast mode [ 291.318517][ T1007] bridge_slave_1: left promiscuous mode [ 291.370791][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.392389][ T30] usb 4-1: USB disconnect, device number 3 [ 291.419189][ T1007] bridge_slave_0: left allmulticast mode [ 291.432642][ T1007] bridge_slave_0: left promiscuous mode [ 291.470909][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.501862][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.394145][ T7173] loop8: detected capacity change from 0 to 8 [ 292.452989][ T7173] Dev loop8: unable to read RDB block 8 [ 292.480247][ T7173] loop8: unable to read partition table [ 292.486793][ T7173] loop8: partition table beyond EOD, truncated [ 292.527341][ T7173] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 292.597761][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.706536][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.805061][ T1007] bond0 (unregistering): Released all slaves [ 293.130295][ T7181] loop5: detected capacity change from 0 to 256 [ 293.337996][ T7184] loop1: detected capacity change from 0 to 1024 [ 293.376863][ T7181] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 293.528553][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.547752][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.583004][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.601232][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.630799][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.571253][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'. [ 294.783025][ T7202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.124983][ T7202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.536545][ T1007] hsr_slave_0: left promiscuous mode [ 295.582556][ T1007] hsr_slave_1: left promiscuous mode [ 295.632639][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.672577][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.701209][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.717847][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.730681][ T5783] Bluetooth: hci2: command tx timeout [ 295.801008][ T1007] veth1_macvtap: left promiscuous mode [ 295.824244][ T1007] veth0_macvtap: left promiscuous mode [ 295.842391][ T1007] veth1_vlan: left promiscuous mode [ 295.870143][ T1007] veth0_vlan: left promiscuous mode [ 297.820042][ T5783] Bluetooth: hci2: command tx timeout [ 297.934271][ T7247] loop1: detected capacity change from 0 to 256 [ 298.009594][ T7247] exfat: Deprecated parameter 'utf8' [ 298.031021][ T7247] exfat: Deprecated parameter 'namecase' [ 298.118106][ T7247] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 298.237776][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 298.444293][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 299.583034][ T7256] loop0: detected capacity change from 0 to 40427 [ 299.601434][ T7256] F2FS-fs (loop0): invalid crc value [ 299.873359][ T7256] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 299.892472][ T5783] Bluetooth: hci2: command tx timeout [ 299.930850][ T7256] F2FS-fs (loop0): Start checkpoint disabled! [ 299.940230][ T7256] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 299.948724][ T7256] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 300.645454][ T7267] loop1: detected capacity change from 0 to 2048 [ 300.755214][ T7274] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.802521][ T7267] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 300.892942][ T7267] Remounting filesystem read-only [ 301.323787][ T7186] chnl_net:caif_netlink_parms(): no params data found [ 301.389656][ T7279] loop5: detected capacity change from 0 to 128 [ 301.971847][ T5783] Bluetooth: hci2: command tx timeout [ 303.132390][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.160999][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.177161][ T7186] bridge_slave_0: entered allmulticast mode [ 303.199192][ T7186] bridge_slave_0: entered promiscuous mode [ 303.242889][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.266008][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.283325][ T7186] bridge_slave_1: entered allmulticast mode [ 303.312044][ T7303] loop3: detected capacity change from 0 to 512 [ 303.325411][ T7186] bridge_slave_1: entered promiscuous mode [ 303.415288][ T7303] EXT4-fs (loop3): Test dummy encryption mode enabled [ 303.450640][ T7303] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 303.548967][ T7303] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.419: bad orphan inode 131083 [ 303.576210][ T7186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.599270][ T7186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.705646][ T7186] team0: Port device team_slave_0 added [ 303.707377][ T7303] loop3: lost filesystem error report for type 5 error -117 [ 303.728365][ T7186] team0: Port device team_slave_1 added [ 303.759508][ T7303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.977338][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.041611][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.124074][ T7186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.201083][ T7186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.228002][ T7186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.311119][ T7312] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 304.334590][ T7186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.457294][ T7319] loop1: detected capacity change from 0 to 1024 [ 304.558260][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.627163][ T7319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.817766][ T7186] hsr_slave_0: entered promiscuous mode [ 304.885402][ T7186] hsr_slave_1: entered promiscuous mode [ 304.936710][ T7186] debugfs: 'hsr0' already exists in 'hsr' [ 304.968999][ T7186] Cannot create hsr debugfs directory [ 305.325781][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.774011][ T7186] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.776838][ T7350] loop5: detected capacity change from 0 to 512 [ 306.820809][ T7350] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 306.822741][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 306.888286][ T7186] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.935385][ T7350] EXT4-fs (loop5): 1 truncate cleaned up [ 306.940356][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 306.962518][ T7350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.026259][ T7186] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 307.042474][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 307.065129][ T7351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.273149][ T7351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.509011][ T7186] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 307.630817][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.180479][ T7373] loop5: detected capacity change from 0 to 256 [ 308.334049][ T7373] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 309.146615][ T7387] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.183461][ T7186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.269512][ T7391] sctp: [Deprecated]: syz.5.446 (pid 7391) Use of int in max_burst socket option deprecated. [ 309.269512][ T7391] Use struct sctp_assoc_value instead [ 309.400149][ T7186] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.524299][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.531815][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.709848][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.717387][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.854576][ T7411] loop5: detected capacity change from 0 to 1024 [ 310.902924][ T7411] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.951185][ T7405] loop1: detected capacity change from 0 to 4096 [ 311.248902][ T7411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 311.321637][ T7411] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.330195][ T7405] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 311.485882][ T7411] EXT4-fs (loop5): shut down requested (0) [ 311.612211][ T7405] ntfs3(loop1): Failed to load $Extend (-22). [ 311.637440][ T7405] ntfs3(loop1): Failed to initialize $Extend. [ 312.016923][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 312.424855][ T7432] loop0: detected capacity change from 0 to 128 [ 312.678037][ T7432] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.717833][ T7432] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.762085][ T7186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.353241][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.368998][ T7443] loop5: detected capacity change from 0 to 8 [ 313.431907][ T7443] SQUASHFS error: Failed to read block 0x62: -5 [ 313.438446][ T7443] squashfs image failed sanity check [ 313.828745][ T7439] loop1: detected capacity change from 0 to 40427 [ 313.849314][ T7439] F2FS-fs (loop1): Invalid log blocks per segment (1) [ 313.856504][ T7439] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 313.867689][ T7439] F2FS-fs (loop1): Image doesn't support compression [ 313.874674][ T7439] F2FS-fs (loop1): build fault injection rate: 690 [ 313.882631][ T7439] F2FS-fs (loop1): build fault injection type: 0x35f7 [ 313.962447][ T7439] F2FS-fs (loop1): invalid crc value [ 314.083167][ T7450] sctp: [Deprecated]: syz.0.460 (pid 7450) Use of int in maxseg socket option. [ 314.083167][ T7450] Use