last executing test programs: 17m16.100660542s ago: executing program 3 (id=5207): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002c00), 0x0, 0x0) readv(r0, &(0x7f0000005200)=[{&(0x7f0000002f40)=""/4084, 0xff4}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x2) 17m15.712830787s ago: executing program 3 (id=5210): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="38020000160085020000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100000000000400010000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045780000e4000600e0000001000000000000000000000000ff010000000000000000000000000001000000001000"/228, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414230000000000000000000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000480005007368613338342d6176783200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000d"], 0x238}}, 0x0) 17m15.282200414s ago: executing program 3 (id=5215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x6c}}, 0x0) 17m14.821861244s ago: executing program 3 (id=5220): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@errors_remount}, {@discard}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@dmask={'dmask', 0x3d, 0x9}}]}, 0x1, 0x152a, &(0x7f0000000580)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 17m14.288267618s ago: executing program 3 (id=5225): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@dioread_lock}, {}, {@noauto_da_alloc}]}, 0xfe, 0x564, &(0x7f0000001180)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 17m13.705048019s ago: executing program 3 (id=5232): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17m11.18195944s ago: executing program 32 (id=5232): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 14m51.97236484s ago: executing program 4 (id=6138): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0x11, 0x148, 0x0, 0x0, 0x3d8, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x2d, 0x0, 0xfffffff8, 0x9, 0x0, 0x3, 0x80000007}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7de663b0, 0x6}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'syzkaller0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x75d8, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 14m51.157145482s ago: executing program 4 (id=6142): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x0, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}}) 14m50.603733523s ago: executing program 4 (id=6146): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000040)=0x1) 14m50.054880163s ago: executing program 4 (id=6150): unshare(0x22020600) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14m49.436110638s ago: executing program 4 (id=6155): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xf8, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20]}, {0xffffffffffffffff, [0x4, 0xb2cc575b459b5b32, 0x4, 0x3, 0x1], 0x6, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0xfffffffd]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 14m48.834702826s ago: executing program 4 (id=6159): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x20, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0}) 14m33.623209347s ago: executing program 33 (id=6159): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x20, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0}) 13m45.439395144s ago: executing program 6 (id=6512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000098ab00000000000c0000002800058008000100756470001c00028008000200000200000800030043"], 0x3c}}, 0x0) 13m44.903877708s ago: executing program 6 (id=6516): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') getdents(r0, &(0x7f00000002c0)=""/57, 0x39) getdents64(r0, 0xffffffffffffffff, 0x43) 13m44.380289173s ago: executing program 6 (id=6519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x0, 0x67}, {0x0, 0x0, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x3}, {0x0, 0x0, 0x54}, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 13m43.92229559s ago: executing program 6 (id=6523): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@allow_utime}, {@gid}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {}, {@gid}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@keep_last_dots}, {@keep_last_dots}]}, 0x1, 0x152d, &(0x7f00000034c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 13m43.030445592s ago: executing program 6 (id=6530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x6c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x10}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x6c}}, 0x800) 13m42.323600647s ago: executing program 6 (id=6535): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000200)=ANY=[@ANYBLOB='adinicb,iocharset=cp1255,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x5, 0xc4d, &(0x7f0000000f40)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 13m38.972039999s ago: executing program 34 (id=6535): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000200)=ANY=[@ANYBLOB='adinicb,iocharset=cp1255,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x5, 0xc4d, &(0x7f0000000f40)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 9m41.811644841s ago: executing program 0 (id=7719): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xff, 0x9, 0x0, 0x0, 0x0, 0x1}, 0xc) 9m40.966204507s ago: executing program 0 (id=7723): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303030303030303030372c666d61736b3d30303030303030303030303030303030303030303030322c696f636861727365743d69736f383835392d31332c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303337313630373234312c696f636861727365743d63703933322c696f636861727365743d63703935302c6b6565705f6c6173745f646f74732c756d61736b3d30303030303030303030303030303030303030303030362c6b6565705f6c6173745f646f06732c657569643d", @ANYRESDEC=0x0, @ANYRES32], 0x1, 0x1508, &(0x7f0000002c80)="$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") mount$nfs(&(0x7f0000000100)='\xae', &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) 9m39.879985772s ago: executing program 0 (id=7729): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82480207, r1}) 9m39.307480657s ago: executing program 0 (id=7733): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@orlov}, {@nouid32}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x460, &(0x7f00000008c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x14800, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 9m38.235819624s ago: executing program 0 (id=7741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x53, &(0x7f0000000000)=ANY=[], 0xff, 0x5a53, &(0x7f0000007f00)="$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") 9m37.767303783s ago: executing program 0 (id=7746): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x16a9eefb, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x570c, 0x32314d59, 0x1, @discrete={0x7, 0x7f}}) 9m35.658261275s ago: executing program 35 (id=7746): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x16a9eefb, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x570c, 0x32314d59, 0x1, @discrete={0x7, 0x7f}}) 2m20.73582763s ago: executing program 1 (id=10814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x9, 0x4, 0x20bf22, 0x0, r0, 0x7, '\x00', 0x0, r0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m20.208354711s ago: executing program 1 (id=10816): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000200)=0x91f, 0x4) 2m19.781973002s ago: executing program 1 (id=10819): r0 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x181) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m19.249372858s ago: executing program 1 (id=10823): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000600)={[{@nls={'nls', 0x3d, 'koi8-ru'}}, {@part={'part', 0x3d, 0x9}}, {@creator={'creator', 0x3d, "0c1a9cbe"}}, {@force}, {@force}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a8, &(0x7f000000c180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 2m18.644290402s ago: executing program 1 (id=10825): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000180)=""/182, 0xb6}], 0x1, 0xffffff9b, 0x7) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000400)={0x0, 0xfffff001, 0x1, {0xb, @win={{0x800, 0x8, 0x4, 0x7fff}, 0x2, 0x0, 0x0, 0xf1e4, 0x0, 0x59}}, 0x40000}) 2m17.979760342s ago: executing program 1 (id=10829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090700000000000000002e0000000e0001006e657464657673696d0000000f0002006e65"], 0x44}}, 0x0) 2m15.641187367s ago: executing program 36 (id=10829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090700000000000000002e0000000e0001006e657464657673696d0000000f0002006e65"], 0x44}}, 0x0) 4.19214565s ago: executing program 8 (id=11630): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f00000004c0)={[{@abort}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@resgid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000880)={@desc={0x1, 0x0, @desc2}}) 3.491419724s ago: executing program 7 (id=11635): getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,umask=00000000000000000007777,dmask=00000000000000000000152,iocharset=default,gid=', @ANYRESHEX=r0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYRES8=r0], 0x81, 0x14f5, &(0x7f0000001580)="$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") utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x9bf, 0x9e0}) 3.270121048s ago: executing program 5 (id=11636): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001740)=""/213, 0xd5}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001300)=""/187, 0xbb}, {&(0x7f00000013c0)=""/136, 0x88}], 0x6}}], 0x1, 0x40000021, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 3.205788957s ago: executing program 8 (id=11637): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 2.706352559s ago: executing program 5 (id=11640): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents(r0, &(0x7f00000001c0)=""/40, 0x28) 2.639842072s ago: executing program 7 (id=11641): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) 2.544717137s ago: executing program 8 (id=11642): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d6d6163696e7569742c71756965742c636f6465706167653d6b6f69382d752c6469725f756d61736b3d30303030303030303030303030303030303030323030312c63726561746f723decf3ae122c00f59694ea734b51705be7d8a28b5fea24dca5cb09674f9f810f38904869467e127b02ae233768"], 0x1, 0x30c, &(0x7f0000000100)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.515066214s ago: executing program 9 (id=11643): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) 2.478858788s ago: executing program 2 (id=11644): r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 2.154944721s ago: executing program 2 (id=11645): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 2.151559734s ago: executing program 5 (id=11646): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x4008044) close(0x3) 2.013701546s ago: executing program 7 (id=11647): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mlockall(0x2) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0x0) 1.953718325s ago: executing program 9 (id=11648): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x80000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) 1.77369095s ago: executing program 8 (id=11649): syz_mount_image$hfsplus(&(0x7f0000000ec0), &(0x7f0000001f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x5, 0x6a7, &(0x7f0000002080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.653644253s ago: executing program 2 (id=11650): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000140)='./bus\x00', 0x14000, &(0x7f0000000000)=ANY=[], 0x4, 0x29b, &(0x7f00000010c0)="$eJzs3c9qE10Yx/Hfmczbd6qlTv+IIIJQLbiStm7EjSLdunclahOhNFTQCuqqdS1egHtvwYtwJd5AXbnyAgqCI+fMTDNJZzJJ2skk+v2AZprMc+Z5Mied8wTKCMA/6/7m4adbP+w/IzXUkHRH8iQFki/poi4Fr3b3tvfarWa/gRouwoaY+ME9dtvabeWF2jgXYd2TQvuTr7nj51CZIIqi73Ungdq5T38OT/o/+XS614OxZ1aN/boTqJk50pFea77uPAAA9Uqu/15ynZ9L1u+eJ60ml/2/6vp/VHcCNctc/33pUJGx5/eCe6nT77kWzq79vLRLHOVYM4pnVtcC05R1lS4Xb/bZdrt1c+t5u+npne4mMrsta0VSM566qWy2ByeHXsnpTU9q5I02nPOuhv9sDRsF+S/lxZ3m3S5jvpiv5pEJ9VHN4/WfHxl7mtyZCnvOVJz/WvGIrsow3qugygV3kMvJERIlVQb5HYnSGbWg7i8IwrI8XdRiT1Rc3XpJ1FJu1EZJ1HJvVGc2F0dWzXwwD82KfuqzNjPrf8++26sa5JNp93F7JjOjbz2+2zOU9DuKaf9K7p7ekHVIBT0rBvBeT3Vb8y/fvN150m63IiPt240X6TNGRjtdzwyxcXWkqPyNg+KX/NEznPwNX5UdIp0EE1LpODZmJU1AGhVv2PX5GQ1Y768njEfnpA8a8aDahDBudt1l4v4v06+sufWV/S/ss06PygbPjLhe0BssunHOFXdwGcHxsIUd3KA917Ub0vXyI6ZCl6dmywqeEmZT3/SY7/8BAAAAAAAAAAAAAAAAAACmzTj+LKHuGgEAAAAAAAAAAAAAAAAAAAAAmHa/kpuynNX9f4PT3v9Xg9z/d2a4IgHk+hMAAP//0/yExA==") truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) truncate(&(0x7f0000000000)='./file1\x00', 0x9) 1.582760583s ago: executing program 9 (id=11651): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x804}, 0xe) listen(r0, 0xfffffffd) 1.517245876s ago: executing program 5 (id=11652): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000140)='./bus\x00', 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x1, 0x9e, &(0x7f00000006c0)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=") creat(&(0x7f0000000100)='./file1\x00', 0xe0) unlink(&(0x7f0000000300)='./file1\x00') 1.514197688s ago: executing program 7 (id=11653): gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 1.148842805s ago: executing program 2 (id=11654): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x7) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x57, 0x3}) 1.099375556s ago: executing program 9 (id=11655): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0xcefec000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@fwd={0x2}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x3}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x4c, 0x1000, 0xa, 0x0, 0x0, @void, @value}, 0x28) 1.016046616s ago: executing program 7 (id=11656): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b35, 0xa57d) 945.499315ms ago: executing program 8 (id=11657): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./bus\x00', 0x4812, &(0x7f00000001c0)=ANY=[], 0x1, 0x68b, &(0x7f0000001900)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) 911.483274ms ago: executing program 5 (id=11658): r0 = epoll_create(0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000015}) 628.605787ms ago: executing program 9 (id=11659): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x340c4191) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000240)=""/227, &(0x7f0000000000)=0xe3) 515.775823ms ago: executing program 2 (id=11660): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x60, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="a1ee00000001", 0x0, 0x7f5a, 0x0, 0x0, 0x0}) 404.670914ms ago: executing program 7 (id=11661): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000"], 0x1, 0x6a4, &(0x7f0000001380)="$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") mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc4) rename(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 315.616678ms ago: executing program 5 (id=11662): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='security.cFrZup.controllers\x00'], 0x0, 0x1d) 119.513155ms ago: executing program 9 (id=11663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0501c00008005400"], 0xfdef) 81.720923ms ago: executing program 2 (id=11664): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x0) 0s ago: executing program 8 (id=11665): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) kernel console output (not intermixed with test programs): : Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1809.043324][T29510] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10382'. [ 1809.918539][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1810.199026][T29532] usb usb1: usbfs: process 29532 (syz.1.10392) did not claim interface 36 before use [ 1810.959540][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1811.809274][T29560] loop1: detected capacity change from 0 to 1024 [ 1811.997439][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1812.187369][T18267] hfsplus: b-tree write err: -5, ino 4 [ 1813.037702][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1813.745105][T29595] overlay: filesystem on ./file0/file0 not supported [ 1814.093906][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1814.604774][T29606] loop5: detected capacity change from 0 to 2048 [ 1814.623975][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10431'. [ 1814.668095][T29611] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1815.126039][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1815.586717][T29620] loop1: detected capacity change from 0 to 256 [ 1815.647368][T29620] exfat: Deprecated parameter 'namecase' [ 1815.653389][T29620] exfat: Deprecated parameter 'utf8' [ 1815.873583][T29620] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1816.109261][T29629] netlink: 'syz.7.10440': attribute type 10 has an invalid length. [ 1816.121973][T29629] team_slave_0: left promiscuous mode [ 1816.127883][T29629] team_slave_1: left promiscuous mode [ 1816.175492][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1816.213337][T29629] batman_adv: batadv0: Adding interface: team0 [ 1816.220202][T29629] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1816.246298][T29629] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1816.250941][T29633] netlink: 'syz.7.10440': attribute type 10 has an invalid length. [ 1816.266314][T29633] netlink: 2 bytes leftover after parsing attributes in process `syz.7.10440'. [ 1816.278434][T29633] team_slave_0: entered promiscuous mode [ 1816.284515][T29633] team_slave_1: entered promiscuous mode [ 1816.290818][T29633] team0: entered promiscuous mode [ 1816.304741][T29633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1816.312619][T29633] batman_adv: batadv0: Interface activated: team0 [ 1816.319827][T29633] batman_adv: batadv0: Interface deactivated: team0 [ 1816.326876][T29633] batman_adv: batadv0: Removing interface: team0 [ 1816.372113][T29631] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10439'. [ 1816.524145][T29633] bridge0: port 3(team0) entered blocking state [ 1816.531626][T29633] bridge0: port 3(team0) entered disabled state [ 1816.536519][T29635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10442'. [ 1816.538740][T29633] team0: entered allmulticast mode [ 1816.552766][T29633] team_slave_0: entered allmulticast mode [ 1816.559009][T29633] team_slave_1: entered allmulticast mode [ 1816.567487][T29633] team0: left allmulticast mode [ 1816.572582][T29633] team_slave_0: left allmulticast mode [ 1816.584269][T29633] team_slave_1: left allmulticast mode [ 1816.980450][ T30] audit: type=1326 audit(1750706760.266:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29638 comm="syz.5.10445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1817.085372][ T30] audit: type=1326 audit(1750706760.316:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29638 comm="syz.5.10445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1817.110200][ T30] audit: type=1326 audit(1750706760.326:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29638 comm="syz.5.10445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1817.134241][ T30] audit: type=1326 audit(1750706760.326:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29638 comm="syz.5.10445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1817.157373][ T30] audit: type=1326 audit(1750706760.326:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29638 comm="syz.5.10445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1817.180504][ T30] audit: type=1326 audit(1750706760.336:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29638 comm="syz.5.10445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1817.205214][ T30] audit: type=1326 audit(1750706760.336:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29638 comm="syz.5.10445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1817.275816][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1817.772202][T29655] loop1: detected capacity change from 0 to 64 [ 1818.246846][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1818.595175][T22012] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1818.791373][T22012] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1818.800169][T22012] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.810861][T22012] usb 2-1: config 0 has no interface number 0 [ 1818.817420][T22012] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1818.827906][T22012] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1818.914529][T22012] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1818.924392][T22012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.936182][T22012] usb 2-1: Product: syz [ 1818.940596][T22012] usb 2-1: Manufacturer: syz [ 1818.946600][T22012] usb 2-1: SerialNumber: syz [ 1818.958999][T22012] usb 2-1: config 0 descriptor?? [ 1819.276137][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1819.618824][ T24] usb 2-1: USB disconnect, device number 42 [ 1820.317659][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1821.254184][T29714] loop1: detected capacity change from 0 to 512 [ 1821.376893][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1821.393781][T29714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1821.407471][T29714] ext4 filesystem being mounted at /2159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1821.733261][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1822.003537][T29728] loop1: detected capacity change from 0 to 256 [ 1822.056568][T29728] exfat: Deprecated parameter 'utf8' [ 1822.062371][T29728] exfat: Deprecated parameter 'namecase' [ 1822.322026][T29728] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1822.425930][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1823.445666][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1824.476416][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1825.515977][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1825.584906][T29786] tc_dump_action: action bad kind [ 1825.926980][T29789] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10513'. [ 1826.488785][T29804] loop7: detected capacity change from 0 to 8 [ 1826.555821][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1826.992322][T29809] loop5: detected capacity change from 0 to 512 [ 1827.046133][T29809] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1827.198408][T29809] EXT4-fs (loop5): 1 truncate cleaned up [ 1827.206667][T29809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1827.469200][T29821] netlink: 'syz.8.10525': attribute type 3 has an invalid length. [ 1827.604897][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1827.647964][T17088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.595729][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1828.686852][T29843] loop8: detected capacity change from 0 to 16 [ 1828.743597][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1828.810065][ T24] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1828.819944][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.918702][ T24] usb 3-1: config 0 descriptor?? [ 1828.945295][T29843] erofs (device loop8): mounted with root inode @ nid 36. [ 1828.991986][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1829.267485][T29843] erofs (device loop8): inline data across blocks @ nid 36 [ 1829.277415][T29843] syz.8.10536: attempt to access beyond end of device [ 1829.277415][T29843] loop8: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 1829.321156][T29840] loop7: detected capacity change from 0 to 32768 [ 1829.359929][T29840] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section crypt: bad kdf type 10 [ 1829.359929][T29840] crypt (size 64): [ 1829.359929][T29840] KFD: 10 [ 1829.359929][T29840] scrypt n: 52612 [ 1829.359929][T29840] scrypt r: 44575 [ 1829.359929][T29840] scrypt p: 1453 [ 1829.359929][T29840] [ 1829.399247][T29840] bcachefs: bch2_fs_get_tree() error: invalid_sb_crypt [ 1829.467629][ T24] gspca_cpia1: usb_control_msg 03, error -32 [ 1829.507219][ T24] gspca_cpia1: usb_control_msg 03, error -71 [ 1829.531928][T29848] loop5: detected capacity change from 0 to 64 [ 1829.555138][ T24] gspca_cpia1: usb_control_msg 01, error -71 [ 1829.561550][ T24] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1829.631194][T29848] hfs: unable to locate alternate MDB [ 1829.637196][T29848] hfs: continuing without an alternate MDB [ 1829.676011][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1829.689678][ T24] usb 3-1: USB disconnect, device number 48 [ 1830.719390][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1830.853392][T29862] loop8: detected capacity change from 0 to 128 [ 1830.955258][T29865] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1831.106643][T29862] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1831.272314][T29862] ext4 filesystem being mounted at /495/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1831.314618][T29873] loop5: detected capacity change from 0 to 128 [ 1831.393576][T29873] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1831.537987][T29873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1831.607933][T29873] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1831.621664][T29873] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1831.635467][T29873] gretap2: entered promiscuous mode [ 1831.640927][T29873] gretap2: entered allmulticast mode [ 1831.765292][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1832.086725][T23521] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1832.799154][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1833.249878][T29903] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 1833.853834][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1834.114589][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1834.211310][T29909] loop8: detected capacity change from 0 to 4096 [ 1834.304825][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1834.320533][ T24] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 1834.329293][ T24] usb 2-1: config 2 has no interface number 0 [ 1834.335969][ T24] usb 2-1: config 2 interface 31 has no altsetting 0 [ 1834.388380][ T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1834.399933][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.409090][ T24] usb 2-1: Product: syz [ 1834.413505][ T24] usb 2-1: Manufacturer: syz [ 1834.418549][ T24] usb 2-1: SerialNumber: syz [ 1834.808902][T29929] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1834.877284][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1835.137795][ T24] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 1835.174682][ T24] usb 2-1: USB disconnect, device number 43 [ 1835.921042][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1835.966592][T29941] loop5: detected capacity change from 0 to 128 [ 1836.022430][T29941] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1836.106818][T29941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1836.958941][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1837.975113][T29974] program syz.1.10593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1837.999170][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1839.035580][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1839.512962][ T30] audit: type=1326 audit(1750706782.797:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.5.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ff00000 [ 1839.538438][ T30] audit: type=1326 audit(1750706782.797:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.5.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ff00000 [ 1839.562203][ T30] audit: type=1326 audit(1750706782.797:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.5.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ff00000 [ 1839.585725][ T30] audit: type=1326 audit(1750706782.807:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.5.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ff00000 [ 1839.608828][ T30] audit: type=1326 audit(1750706782.807:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.5.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ff00000 [ 1839.633787][ T30] audit: type=1326 audit(1750706782.807:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.5.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ff00000 [ 1839.657641][ T30] audit: type=1326 audit(1750706782.807:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.5.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ff00000 [ 1839.680703][ T30] audit: type=1326 audit(1750706782.807:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.5.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ff00000 [ 1839.703795][ T30] audit: type=1326 audit(1750706782.807:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.5.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ff00000 [ 1839.729113][ T30] audit: type=1326 audit(1750706782.807:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30000 comm="syz.5.10607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ff00000 [ 1840.076733][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1840.655565][T30018] netlink: 'syz.7.10614': attribute type 1 has an invalid length. [ 1840.919697][T30022] loop8: detected capacity change from 0 to 764 [ 1841.128920][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1842.156897][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1842.310608][T30049] loop1: detected capacity change from 0 to 512 [ 1842.372234][T30049] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1842.379209][T30049] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1842.399925][T30049] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1842.496514][T30049] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.10630: attempt to clear invalid blocks 2 len 1 [ 1842.556837][T30049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.10630: invalid indirect mapped block 1819239214 (level 0) [ 1842.612608][T30049] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.10630: invalid indirect mapped block 1819239214 (level 1) [ 1842.674723][T30049] EXT4-fs (loop1): 1 truncate cleaned up [ 1842.682907][T30049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1842.954328][T30049] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.10630: Abort forced by user [ 1843.010647][T30049] EXT4-fs (loop1): Remounting filesystem read-only [ 1843.021716][T30049] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1843.199791][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1843.356794][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1843.695155][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1843.783540][T30071] loop1: detected capacity change from 0 to 2048 [ 1843.882449][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1843.895597][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.963302][T30071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1843.989647][ T24] usb 6-1: config 0 descriptor?? [ 1844.030153][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1844.142221][T30071] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.10640: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1844.160075][ C0] vkms_vblank_simulate: vblank timer overrun [ 1844.195920][T30080] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1844.237112][T30080] EXT4-fs (loop1): Remounting filesystem read-only [ 1844.246413][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1844.257526][ T24] gspca_spca508: reg_read err -32 [ 1844.353756][T30082] loop7: detected capacity change from 0 to 1024 [ 1844.485149][ T24] gspca_spca508: reg_read err -71 [ 1844.500941][ T24] gspca_spca508: reg_read err -71 [ 1844.525204][ T24] gspca_spca508: reg_read err -71 [ 1844.552568][ T24] gspca_spca508: reg write: error -71 [ 1844.558554][ T24] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1844.605414][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1844.637614][ T24] usb 6-1: USB disconnect, device number 32 [ 1844.969037][T30090] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1844.975888][T30090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1844.984374][T30090] vhci_hcd vhci_hcd.0: Device attached [ 1845.245012][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1845.245171][T22012] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1845.302146][T30097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10649'. [ 