struct sctp_assoc_value instead [ 314.338983][ T7439] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 314.358364][ T7439] F2FS-fs (loop1): Start checkpoint disabled! [ 314.389165][ T7439] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 314.412609][ T7439] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 314.420051][ T7439] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 314.526924][ T7439] block device autoloading is deprecated and will be removed. [ 315.116376][ T7468] bridge0: port 3(gretap0) entered blocking state [ 315.211029][ T7468] bridge0: port 3(gretap0) entered disabled state [ 315.218012][ T7468] gretap0: entered allmulticast mode [ 315.363831][ T7468] gretap0: entered promiscuous mode [ 315.430421][ T7469] gretap0: left allmulticast mode [ 315.435643][ T7469] gretap0: left promiscuous mode [ 315.527863][ T7469] bridge0: port 3(gretap0) entered disabled state [ 317.047739][ T7481] loop5: detected capacity change from 0 to 40427 [ 317.078927][ T7481] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 317.086925][ T7481] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 317.110889][ T7481] F2FS-fs (loop5): invalid crc value [ 317.527913][ T7481] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 317.583436][ T7481] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 317.590917][ T7481] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 317.635523][ T7481] F2FS-fs (loop5): Corrupted max_depth of 3: 255 [ 317.641797][ T7186] veth0_vlan: entered promiscuous mode [ 317.644887][ T7481] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 317.661525][ T7481] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 317.770172][ T7186] veth1_vlan: entered promiscuous mode [ 318.091749][ T7186] veth0_macvtap: entered promiscuous mode [ 318.177819][ T7186] veth1_macvtap: entered promiscuous mode [ 318.555924][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.764326][ T7186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.956157][ T79] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.992229][ T79] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.072016][ T79] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.111495][ T79] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.953361][ T7520] loop0: detected capacity change from 0 to 1024 [ 321.136690][ T5921] hfsplus: b-tree write err: -5, ino 25 [ 321.162712][ T5921] hfsplus: b-tree write err: -5, ino 4 [ 321.168543][ T5921] hfsplus: b-tree write err: -5, ino 2 [ 322.797270][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.907178][ T7556] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.085433][ T7556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.190469][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 323.244751][ T133] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 323.680517][ T795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 324.298592][ T1007] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 324.317930][ T1007] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 324.350358][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 324.792037][ T7593] loop1: detected capacity change from 0 to 2048 [ 324.882387][ T7593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.403705][ T7605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.595215][ T7607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 326.457454][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.471413][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.513615][ T29] audit: type=1326 audit(1772029254.012:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a4d9c629 code=0x7ffc0000 [ 326.620084][ T29] audit: type=1326 audit(1772029254.012:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a4d9c629 code=0x7ffc0000 [ 326.754990][ T29] audit: type=1326 audit(1772029254.012:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a4d9c629 code=0x7ffc0000 [ 326.798983][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.838696][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.868143][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.875339][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.882463][ T29] audit: type=1326 audit(1772029254.012:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a4d9c629 code=0x7ffc0000 [ 326.924910][ T7616] loop3: detected capacity change from 0 to 4096 [ 326.980242][ T29] audit: type=1326 audit(1772029254.012:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a4d9c629 code=0x7ffc0000 [ 327.070052][ T29] audit: type=1326 audit(1772029254.012:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f88a4d9c629 code=0x7ffc0000 [ 327.185374][ T29] audit: type=1326 audit(1772029254.052:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a4d9c629 code=0x7ffc0000 [ 327.293341][ T7626] loop5: detected capacity change from 0 to 512 [ 327.294045][ T29] audit: type=1326 audit(1772029254.052:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f88a4d9c629 code=0x7ffc0000 [ 327.430413][ T29] audit: type=1326 audit(1772029254.052:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a4d9c629 code=0x7ffc0000 [ 327.537722][ T29] audit: type=1326 audit(1772029254.062:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f88a4d9c629 code=0x7ffc0000 [ 327.971549][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 328.746209][ T7633] loop6: detected capacity change from 0 to 40427 [ 328.817637][ T7633] F2FS-fs (loop6): invalid crc value [ 329.160307][ T7633] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 329.172669][ T7633] F2FS-fs (loop6): Start checkpoint disabled! [ 329.207454][ T7633] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 329.216394][ T7633] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 329.304209][ T7633] syz.6.379: attempt to access beyond end of device [ 329.304209][ T7633] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.624278][ T133] kworker/u8:6: attempt to access beyond end of device [ 329.624278][ T133] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 329.696628][ T133] CPU: 1 UID: 0 PID: 133 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.696786][ T133] Tainted: [L]=SOFTLOCKUP [ 329.696831][ T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.696943][ T133] Workqueue: writeback wb_workfn (flush-7:6) [ 329.697116][ T133] Call Trace: [ 329.697161][ T133] [ 329.697207][ T133] __dump_stack+0x26/0x30 [ 329.697355][ T133] dump_stack_lvl+0x14c/0x1c0 [ 329.697507][ T133] dump_stack+0x1e/0x25 [ 329.697637][ T133] f2fs_handle_critical_error+0xa6f/0xc20 [ 329.697819][ T133] f2fs_stop_checkpoint+0x65/0x80 [ 329.697973][ T133] f2fs_write_end_io+0x12e6/0x2560 [ 329.698186][ T133] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 329.698347][ T133] bio_endio+0x1006/0x1160 [ 329.698520][ T133] submit_bio_noacct+0x533/0x2960 [ 329.698741][ T133] submit_bio+0x57a/0x620 [ 329.698913][ T133] f2fs_submit_write_bio+0x115/0x350 [ 329.699070][ T133] __submit_merged_bio+0x16f/0x780 [ 329.699216][ T133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.699402][ T133] __submit_merged_write_cond+0x4ba/0xae0 [ 329.699578][ T133] f2fs_write_data_pages+0x5073/0x5e10 [ 329.699859][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.700019][ T133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.700181][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.700347][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.700507][ T133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.700668][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.700829][ T133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.700996][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.701159][ T133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.701332][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.701500][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.701659][ T133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.701829][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.702011][ T133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.702179][ T133] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 329.702345][ T133] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 329.702501][ T133] do_writepages+0x3f2/0x860 [ 329.702624][ T133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.702803][ T133] ? writeback_sb_inodes+0x1/0x1f40 [ 329.702956][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.703141][ T133] __writeback_single_inode+0xfc/0x1440 [ 329.703314][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.703492][ T133] writeback_sb_inodes+0xb52/0x1f40 [ 329.703787][ T133] wb_writeback+0x4f1/0xcd0 [ 329.703964][ T133] ? queue_io+0x411/0x800 [ 329.704116][ T133] wb_workfn+0x3b9/0x19b0 [ 329.704257][ T133] ? kmsan_get_metadata+0xf1/0x160 [ 329.704444][ T133] ? __pfx_wb_workfn+0x10/0x10 [ 329.704575][ T133] process_scheduled_works+0xb21/0x1e30 [ 329.704777][ T133] worker_thread+0xede/0x1580 [ 329.704954][ T133] kthread+0x53f/0x600 [ 329.705106][ T133] ? __pfx_worker_thread+0x10/0x10 [ 329.705260][ T133] ? __pfx_kthread+0x10/0x10 [ 329.705409][ T133] ret_from_fork+0x20f/0x910 [ 329.705544][ T133] ? __switch_to+0x51c/0x750 [ 329.705701][ T133] ? __pfx_kthread+0x10/0x10 [ 329.705852][ T133] ret_from_fork_asm+0x1a/0x30 [ 329.706035][ T133] [ 330.244052][ T133] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 330.492002][ T7662] loop3: detected capacity change from 0 to 256 [ 330.553185][ T7662] exfat: Deprecated parameter 'utf8' [ 330.780509][ T7662] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 331.374453][ T7670] loop1: detected capacity change from 0 to 512 [ 331.401749][ T7670] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 331.529244][ T7670] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 331.651725][ T5830] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 331.670437][ T7670] EXT4-fs (loop1): 1 truncate cleaned up [ 331.762718][ T7670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.825802][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 331.885859][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.931657][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.996500][ T5830] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 332.017235][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.083676][ T5830] usb 4-1: config 0 descriptor?? [ 332.302822][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.594839][ T5830] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 332.817959][ T9] usb 4-1: USB disconnect, device number 4 [ 333.651706][ T7694] fido_id[7694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 333.741613][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.542'. [ 333.966783][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 334.721104][ T7721] Bluetooth: MGMT ver 1.23 [ 335.170412][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.615865][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 335.615933][ T29] audit: type=1326 audit(1772029263.112:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.5.550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a4d9c629 code=0x7fc00000 [ 335.813653][ T7739] GUP no longer grows the stack in syz.0.555 (7739): 200000004000-200000008000 (200000002000) [ 335.851050][ T7739] CPU: 1 UID: 0 PID: 7739 Comm: syz.0.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.851209][ T7739] Tainted: [L]=SOFTLOCKUP [ 335.851255][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.851326][ T7739] Call Trace: [ 335.851372][ T7739] [ 335.851417][ T7739] __dump_stack+0x26/0x30 [ 335.851574][ T7739] dump_stack_lvl+0x14c/0x1c0 [ 335.851726][ T7739] dump_stack+0x1e/0x25 [ 335.851860][ T7739] __get_user_pages+0x44ea/0x5f00 [ 335.852033][ T7739] ? filter_irq_stacks+0x13f/0x190 [ 335.852205][ T7739] ? kmsan_get_metadata+0xf1/0x160 [ 335.852397][ T7739] get_user_pages_remote+0x468/0x1390 [ 335.852543][ T7739] ? stack_depot_save_flags+0x35/0x790 [ 335.852719][ T7739] ? kmsan_get_metadata+0xf1/0x160 [ 335.852910][ T7739] ? access_remote_vm+0x4e/0x70 [ 335.853060][ T7739] __access_remote_vm+0x2f8/0xfe0 [ 335.853252][ T7739] access_remote_vm+0x4e/0x70 [ 335.853404][ T7739] proc_pid_cmdline_read+0xac1/0x1a30 [ 335.853637][ T7739] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 335.853810][ T7739] vfs_readv+0x931/0xf30 [ 335.853975][ T7739] ? kmsan_get_metadata+0xf1/0x160 [ 335.854141][ T7739] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 335.854323][ T7739] __x64_sys_preadv+0x2a3/0x510 [ 335.854508][ T7739] x64_sys_call+0x3220/0x3ea0 [ 335.854665][ T7739] do_syscall_64+0x134/0xf80 [ 335.854833][ T7739] ? clear_bhb_loop+0x50/0xa0 [ 335.854977][ T7739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.855123][ T7739] RIP: 0033:0x7f049019c629 [ 335.855221][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.855325][ T7739] RSP: 002b:00007f048e3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 335.855446][ T7739] RAX: ffffffffffffffda RBX: 00007f0490415fa0 RCX: 00007f049019c629 [ 335.855543][ T7739] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 335.855623][ T7739] RBP: 00007f0490232b39 R08: 0000000000000200 R09: 0000000000000000 [ 335.855702][ T7739] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 335.855777][ T7739] R13: 00007f0490416038 R14: 00007f0490415fa0 R15: 00007ffcb1ac16f8 [ 335.855903][ T7739] [ 336.897558][ T7754] loop1: detected capacity change from 0 to 1024 [ 337.139498][ T7759] veth1_to_bond: entered allmulticast mode [ 337.167634][ T7758] veth1_to_bond: left allmulticast mode [ 337.208557][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 337.222629][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 337.885199][ T7772] pim6reg: entered allmulticast mode [ 337.933052][ T7775] pim6reg: left allmulticast mode [ 338.127371][ T7774] netlink: 48 bytes leftover after parsing attributes in process `syz.1.566'. [ 338.946907][ T7789] loop5: detected capacity change from 0 to 256 [ 339.146409][ T7789] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfadbdf5f, utbl_chksum : 0xe619d30d) [ 339.867750][ T7803] loop3: detected capacity change from 0 to 1024 [ 339.954274][ T7805] Invalid argument reading file caps for ./file0 [ 340.280371][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 340.324315][ T7809] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 340.488933][ T5921] hfsplus: bad catalog file entry [ 340.555424][ T5921] hfsplus: b-tree write err: -5, ino 3 [ 340.850044][ T5835] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 341.055225][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 341.059969][ T7822] loop6: detected capacity change from 0 to 256 [ 341.100144][ T5835] usb 2-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 341.135884][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.212429][ T5835] usb 2-1: config 0 descriptor?? [ 341.282689][ T7822] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 341.772620][ T5835] ntrig 0003:1B96:000F.0006: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.1-1/input0 [ 342.105333][ T5835] usb 2-1: USB disconnect, device number 3 [ 342.293419][ T5070] Bluetooth: hci0: command 0x2016 tx timeout [ 342.300652][ T5783] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 342.386243][ T7833] loop3: detected capacity change from 0 to 32768 [ 342.400642][ T7833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.587 (7833) [ 342.441328][ T7833] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.453656][ T7833] BTRFS info (device loop3): using sha256 checksum algorithm [ 342.788480][ T7833] BTRFS info (device loop3): enabling ssd optimizations [ 342.795690][ T7833] BTRFS info (device loop3): turning on async discard [ 342.802735][ T7833] BTRFS info (device loop3): enabling free space tree [ 342.945555][ T7833] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 343.012080][ T7835] fido_id[7835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 343.188319][ T5775] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 343.690117][ T29] audit: type=1326 audit(1772029271.182:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.6.594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb48099c629 code=0x0 [ 344.411420][ T5783] Bluetooth: hci0: command 0x2016 tx timeout [ 346.003532][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a93d800: rx timeout, send abort [ 346.020353][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a93d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 346.383921][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.6.606'. [ 346.864880][ T7900] loop3: detected capacity change from 0 to 40427 [ 346.874235][ T7900] F2FS-fs: heap/no_heap options were deprecated [ 346.885882][ T7900] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 346.893223][ T7900] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 346.910963][ T7900] F2FS-fs (loop3): build fault injection type: 0x0 [ 346.942620][ T7900] F2FS-fs (loop3): invalid crc value [ 347.395238][ T7900] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 347.420855][ T7900] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 347.430063][ T7900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 347.580283][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 347.772212][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 347.813968][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 347.892671][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 347.943331][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.030175][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.144923][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 348.179968][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.590231][ T9] usb 6-1: usb_control_msg returned -32 [ 348.596066][ T9] usbtmc 6-1:16.0: can't read capabilities [ 348.625520][ T7926] loop0: detected capacity change from 0 to 512 [ 348.868830][ T7926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.962229][ T7926] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.535190][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 349.556578][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.890489][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.140241][ T794] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 350.361015][ T794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.425493][ T794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.453450][ T5835] usb 6-1: USB disconnect, device number 4 [ 350.459869][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.463218][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 350.510020][ T794] usb 4-1: Product: syz [ 350.514388][ T794] usb 4-1: Manufacturer: syz [ 350.519131][ T794] usb 4-1: SerialNumber: syz [ 350.758863][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.836436][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.869920][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.985055][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.029057][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.103652][ T9] usb 2-1: config 0 descriptor?? [ 351.741594][ T7961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.624'. [ 351.760273][ T794] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 351.797858][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 351.802210][ T794] cdc_ncm 4-1:1.0: bind() failure [ 351.947384][ T794] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 351.993248][ T794] cdc_ncm 4-1:1.1: bind() failure [ 352.107451][ T794] usb 4-1: USB disconnect, device number 5 [ 353.703414][ T5835] usb 2-1: USB disconnect, device number 4 [ 353.767451][ T7982] loop5: detected capacity change from 0 to 1024 [ 353.823673][ T7982] EXT4-fs: Ignoring removed bh option [ 353.886937][ T7982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.964757][ T7990] loop1: detected capacity change from 0 to 256 [ 354.072728][ T7982] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 354.110492][ T7982] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 354.260143][ T7990] FAT-fs (loop1): Directory bread(block 64) failed [ 354.266875][ T7990] FAT-fs (loop1): Directory bread(block 65) failed [ 354.300453][ T7990] FAT-fs (loop1): Directory bread(block 66) failed [ 354.326121][ T7990] FAT-fs (loop1): Directory bread(block 67) failed [ 354.371217][ T7990] FAT-fs (loop1): Directory bread(block 68) failed [ 354.404303][ T7990] FAT-fs (loop1): Directory bread(block 69) failed [ 354.430424][ T7990] FAT-fs (loop1): Directory bread(block 70) failed [ 354.437720][ T7990] FAT-fs (loop1): Directory bread(block 71) failed [ 354.469523][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.469685][ T7990] FAT-fs (loop1): Directory bread(block 72) failed [ 354.514411][ T7990] FAT-fs (loop1): Directory bread(block 73) failed [ 354.932792][ T8000] dummy0: entered promiscuous mode [ 355.008233][ T8000] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 355.078028][ T8000] hsr1: entered allmulticast mode [ 355.153269][ T8000] dummy0: entered allmulticast mode [ 355.173529][ T8000] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 355.689999][ T5835] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 355.884647][ T8018] Bluetooth: hci5: Frame reassembly failed (-84) [ 355.900397][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.952595][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.003300][ T5830] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 356.012301][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.066428][ T5835] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.076294][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.143239][ T5835] usb 2-1: config 0 descriptor?? [ 356.190588][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 356.221528][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.273742][ T5830] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 356.304872][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.344097][ T5830] usb 1-1: config 0 descriptor?? [ 356.709013][ T5835] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 356.799503][ T5830] mcp2221 0003:04D8:00DD.0009: item fetching failed at offset 1/5 [ 356.844668][ T5830] mcp2221 0003:04D8:00DD.0009: can't parse reports [ 356.917782][ T5830] mcp2221 0003:04D8:00DD.0009: probe with driver mcp2221 failed with error -22 [ 356.934749][ T5835] usb 2-1: USB disconnect, device number 5 [ 357.030735][ T5830] usb 1-1: USB disconnect, device number 6 [ 357.322353][ T8024] fido_id[8024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 357.890112][ T5783] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 357.890124][ T5070] Bluetooth: hci5: command 0x1003 tx timeout [ 359.404432][ T8049] loop6: detected capacity change from 0 to 32768 [ 359.446253][ T8049] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 359.480742][ T5835] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 359.720470][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 359.777493][ T5835] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 359.805803][ T8049] XFS (loop6): Ending clean mount [ 359.837770][ T5835] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.946642][ T5835] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.973931][ T5835] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.000038][ T5835] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.060138][ T5835] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.082667][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.405124][ T5835] usb 2-1: usb_control_msg returned -32 [ 360.425579][ T5835] usbtmc 2-1:16.0: can't read capabilities [ 360.455791][ T7186] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 361.116279][ T8079] loop5: detected capacity change from 0 to 512 [ 361.406231][ T8079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.511232][ T8079] ext4 filesystem being mounted at /104/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.594895][ T8078] loop0: detected capacity change from 0 to 32768 [ 361.741170][ T8086] sctp: [Deprecated]: syz.3.673 (pid 8086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.741170][ T8086] Use struct sctp_sack_info instead [ 361.979463][ T5835] usb 2-1: USB disconnect, device number 6 [ 362.163550][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.583821][ T5835] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 362.759523][ T5835] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.821834][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 362.870258][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 362.944560][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 362.985801][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 363.065061][ T5835] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 363.099539][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 363.127115][ T5835] usb 2-1: Product: syz [ 363.133836][ T5835] usb 2-1: Manufacturer: syz [ 363.160024][ T5835] usb 2-1: SerialNumber: syz [ 363.191177][ T5835] usb 2-1: config 0 descriptor?? [ 363.478901][ T5835] radio-si470x 2-1:0.0: DeviceID=0x726f ChipID=0x633a [ 363.677665][ T5835] radio-si470x 2-1:0.0: software version 114, hardware version 111 [ 363.869455][ T8106] loop0: detected capacity change from 0 to 2048 [ 363.896266][ T5835] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 364.046006][ T8106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.280178][ T794] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 364.304316][ T5835] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 364.333663][ T5835] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 364.384639][ T5835] usb 2-1: USB disconnect, device number 7 [ 364.471615][ T794] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.520350][ T794] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 364.575670][ T794] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.646875][ T794] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 364.699551][ T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 364.708832][ T794] usb 7-1: Product: syz [ 364.729155][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.761717][ T794] usb 7-1: Manufacturer: syz [ 364.766520][ T794] usb 7-1: SerialNumber: syz [ 365.102809][ T794] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 365.308563][ T9] usb 7-1: USB disconnect, device number 2 [ 365.336180][ T9] usblp0: removed [ 365.419955][ T5835] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 365.633169][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.678542][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.720198][ T5835] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 365.767922][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.822649][ T5835] usb 1-1: config 0 descriptor?? [ 366.335537][ T5835] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 366.393730][ T8138] loop6: detected capacity change from 0 to 512 [ 366.426047][ T5835] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 366.469214][ T8138] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 366.567556][ T5835] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 366.575782][ T8138] EXT4-fs (loop6): 1 orphan inode deleted [ 366.575877][ T8138] EXT4-fs (loop6): 1 truncate cleaned up [ 366.577922][ T8138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.662138][ T8138] EXT4-fs error (device loop6): empty_inline_dir:1770: inode #12: block 7: comm syz.6.693: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 366.794614][ T8138] EXT4-fs (loop6): Remounting filesystem read-only [ 366.839041][ T8138] EXT4-fs warning (device loop6): empty_inline_dir:1777: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 366.890167][ T8143] loop3: detected capacity change from 0 to 2048 [ 366.998133][ T5835] cp2112 0003:10C4:EA90.000A: error setting SMBus config [ 367.064875][ T5835] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -71 [ 367.078927][ T8143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.136413][ T8151] kernel read not supported for file /sg0 (pid: 8151 comm: syz.5.697) [ 367.147265][ T8143] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.244724][ T5835] usb 1-1: USB disconnect, device number 7 [ 367.379574][ T7186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.399207][ T8153] loop1: detected