1845.315782][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1845.425156][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1845.514510][ T24] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1845.524242][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.532510][ T24] usb 2-1: Product: syz [ 1845.537056][ T24] usb 2-1: Manufacturer: syz [ 1845.541908][ T24] usb 2-1: SerialNumber: syz [ 1845.625742][ T24] usb 2-1: config 0 descriptor?? [ 1845.662802][ T24] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1845.673145][ T24] usb 2-1: Detected FT232H [ 1845.887361][T30091] usbip_core: unknown command [ 1845.888697][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1845.892380][T30091] vhci_hcd: unknown pdu 0 [ 1845.905643][T30091] usbip_core: unknown command [ 1845.915919][ T1800] vhci_hcd: stop threads [ 1845.920381][ T1800] vhci_hcd: release socket [ 1845.926301][ T1800] vhci_hcd: disconnect device [ 1845.955392][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1845.964043][ T24] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1846.005477][ T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1846.044265][ T11] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1846.065688][ T24] usb 2-1: USB disconnect, device number 44 [ 1846.105888][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1846.117761][ T24] ftdi_sio 2-1:0.0: device disconnected [ 1846.261467][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.272185][ T11] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1846.285268][ T11] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1846.295902][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.325099][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1846.341951][ T11] usb 3-1: config 0 descriptor?? [ 1846.388331][ T11] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1846.395663][ T11] dvb-usb: bulk message failed: -22 (3/0) [ 1846.484992][ T11] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1846.506084][ T11] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1846.513545][ T11] usb 3-1: media controller created [ 1846.538990][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1846.626629][ T11] dvb-usb: bulk message failed: -22 (6/0) [ 1846.632990][ T11] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1846.704136][ T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33 [ 1846.755791][ T11] dvb-usb: schedule remote query interval to 150 msecs. [ 1846.763078][ T11] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1846.820635][ T11] usb 3-1: USB disconnect, device number 49 [ 1846.945455][ T11] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1847.366517][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1847.753829][T30123] loop5: detected capacity change from 0 to 4096 [ 1847.778126][T30123] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1847.883602][T30130] [U]  [ 1848.302744][T30139] netlink: 504 bytes leftover after parsing attributes in process `syz.8.10668'. [ 1848.396974][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1849.435295][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1850.394574][T22012] vhci_hcd: vhci_device speed not set [ 1850.491795][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1850.712443][T30176] loop1: detected capacity change from 0 to 1024 [ 1850.902726][T30176] syz.1.10687: attempt to access beyond end of device [ 1850.902726][T30176] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1851.010610][T30182] syz.1.10687: attempt to access beyond end of device [ 1851.010610][T30182] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1851.225722][T30186] max out of range [ 1851.359332][T30188] tipc: Enabling of bearer rejected, failed to enable media [ 1851.526056][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1851.852420][T30196] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10694'. [ 1852.562993][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1853.606622][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1854.389707][T30229] netlink: 32 bytes leftover after parsing attributes in process `syz.8.10707'. [ 1854.635940][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1854.811138][T30230] xt_CT: No such helper "pptp" [ 1855.364988][T30240] pimreg: left allmulticast mode [ 1855.675993][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1856.745837][T30246] loop7: detected capacity change from 0 to 32768 [ 1856.815911][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1856.843710][T30246] (syz.7.10717,30246,0):ocfs2_verify_volume:2314 ERROR: bad root_blkno: 0 [ 1856.852861][T30246] (syz.7.10717,30246,0):ocfs2_verify_volume:2331 ERROR: status = -22 [ 1856.861854][T30246] (syz.7.10717,30246,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1856.871128][T30246] (syz.7.10717,30246,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1857.765766][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1858.808256][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1859.850844][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1860.165279][T30288] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1860.165279][T30288] program syz.1.10736 not setting count and/or reply_len properly [ 1860.895815][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1861.293002][T30304] loop8: detected capacity change from 0 to 256 [ 1861.321899][T30304] exfat: Deprecated parameter 'namecase' [ 1861.466105][T30304] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1861.520130][T28161] Bluetooth: hci1: command 0x0406 tx timeout [ 1861.923579][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1862.674348][T30323] netlink: 'syz.7.10753': attribute type 18 has an invalid length. [ 1862.955801][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1863.464280][T22012] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1863.660309][T22012] usb 3-1: Using ep0 maxpacket: 16 [ 1863.724247][T22012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.736113][T22012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.746370][T22012] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1863.759885][T22012] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1863.770235][T22012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.960665][T22012] usb 3-1: config 0 descriptor?? [ 1863.996650][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1864.459749][T22012] ryos 0003:1E7D:31CE.0021: unbalanced delimiter at end of report description [ 1864.536199][T22012] ryos 0003:1E7D:31CE.0021: parse failed [ 1864.542425][T22012] ryos 0003:1E7D:31CE.0021: probe with driver ryos failed with error -22 [ 1864.658476][T22012] usb 3-1: USB disconnect, device number 50 [ 1865.045070][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1865.582452][T30361] netlink: 340 bytes leftover after parsing attributes in process `syz.8.10771'. [ 1865.784159][T30365] loop5: detected capacity change from 0 to 64 [ 1866.075532][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1866.839857][T30367] loop1: detected capacity change from 0 to 32768 [ 1866.863275][T30367] (syz.1.10774,30367,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 1866.877643][T30367] (syz.1.10774,30367,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 1866.877841][T30367] (syz.1.10774,30367,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 1866.900149][T30367] (syz.1.10774,30367,0):ocfs2_initialize_super:2198 ERROR: status = -22 [ 1866.909353][T30367] (syz.1.10774,30367,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1867.115473][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1867.914545][T22012] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1868.104225][T22012] usb 6-1: Using ep0 maxpacket: 32 [ 1868.152764][T22012] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1868.162017][T22012] usb 6-1: config 0 has no interface number 0 [ 1868.169283][T22012] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.172052][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1868.180723][T22012] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.204338][T22012] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1868.213982][T22012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.452918][T30388] loop8: detected capacity change from 0 to 256 [ 1868.531620][T30388] exfat: Deprecated parameter 'utf8' [ 1868.613385][T30388] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1868.675773][T22012] usb 6-1: config 0 descriptor?? [ 1869.199569][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1869.317448][T22012] uclogic 0003:28BD:0094.0022: failed retrieving string descriptor #100: -71 [ 1869.327218][T22012] uclogic 0003:28BD:0094.0022: failed retrieving pen parameters: -71 [ 1869.335986][T22012] uclogic 0003:28BD:0094.0022: pen probing failed: -71 [ 1869.343165][T22012] uclogic 0003:28BD:0094.0022: failed probing parameters: -71 [ 1869.351434][T22012] uclogic 0003:28BD:0094.0022: probe with driver uclogic failed with error -71 [ 1869.483707][T22012] usb 6-1: USB disconnect, device number 33 [ 1870.247982][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1870.621201][T30411] loop8: detected capacity change from 0 to 16 [ 1870.839106][T30415] loop1: detected capacity change from 0 to 256 [ 1871.001117][T30415] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1871.209619][T30417] loop7: detected capacity change from 0 to 512 [ 1871.279712][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1871.293746][T30417] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 1871.488825][ T24] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1871.554334][T22012] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1871.674783][ T24] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1871.690023][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.703196][ T24] usb 3-1: Product: syz [ 1871.712488][ T24] usb 3-1: Manufacturer: syz [ 1871.722049][ T24] usb 3-1: SerialNumber: syz [ 1871.743010][ T24] usb 3-1: config 0 descriptor?? [ 1871.781526][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1871.803708][T22012] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1871.806732][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1871.812409][T22012] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1871.812538][T22012] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.812661][T22012] usb 6-1: config 220 has no interface number 2 [ 1871.850262][T22012] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1871.864423][T22012] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1871.871471][T22012] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1871.881955][T22012] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1871.939356][T22012] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1871.949189][T22012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.957801][T22012] usb 6-1: Product: syz [ 1871.964354][T22012] usb 6-1: Manufacturer: syz [ 1871.969221][T22012] usb 6-1: SerialNumber: syz [ 1872.009513][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 1872.130802][ T24] usb 3-1: USB disconnect, device number 51 [ 1872.276644][T22012] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1872.288336][T22012] usb 6-1: No valid video chain found. [ 1872.295867][T22012] usb 6-1: selecting invalid altsetting 0 [ 1872.316845][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1872.354614][T22012] usb 6-1: selecting invalid altsetting 0 [ 1872.360854][T22012] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1872.432770][T22012] usb 6-1: USB disconnect, device number 34 [ 1872.861428][T30434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10804'. [ 1873.356646][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1874.469979][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1875.085304][T22012] kernel write not supported for file /amidi2 (pid: 22012 comm: kworker/0:2) [ 1875.321217][T30470] loop7: detected capacity change from 0 to 128 [ 1875.340397][T30470] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1875.441663][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1875.711928][T30472] loop1: detected capacity change from 0 to 1024 [ 1875.987309][ T5798] hfsplus: bad catalog entry type [ 1876.140906][ T1800] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1876.443323][ T4270] hfsplus: b-tree write err: -5, ino 4 [ 1876.479027][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1877.236819][ T4708] tipc: Disabling bearer [ 1877.363572][ T4708] dvmrp0 (unregistering): left allmulticast mode [ 1877.387039][ T4708] tipc: Disabling bearer [ 1877.517785][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1877.768137][ T4708] bond1 (unregistering): Released all slaves [ 1878.031961][ T4708] tipc: Disabling bearer [ 1878.043451][ T4708] tipc: Left network mode [ 1878.417110][ T4708] hsr_slave_0: left promiscuous mode [ 1878.440786][ T4708] hsr_slave_1: left promiscuous mode [ 1878.448975][ T4708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1878.486650][ T4708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1878.541841][ T4708] pim6reg (unregistering): left allmulticast mode [ 1878.572751][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1878.963148][ T4708] team0 (unregistering): Port device team_slave_1 removed [ 1879.091605][ T4708] team0 (unregistering): Port device team_slave_0 removed [ 1879.401150][T30484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10832'. [ 1879.637770][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1879.834784][T30488] loop5: detected capacity change from 0 to 1024 [ 1880.101363][ T4708] IPVS: stop unused estimator thread 0... [ 1880.402222][T30494] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10836'. [ 1880.636716][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1880.817023][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1880.858762][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1880.868500][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1880.882769][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1880.899534][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1881.100159][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1881.100240][ T30] audit: type=1326 audit(1750706824.277:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30499 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5338e929 code=0x7ffc0000 [ 1881.140017][ T30] audit: type=1326 audit(1750706824.277:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30499 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5338e929 code=0x7ffc0000 [ 1881.251308][ T30] audit: type=1326 audit(1750706824.467:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30499 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2e5338e929 code=0x7ffc0000 [ 1881.279506][ T30] audit: type=1326 audit(1750706824.467:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30499 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5338e929 code=0x7ffc0000 [ 1881.309069][ T30] audit: type=1326 audit(1750706824.467:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30499 comm="syz.8.10841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5338e929 code=0x7ffc0000 [ 1881.682834][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1882.241143][T30496] chnl_net:caif_netlink_parms(): no params data found [ 1882.715565][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1882.954434][ T5799] Bluetooth: hci1: command tx timeout [ 1882.999792][T30528] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10848'. [ 1883.071072][T30530] loop5: detected capacity change from 0 to 16 [ 1883.181717][T30530] erofs (device loop5): mounted with root inode @ nid 36. [ 1883.371952][T30533] netlink: 'syz.7.10850': attribute type 3 has an invalid length. [ 1883.772443][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1884.796546][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1885.034752][ T5799] Bluetooth: hci1: command tx timeout [ 1885.840444][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1885.935856][T30496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1885.943631][T30496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1885.951696][T30496] bridge_slave_0: entered allmulticast mode [ 