capacity change from 0 to 16 [ 367.475465][ T8143] fs-verity (loop3, inode 13): Error -4 building Merkle tree [ 367.510113][ T8153] erofs (device loop1): mounted with root inode @ nid 36. [ 367.595372][ T8153] syz.1.698: attempt to access beyond end of device [ 367.595372][ T8153] loop1: rw=8912896, sector=36, nr_sectors = 1 limit=16 [ 367.694228][ T8153] syz.1.698: attempt to access beyond end of device [ 367.694228][ T8153] loop1: rw=8912896, sector=131156, nr_sectors = 1 limit=16 [ 367.757666][ T8153] syz.1.698: attempt to access beyond end of device [ 367.757666][ T8153] loop1: rw=8912896, sector=36, nr_sectors = 1 limit=16 [ 367.845718][ T8153] syz.1.698: attempt to access beyond end of device [ 367.845718][ T8153] loop1: rw=8912896, sector=131157, nr_sectors = 1 limit=16 [ 367.878413][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.899698][ T8153] syz.1.698: attempt to access beyond end of device [ 367.899698][ T8153] loop1: rw=8912896, sector=41, nr_sectors = 1 limit=16 [ 367.960618][ T8153] syz.1.698: attempt to access beyond end of device [ 367.960618][ T8153] loop1: rw=8912896, sector=65623, nr_sectors = 1 limit=16 [ 368.033639][ T8153] syz.1.698: attempt to access beyond end of device [ 368.033639][ T8153] loop1: rw=8912896, sector=46, nr_sectors = 1 limit=16 [ 368.101025][ T8153] syz.1.698: attempt to access beyond end of device [ 368.101025][ T8153] loop1: rw=8912896, sector=131168, nr_sectors = 1 limit=16 [ 368.210426][ T8153] syz.1.698: attempt to access beyond end of device [ 368.210426][ T8153] loop1: rw=8912896, sector=86, nr_sectors = 1 limit=16 [ 368.282697][ T8153] syz.1.698: attempt to access beyond end of device [ 368.282697][ T8153] loop1: rw=8912896, sector=65637, nr_sectors = 1 limit=16 [ 368.373776][ T8156] erofs (device loop1): failed to readdir of logical block 0 of nid 36 [ 368.398422][ T8153] erofs (device loop1): failed to readdir of logical block 0 of nid 36 [ 368.791188][ T8169] loop5: detected capacity change from 0 to 64 [ 369.841952][ T8188] loop1: detected capacity change from 0 to 256 [ 369.977710][ T8188] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 370.472298][ T8195] loop0: detected capacity change from 0 to 1024 [ 370.674914][ T8195] hfsplus: bad catalog entry type [ 371.075501][ T8196] loop6: detected capacity change from 0 to 32768 [ 371.140779][ T57] hfsplus: b-tree write err: -5, ino 25 [ 371.146785][ T57] hfsplus: b-tree write err: -5, ino 4 [ 371.220661][ T57] hfsplus: b-tree write err: -5, ino 2 [ 371.647087][ T8209] loop0: detected capacity change from 0 to 2048 [ 371.741717][ T8209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.045556][ T29] audit: type=1800 audit(1772029299.522:27): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.723" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 372.366621][ T8212] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 372.497787][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.512218][ T8229] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 373.672274][ T8231] input: syz1 as /devices/virtual/input/input13 [ 374.510996][ T8241] loop6: detected capacity change from 0 to 1024 [ 374.565245][ T8241] EXT4-fs: Ignoring removed mblk_io_submit option [ 374.652903][ T8245] netlink: 'syz.0.737': attribute type 4 has an invalid length. [ 374.674639][ T8237] loop1: detected capacity change from 0 to 4096 [ 374.812572][ T8241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 374.892882][ T8241] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.054445][ T8241] EXT4-fs (loop6): shut down requested (2) [ 375.210343][ T8252] vlan2: entered allmulticast mode [ 375.234014][ T8252] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 375.366754][ T29] audit: type=1800 audit(1772029302.862:28): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.735" name="file1" dev="loop1" ino=0 res=0 errno=0 [ 375.508028][ T7186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 376.620299][ T8271] loop3: detected capacity change from 0 to 7 [ 376.674046][ T8271] Dev loop3: unable to read RDB block 7 [ 376.705222][ T8271] loop3: unable to read partition table [ 376.752773][ T8271] loop3: partition table beyond EOD, truncated [ 376.775268][ T8271] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 377.347656][ T29] audit: type=1326 audit(1772029304.842:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.1.749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97dc39c629 code=0x0 [ 377.578532][ T8282] loop0: detected capacity change from 0 to 64 [ 377.651704][ T8285] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 377.910637][ T8287] loop3: detected capacity change from 0 to 1024 [ 377.922536][ T8287] ext4: Unknown parameter 'nojournal' [ 378.338647][ T8291] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 378.438572][ T8291] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 378.480875][ T8291] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 378.733998][ T8296] loop1: detected capacity change from 0 to 128 [ 378.812516][ T8296] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.833925][ T8296] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.853652][ T8297] loop6: detected capacity change from 0 to 512 [ 378.886791][ T8297] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 378.990614][ T8297] EXT4-fs (loop6): 1 truncate cleaned up [ 378.998353][ T8297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.352952][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 379.607894][ T8306] loop5: detected capacity change from 0 to 256 [ 379.745704][ T7186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.971109][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 380.617406][ T8321] loop1: detected capacity change from 0 to 2048 [ 380.678295][ T8321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.478471][ T8335] loop3: detected capacity change from 0 to 256 [ 381.942770][ T8335] FAT-fs (loop3): Directory bread(block 64) failed [ 381.949495][ T8335] FAT-fs (loop3): Directory bread(block 65) failed [ 381.998185][ T8335] FAT-fs (loop3): Directory bread(block 66) failed [ 381.999632][ T8343] loop6: detected capacity change from 0 to 256 [ 382.028450][ T8335] FAT-fs (loop3): Directory bread(block 67) failed [ 382.060335][ T8335] FAT-fs (loop3): Directory bread(block 68) failed [ 382.093625][ T8335] FAT-fs (loop3): Directory bread(block 69) failed [ 382.145611][ T8335] FAT-fs (loop3): Directory bread(block 70) failed [ 382.190626][ T8335] FAT-fs (loop3): Directory bread(block 71) failed [ 382.228700][ T8335] FAT-fs (loop3): Directory bread(block 72) failed [ 382.274228][ T8335] FAT-fs (loop3): Directory bread(block 73) failed [ 383.697729][ T29] audit: type=1326 audit(1772029311.192:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.0.786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f049019c629 code=0x0 [ 385.529534][ T8391] loop1: detected capacity change from 0 to 4096 [ 385.718344][ T8403] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.911761][ T8429] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 387.950163][ T795] IPVS: starting estimator thread 0... [ 388.100627][ T8432] IPVS: using max 240 ests per chain, 12000 per kthread [ 388.308689][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.315379][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.716026][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.818'. [ 389.393191][ T8458] loop5: detected capacity change from 0 to 512 [ 390.558044][ T8476] loop5: detected capacity change from 0 to 4096 [ 390.616434][ T8482] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.061817][ T8475] loop3: detected capacity change from 0 to 8192 [ 391.224648][ T8483] loop0: detected capacity change from 0 to 4096 [ 391.878563][ T8487] loop6: detected capacity change from 0 to 32768 [ 392.081159][ T8487] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 392.101297][ T8486] loop1: detected capacity change from 0 to 40427 [ 392.143793][ T8486] F2FS-fs (loop1): invalid crc value [ 392.165591][ T8487] JBD2: Ignoring recovery information on journal [ 392.305044][ T8483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.428427][ T8486] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 392.438701][ T8486] F2FS-fs (loop1): Start checkpoint disabled! [ 392.470766][ T8486] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 392.524309][ T8486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 392.861809][ T29] audit: type=1800 audit(1772029320.332:31): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.835" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 393.062496][ T8494] loop5: detected capacity change from 0 to 32768 [ 393.108640][ T8494] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.838 (8494) [ 393.161314][ T35] bio_check_eod: 49 callbacks suppressed [ 393.161380][ T35] kworker/u8:2: attempt to access beyond end of device [ 393.161380][ T35] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 393.186973][ T8487] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 393.487301][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.487460][ T35] Tainted: [L]=SOFTLOCKUP [ 393.487510][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.487609][ T35] Workqueue: writeback wb_workfn (flush-7:1) [ 393.487777][ T35] Call Trace: [ 393.487822][ T35] [ 393.487874][ T35] __dump_stack+0x26/0x30 [ 393.488030][ T35] dump_stack_lvl+0x14c/0x1c0 [ 393.488178][ T35] dump_stack+0x1e/0x25 [ 393.488313][ T35] f2fs_handle_critical_error+0xa6f/0xc20 [ 393.488502][ T35] f2fs_stop_checkpoint+0x65/0x80 [ 393.488665][ T35] f2fs_write_end_io+0x12e6/0x2560 [ 393.488885][ T35] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 393.489044][ T35] bio_endio+0x1006/0x1160 [ 393.489218][ T35] submit_bio_noacct+0x533/0x2960 [ 393.489437][ T35] submit_bio+0x57a/0x620 [ 393.489612][ T35] f2fs_submit_write_bio+0x115/0x350 [ 393.489769][ T35] __submit_merged_bio+0x16f/0x780 [ 393.489923][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 393.490106][ T35] __submit_merged_write_cond+0x4ba/0xae0 [ 393.490281][ T35] f2fs_write_data_pages+0x5073/0x5e10 [ 393.490544][ T35] ? irqentry_exit+0x8f/0x6d0 [ 393.490749][ T35] ? update_cfs_rq_load_avg+0x747/0x8c0 [ 393.490937][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 393.491103][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 393.491272][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 393.491439][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 393.491607][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 393.491775][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 393.491951][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 393.492117][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 393.492287][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 393.492454][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 393.492623][ T35] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 393.492779][ T35] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 393.492941][ T35] do_writepages+0x3f2/0x860 [ 393.493061][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 393.493239][ T35] ? writeback_sb_inodes+0x1/0x1f40 [ 393.493392][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 393.493578][ T35] __writeback_single_inode+0xfc/0x1440 [ 393.493743][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 393.493929][ T35] writeback_sb_inodes+0xb52/0x1f40 [ 393.494224][ T35] wb_writeback+0x4f1/0xcd0 [ 393.494401][ T35] ? queue_io+0x411/0x800 [ 393.494552][ T35] wb_workfn+0x3b9/0x19b0 [ 393.494688][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 393.494902][ T35] ? __pfx_wb_workfn+0x10/0x10 [ 393.495035][ T35] process_scheduled_works+0xb21/0x1e30 [ 393.495241][ T35] worker_thread+0xede/0x1580 [ 393.495420][ T35] kthread+0x53f/0x600 [ 393.495575][ T35] ? __pfx_worker_thread+0x10/0x10 [ 393.495729][ T35] ? __pfx_kthread+0x10/0x10 [ 393.495886][ T35] ret_from_fork+0x20f/0x910 [ 393.496023][ T35] ? __switch_to+0x51c/0x750 [ 393.496186][ T35] ? __pfx_kthread+0x10/0x10 [ 393.496343][ T35] ret_from_fork_asm+0x1a/0x30 [ 393.496531][ T35] [ 393.837505][ T8494] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 393.847935][ T8494] BTRFS info (device loop5): using blake2b checksum algorithm [ 394.226355][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.320252][ T35] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 394.332946][ T5774] INFO: The task syz-executor:5774 has been waiting for writeback completion for more than 1 seconds. [ 394.333058][ T5774] INFO: The task syz-executor:5774 has been waiting for writeback completion for more than 1 seconds. [ 394.356124][ T7186] ocfs2: Unmounting device (7,6) on (node local) [ 394.680283][ T8494] BTRFS info (device loop5): enabling ssd optimizations [ 394.687509][ T8494] BTRFS info (device loop5): turning on async discard [ 394.695164][ T8494] BTRFS info (device loop5): enabling free space tree [ 394.702208][ T8494] BTRFS info (device loop5): use zstd compression, level 3 [ 396.607901][ T8518] loop3: detected capacity change from 0 to 65536 [ 396.689174][ T6268] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 397.050835][ T8518] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 397.070685][ T8518] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 398.064620][ T8518] XFS (loop3): Ending clean mount [ 398.174526][ T5775] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 399.302258][ T8532] loop6: detected capacity change from 0 to 4096 [ 399.534166][ T8537] loop1: detected capacity change from 0 to 32768 [ 399.615676][ T8537] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 400.010238][ T8537] XFS (loop1): Ending clean mount [ 400.052628][ T8532] ntfs3(loop6): ino=1a, mi_enum_attr [ 400.150222][ T8532] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 400.250954][ T5774] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 400.377137][ T8532] ntfs3(loop6): ino=1f, mi_enum_attr [ 403.507884][ T8586] loop5: detected capacity change from 0 to 256 [ 403.671943][ T8586] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d) [ 404.170351][ T794] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 404.382048][ T794] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 404.414407][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.509951][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.532531][ T794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 404.593896][ T794] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 404.620224][ T794] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 404.653552][ T794] usb 4-1: Manufacturer: syz [ 404.717911][ T794] usb 4-1: config 0 descriptor?? [ 405.260895][ T794] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 405.411095][ T794] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 406.042806][ T795] usb 4-1: USB disconnect, device number 6 [ 406.621180][ T8616] fido_id[8616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 406.988545][ T8627] netlink: 'syz.5.881': attribute type 1 has an invalid length. [ 407.030138][ T8627] netlink: 'syz.5.881': attribute type 6 has an invalid length. [ 407.071352][ T8627] netlink: 'syz.5.881': attribute type 3 has an invalid length. [ 407.110450][ T8627] netlink: 24 bytes leftover after parsing attributes in process `syz.5.881'. [ 407.850083][ T795] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 408.033500][ T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.052980][ T5835] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 408.077971][ T795] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 408.108333][ T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.128328][ T795] usb 6-1: config 0 descriptor?? [ 408.224686][ T8646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.240011][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 408.251600][ T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 408.263156][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.286491][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.305291][ T5835] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 408.315844][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.342173][ T5835] usb 2-1: config 0 descriptor?? [ 408.643406][ T795] holtek 0003:1241:5015.000C: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 408.670215][ T795] holtek 0003:1241:5015.000C: no inputs found [ 408.827780][ T794] usb 6-1: USB disconnect, device number 5 [ 408.876099][ T5835] logitech 0003:046D:C29C.000D: hidraw1: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 409.225763][ T5835] logitech 0003:046D:C29C.000D: no inputs found [ 409.252067][ T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.360411][ T8650] fido_id[8650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 409.390829][ T5835] usb 2-1: USB disconnect, device number 8 [ 409.592846][ T8651] fido_id[8651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 410.622612][ T8674] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 410.807399][ T8674] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 410.857770][ T8674] overlayfs: failed to look up (tracing) for ino (-66) [ 411.588441][ T8690] loop3: detected capacity change from 0 to 256 [ 412.280530][ T8697] bridge0: port 3(gretap0) entered blocking state [ 412.287363][ T8697] bridge0: port 3(gretap0) entered disabled state [ 412.352920][ T29] audit: type=1326 audit(1772029339.852:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.1.911" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97dc39c629 code=0x0 [ 412.360614][ T8697] gretap0: entered allmulticast mode [ 412.415127][ T8697] gretap0: entered promiscuous mode [ 412.478858][ T8697] bridge0: port 3(gretap0) entered blocking state [ 412.485887][ T8697] bridge0: port 3(gretap0) entered forwarding state [ 412.561269][ T8705] gretap0: left allmulticast mode [ 412.586193][ T8705] gretap0: left promiscuous mode [ 412.638019][ T8705] bridge0: port 3(gretap0) entered disabled state [ 413.670203][ T794] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 413.845549][ T794] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 413.867157][ T794] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 413.924444][ T794] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 413.950161][ T794] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 414.000532][ T794] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 414.062599][ T794] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.095779][ T794] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.135890][ T794] usb 7-1: Product: syz [ 414.150739][ T794] usb 7-1: Manufacturer: syz [ 414.237015][ T794] cdc_wdm 7-1:1.0: skipping garbage [ 414.920675][ T8735] loop1: detected capacity change from 0 to 32768 [ 414.939953][ T794] cdc_wdm 7-1:1.0: skipping garbage [ 414.956028][ T794] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 