1885.961313][T30496] bridge_slave_0: entered promiscuous mode [ 1886.103632][T30541] loop5: detected capacity change from 0 to 40427 [ 1886.138934][T30496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.151258][T30496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.168724][T30496] bridge_slave_1: entered allmulticast mode [ 1886.197403][T30496] bridge_slave_1: entered promiscuous mode [ 1886.292087][T30541] F2FS-fs (loop5): invalid crc value [ 1886.408982][T30496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1886.449731][T30496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1886.880110][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1886.965610][T30541] F2FS-fs (loop5): Start checkpoint disabled! [ 1887.012657][T30541] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1887.032785][T30496] team0: Port device team_slave_0 added [ 1887.098484][T30496] team0: Port device team_slave_1 added [ 1887.136303][ T5799] Bluetooth: hci1: command tx timeout [ 1887.653437][T30496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1887.666917][T30496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1887.699096][T30496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.893289][T30496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1887.905568][T30496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1887.937114][T30496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1887.963207][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1888.321525][T30496] hsr_slave_0: entered promiscuous mode [ 1888.341363][T30496] hsr_slave_1: entered promiscuous mode [ 1888.362070][T30496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1888.376435][T30496] Cannot create hsr debugfs directory [ 1888.956700][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1888.970240][T30574] usb usb8: usbfs: process 30574 (syz.8.10867) did not claim interface 0 before use [ 1889.194888][ T5799] Bluetooth: hci1: command tx timeout [ 1889.996288][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1890.060104][T30496] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1890.161770][T30496] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1890.235806][T30496] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1890.312668][T30496] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1891.038999][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1891.291566][T30496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1891.476413][T30496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1891.569863][T20190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.577570][T20190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1891.689717][T20190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.697405][T20190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1892.085915][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1892.350630][T30615] IPVS: Scheduler module ip_vs_sip not found [ 1893.107872][T30630] loop5: detected capacity change from 0 to 1024 [ 1893.124678][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1893.305717][T30630] hfsplus: bad catalog entry type [ 1893.489892][T30496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1893.620247][ T4708] hfsplus: b-tree write err: -5, ino 4 [ 1893.908395][T30643] loop8: detected capacity change from 0 to 512 [ 1893.962341][T30643] EXT4-fs: Ignoring removed orlov option [ 1893.971495][T30643] ext4: Bad value for 'mb_optimize_scan' [ 1894.005617][T30647] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10895'. [ 1894.064129][T30646] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10895'. [ 1894.168087][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1894.741759][T30658] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10901'. [ 1895.236271][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1895.321124][T30655] loop5: detected capacity change from 0 to 32768 [ 1895.409177][T30655] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc [ 1895.409326][T30655] allowing incompatible features above 0.0: (unknown version) [ 1895.409418][T30655] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1895.455118][T30655] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 1895.465185][T30655] bcachefs (loop5): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, fixing [ 1895.482996][T30655] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 1895.494257][T30655] bcachefs (loop5): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 1895.494257][T30655] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive [ 1895.494257][T30655] running recovery passes: check_extents_to_backpointers,check_inodes [ 1895.523584][ C0] vkms_vblank_simulate: vblank timer overrun [ 1895.536435][T30655] bcachefs (loop5): dropping and reconstructing all alloc info [ 1895.578013][T30655] bcachefs (loop5): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 1895.595768][T30655] bcachefs (loop5): btree node read error at btree xattrs level 0/0 [ 1895.595873][T30655] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 1895.595984][T30655] loop5 node offset 0/16: got wrong btree node: got [ 1895.596062][T30655] btree=xattrs level=0 seq ded0abe32 1 [ 1895.596132][T30655] min: POS_MIN [ 1895.596197][T30655] max: SPOS_MAX [ 1895.596271][T30655] flagging btree xattrs lost data [ 1895.596341][T30655] ret btree_node_read_validate_error [ 1895.662443][T30655] bcachefs (loop5): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 1895.728832][T30655] bcachefs (loop5): check_topology... [ 1895.729828][T30655] bcachefs (loop5): btree root dirents unreadable, must recover from scan [ 1895.749820][T30655] bcachefs (loop5): no nodes found for btree dirents, continuing [ 1895.758486][T30655] bcachefs (loop5): btree root xattrs unreadable, must recover from scan [ 1895.767888][T30655] bcachefs (loop5): no nodes found for btree xattrs, continuing [ 1895.781505][T30655] done [ 1895.784692][T30655] bcachefs (loop5): accounting_read... done [ 1895.797314][T30655] bcachefs (loop5): alloc_read... done [ 1895.805553][T30655] bcachefs (loop5): snapshots_read... done [ 1895.814457][T30655] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 1895.826100][T30655] bcachefs (loop5): done starting filesystem [ 1895.876312][T30668] loop7: detected capacity change from 0 to 1024 [ 1895.995290][T17088] bcachefs (loop5): shutting down [ 1896.163623][T30496] veth0_vlan: entered promiscuous mode [ 1896.182963][T17088] bcachefs (loop5): shutdown complete [ 1896.259454][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1896.309387][T30673] pim6reg: entered allmulticast mode [ 1896.379551][T30496] veth1_vlan: entered promiscuous mode [ 1896.394396][T30673] pim6reg: left allmulticast mode [ 1896.521597][T20190] hfsplus: b-tree write err: -5, ino 4 [ 1896.680807][T30496] veth0_macvtap: entered promiscuous mode [ 1896.761752][T30496] veth1_macvtap: entered promiscuous mode [ 1896.918291][T30496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1896.986971][T30496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1896.997103][T30679] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10910'. [ 1897.132431][T30496] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.142352][T30496] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.151670][T30496] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.160839][T30496] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.278577][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1898.321955][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1898.726020][T30699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10917'. [ 1898.981429][T30700] loop8: detected capacity change from 0 to 1764 [ 1899.358957][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1900.415717][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1900.469955][T30720] loop5: detected capacity change from 0 to 4096 [ 1900.553253][T30720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1900.976740][T17088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1901.436894][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1902.475287][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1903.323406][T18267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1903.327180][T22012] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1903.331852][T18267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1903.525662][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1903.554883][T22012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1903.566457][T22012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1903.576862][T22012] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1903.586495][T22012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.615393][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1903.625758][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1903.736841][T22012] usb 6-1: config 0 descriptor?? [ 1904.197583][ T30] audit: type=1326 audit(1750706847.487:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30789 comm="syz.2.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f8e929 code=0x7ffc0000 [ 1904.221288][ T30] audit: type=1326 audit(1750706847.497:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30789 comm="syz.2.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f8e929 code=0x7ffc0000 [ 1904.250432][T22012] uclogic 0003:28BD:0075.0023: interface is invalid, ignoring [ 1904.364158][ T30] audit: type=1326 audit(1750706847.547:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30789 comm="syz.2.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f0ae0f8e929 code=0x7ffc0000 [ 1904.388198][ T30] audit: type=1326 audit(1750706847.547:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30789 comm="syz.2.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f8e929 code=0x7ffc0000 [ 1904.412206][ T30] audit: type=1326 audit(1750706847.547:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30789 comm="syz.2.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f8e929 code=0x7ffc0000 [ 1904.435383][ T30] audit: type=1326 audit(1750706847.597:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30789 comm="syz.2.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f0ae0f8e929 code=0x7ffc0000 [ 1904.461255][T22012] usb 6-1: USB disconnect, device number 35 [ 1904.461353][ T30] audit: type=1326 audit(1750706847.597:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30789 comm="syz.2.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f8e929 code=0x7ffc0000 [ 1904.491944][ T30] audit: type=1326 audit(1750706847.597:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30789 comm="syz.2.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae0f8e929 code=0x7ffc0000 [ 1904.572262][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1904.931200][ T30] audit: type=1326 audit(1750706848.227:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.7.10953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ac718e929 code=0x0 [ 1905.600663][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1906.166196][T30823] hugetlbfs: Bad value '¢' for mount option 'nr_inodes' [ 1906.166196][T30823] [ 1906.332520][T30829] tipc: Enabled bearer , priority 4 [ 1906.650107][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1907.454463][T22012] tipc: Node number set to 3758096386 [ 1907.692998][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1907.990396][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10973'. [ 1907.999979][T30845] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10973'. [ 1908.009584][T30845] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10973'. [ 1908.277271][T30849] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 1908.861733][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1909.222169][T30854] loop7: detected capacity change from 0 to 32768 [ 1909.319999][T30854] OCFS2: ERROR (device loop7): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #72: fs_generation is 3923116032 [ 1909.340363][T30854] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1909.364178][T30854] OCFS2: File system is now read-only. [ 1909.369879][T30854] (syz.7.10977,30854,0):ocfs2_read_locked_inode:535 ERROR: status = -30 [ 1909.379093][T30854] (syz.7.10977,30854,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 1909.389232][T30854] (syz.7.10977,30854,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=7, slot=0 [ 1909.400278][T30854] (syz.7.10977,30854,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30 [ 1909.409703][T30854] (syz.7.10977,30854,0):ocfs2_mount_volume:1758 ERROR: status = -30 [ 1909.425636][T30854] (syz.7.10977,30854,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 1909.781910][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1910.446214][T30878] loop7: detected capacity change from 0 to 256 [ 1910.504371][T30880] loop5: detected capacity change from 0 to 512 [ 1910.567445][T30880] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1910.694387][T30880] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1910.709912][T30880] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #11: comm syz.5.10989: corrupted inode contents [ 1910.796809][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1910.841760][T30880] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #11: comm syz.5.10989: mark_inode_dirty error [ 1910.880031][T30880] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.10989: invalid indirect mapped block 1 (level 1) [ 1910.884125][T30878] FAT-fs (loop7): Directory bread(block 64) failed [ 1910.905686][T30878] FAT-fs (loop7): Directory bread(block 65) failed [ 1910.912621][T30878] FAT-fs (loop7): Directory bread(block 66) failed [ 1910.921015][T30878] FAT-fs (loop7): Directory bread(block 67) failed [ 1910.928182][T30878] FAT-fs (loop7): Directory bread(block 68) failed [ 1910.929452][T30880] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #11: comm syz.5.10989: corrupted inode contents [ 1910.935025][T30878] FAT-fs (loop7): Directory bread(block 69) failed [ 1910.935284][T30878] FAT-fs (loop7): Directory bread(block 70) failed [ 1910.961364][T30878] FAT-fs (loop7): Directory bread(block 71) failed [ 1910.968930][T30878] FAT-fs (loop7): Directory bread(block 72) failed [ 1910.975869][T30878] FAT-fs (loop7): Directory bread(block 73) failed [ 1911.008028][T30880] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 1911.034199][T30880] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #11: comm syz.5.10989: corrupted inode contents [ 1911.084447][T30880] EXT4-fs error (device loop5): ext4_truncate:4597: inode #11: comm syz.5.10989: mark_inode_dirty error [ 1911.157572][T30880] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 1911.216216][T30880] EXT4-fs (loop5): 1 truncate cleaned up [ 1911.224418][T30880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1911.758882][T17088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1911.839338][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1912.875485][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1913.921569][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1914.027925][T30939] loop7: detected capacity change from 0 to 1024 [ 1914.952708][T30945] loop8: detected capacity change from 0 to 32768 [ 1914.966774][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1915.028905][T30939] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 1915.051431][T30945] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1915.062973][T30939] System zones: 0-1, 3-8 [ 1915.151282][T30939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1915.164653][T30939] ext4 filesystem being mounted at /862/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1915.179688][T30945] XFS (loop8): Metadata corruption detected at xfs_dinode_verify+0x252/0x21a0, inode 0x1801 dinode [ 1915.195341][T30945] XFS (loop8): Unmount and run xfs_repair [ 1915.201334][T30945] XFS (loop8): First 128 bytes of corrupted metadata buffer: [ 1915.210503][T30945] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1915.219894][T30945] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1915.229173][T30945] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 72 a0 ..e.....4.Xh..r. [ 1915.238560][T30945] 00000030: 34 f7 58 68 7f c1 72 a0 00 00 00 00 00 00 00 00 4.Xh..r......... [ 1915.247952][T30945] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1915.257227][T30945] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00 ................ [ 1915.266544][T30945] 00000060: ff ff ff ff 0f 42 bd a6 00 00 00 00 00 01 00 00 .....B.......... [ 1915.276593][T30945] 00000070: 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 1915.286074][T30945] XFS (loop8): metadata inode 0x1801 type 5 is corrupt [ 1915.297137][T30945] XFS (loop8): failed to read RT inodes [ 1915.303159][T30945] XFS (loop8): Uncorrected metadata errors detected; please run xfs_repair. [ 1915.370730][ T30] audit: type=1800 audit(1750706858.657:1069): pid=30939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.11017" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1915.958887][T20200] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1916.002460][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1916.637849][T30984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11032'. [ 1916.647402][T30984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11032'. [ 1916.924146][T22012] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1917.039635][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1917.154472][T22012] usb 6-1: Using ep0 maxpacket: 32 [ 1917.201016][T22012] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1917.209879][T22012] usb 6-1: config 0 has no interface number 0 [ 1917.274778][ T4270] wlan1: Trigger new scan to find an IBSS to join [ 1917.275586][T22012] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1917.290954][T22012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.299384][T22012] usb 6-1: Product: syz [ 1917.303919][T22012] usb 6-1: Manufacturer: syz [ 1917.308850][T22012] usb 6-1: SerialNumber: syz [ 1917.380957][T22012] usb 6-1: config 0 descriptor?? [ 1917.445017][T22012] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1917.455676][T22012] usb 6-1: selecting invalid altsetting 1 [ 1917.461654][T22012] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1917.578802][T22012] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1917.590302][T22012] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1917.599381][T22012] usb 6-1: media controller created [ 1917.752513][T22012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1918.079386][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1918.084560][T22012] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1918.096830][T22012] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1918.148480][T22012] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1918.726348][T22012] usb 6-1: USB disconnect, device number 36 [ 1919.120992][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1919.691612][T31019] loop7: detected capacity change from 0 to 4096 [ 1919.794974][T31019] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1920.147038][T31021] loop9: detected capacity change from 0 to 32768 [ 1920.156083][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1920.217019][T31021] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1920.226558][T31021] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1920.245011][T31019] ntfs3(loop7): Failed to load $Extend (-22). [ 1920.251370][T31019] ntfs3(loop7): Failed to initialize $Extend. [ 1920.315679][ T3576] wlan1: Trigger new scan to find an IBSS to join [ 1920.324710][T31021] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1920.337198][T22012] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1920.344732][T22012] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1920.716796][T22012] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 372ms [ 1920.729178][T22012] gfs2: fsid=syz:syz.0: jid=0: Done [ 1920.735916][T31021] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1920.751834][T31036] loop8: detected capacity change from 0 to 1024 [ 1920.762798][T31036] EXT4-fs: Ignoring removed orlov option [ 1920.986602][T31036] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1921.196754][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1921.220853][T31045] loop5: detected capacity change from 0 to 1024 [ 1921.346200][ T3576] wlan1: Creating new IBSS network, BSSID f2:b8:ea:86:15:85 [ 1921.528181][T23521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1921.676249][ T4708] hfsplus: b-tree write err: -5, ino 8 [ 1922.235877][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1922.921997][T31071] loop9: detected capacity change from 0 to 16 [ 1922.979317][T31071] erofs (device loop9): mounted with root inode @ nid 36. [ 1923.034655][T31071] erofs (device loop9): readahead error at folio 26 @ nid 36 [ 1923.042468][T31071] erofs (device loop9): readahead error at folio 25 @ nid 36 [ 1923.050634][T31071] erofs (device loop9): readahead error at folio 24 @ nid 36 [ 1923.058472][T31071] erofs (device loop9): readahead error at folio 23 @ nid 36 [ 1923.066366][T31071] erofs (device loop9): readahead error at folio 22 @ nid 36 [ 1923.077372][T31071] erofs (device loop9): readahead error at folio 21 @ nid 36 [ 1923.086498][T31071] erofs (device loop9): readahead error at folio 20 @ nid 36 [ 1923.094667][T31071] erofs (device loop9): readahead error at folio 18 @ nid 36 [ 1923.102416][T31071] erofs (device loop9): readahead error at folio 16 @ nid 36 [ 1923.110932][T31071] erofs (device loop9): readahead error at folio 12 @ nid 36 [ 1923.119231][T31071] syz.9.11070: attempt to access beyond end of device [ 1923.119231][T31071] loop9: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1923.133702][T31071] syz.9.11070: attempt to access beyond end of device [ 1923.133702][T31071] loop9: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 1923.148512][T31071] syz.9.11070: attempt to access beyond end of device [ 1923.148512][T31071] loop9: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1923.163111][T31071] syz.9.11070: attempt to access beyond end of device [ 1923.163111][T31071] loop9: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 1923.223035][T31075] tipc: Enabled bearer , priority 10 [ 1923.305703][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1923.549495][T31079] loop5: detected capacity change from 0 to 64 [ 1923.569143][T31080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11074'. [ 1923.614131][T31079] hfs: unable to locate alternate MDB [ 1923.619763][T31079] hfs: continuing without an alternate MDB [ 1924.318859][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1924.334435][T22012] tipc: Node number set to 94 [ 1925.023082][ T30] audit: type=1326 audit(1750706868.307:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31104 comm="syz.5.11088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1925.114499][ T30] audit: type=1326 audit(1750706868.377:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31104 comm="syz.5.11088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1925.354775][ T30] audit: type=1326 audit(1750706868.477:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31104 comm="syz.5.11088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1925.378416][ T30] audit: type=1326 audit(1750706868.477:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31104 comm="syz.5.11088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1925.401707][ T30] audit: type=1326 audit(1750706868.477:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31104 comm="syz.5.11088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1925.425023][ T30] audit: type=1326 audit(1750706868.477:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31104 comm="syz.5.11088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1925.451202][ T30] audit: type=1326 audit(1750706868.477:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31104 comm="syz.5.11088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f753158e929 code=0x7ffc0000 [ 1925.476016][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1925.777299][T31107] loop8: detected capacity change from 0 to 32768 [ 1925.905162][T31107] OCFS2: ERROR (device loop8): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 4107 has an invalid extent (next_free_rec 63, count 19) [ 1925.928093][T31107] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1925.949756][T31107] OCFS2: File system is now read-only. [ 1925.959962][T31107] (syz.8.11087,31107,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 1925.968271][T31107] (syz.8.11087,31107,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 1925.977456][T31107] (syz.8.11087,31107,0):ocfs2_bmap:469 ERROR: get_blocks() failed, block = 0 [ 1925.986696][T31107] (syz.8.11087,31107,0):ocfs2_bmap:470 ERROR: status = -30 [ 1925.995339][T31107] jbd2_journal_init_inode: Cannot locate journal superblock [ 1926.002894][T31107] (syz.8.11087,31107,0):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 1926.012590][T31107] (syz.8.11087,31107,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal! [ 1926.022487][T31107] (syz.8.11087,31107,0):ocfs2_check_volume:2432 ERROR: status = -22 [ 1926.033126][T31107] (syz.8.11087,31107,0):ocfs2_mount_volume:1764 ERROR: status = -22 [ 1926.050370][T31107] (syz.8.11087,31107,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1926.401043][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1927.095045][T31122] loop5: detected capacity change from 0 to 512 [ 1927.284724][T31125] loop8: detected capacity change from 0 to 64 [ 1927.351378][T31122] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1927.359932][T31122] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1927.438558][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1927.494273][T31122] System zones: 0-1, 15-15, 18-18, 34-34 [ 1927.501759][T31122] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1927.509046][T31122] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1927.519002][T31122] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1927.534366][T31122] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1927.549165][T31117] loop9: detected capacity change from 0 to 40427 [ 1927.561265][T31117] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 1927.575023][T31117] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1927.594365][T31122] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.11095: bad orphan inode 16 [ 1927.619141][T31117] F2FS-fs (loop9): build fault injection rate: 17008 [ 1927.756200][T31122] ext4_test_bit(bit=15, block=18) = 1 [ 1927.761855][T31122] is_bad_inode(inode)=0 [ 1927.767708][T31122] NEXT_ORPHAN(inode)=0 [ 1927.771993][T31122] max_ino=32 [ 1927.775944][T31122] i_nlink=2 [ 1927.781404][T31122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1928.226048][T31122] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 1928.357151][T17088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1928.494873][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1929.518929][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1930.284311][ T42] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1930.460549][ T42] usb 3-1: too many endpoints for config 0 interface 0 altsetting 9: 199, using maximum allowed: 30 [ 1930.471808][ T42] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.482623][ T42] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 199 [ 1930.496151][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1930.503063][ T42] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1930.512879][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.584553][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1930.661031][ T42] usb 3-1: config 0 descriptor?? [ 1931.113623][ T42] kye 0003:0458:5010.0024: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1931.176168][ T42] kye 0003:0458:5010.0024: hidraw0: USB HID v10.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 1931.188273][ T42] kye 0003:0458:5010.0024: tablet-enabling feature report not found [ 1931.196939][ T42] kye 0003:0458:5010.0024: tablet enabling failed [ 1931.328630][ T42] usb 3-1: USB disconnect, device number 52 [ 1931.602137][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1932.075462][T31183] loop9: detected capacity change from 0 to 2048 [ 1932.215880][T31186] team_slave_0: entered promiscuous mode [ 1932.222116][T31186] team_slave_1: entered promiscuous mode [ 1932.255370][T31184] team_slave_0: left promiscuous mode [ 1932.261160][T31184] team_slave_1: left promiscuous mode [ 1932.636726][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1933.114339][T31205] loop8: detected capacity change from 0 to 736 [ 1933.154329][ T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1933.369154][ T42] usb 10-1: Using ep0 maxpacket: 16 [ 1933.426024][ T42] usb 10-1: config 166 has an invalid interface number: 177 but max is 1 [ 1933.435125][ T42] usb 10-1: config 166 has an invalid interface number: 34 but max is 1 [ 1933.444097][ T42] usb 10-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.454929][ T42] usb 10-1: config 166 has no interface number 0 [ 1933.461528][ T42] usb 10-1: config 166 has no interface number 1 [ 1933.468370][ T42] usb 10-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1933.479948][ T42] usb 10-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1933.491706][ T42] usb 10-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1933.505784][ T42] usb 10-1: config 166 interface 177 has no altsetting 0 [ 1933.513090][ T42] usb 10-1: config 166 interface 34 has no altsetting 0 [ 1933.699170][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1933.780134][ T42] usb 10-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1933.789973][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.801903][ T42] usb 10-1: Product: syz [ 1933.806798][ T42] usb 10-1: Manufacturer: syz [ 1933.811727][ T42] usb 10-1: SerialNumber: syz [ 1934.101276][ T42] ums-realtek 10-1:166.177: USB Mass Storage device detected [ 1934.310248][ T42] ums-realtek 10-1:166.34: USB Mass Storage device detected [ 1934.385866][ T42] usb 10-1: Found UVC 0.00 device syz (0bda:0138) [ 1934.392633][ T42] usb 10-1: No valid video chain found. [ 1934.403450][ T42] usb 10-1: USB disconnect, device number 2 [ 1934.720663][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1935.763163][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1936.308520][T31254] loop5: detected capacity change from 0 to 512 [ 1936.406274][T31254] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1936.587284][T31254] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.11153: couldn't read orphan inode 26 (err -116) [ 1936.671833][T31254] EXT4-fs (loop5): Remounting filesystem read-only [ 1936.680871][T31254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1936.698073][T31254] ext4 filesystem being mounted at /1161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1936.802467][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1936.854894][T31264] loop8: detected capacity change from 0 to 256 [ 1936.982739][T17088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1937.844670][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1937.998324][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 1938.158990][T31284] loop9: detected capacity change from 0 to 164 [ 1938.875343][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1939.037091][T31299] syz.8.11166: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1939.056415][T31299] CPU: 0 UID: 0 PID: 31299 Comm: syz.8.11166 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(undef) [ 1939.056571][T31299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1939.056669][T31299] Call Trace: [ 1939.056730][T31299] [ 1939.056784][T31299] __dump_stack+0x26/0x30 [ 1939.056973][T31299] dump_stack_lvl+0x1df/0x270 [ 1939.057151][T31299] dump_stack+0x1e/0x25 [ 1939.057311][T31299] warn_alloc+0x470/0x690 [ 1939.057515][T31299] ? kmsan_get_metadata+0xfb/0x160 [ 1939.057724][T31299] __vmalloc_node_range_noprof+0x133/0x2360 [ 1939.057920][T31299] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1939.058127][T31299] ? should_fail_ex+0x45/0x8a0 [ 1939.058289][T31299] ? kmsan_get_metadata+0xfb/0x160 [ 1939.058477][T31299] ? kmsan_get_metadata+0xfb/0x160 [ 1939.058666][T31299] ? kmsan_get_metadata+0xfb/0x160 [ 1939.058853][T31299] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1939.059066][T31299] ? kmsan_get_metadata+0xfb/0x160 [ 1939.059267][T31299] vmalloc_user_noprof+0xce/0x140 [ 1939.059436][T31299] ? xskq_create+0x11d/0x290 [ 1939.059679][T31299] xskq_create+0x11d/0x290 [ 1939.059849][T31299] xsk_init_queue+0xfd/0x1d0 [ 1939.060019][T31299] xsk_setsockopt+0x873/0xc30 [ 1939.060197][T31299] do_sock_setsockopt+0x4dc/0x820 [ 1939.060389][T31299] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1939.060553][T31299] __x64_sys_setsockopt+0x2ad/0x4a0 [ 1939.060731][T31299] x64_sys_call+0x36f7/0x3db0 [ 1939.060922][T31299] do_syscall_64+0xd9/0x210 [ 1939.061093][T31299] ? irqentry_exit+0x16/0x60 [ 1939.061241][T31299] ? clear_bhb_loop+0x40/0x90 [ 1939.061399][T31299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.061559][T31299] RIP: 0033:0x7f2e5338e929 [ 1939.061674][T31299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1939.061801][T31299] RSP: 002b:00007f2e542c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1939.061950][T31299] RAX: ffffffffffffffda RBX: 00007f2e535b5fa0 RCX: 00007f2e5338e929 [ 1939.062056][T31299] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1939.062145][T31299] RBP: 00007f2e53410b39 R08: 0000000000000004 R09: 0000000000000000 [ 1939.062239][T31299] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1939.062335][T31299] R13: 0000000000000000 R14: 00007f2e535b5fa0 R15: 00007ffca00674c8 [ 1939.062468][T31299] [ 1939.296674][ C0] vkms_vblank_simulate: vblank timer overrun [ 1939.304876][T31299] Mem-Info: [ 1939.308229][T31299] active_anon:7687 inactive_anon:0 isolated_anon:0 [ 1939.308229][T31299] active_file:5908 inactive_file:50233 isolated_file:0 [ 1939.308229][T31299] unevictable:768 dirty:361 writeback:0 [ 1939.308229][T31299] slab_reclaimable:5638 slab_unreclaimable:26742 [ 1939.308229][T31299] mapped:29735 shmem:2613 pagetables:1971 [ 1939.308229][T31299] sec_pagetables:0 bounce:0 [ 1939.308229][T31299] kernel_misc_reclaimable:0 [ 1939.308229][T31299] free:350930 free_pcp:12876 free_cma:0 [ 1939.353666][ C0] vkms_vblank_simulate: vblank timer overrun [ 1939.367852][T31299] Node 0 active_anon:30820kB inactive_anon:0kB active_file:23632kB inactive_file:200704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118972kB dirty:1456kB writeback:0kB shmem:9012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5488kB pagetables:7596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1939.401527][ C0] vkms_vblank_simulate: vblank timer overrun [ 1939.408163][T31299] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1939.440067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1939.446624][T31299] Node 0 DMA free:4092kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1939.475683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1939.486763][T31299] lowmem_reserve[]: 0 930 1243 1243 1243 [ 1939.493079][T31299] Node 0 DMA32 free:473644kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11172kB inactive_anon:0kB active_file:22200kB inactive_file:113372kB unevictable:0kB writepending:332kB present:3129332kB managed:953028kB mlocked:0kB bounce:0kB free_pcp:38220kB local_pcp:19684kB free_cma:0kB [ 1939.525416][ C0] vkms_vblank_simulate: vblank timer overrun [ 1939.532798][T31299] lowmem_reserve[]: 0 0 312 312 312 [ 1939.538996][T31299] Node 0 Normal free:16248kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19580kB inactive_anon:0kB active_file:1432kB inactive_file:87332kB unevictable:1536kB writepending:1124kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:13280kB local_pcp:5992kB free_cma:0kB [ 1939.571444][ C0] vkms_vblank_simulate: vblank timer overrun [ 1939.581306][T31299] lowmem_reserve[]: 0 0 0 0 0 [ 1939.590480][T31299] Node 1 Normal free:909736kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:224kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1939.621463][ C0] vkms_vblank_simulate: vblank timer overrun [ 1939.629540][T31299] lowmem_reserve[]: 0 0 0 0 0 [ 1939.635026][T31299] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 4092kB [ 1939.652465][T31299] Node 0 DMA32: 657*4kB (UME) 39*8kB (UME) 557*16kB (UM) 271*32kB (UM) 126*64kB (UME) 77*128kB (UM) 102*256kB (UME) 101*512kB (UME) 67*1024kB (UME) 7*2048kB (UME) 67*4096kB (UM) = 473644kB [ 1939.677091][T31299] Node 0 Normal: 212*4kB (M) 265*8kB (UM) 60*16kB (UM) 33*32kB (ME) 4*64kB (UM) 2*128kB (M) 20*256kB (UME) 5*512kB (UE) 3*1024kB (U) 0*2048kB 0*4096kB = 16248kB [ 1939.697081][T31299] Node 1 Normal: 16*4kB (UME) 23*8kB (UME) 25*16kB (UE) 17*32kB (UME) 16*64kB (UME) 10*128kB (UME) 6*256kB (UM) 5*512kB (UME) 3*1024kB (UM) 5*2048kB (UM) 217*4096kB (M) = 909736kB [ 1939.717347][T31299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1939.727404][T31299] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1939.737097][T31299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1939.747043][T31299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1939.756807][T31299] 58824 total pagecache pages [ 1939.761728][T31299] 0 pages in swap cache [ 1939.769690][T31299] Free swap = 124996kB [ 1939.775321][T31299] Total swap = 124996kB [ 1939.779683][T31299] 2097051 pages RAM [ 1939.783728][T31299] 0 pages HighMem/MovableOnly [ 1939.788890][T31299] 1530855 pages reserved [ 1939.793327][T31299] 0 pages cma reserved [ 1939.939191][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1940.956266][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1941.201547][T31327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11183'. [ 1941.524491][ T30] audit: type=1326 audit(1750706884.807:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31317 comm="syz.7.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac718e929 code=0x7fc00000 [ 1941.998072][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1942.226186][ T42] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1942.437112][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1942.448758][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1942.459309][ T42] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1942.468957][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.556570][ T42] usb 3-1: config 0 descriptor?? [ 1943.019801][ T42] zydacron 0003:13EC:0006.0025: item fetching failed at offset 1/5 [ 1943.035311][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1943.069469][ T42] zydacron 0003:13EC:0006.0025: parse failed [ 1943.076346][ T42] zydacron 0003:13EC:0006.0025: probe with driver zydacron failed with error -22 [ 1943.211837][ T42] usb 3-1: USB disconnect, device number 53 [ 1943.923697][T31365] loop9: detected capacity change from 0 to 1024 [ 1943.974256][T31365] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1944.004684][T31365] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1944.062580][T31365] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1944.078533][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1944.091707][T31365] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1944.144714][T31365] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm syz.9.11202: Freeing blocks not in datazone - block = 0, count = 4096 [ 1944.241432][T31365] EXT4-fs (loop9): Remounting filesystem read-only [ 1944.249043][T31365] EXT4-fs (loop9): 1 orphan inode deleted [ 1944.257504][T31365] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1944.566324][T30496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1945.127682][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1945.483281][T31379] loop9: detected capacity change from 0 to 8192 [ 1945.514134][T31379] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1945.931019][T31394] loop5: detected capacity change from 0 to 512 [ 1945.957181][T31394] EXT4-fs: Ignoring removed oldalloc option [ 1946.044874][T31394] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.11215: Parent and EA inode have the same ino 15 [ 1946.079238][T31394] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.11215: Parent and EA inode have the same ino 15 [ 1946.159264][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1946.194342][T31394] EXT4-fs (loop5): 1 orphan inode deleted [ 1946.202528][T31394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1946.624146][T17088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1947.215879][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1948.247557][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1948.345783][T31435] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11231'. [ 1949.064398][T31445] loop5: detected capacity change from 0 to 128 [ 1949.165453][T31445] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1949.261281][T31452] sp0: Synchronizing with TNC [ 1949.281483][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1949.476996][T31452] [U] è [ 1950.330288][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1951.355352][T20190] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1951.369787][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1951.444155][T22012] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1951.640938][T22012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.655954][T22012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1951.667467][T22012] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1951.677025][T22012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.811220][T22012] usb 3-1: config 0 descriptor?? [ 1952.404214][T22012] hid-steam 0003:28DE:1142.0026: unknown main item tag 0x0 [ 1952.453347][T22012] hid-steam 0003:28DE:1142.0026: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1952.528539][T22012] hid-steam 0003:28DE:1142.0026: Steam wireless receiver connected [ 1952.579808][T22012] hid-steam 0003:28DE:1142.0027: unknown main item tag 0x0 [ 1952.692107][T22012] hid-steam 0003:28DE:1142.0027: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1952.765622][T22012] usb 3-1: USB disconnect, device number 54 [ 1952.843511][T22012] hid-steam 0003:28DE:1142.0026: Steam wireless receiver disconnected [ 1952.937467][T31491] loop7: detected capacity change from 0 to 32768 [ 1952.942614][T31497] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11260'. [ 1952.990938][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1953.045036][T31491] XFS (loop7): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 1953.058130][T31491] XFS (loop7): Log size 624 blocks too small, minimum size is 816 blocks [ 1953.067495][T31491] XFS (loop7): AAIEEE! Log failed size checks. Abort! [ 1953.094668][T31491] XFS (loop7): log mount failed [ 1953.461958][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1954.486465][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1955.092261][T31535] loop9: detected capacity change from 0 to 1024 [ 1955.192733][T31535] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1955.283230][ T30] audit: type=1800 audit(1750706898.577:1078): pid=31535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11275" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1955.522053][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1955.562889][T31542] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1955.564738][T31535] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 400 with error 28 [ 1955.564890][T31535] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1955.564890][T31535] [ 1955.564983][T31535] EXT4-fs (loop9): Total free blocks count 0 [ 1955.565155][T31535] EXT4-fs (loop9): Free/Dirty block details [ 1955.565241][T31535] EXT4-fs (loop9): free_blocks=68451041280 [ 1955.565341][T31535] EXT4-fs (loop9): dirty_blocks=400 [ 1955.565428][T31535] EXT4-fs (loop9): Block reservation details [ 1955.565513][T31535] EXT4-fs (loop9): i_reserved_data_blocks=25 [ 1955.805313][T30496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1956.100029][T31550] tmpfs: Bad value for 'mpol' [ 1956.424169][T22012] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1956.565815][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1956.619601][T22012] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1956.630268][T22012] usb 3-1: config 2 interface 0 has no altsetting 0 [ 1956.690712][T22012] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1956.700245][T22012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.708722][T22012] usb 3-1: Product: syz [ 1956.713118][T22012] usb 3-1: Manufacturer: syz [ 1956.718158][T22012] usb 3-1: SerialNumber: syz [ 1956.812794][T22012] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1956.827470][T22012] usb 3-1: selecting invalid altsetting 0 [ 1956.891161][T22012] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1957.030285][T22012] usb 3-1: USB disconnect, device number 55 [ 1957.624273][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1957.658657][T31566] loop7: detected capacity change from 0 to 4096 [ 1958.064920][T31566] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1958.174652][ T30] audit: type=1800 audit(1750706901.467:1079): pid=31566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.11288" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 1958.390599][T31584] loop9: detected capacity change from 0 to 64 [ 1958.639491][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1959.212889][T31585] loop5: detected capacity change from 0 to 32768 [ 1959.247072][T31585] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section replicas: invalid device 1 in entry (unknown data_type 122): 119/246 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 5 5 6 7 8 9 9 10 11 14 24 27 31 35 43 47 47 51 56 65 80 89 96 102 128 132 172 173 174 179 205 222 235 245] [ 1959.247072][T31585] replicas (size 64): [ 1959.247072][T31585] (unknown data_type 122): 119/246 [43 0 222 65 89 132 205 31 174 173 5 172 235 128 0 0 0 0 0 0 0 0 0 0 0 8 0 0 0 179 245 51 102 0 0 0 0 0 0 14 96 0 0 0 0 0 0 0 0 0 0 0 0 5 0 0 0 9 0 0 0 9 0 0 0 0 0 0 0 7 0 0 0 0 0 0 0 24 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 1959.248051][T31585] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 1959.343493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1959.679348][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1960.473223][T31601] loop9: detected capacity change from 0 to 47 [ 1960.721950][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1961.777315][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1962.802825][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1963.840051][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1964.325393][T31651] ceph: Unexpected value for 'acl' [ 1964.613275][T31654] sp0: Synchronizing with TNC [ 1965.035279][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1965.446371][T31655] loop8: detected capacity change from 0 to 32768 [ 1965.499742][T31655] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.11325 (31655) [ 1965.521969][T31655] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1965.532763][T31655] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 1965.542223][T31655] BTRFS error (device loop8): cannot disable free-space-tree [ 1965.550056][T31655] BTRFS info (device loop8): disk space caching is enabled [ 1965.557814][T31655] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1965.577997][T31655] BTRFS error (device loop8): open_ctree failed: -22 [ 1965.645253][T31653] [U] è [ 1965.925591][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1966.741534][T31671] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11333'. [ 1966.983045][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1967.390926][T31685] CUSE: DEVNAME unspecified [ 1967.714763][T31678] loop5: detected capacity change from 0 to 4096 [ 1967.782700][T31678] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1968.025330][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1968.170909][T31678] ntfs3(loop5): ino=19, mi_enum_attr [ 1968.177178][T31678] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1968.346238][T31694] loop9: detected capacity change from 0 to 1764 [ 1968.363438][T31678] ntfs3(loop5): failed to convert "c46c" to iso8859-13 [ 1968.388665][T31678] ntfs3(loop5): ino=20, mi_enum_attr [ 1968.997853][T31703] netlink: 44 