414.962692][ T794] cdc_wdm 7-1:1.0: Unknown control protocol [ 415.003248][ T8735] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 415.044570][ T8735] JBD2: Ignoring recovery information on journal [ 415.194243][ T9] usb 7-1: USB disconnect, device number 3 [ 415.244766][ T8735] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 415.657859][ T8748] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 415.734653][ T8750] loop5: detected capacity change from 0 to 64 [ 415.795936][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 415.848960][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 415.920336][ T8750] loop5: detected capacity change from 64 to 0 [ 415.961206][ C0] I/O error, dev loop5, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 415.972352][ T8754] BFS-fs: find_inode(): Unable to read inode loop5:00000002 [ 415.980674][ T5070] Bluetooth: hci4: command 0x0405 tx timeout [ 415.988194][ T5070] Bluetooth: hci3: unexpected event for opcode 0x202d [ 416.558223][ T12] BFS-fs: find_inode(): Unable to read inode loop5:00000001 [ 416.600332][ T12] BFS-fs: find_inode(): Unable to read inode loop5:00000000 [ 417.200165][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 417.450163][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 417.464955][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 417.492029][ T9] usb 2-1: config 1 has no interface number 0 [ 417.498389][ T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 417.522934][ T9] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 417.581388][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 417.631379][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 417.674828][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.705156][ T9] usb 2-1: Product: syz [ 417.714692][ T9] usb 2-1: Manufacturer: syz [ 417.740214][ T9] usb 2-1: SerialNumber: syz [ 417.768063][ T8770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.826595][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.847917][ T8770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 418.026568][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.204832][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.329132][ T8770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 418.340822][ T8770] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 418.370007][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 418.379651][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.755080][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 418.822881][ T35] bridge_slave_1: left allmulticast mode [ 418.828707][ T35] bridge_slave_1: left promiscuous mode [ 418.837904][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.853591][ T35] bridge_slave_0: left allmulticast mode [ 418.860186][ T35] bridge_slave_0: left promiscuous mode [ 418.866654][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.998064][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 419.204612][ T8781] input: syz0 as /devices/virtual/input/input14 [ 419.935670][ T794] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 419.990401][ T5070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.000671][ T5070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.009673][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.035176][ T5070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.079390][ T5070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.110885][ T5070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.150986][ T794] usb 4-1: Using ep0 maxpacket: 16 [ 420.199413][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.218973][ T794] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.239387][ T794] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.250119][ T794] usb 4-1: config 0 interface 0 has no altsetting 0 [ 420.262637][ T35] bond0 (unregistering): Released all slaves [ 420.274575][ T794] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 420.297468][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.382280][ T794] usb 4-1: config 0 descriptor?? [ 420.521736][ T9] aqc111 2-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fa:a3:94:e8:54:05 [ 420.611868][ T9] usb 2-1: USB disconnect, device number 9 [ 420.703152][ T9] aqc111 2-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 420.868279][ T794] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 420.897191][ T794] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 420.931058][ T794] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 420.949648][ T794] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 420.957494][ T794] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 420.980834][ T9] aqc111 2-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 421.003830][ T9] aqc111 2-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 421.059988][ T794] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 421.060676][ T9] aqc111 2-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 421.244983][ T794] usb 4-1: USB disconnect, device number 7 [ 421.568994][ T8802] fido_id[8802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 421.763376][ T35] dummy0: left promiscuous mode [ 421.912666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 421.950861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 422.044363][ T35] hsr_slave_0: left promiscuous mode [ 422.125016][ T35] hsr_slave_1: left promiscuous mode [ 422.132708][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.140710][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.152728][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.174655][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.210176][ T5783] Bluetooth: hci4: command tx timeout [ 422.378883][ T35] veth1_macvtap: left promiscuous mode [ 422.410394][ T35] veth0_macvtap: left promiscuous mode [ 422.426898][ T35] veth1_vlan: left promiscuous mode [ 422.437112][ T35] veth0_vlan: left promiscuous mode [ 423.211292][ T8820] block nbd6: server does not support multiple connections per device. [ 423.221234][ T8818] block nbd6: shutting down sockets [ 424.055306][ T8832] loop6: detected capacity change from 0 to 1024 [ 424.191725][ T8832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.281709][ T35] team0 (unregistering): Port device team_slave_1 removed [ 424.291445][ T5783] Bluetooth: hci4: command tx timeout [ 424.338653][ T35] team0 (unregistering): Port device team_slave_0 removed [ 424.520286][ T7186] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.348371][ T8789] chnl_net:caif_netlink_parms(): no params data found [ 426.370362][ T5783] Bluetooth: hci4: command tx timeout [ 427.990333][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.997791][ T8789] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.040966][ T8789] bridge_slave_0: entered allmulticast mode [ 428.072842][ T8789] bridge_slave_0: entered promiscuous mode [ 428.152423][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.180473][ T8789] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.211222][ T8789] bridge_slave_1: entered allmulticast mode [ 428.235077][ T8789] bridge_slave_1: entered promiscuous mode [ 428.450092][ T5783] Bluetooth: hci4: command tx timeout [ 428.507896][ T8789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.555621][ T8789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.817589][ T8789] team0: Port device team_slave_0 added [ 428.878581][ T8789] team0: Port device team_slave_1 added [ 429.475273][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.550260][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.750009][ T8789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.864641][ T8789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.914452][ T8789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.977114][ T8902] loop0: detected capacity change from 0 to 32768 [ 430.018535][ T8789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.054811][ T8902] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 430.211699][ T8909] loop1: detected capacity change from 0 to 1024 [ 430.221938][ T8909] EXT4-fs: Ignoring removed bh option [ 430.230067][ T8902] XFS (loop0): Ending clean mount [ 430.239893][ T8902] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0xb2/0x330, xfs_finobt block 0x10 [ 430.251507][ T8902] XFS (loop0): Unmount and run xfs_repair [ 430.257383][ T8902] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 430.265044][ T8902] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 430.276848][ T8902] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 430.286031][ T8902] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 430.295278][ T8902] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 430.304396][ T8902] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 430.313586][ T8902] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 430.322722][ T8902] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 430.331887][ T8902] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 430.341007][ T8902] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x10 len 4 error 74 [ 430.352809][ T8902] loop0: lost filesystem error report for type 5 error -117 [ 430.353350][ T8902] XFS (loop0): Failed to initialize disk quotas, err -117. [ 430.377757][ T8909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.543936][ T5773] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 430.587693][ T5773] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 430.661325][ T8129] ===================================================== [ 430.668562][ T8129] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400 [ 430.677023][ T8129] _copy_to_iter+0xef3/0x3400 [ 430.682716][ T8129] copy_page_to_iter+0x482/0x900 [ 430.687871][ T8129] filemap_read+0x1cd6/0x2300 [ 430.692944][ T8129] blkdev_read_iter+0x89f/0xb00 [ 430.697936][ T8129] vfs_read+0x8ec/0xf90 [ 430.702310][ T8129] ksys_read+0x1d9/0x470 [ 430.703439][ T8789] hsr_slave_0: entered promiscuous mode [ 430.706678][ T8129] __x64_sys_read+0x97/0xf0 [ 430.720307][ T8129] x64_sys_call+0x311c/0x3ea0 [ 430.725155][ T8129] do_syscall_64+0x134/0xf80 [ 430.730123][ T8129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.736151][ T8129] [ 430.738526][ T8129] Uninit was stored to memory at: [ 430.744234][ T8129] _copy_to_iter+0x130f/0x3400 [ 430.749165][ T8129] copy_page_to_iter+0x482/0x900 [ 430.754373][ T8129] shmem_file_read_iter+0x904/0x1140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 430.759894][ T8129] lo_rw_aio+0x1164/0x14a0 [ 430.764452][ T8129] loop_process_work+0xf05/0x1ff0 [ 430.769631][ T8129] loop_rootcg_workfn+0x2b/0x40 [ 430.776623][ T8129] process_scheduled_works+0xb21/0x1e30 [ 430.783116][ T8129] worker_thread+0xede/0x1580 [ 430.787931][ T8129] kthread+0x53f/0x600 [ 430.792561][ T8129] ret_from_fork+0x20f/0x910 [ 430.795305][ T8789] hsr_slave_1: entered promiscuous mode [ 430.797278][ T8129] ret_from_fork_asm+0x1a/0x30 [ 430.807861][ T8129] [ 430.810373][ T8129] Uninit was stored to memory at: [ 430.815651][ T8129] copy_folio_from_iter_atomic+0xea0/0x38b0 [ 430.821836][ T8129] generic_perform_write+0x8b7/0x1050 [ 430.827386][ T8129] shmem_file_write_iter+0x2b7/0x2f0 [ 430.832958][ T8129] lo_rw_aio+0x1164/0x14a0 [ 430.837515][ T8129] loop_process_work+0xf05/0x1ff0 [ 430.842860][ T8129] loop_workfn+0x3e/0x60 [ 430.847235][ T8129] process_scheduled_works+0xb21/0x1e30 [ 430.853069][ T8129] worker_thread+0xede/0x1580 [ 430.857878][ T8129] kthread+0x53f/0x600 [ 430.862395][ T8129] ret_from_fork+0x20f/0x910 [ 430.867124][ T8129] ret_from_fork_asm+0x1a/0x30 [ 430.872125][ T8129] [ 430.874502][ T8129] Uninit was stored to memory at: [ 430.879834][ T8129] xlog_write+0x1a75/0x20f0 [ 430.885134][ T8129] xlog_cil_push_work+0x359c/0x50c0 [ 430.890910][ T8129] process_scheduled_works+0xb21/0x1e30 [ 430.896602][ T8129] worker_thread+0xede/0x1580 [ 430.901534][ T8129] kthread+0x53f/0x600 [ 430.905747][ T8129] ret_from_fork+0x20f/0x910 [ 430.910554][ T8129] ret_from_fork_asm+0x1a/0x30 [ 430.915463][ T8129] [ 430.917846][ T8129] Uninit was stored to memory at: [ 430.923208][ T8129] xfs_inode_item_format_attr_fork+0x6f1/0xa80 [ 430.929525][ T8129] xfs_inode_item_format+0x2024/0x2280 [ 430.935248][ T8129] xlog_cil_commit+0x184e/0x4890 [ 430.940419][ T8129] __xfs_trans_commit+0x55a/0xf90 [ 430.945606][ T8129] xfs_trans_roll+0xfd/0x670 [ 430.950491][ T8129] xfs_defer_trans_roll+0x109/0x610 [ 430.955830][ T8129] xfs_defer_finish_noroll+0xd35/0x1ed0 [ 430.961633][ T8129] xfs_trans_commit+0x165/0x270 [ 430.966634][ T8129] xfs_attr_set+0x1da1/0x2030 [ 430.971596][ T8129] xfs_attr_change+0x408/0x5b0 [ 430.976514][ T8129] xfs_xattr_set+0x1d4/0x2f0 [ 430.981327][ T8129] __vfs_setxattr+0x742/0x840 [ 430.986816][ T8129] __vfs_setxattr_noperm+0x224/0xad0 [ 430.992634][ T8129] __vfs_setxattr_locked+0x1f8/0x510 [ 430.998100][ T8129] vfs_setxattr+0x276/0x690 [ 431.002861][ T8129] filename_setxattr+0x396/0xcb0 [ 431.007967][ T8129] path_setxattrat+0x702/0x800 [ 431.013068][ T8129] __x64_sys_lsetxattr+0x103/0x1c0 [ 431.018303][ T8129] x64_sys_call+0x168d/0x3ea0 [ 431.023213][ T8129] do_syscall_64+0x134/0xf80 [ 431.027970][ T8129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.034090][ T8129] [ 431.036472][ T8129] Uninit was created at: [ 431.040977][ T8129] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 431.047618][ T8129] krealloc_node_align_noprof+0x463/0xf10 [ 431.053581][ T8129] xfs_broot_realloc+0x361/0x480 [ 431.058696][ T8129] xfs_bmap_broot_realloc+0x243/0x650 [ 431.064310][ T8129] xfs_bmap_extents_to_btree+0x1f8/0x1430 [ 431.070728][ T8129] xfs_bmap_add_extent_hole_real+0x2267/0x3040 [ 431.077062][ T8129] xfs_bmapi_allocate+0x48d2/0x4f50 [ 431.082477][ T8129] xfs_bmapi_write+0x10a9/0x26f0 [ 431.088195][ T8129] xfs_attr_rmtval_set_blk+0x171/0x390 [ 431.094153][ T8129] xfs_attr_set_iter+0x380/0x7be0 [ 431.099325][ T8129] xfs_attr_finish_item+0x16c/0x540 [ 431.104917][ T8129] xfs_defer_finish_one+0x54e/0x14c0 [ 431.110414][ T8129] xfs_defer_finish_noroll+0x10c5/0x1ed0 [ 431.116191][ T8129] xfs_trans_commit+0x165/0x270 [ 431.121337][ T8129] xfs_attr_set+0x1da1/0x2030 [ 431.126150][ T8129] xfs_attr_change+0x408/0x5b0 [ 431.131130][ T8129] xfs_xattr_set+0x1d4/0x2f0 [ 431.135872][ T8129] __vfs_setxattr+0x742/0x840 [ 431.140875][ T8129] __vfs_setxattr_noperm+0x224/0xad0 [ 431.146319][ T8129] __vfs_setxattr_locked+0x1f8/0x510 [ 431.153351][ T8129] vfs_setxattr+0x276/0x690 [ 431.158020][ T8129] filename_setxattr+0x396/0xcb0 [ 431.163852][ T8129] path_setxattrat+0x702/0x800 [ 431.168754][ T8129] __x64_sys_lsetxattr+0x103/0x1c0 [ 431.174058][ T8129] x64_sys_call+0x168d/0x3ea0 [ 431.178908][ T8129] do_syscall_64+0x134/0xf80 [ 431.183727][ T8129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.190835][ T8129] [ 431.193220][ T8129] Bytes 884-887 of 4096 are uninitialized [ 431.199010][ T8129] Memory access of size 4096 starts at ffff8881283dc000 [ 431.206383][ T8129] Data copied to user address 00007f182ac01000 [ 431.212708][ T8129] [ 431.215124][ T8129] CPU: 1 UID: 0 PID: 8129 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 431.226169][ T8129] Tainted: [L]=SOFTLOCKUP [ 431.230675][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.240916][ T8129] ===================================================== [ 431.247921][ T8129] Disabling lock debugging due to kernel taint [ 431.418482][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.468699][ T8129] Kernel panic - not syncing: kmsan.panic set ... [ 431.475277][ T8129] CPU: 1 UID: 0 PID: 8129 Comm: udevd Tainted: G B L syzkaller #0 PREEMPT(full) [ 431.485850][ T8129] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 431.491461][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.501603][ T8129] Call Trace: [ 431.504944][ T8129] [ 431.507940][ T8129] __dump_stack+0x26/0x30 [ 431.512404][ T8129] dump_stack_lvl+0x50/0x1c0 [ 431.517121][ T8129] ? dump_stack+0x12/0x25 [ 431.521578][ T8129] dump_stack+0x1e/0x25 [ 431.525860][ T8129] vpanic+0x7b4/0x1430 [ 431.530087][ T8129] panic+0x15d/0x160 [ 431.534164][ T8129] kmsan_report+0x31a/0x320 [ 431.538824][ T8129] ? kmsan_internal_check_memory+0x166/0x240 [ 431.544949][ T8129] ? kmsan_copy_to_user+0xef/0x190 [ 431.550219][ T8129] ? _copy_to_iter+0xef3/0x3400 [ 431.555280][ T8129] ? copy_page_to_iter+0x482/0x900 [ 431.560563][ T8129] ? filemap_read+0x1cd6/0x2300 [ 431.565567][ T8129] ? blkdev_read_iter+0x89f/0xb00 [ 431.570723][ T8129] ? vfs_read+0x8ec/0xf90 [ 431.575185][ T8129] ? ksys_read+0x1d9/0x470 [ 431.579730][ T8129] ? __x64_sys_read+0x97/0xf0 [ 431.584546][ T8129] ? x64_sys_call+0x311c/0x3ea0 [ 431.589539][ T8129] ? do_syscall_64+0x134/0xf80 [ 431.594454][ T8129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.600658][ T8129] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 431.606891][ T8129] ? up_read+0x6a/0xf0 [ 431.611065][ T8129] ? kmsan_get_metadata+0xf1/0x160 [ 431.616333][ T8129] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 431.622302][ T8129] ? raw_irqentry_exit_cond_resched+0x3f/0x80 [ 431.628535][ T8129] ? irqentry_exit+0x8f/0x6d0 [ 431.633371][ T8129] ? kmsan_get_metadata+0xf1/0x160 [ 431.638647][ T8129] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 431.644633][ T8129] kmsan_internal_check_memory+0x166/0x240 [ 431.650614][ T8129] kmsan_copy_to_user+0xef/0x190 [ 431.655707][ T8129] _copy_to_iter+0xef3/0x3400 [ 431.660539][ T8129] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 431.666523][ T8129] ? filemap_get_pages+0x398d/0x3d30 [ 431.672001][ T8129] copy_page_to_iter+0x482/0x900 [ 431.677092][ T8129] ? kmsan_get_metadata+0xf1/0x160 [ 431.682389][ T8129] filemap_read+0x1cd6/0x2300 [ 431.687332][ T8129] blkdev_read_iter+0x89f/0xb00 [ 431.692341][ T8129] vfs_read+0x8ec/0xf90 [ 431.696639][ T8129] ? __pfx_blkdev_read_iter+0x10/0x10 [ 431.702159][ T8129] ksys_read+0x1d9/0x470 [ 431.706557][ T8129] __x64_sys_read+0x97/0xf0 [ 431.711208][ T8129] x64_sys_call+0x311c/0x3ea0 [ 431.716036][ T8129] do_syscall_64+0x134/0xf80 [ 431.720779][ T8129] ? clear_bhb_loop+0x50/0xa0 [ 431.725583][ T8129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.731610][ T8129] RIP: 0033:0x7f182a4a7407 [ 431.736109][ T8129] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 431.755839][ T8129] RSP: 002b:00007ffe93ea2bf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 431.764374][ T8129] RAX: ffffffffffffffda RBX: 00007f182ac5b880 RCX: 00007f182a4a7407 [ 431.772445][ T8129] RDX: 0000000000040000 RSI: 00007f182abf3000 RDI: 0000000000000009 [ 431.780503][ T8129] RBP: 000055879a571090 R08: 0000000000000000 R09: 0000000000000000 [ 431.788560][ T8129] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 431.796619][ T8129] R13: 0000000000000000 R14: 000055879a577268 R15: 00007f182ad8239c [ 431.804734][ T8129] [ 431.808171][ T8129] Kernel Offset: disabled [ 431.812533][ T8129] Rebooting in 86400 seconds..