bytes leftover after parsing attributes in process `syz.9.11348'. [ 1969.055740][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1969.138288][T31708] netlink: 'syz.5.11349': attribute type 1 has an invalid length. [ 1969.146919][T31708] netlink: 3 bytes leftover after parsing attributes in process `syz.5.11349'. [ 1969.559460][T31712] netlink: 'syz.9.11353': attribute type 9 has an invalid length. [ 1969.846615][T31717] netlink: 88 bytes leftover after parsing attributes in process `syz.5.11357'. [ 1969.856352][T31717] tipc: Enabling of bearer rejected, already enabled [ 1970.081681][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1970.134599][T31713] loop7: detected capacity change from 0 to 4096 [ 1970.164798][T31713] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1970.479441][T31713] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 1971.127789][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1972.159004][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1972.323935][T31740] loop5: detected capacity change from 0 to 64 [ 1973.216761][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1973.975618][T22012] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1974.175251][T22012] usb 10-1: Using ep0 maxpacket: 32 [ 1974.190999][T22012] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1974.200106][T22012] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1974.209288][T22012] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1974.218758][T22012] usb 10-1: config 1 has no interface number 0 [ 1974.225267][T22012] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1974.236782][T22012] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1974.250778][T22012] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1974.255118][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1974.260698][T22012] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.414545][ T42] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1974.481551][T22012] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1974.626332][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 1974.640405][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1974.652145][ T42] usb 6-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 1974.661894][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.716508][T22012] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1974.782967][ T42] usb 6-1: config 0 descriptor?? [ 1975.183407][T22012] usb 10-1: USB disconnect, device number 3 [ 1975.192899][T22012] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1975.275624][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1975.373399][T31775] loop7: detected capacity change from 0 to 16 [ 1975.396715][T31775] erofs (device loop7): mounted with root inode @ nid 36. [ 1975.431905][T31775] erofs (device loop7): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 1975.489136][ T42] usb 6-1: USB disconnect, device number 37 [ 1976.346747][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1976.867757][T31786] loop5: detected capacity change from 0 to 2048 [ 1977.133625][T31792] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1977.369813][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1977.401225][T31786] syz.5.11388: attempt to access beyond end of device [ 1977.401225][T31786] loop5: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 1977.416690][T31786] NILFS (loop5): I/O error reading b-tree node block (ino=16, blocknr=15) [ 1977.425855][T31786] NILFS (loop5): error -5 truncating bmap (ino=16) [ 1977.603074][T31787] loop7: detected capacity change from 0 to 32768 [ 1977.688910][T31787] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1977.697507][T31787] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1977.741323][T31787] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 0 19, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 403 [ 1977.762812][T31787] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqobnN t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 1977.772623][T31787] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:31787 [syz.7.11389] gfs2_lookup_meta+0x101/0x280 [ 1977.783188][T31787] gfs2: fsid=syz:syz.0: I: n:0/19 t:4 f:0x00 d:0x00000000 s:0 p:0 [ 1977.791529][T31787] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1977.799549][T31787] gfs2: fsid=syz:syz.0: File system withdrawn [ 1977.806141][T31787] CPU: 0 UID: 0 PID: 31787 Comm: syz.7.11389 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(undef) [ 1977.806288][T31787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1977.806371][T31787] Call Trace: [ 1977.806425][T31787] [ 1977.806478][T31787] __dump_stack+0x26/0x30 [ 1977.806654][T31787] dump_stack_lvl+0x1df/0x270 [ 1977.806834][T31787] dump_stack+0x1e/0x25 [ 1977.806992][T31787] gfs2_withdraw+0x1d26/0x22e0 [ 1977.807280][T31787] gfs2_consist_inode_i+0x1b2/0x250 [ 1977.807443][T31787] inode_go_instantiate+0x12a7/0x1cf0 [ 1977.807700][T31787] ? __pfx_inode_go_instantiate+0x10/0x10 [ 1977.807901][T31787] gfs2_instantiate+0x24c/0x4b0 [ 1977.808063][T31787] gfs2_glock_wait+0x26a/0x3b0 [ 1977.808240][T31787] gfs2_glock_nq+0x28cf/0x34a0 [ 1977.808445][T31787] gfs2_lookupi+0x57e/0x990 [ 1977.808594][T31787] ? gfs2_lookup_meta+0x101/0x280 [ 1977.808770][T31787] gfs2_lookup_meta+0x101/0x280 [ 1977.808930][T31787] init_journal+0x1b5/0x3a30 [ 1977.809111][T31787] ? snprintf+0x1d2/0x210 [ 1977.809390][T31787] ? kmsan_get_metadata+0xfb/0x160 [ 1977.809595][T31787] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1977.809813][T31787] init_inodes+0x124/0x510 [ 1977.809975][T31787] gfs2_fill_super+0x384a/0x3f50 [ 1977.810129][T31787] ? init_locking+0xed/0x500 [ 1977.810302][T31787] get_tree_bdev_flags+0x6e3/0x920 [ 1977.810499][T31787] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1977.810638][T31787] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1977.810768][T31787] ? __pfx_gfs2_get_tree+0x10/0x10 [ 1977.810903][T31787] get_tree_bdev+0x38/0x50 [ 1977.811080][T31787] gfs2_get_tree+0x57/0x350 [ 1977.811220][T31787] ? __pfx_gfs2_get_tree+0x10/0x10 [ 1977.811352][T31787] vfs_get_tree+0xb0/0x5c0 [ 1977.811532][T31787] ? mount_capable+0x99/0x100 [ 1977.811693][T31787] do_new_mount+0x738/0x1610 [ 1977.811879][T31787] ? kmsan_get_metadata+0xfb/0x160 [ 1977.812061][T31787] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1977.812278][T31787] path_mount+0x6db/0x1e90 [ 1977.812461][T31787] ? user_path_at+0x32d/0x3d0 [ 1977.812634][T31787] __se_sys_mount+0x6eb/0x7d0 [ 1977.812818][T31787] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1977.813016][T31787] __x64_sys_mount+0xe4/0x150 [ 1977.813218][T31787] x64_sys_call+0xfa7/0x3db0 [ 1977.813391][T31787] do_syscall_64+0xd9/0x210 [ 1977.813534][T31787] ? irqentry_exit+0x16/0x60 [ 1977.813653][T31787] ? clear_bhb_loop+0x40/0x90 [ 1977.813820][T31787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1977.813970][T31787] RIP: 0033:0x7f1ac71900ca [ 1977.814077][T31787] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1977.814207][T31787] RSP: 002b:00007f1ac4ff5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1977.814337][T31787] RAX: ffffffffffffffda RBX: 00007f1ac4ff5ef0 RCX: 00007f1ac71900ca [ 1977.814440][T31787] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00007f1ac4ff5eb0 [ 1977.814537][T31787] RBP: 0000200000000180 R08: 00007f1ac4ff5ef0 R09: 0000000000000000 [ 1977.814631][T31787] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 1977.814720][T31787] R13: 00007f1ac4ff5eb0 R14: 00000000000125b0 R15: 0000200000000080 [ 1977.814844][T31787] [ 1978.126840][ C0] vkms_vblank_simulate: vblank timer overrun [ 1978.144005][T31787] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 1978.334927][T31799] loop8: detected capacity change from 0 to 256 [ 1978.405786][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1979.143611][T31799] FAT-fs (loop8): Directory bread(block 64) failed [ 1979.150974][T31799] FAT-fs (loop8): Directory bread(block 65) failed [ 1979.159313][T31799] FAT-fs (loop8): Directory bread(block 66) failed [ 1979.166269][T31799] FAT-fs (loop8): Directory bread(block 67) failed [ 1979.173255][T31799] FAT-fs (loop8): Directory bread(block 68) failed [ 1979.180417][T31799] FAT-fs (loop8): Directory bread(block 69) failed [ 1979.191295][T31799] FAT-fs (loop8): Directory bread(block 70) failed [ 1979.199228][T31799] FAT-fs (loop8): Directory bread(block 71) failed [ 1979.206371][T31799] FAT-fs (loop8): Directory bread(block 72) failed [ 1979.213176][T31799] FAT-fs (loop8): Directory bread(block 73) failed [ 1979.436618][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1980.191728][T31823] loop9: detected capacity change from 0 to 512 [ 1980.304170][T31823] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1980.356147][T31823] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1980.363004][T31823] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #3: comm syz.9.11405: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 1980.392319][T31823] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.11405: Bad quota inode: 3, type: 0 [ 1980.425792][T31823] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1980.441215][T31823] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1980.450478][T31823] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1980.480273][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1980.544673][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1980.676085][T31823] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 1980.729470][T31823] EXT4-fs warning (device loop9): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 1980.731602][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1980.762641][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1980.774235][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1980.784700][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1980.794895][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1980.806543][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1980.817123][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1980.829025][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.914919][ T24] usb 3-1: config 0 descriptor?? [ 1980.924242][T31822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1981.192146][T30496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1981.390836][ T5799] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1981.391411][T22012] usb 3-1: USB disconnect, device number 56 [ 1981.467911][ T24] kernel write not supported for file /media2 (pid: 24 comm: kworker/1:0) [ 1981.519325][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1982.386529][T31850] nbd: must specify at least one socket [ 1982.557589][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1983.084724][T20190] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1983.598316][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1983.883634][T31873] loop9: detected capacity change from 0 to 64 [ 1983.966392][T31876] netlink: 244 bytes leftover after parsing attributes in process `syz.5.11428'. [ 1983.976232][T31876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11428'. [ 1983.996568][T31873] syz.9.11429: attempt to access beyond end of device [ 1983.996568][T31873] loop9: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 1984.013619][T31873] Buffer I/O error on dev loop9, logical block 134217734, async page read [ 1984.635261][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1985.672837][T31904] loop5: detected capacity change from 0 to 128 [ 1985.686464][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1985.764529][T31904] EXT4-fs: Ignoring removed nobh option [ 1985.774789][T31898] loop7: detected capacity change from 0 to 4096 [ 1985.801385][T31904] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1985.887802][T31898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1985.894520][T31904] ext4 filesystem being mounted at /1224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1986.079640][T31898] fs-verity: sha512 using implementation "sha512-generic" [ 1986.087325][T31898] fs-verity (loop7, inode 16): Unsupported log_blocksize: 13 [ 1986.346331][T20200] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1986.349897][T17088] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1986.495260][T31917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11447'. [ 1986.718849][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1986.850681][T31924] loop7: detected capacity change from 0 to 512 [ 1987.083415][T31924] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1987.097085][T31924] ext4 filesystem being mounted at /926/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1987.110678][T31932] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1987.120014][T31932] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1987.130018][T31932] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1987.139793][T31932] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1987.446437][T22012] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1987.628779][T20200] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1987.639296][T22012] usb 3-1: Using ep0 maxpacket: 32 [ 1987.693202][T22012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1987.704699][T22012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1987.715031][T22012] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1987.724556][T22012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.772008][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1987.856842][T22012] usb 3-1: config 0 descriptor?? [ 1988.084505][T31944] loop9: detected capacity change from 0 to 512 [ 1988.122530][T31944] EXT4-fs: Invalid want_extra_isize 759 [ 1988.236265][T31947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11462'. [ 1988.255902][T31948] loop7: detected capacity change from 0 to 512 [ 1988.357215][T22012] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 1988.400502][T31948] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1988.416376][T31948] ext4 filesystem being mounted at /927/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1988.450354][T31950] loop8: detected capacity change from 0 to 512 [ 1988.524531][T22012] ft260 0003:0403:6030.0029: failed to retrieve chip version [ 1988.533998][T22012] ft260 0003:0403:6030.0029: probe with driver ft260 failed with error -71 [ 1988.558156][T31950] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.11463: casefold flag without casefold feature [ 1988.605786][T31950] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.11463: couldn't read orphan inode 15 (err -117) [ 1988.638789][T22012] usb 3-1: USB disconnect, device number 57 [ 1988.706254][T31950] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1988.809354][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1988.833235][T20200] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1989.055303][T23521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1989.342845][T31964] loop9: detected capacity change from 0 to 512 [ 1989.384696][T31964] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.11469: corrupted in-inode xattr: invalid ea_ino [ 1989.407088][T31964] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.11469: couldn't read orphan inode 15 (err -117) [ 1989.443623][T31964] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1989.595886][T30496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1989.844413][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1990.532484][T31988] loop8: detected capacity change from 0 to 512 [ 1990.558952][T31988] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1990.710112][T31988] EXT4-fs (loop8): 1 truncate cleaned up [ 1990.718898][T31988] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1990.891581][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1991.441088][T23521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1991.915983][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1992.958056][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1994.002222][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1994.187313][T32042] netlink: 'syz.2.11504': attribute type 2 has an invalid length. [ 1994.196303][T32042] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11504'. [ 1995.041360][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1996.079392][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1996.674688][T32092] loop5: detected capacity change from 0 to 8 [ 1996.816044][T32092] SQUASHFS error: Failed to read block 0x730: -5 [ 1996.822693][T32092] SQUASHFS error: Unable to read metadata cache entry [72e] [ 1997.122508][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1997.263096][T32100] loop9: detected capacity change from 0 to 16 [ 1997.309396][T32100] erofs (device loop9): mounted with root inode @ nid 36. [ 1997.739711][T32109] netlink: 79 bytes leftover after parsing attributes in process `syz.9.11536'. [ 1998.165460][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1998.317246][T32121] loop7: detected capacity change from 0 to 256 [ 1998.532740][T32121] FAT-fs (loop7): Directory bread(block 64) failed [ 1998.539903][T32121] FAT-fs (loop7): Directory bread(block 65) failed [ 1998.549922][T32121] FAT-fs (loop7): Directory bread(block 66) failed [ 1998.557799][T32121] FAT-fs (loop7): Directory bread(block 67) failed [ 1998.564924][T32121] FAT-fs (loop7): Directory bread(block 68) failed [ 1998.571698][T32121] FAT-fs (loop7): Directory bread(block 69) failed [ 1998.578827][T32121] FAT-fs (loop7): Directory bread(block 70) failed [ 1998.585774][T32121] FAT-fs (loop7): Directory bread(block 71) failed [ 1998.592685][T32121] FAT-fs (loop7): Directory bread(block 72) failed [ 1998.599678][T32121] FAT-fs (loop7): Directory bread(block 73) failed [ 1999.213489][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 1999.477403][T32141] loop8: detected capacity change from 0 to 512 [ 1999.522715][T32141] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 1999.530772][T32141] UDF-fs: Scanning with blocksize 512 failed [ 1999.595973][T32141] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 1999.605073][T32141] UDF-fs: Scanning with blocksize 1024 failed [ 1999.654732][T32141] UDF-fs: warning (device loop8): udf_load_vrs: No VRS found [ 1999.662513][T32141] UDF-fs: Scanning with blocksize 2048 failed [ 1999.731449][T32141] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1999.811332][T32141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2000.241464][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2001.275769][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2001.391021][T32169] loop8: detected capacity change from 0 to 4096 [ 2001.585454][T32177] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2001.909035][T32186] netlink: 60 bytes leftover after parsing attributes in process `syz.7.11572'. [ 2002.015550][T32183] netlink: 60 bytes leftover after parsing attributes in process `syz.7.11572'. [ 2002.330003][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2003.358202][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2004.280613][T32227] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2004.290479][T32227] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2004.302763][T32227] overlayfs: missing 'lowerdir' [ 2004.402758][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2004.598053][T32231] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11594'. [ 2004.659469][T32231] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11594'. [ 2005.292565][T32229] loop9: detected capacity change from 0 to 32768 [ 2005.470340][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2005.535024][T32234] loop7: detected capacity change from 0 to 32768 [ 2005.562839][T32229] bcachefs (dev-0): cannot online: device too small [ 2005.573898][T32229] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down [ 2005.596891][T32229] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 2005.660530][T32234] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 2005.786960][T20200] ocfs2: Unmounting device (7,7) on (node local) [ 2006.132985][T32244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11600'. [ 2006.142432][T32244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11600'. [ 2006.336621][T32229] bcachefs: bch2_fs_get_tree() error: device_size_too_small [ 2006.510114][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2007.356295][T28161] Bluetooth: hci1: command 0x0406 tx timeout [ 2007.536072][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2008.050190][T32269] rdma_op ffff888101faf180 conn xmit_rdma 0000000000000000 [ 2008.074676][T32268] loop9: detected capacity change from 0 to 512 [ 2008.105477][T32268] EXT4-fs: Ignoring removed bh option [ 2008.143975][T32268] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 2008.226081][T32268] EXT4-fs (loop9): 1 truncate cleaned up [ 2008.234610][T32268] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2008.555994][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2008.568992][T30496] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2008.736841][T32280] loop5: detected capacity change from 0 to 512 [ 2008.871235][T32280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2008.887302][T32280] ext4 filesystem being mounted at /1262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2008.971904][T32280] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 2009.099955][T17088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2009.604805][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2009.662943][T32296] loop5: detected capacity change from 0 to 512 [ 2009.770636][T32296] EXT4-fs (loop5): orphan cleanup on readonly fs [ 2009.777592][T32296] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.11621: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 2009.868238][T32305] usb usb8: usbfs: process 32305 (syz.2.11626) did not claim interface 0 before use [ 2009.915580][T32296] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.11621: Bad quota inode: 4, type: 1 [ 2009.941248][T32296] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2009.975282][T32296] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 2009.984662][T32296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2010.031678][T32296] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 2010.052004][T32296] EXT4-fs warning (device loop5): ext4_multi_mount_protect:329: MMP interval 2680 higher than expected, please wait. [ 2010.052004][T32296] [ 2010.390870][T32296] EXT4-fs warning (device loop5): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 2010.390870][T32296] [ 2010.631714][T17088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2010.649119][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2010.747634][T32314] loop8: detected capacity change from 0 to 512 [ 2010.814903][T32314] EXT4-fs: Ignoring removed bh option [ 2010.865148][T32314] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 2010.982211][T32314] EXT4-fs (loop8): 1 truncate cleaned up [ 2010.990332][T32314] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2011.112613][T32321] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11634'. [ 2011.337869][T32325] loop7: detected capacity change from 0 to 256 [ 2011.396436][T23521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2011.592546][T32325] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 2011.624210][T32328] loop9: detected capacity change from 0 to 512 [ 2011.690642][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2011.736314][T32328] EXT4-fs (loop9): too many log groups per flexible block group [ 2011.745256][T32328] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 2011.761155][T32328] EXT4-fs (loop9): mount failed [ 2012.252482][T32341] loop8: detected capacity change from 0 to 64 [ 2012.419085][T32341] hfs: small file entry [ 2012.728752][ C1] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2013.228223][T32356] loop8: detected capacity change from 0 to 1024 [ 2013.272737][T32362] loop5: detected capacity change from 0 to 64 [ 2013.334519][T32362] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 2013.756161][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2014.125605][ T4185] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2014.200516][T32376] loop8: detected capacity change from 0 to 1024 [ 2014.434397][T32382] loop7: detected capacity change from 0 to 1024 [ 2014.648805][T32382] ===================================================== [ 2014.656374][T32382] BUG: KMSAN: uninit-value in hfsplus_rename_cat+0x1173/0x17e0 [ 2014.664443][T32382] hfsplus_rename_cat+0x1173/0x17e0 [ 2014.669872][T32382] hfsplus_rename+0x1fc/0x2f0 [ 2014.674998][T32382] vfs_rename+0x1e8a/0x2460 [ 2014.679683][T32382] do_renameat2+0x175e/0x1d70 [ 2014.684808][T32382] __x64_sys_rename+0xd7/0x140 [ 2014.689771][T32382] x64_sys_call+0x3553/0x3db0 [ 2014.695145][T32382] do_syscall_64+0xd9/0x210 [ 2014.699851][T32382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.706211][T32382] [ 2014.708646][T32382] Uninit was stored to memory at: [ 2014.714194][T32382] hfsplus_rename_cat+0x10a9/0x17e0 [ 2014.719613][T32382] hfsplus_rename+0x1fc/0x2f0 [ 2014.727351][T32382] vfs_rename+0x1e8a/0x2460 [ 2014.732045][T32382] do_renameat2+0x175e/0x1d70 [ 2014.737997][T32382] __x64_sys_rename+0xd7/0x140 [ 2014.743111][T32382] x64_sys_call+0x3553/0x3db0 [ 2014.748345][T32382] do_syscall_64+0xd9/0x210 [ 2014.753047][T32382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.759387][T32382] [ 2014.761819][T32382] Uninit was stored to memory at: [ 2014.767310][T32382] hfsplus_create_cat+0x18fb/0x1910 [ 2014.772731][T32382] hfsplus_mknod+0x208/0x560 [ 2014.777774][T32382] hfsplus_mkdir+0x5a/0x80 [ 2014.782417][T32382] vfs_mkdir+0x4ea/0x850 [ 2014.787155][T32382] do_mkdirat+0x41a/0xf30 [ 2014.791707][T32382] __x64_sys_mkdir+0x9a/0xf0 [ 2014.797158][T32382] x64_sys_call+0x29b6/0x3db0 [ 2014.802080][T32382] do_syscall_64+0xd9/0x210 [ 2014.807047][T32382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.813149][T32382] [ 2014.815824][T32382] Uninit was stored to memory at: [ 2014.821124][T32382] hfsplus_create_cat+0x18fb/0x1910 [ 2014.829476][T32382] hfsplus_fill_super+0x212e/0x2740 [ 2014.835861][T32382] get_tree_bdev_flags+0x6e3/0x920 [ 2014.841249][T32382] get_tree_bdev+0x38/0x50 [ 2014.846098][T32382] hfsplus_get_tree+0x35/0x40 [ 2014.850980][T32382] vfs_get_tree+0xb0/0x5c0 [ 2014.855871][T32382] do_new_mount+0x738/0x1610 [ 2014.860693][T32382] path_mount+0x6db/0x1e90 [ 2014.865531][T32382] __se_sys_mount+0x6eb/0x7d0 [ 2014.870445][T32382] __x64_sys_mount+0xe4/0x150 [ 2014.875526][T32382] x64_sys_call+0xfa7/0x3db0 [ 2014.880350][T32382] do_syscall_64+0xd9/0x210 [ 2014.885227][T32382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.891325][T32382] [ 2014.893941][T32382] Uninit was created at: [ 2014.898462][T32382] __alloc_frozen_pages_noprof+0x689/0xf00 [ 2014.904554][ C0] tipc: Duplicate ffffffff using eth(aa:aa:aa:aa:aa:32) seen on [ 2014.913718][T32382] alloc_pages_mpol+0x328/0x860 [ 2014.914024][T32388] netlink: 'syz.2.11664': attribute type 1 has an invalid length. [ 2014.914137][T32382] alloc_frozen_pages_noprof+0xf7/0x200 [ 2014.936302][T32382] allocate_slab+0x24d/0x1220 [ 2014.941209][T32382] ___slab_alloc+0xfec/0x3480 [ 2014.946277][T32382] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 2014.952301][T32382] hfsplus_alloc_inode+0x5a/0xd0 [ 2014.958164][T32382] alloc_inode+0x8a/0x4a0 [ 2014.962731][T32382] iget_locked+0x239/0x12d0 [ 2014.967624][T32382] hfsplus_iget+0x5c/0xb80 [ 2014.972228][T32382] hfsplus_btree_open+0x134/0x1d00 [ 2014.977832][T32382] hfsplus_fill_super+0x1161/0x2740 [ 2014.983256][T32382] get_tree_bdev_flags+0x6e3/0x920 [ 2014.988860][T32382] get_tree_bdev+0x38/0x50 [ 2014.993509][T32382] hfsplus_get_tree+0x35/0x40 [ 2014.998561][T32382] vfs_get_tree+0xb0/0x5c0 [ 2015.003221][T32382] do_new_mount+0x738/0x1610 [ 2015.008255][T32382] path_mount+0x6db/0x1e90 [ 2015.012909][T32382] __se_sys_mount+0x6eb/0x7d0 [ 2015.018026][T32382] __x64_sys_mount+0xe4/0x150 [ 2015.022961][T32382] x64_sys_call+0xfa7/0x3db0 [ 2015.030607][T32382] do_syscall_64+0xd9/0x210 [ 2015.036436][T32382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.042554][T32382] [ 2015.045202][T32382] CPU: 1 UID: 0 PID: 32382 Comm: syz.7.11661 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(undef) [ 2015.056179][T32382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2015.066693][T32382] ===================================================== [ 2015.073988][T32382] Disabling lock debugging due to kernel taint [ 2015.080298][T32382] Kernel panic - not syncing: kmsan.panic set ... [ 2015.086897][T32382] CPU: 1 UID: 0 PID: 32382 Comm: syz.7.11661 Tainted: G B 6.16.0-rc3-syzkaller #0 PREEMPT(undef) [ 2015.099212][T32382] Tainted: [B]=BAD_PAGE [ 2015.103492][T32382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2015.113716][T32382] Call Trace: [ 2015.117126][T32382] [ 2015.120172][T32382] __dump_stack+0x26/0x30 [ 2015.124715][T32382] dump_stack_lvl+0x53/0x270 [ 2015.129531][T32382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2015.135587][T32382] dump_stack+0x1e/0x25 [ 2015.139947][T32382] panic+0x4bd/0xd50 [ 2015.144097][T32382] kmsan_report+0x31c/0x320 [ 2015.148829][T32382] ? __msan_memcpy+0x108/0x1c0 [ 2015.153798][T32382] ? __msan_warning+0x1b/0x30 [ 2015.158688][T32382] ? hfsplus_rename_cat+0x1173/0x17e0 [ 2015.164286][T32382] ? hfsplus_rename+0x1fc/0x2f0 [ 2015.169344][T32382] ? vfs_rename+0x1e8a/0x2460 [ 2015.174189][T32382] ? do_renameat2+0x175e/0x1d70 [ 2015.179204][T32382] ? __x64_sys_rename+0xd7/0x140 [ 2015.184310][T32382] ? x64_sys_call+0x3553/0x3db0 [ 2015.189379][T32382] ? do_syscall_64+0xd9/0x210 [ 2015.194234][T32382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.200510][T32382] ? kmsan_get_metadata+0xfb/0x160 [ 2015.205864][T32382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2015.211933][T32382] ? hfsplus_bnode_dump+0x50a/0x560 [ 2015.217371][T32382] ? kmsan_get_metadata+0xfb/0x160 [ 2015.222718][T32382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2015.228782][T32382] ? hfsplus_brec_remove+0x92f/0xa60 [ 2015.234349][T32382] ? kmsan_get_metadata+0xfb/0x160 [ 2015.239709][T32382] __msan_warning+0x1b/0x30 [ 2015.244433][T32382] hfsplus_rename_cat+0x1173/0x17e0 [ 2015.249884][T32382] ? kfree+0x121/0xec0 [ 2015.254115][T32382] ? filter_irq_stacks+0x49/0x190 [ 2015.259343][T32382] ? stack_depot_save_flags+0x35/0x7b0 [ 2015.265004][T32382] ? kmsan_get_metadata+0xfb/0x160 [ 2015.270349][T32382] ? kmsan_get_metadata+0xfb/0x160 [ 2015.275688][T32382] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2015.282242][T32382] ? kmsan_get_metadata+0xfb/0x160 [ 2015.287578][T32382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2015.293612][T32382] ? kmsan_get_metadata+0xfb/0x160 [ 2015.298952][T32382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2015.305025][T32382] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2015.311593][T32382] hfsplus_rename+0x1fc/0x2f0 [ 2015.316486][T32382] ? __pfx_hfsplus_rename+0x10/0x10 [ 2015.321911][T32382] vfs_rename+0x1e8a/0x2460 [ 2015.326587][T32382] ? end_current_label_crit_section+0x112/0x290 [ 2015.333098][T32382] do_renameat2+0x175e/0x1d70 [ 2015.338020][T32382] __x64_sys_rename+0xd7/0x140 [ 2015.342970][T32382] x64_sys_call+0x3553/0x3db0 [ 2015.347876][T32382] do_syscall_64+0xd9/0x210 [ 2015.352561][T32382] ? irqentry_exit+0x16/0x60 [ 2015.357315][T32382] ? clear_bhb_loop+0x40/0x90 [ 2015.362186][T32382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2015.368264][T32382] RIP: 0033:0x7f1ac718e929 [ 2015.372824][T32382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2015.392644][T32382] RSP: 002b:00007f1ac4ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2015.401257][T32382] RAX: ffffffffffffffda RBX: 00007f1ac73b5fa0 RCX: 00007f1ac718e929 [ 2015.409391][T32382] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000200000000000 [ 2015.417514][T32382] RBP: 00007f1ac7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 2015.425638][T32382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2015.433752][T32382] R13: 0000000000000000 R14: 00007f1ac73b5fa0 R15: 00007ffd29b00048 [ 2015.441927][T32382] [ 2015.445338][T32382] Kernel Offset: disabled [ 2015.449735][T32382] Rebooting in 86400 seconds..