last executing test programs: 6.323588648s ago: executing program 3 (id=609): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 5.942245541s ago: executing program 3 (id=614): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x121400) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f00000001c0)=[{0x4, 0x1010, 0x2, &(0x7f0000000200)="0369"}, {0x9cde, 0x1001, 0x0, 0x0}, {0x7fff, 0x4a20, 0x0, 0x0}], 0x3}) 4.168704367s ago: executing program 3 (id=625): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000009c0)="3c288d8b3b7d97f8c475ed07c88ca0836243c44dddf9e0f57bfa33a44b9d48f76902f42fc722f03e6dd8ce26c87191adc51558ec6f6c4d9098", 0x39}], 0x1}}], 0x2, 0x20004090) 3.891004015s ago: executing program 3 (id=629): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000011}) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000002c0)={0xefa, 0x7, 0x80, 0x40e0, 0xc}) 3.76574654s ago: executing program 4 (id=632): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000010ac0)='./bus\x00', 0x18b341, 0x84) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000010b00)=0xfffffff9) 3.551061693s ago: executing program 3 (id=635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.529505106s ago: executing program 2 (id=636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1c, r2, 0x901, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 3.367522676s ago: executing program 0 (id=637): poll(0x0, 0x0, 0xd4) landlock_restrict_self(0xffffffffffffffff, 0xc) r0 = landlock_create_ruleset(&(0x7f0000001540)={0x40, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) 3.228235187s ago: executing program 2 (id=638): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x4}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x40001, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 2.849425581s ago: executing program 0 (id=639): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 2.848666274s ago: executing program 2 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./security\x00', &(0x7f00000001c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 2.484554236s ago: executing program 1 (id=641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.468166892s ago: executing program 0 (id=642): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1,0x7f0000800000,0x-', 0x14) 2.405235933s ago: executing program 1 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/trace\x00', 0x2, 0x8) write(r0, 0x0, 0x0) 2.350551855s ago: executing program 2 (id=644): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200308c0000280012800b0001006d61637365630000180002800c0004000400000100c2800005000d000100000008000500", @ANYRES32=r2], 0x50}}, 0x0) 2.285648737s ago: executing program 4 (id=645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425", @ANYRES64], 0x4c}}, 0x0) 1.799698034s ago: executing program 1 (id=646): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.799513542s ago: executing program 0 (id=647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3, 0x0, 0x7ff}]}) 1.636339736s ago: executing program 2 (id=648): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000340)='./file0\x00', 0x300401a, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550df33dd47ded539aef131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x60f6, &(0x7f0000002580)="$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") chdir(&(0x7f0000008680)='./file0\x00') creat(&(0x7f00000086c0)='./file0\x00', 0x104) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000008740)='memory.events\x00', 0x275a, 0x0) 1.358817245s ago: executing program 1 (id=649): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2, &(0x7f0000000a00), 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0xfe53, 0xfe53, 0x4) 1.34836693s ago: executing program 0 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffe01}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4024081}, 0x8010) 1.131334088s ago: executing program 3 (id=651): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.100961882s ago: executing program 0 (id=652): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 664.299449ms ago: executing program 1 (id=653): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x5c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x2, 0x0, 0x0, 0x400, {[@window={0x3, 0x3, 0x4b}, @generic={0xfe, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x2, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x1a, [0x1, 0xfffffffe, 0x3, 0x9, 0x1, 0x7]}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 562.811595ms ago: executing program 4 (id=654): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x1) 440.235158ms ago: executing program 4 (id=655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 344.319774ms ago: executing program 4 (id=656): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./tracing\x00', &(0x7f0000000a00)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000a80)='e:my_read_msr1 ms', 0x11) 135.242929ms ago: executing program 1 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 262.249µs ago: executing program 4 (id=658): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x3) write$uinput_user_dev(r0, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x69, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0xffffff58, 0x48d, 0x7ff, 0x4, 0x4007f, 0xfffffffe, 0x6, 0x4], [0xfff, 0x3, 0x4, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0xa, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x42, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x6, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x6, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0xcfe4, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x5, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffb, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x7, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x9, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x2, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x9, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x7f, 0x9, 0x9, 0x4, 0x463f, 0x3, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) 0s ago: executing program 2 (id=659): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) kernel console output (not intermixed with test programs): ed cc 0x0c03 length: 249 > 1 [ 95.217775][ T5657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.221894][ T5654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.227255][ T5654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.227281][ T5657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.237412][ T5653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.238236][ T5654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.238779][ T5654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.241622][ T5654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.244885][ T5654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.247283][ T5654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.251787][ T5654] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.253663][ T5654] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.254459][ T5653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.259516][ T5654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.264660][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.269753][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.277009][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.277436][ T5649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.279984][ T56] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.285418][ T56] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.291700][ T56] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.298390][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.300911][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.525723][ T5640] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.527707][ T5641] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 96.541709][ T5639] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 96.547930][ T5640] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.566436][ T5640] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.567296][ T5642] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 96.588953][ T5638] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 96.942502][ T5640] infiniband rxe0: set active [ 96.943254][ T5640] infiniband rxe0: added rxe_eth0 [ 97.006946][ T5640] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 97.006987][ T5640] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 97.007035][ T5640] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 97.064602][ T32] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.134407][ T5640] RDS/IB: rxe0: added [ 97.134756][ T5640] smc: adding ib device rxe0 with port count 1 [ 97.139231][ T5640] smc: ib device rxe0 port 1 has no pnetid [ 97.197394][ T32] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.227113][ T5640] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.320124][ T5643] Bluetooth: hci0: command tx timeout [ 97.400399][ T5643] Bluetooth: hci2: command tx timeout [ 97.400444][ T4953] Bluetooth: hci1: command tx timeout [ 97.400586][ T5643] Bluetooth: hci3: command tx timeout [ 97.400733][ T5652] Bluetooth: hci4: command tx timeout [ 97.407516][ T917] cfg80211: failed to load regulatory.db [ 97.594949][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.659504][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.784760][ T5640] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.186195][ T5640] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.346557][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.346661][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.346820][ T5638] bridge_slave_0: entered allmulticast mode [ 98.356167][ T5638] bridge_slave_0: entered promiscuous mode [ 98.422397][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.422697][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.422847][ T5641] bridge_slave_0: entered allmulticast mode [ 98.425336][ T5641] bridge_slave_0: entered promiscuous mode [ 98.431837][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.432136][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.432485][ T5638] bridge_slave_1: entered allmulticast mode [ 98.441051][ T5638] bridge_slave_1: entered promiscuous mode [ 98.510306][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.510380][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.510474][ T5639] bridge_slave_0: entered allmulticast mode [ 98.512196][ T5639] bridge_slave_0: entered promiscuous mode [ 98.521273][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.521760][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.522113][ T5641] bridge_slave_1: entered allmulticast mode [ 98.527055][ T5641] bridge_slave_1: entered promiscuous mode [ 98.590188][ T5640] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.590951][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.591060][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.591197][ T5639] bridge_slave_1: entered allmulticast mode [ 98.593413][ T5639] bridge_slave_1: entered promiscuous mode [ 98.655072][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.655366][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.656409][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.656548][ T5642] bridge_slave_0: entered allmulticast mode [ 98.658550][ T5642] bridge_slave_0: entered promiscuous mode [ 98.720518][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.725186][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.725436][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.725558][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.725701][ T5642] bridge_slave_1: entered allmulticast mode [ 98.728121][ T5642] bridge_slave_1: entered promiscuous mode [ 98.748579][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.762979][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.825890][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.921269][ T5641] team0: Port device team_slave_0 added [ 98.923920][ T5638] team0: Port device team_slave_0 added [ 98.928246][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.968452][ T5641] team0: Port device team_slave_1 added [ 98.978100][ T5638] team0: Port device team_slave_1 added [ 98.987119][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.000512][ T5639] team0: Port device team_slave_0 added [ 99.054573][ T5639] team0: Port device team_slave_1 added [ 99.099128][ T5642] team0: Port device team_slave_0 added [ 99.123561][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.123578][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.123608][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.125566][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.125579][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.125601][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.128191][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.128201][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.128220][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.141284][ T5642] team0: Port device team_slave_1 added [ 99.143623][ T5640] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.274775][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.274791][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.274819][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.336470][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.336490][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.336522][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.337829][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.337843][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.337876][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.350640][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.350697][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.350777][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.420449][ T5652] Bluetooth: hci0: command tx timeout [ 99.479736][ T5643] Bluetooth: hci1: command tx timeout [ 99.479772][ T5643] Bluetooth: hci2: command tx timeout [ 99.479841][ T56] Bluetooth: hci3: command tx timeout [ 99.479854][ T5652] Bluetooth: hci4: command tx timeout [ 99.508584][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.508617][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.508675][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.681817][ T5641] hsr_slave_0: entered promiscuous mode [ 99.683526][ T5641] hsr_slave_1: entered promiscuous mode [ 99.704400][ T5639] hsr_slave_0: entered promiscuous mode [ 99.705730][ T5639] hsr_slave_1: entered promiscuous mode [ 99.706714][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 99.706801][ T5639] Cannot create hsr debugfs directory [ 99.740928][ T5638] hsr_slave_0: entered promiscuous mode [ 99.742168][ T5638] hsr_slave_1: entered promiscuous mode [ 99.743002][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 99.743022][ T5638] Cannot create hsr debugfs directory [ 99.851417][ T5642] hsr_slave_0: entered promiscuous mode [ 99.852205][ T5642] hsr_slave_1: entered promiscuous mode [ 99.852773][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 99.852794][ T5642] Cannot create hsr debugfs directory [ 100.442315][ T5641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.466023][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.466798][ T5641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.471946][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.498857][ T5641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.511117][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.514241][ T5641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.536960][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.693321][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.693550][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.694048][ T5640] bridge_slave_0: entered allmulticast mode [ 100.695361][ T5640] bridge_slave_0: entered promiscuous mode [ 100.697876][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.697979][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.698334][ T5640] bridge_slave_1: entered allmulticast mode [ 100.701265][ T5640] bridge_slave_1: entered promiscuous mode [ 100.709140][ T5638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.741942][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.744916][ T5638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.762637][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.807035][ T5638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.814073][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.816346][ T5638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.829077][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.842231][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.868958][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.915804][ T5640] team0: Port device team_slave_0 added [ 100.936343][ T5640] team0: Port device team_slave_1 added [ 100.966604][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.966621][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.966645][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.036027][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.036043][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.036066][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.096053][ T5642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.105589][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.137770][ T5642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.147069][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.148636][ T5642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.157679][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.186779][ T5642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.195850][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.225840][ T5640] hsr_slave_0: entered promiscuous mode [ 101.226902][ T5640] hsr_slave_1: entered promiscuous mode [ 101.227773][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 101.227796][ T5640] Cannot create hsr debugfs directory [ 101.403769][ T5639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.407696][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.434725][ T5639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.438151][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.478060][ T5639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.488045][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.489801][ T5652] Bluetooth: hci0: command tx timeout [ 101.526176][ T5639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.538282][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.559461][ T5652] Bluetooth: hci3: command tx timeout [ 101.559496][ T5652] Bluetooth: hci1: command tx timeout [ 101.575882][ T5652] Bluetooth: hci4: command tx timeout [ 101.575918][ T5652] Bluetooth: hci2: command tx timeout [ 101.600558][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.674060][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.721430][ T2225] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.721563][ T2225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.745211][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.748191][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.756795][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.775079][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.778206][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.779267][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.802399][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.806909][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.807000][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.817632][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.842732][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.917281][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.937784][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.981488][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.981594][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.983422][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.983492][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.988409][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.053930][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.054006][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.101428][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.101538][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.213045][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.333219][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.376304][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.408098][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.408223][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.474211][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.474362][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.551779][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.585630][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.585753][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.632173][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.632295][ T3323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.502171][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.559702][ T56] Bluetooth: hci0: command tx timeout [ 103.612316][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.639786][ T56] Bluetooth: hci2: command tx timeout [ 103.639848][ T5643] Bluetooth: hci1: command tx timeout [ 103.639885][ T56] Bluetooth: hci3: command tx timeout [ 103.639896][ T5652] Bluetooth: hci4: command tx timeout [ 103.836909][ T5641] veth0_vlan: entered promiscuous mode [ 103.886590][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.937348][ T5641] veth1_vlan: entered promiscuous mode [ 104.165776][ T5641] veth0_macvtap: entered promiscuous mode [ 104.191941][ T5642] veth0_vlan: entered promiscuous mode [ 104.227949][ T5641] veth1_macvtap: entered promiscuous mode [ 104.267228][ T5642] veth1_vlan: entered promiscuous mode [ 104.358712][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.371365][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.400866][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.461148][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.503451][ T5642] veth0_macvtap: entered promiscuous mode [ 104.519670][ T3323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.565669][ T5642] veth1_macvtap: entered promiscuous mode [ 104.613009][ T5638] veth0_vlan: entered promiscuous mode [ 104.647942][ T5639] veth0_vlan: entered promiscuous mode [ 104.680856][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.682752][ T5639] veth1_vlan: entered promiscuous mode [ 104.685851][ T5638] veth1_vlan: entered promiscuous mode [ 104.713171][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.713204][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.741379][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.762065][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.766543][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.766602][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.823587][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.823612][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.863146][ T5640] veth0_vlan: entered promiscuous mode [ 104.869765][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.899489][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.900684][ T88] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.900762][ T88] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.978211][ T5640] veth1_vlan: entered promiscuous mode [ 105.056115][ T5638] veth0_macvtap: entered promiscuous mode [ 105.068726][ T5638] veth1_macvtap: entered promiscuous mode [ 105.100599][ T5639] veth0_macvtap: entered promiscuous mode [ 105.118456][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.118479][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.151030][ T5641] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.157896][ T5639] veth1_macvtap: entered promiscuous mode [ 105.215810][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.215834][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.252306][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.302105][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.348706][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.349591][ T88] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.351836][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.385713][ T5640] veth0_macvtap: entered promiscuous mode [ 105.432015][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.446007][ T5640] veth1_macvtap: entered promiscuous mode [ 105.549937][ T88] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.551911][ T88] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.551959][ T88] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.552000][ T88] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.552039][ T88] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.552079][ T88] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.636038][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.676631][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.838733][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.838759][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.993326][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.993360][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.011702][ T1018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.011848][ T1018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.011948][ T1018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.012094][ T1018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.236031][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.236056][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.422611][ T2225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.422638][ T2225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.555963][ T2225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.555989][ T2225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.691184][ T5878] loop4: detected capacity change from 0 to 512 [ 106.699108][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.699131][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.729070][ T5878] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.750740][ T5878] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 106.753026][ T5878] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 107.307046][ T5874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.482179][ T5871] Set syz1 is full, maxelem 6117 reached [ 107.524204][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.871648][ T2225] Bluetooth: hci5: Frame reassembly failed (-84) [ 108.339143][ T5885] loop4: detected capacity change from 0 to 32768 [ 108.365774][ T5885] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15 (5885) [ 108.475230][ T5885] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 108.475274][ T5885] BTRFS info (device loop4): using blake2b checksum algorithm [ 108.658662][ T5885] BTRFS info (device loop4): enabling ssd optimizations [ 108.658709][ T5885] BTRFS info (device loop4): turning on async discard [ 108.658730][ T5885] BTRFS info (device loop4): enabling free space tree [ 108.658789][ T5885] BTRFS info (device loop4): use zstd compression, level 3 [ 108.801147][ T5899] loop0: detected capacity change from 0 to 32768 [ 108.816402][ T5899] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5899) [ 108.871561][ T5933] netlink: 56 bytes leftover after parsing attributes in process `syz.3.21'. [ 108.914668][ T5899] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.914728][ T5899] BTRFS info (device loop0): using crc32c checksum algorithm [ 109.022756][ T5899] BTRFS info (device loop0): enabling ssd optimizations [ 109.022787][ T5899] BTRFS info (device loop0): turning on flush-on-commit [ 109.022806][ T5899] BTRFS info (device loop0): enabling free space tree [ 109.022822][ T5899] BTRFS info (device loop0): enabling auto defrag [ 109.022842][ T5899] BTRFS info (device loop0): use lzo compression, level 1 [ 109.022864][ T5899] BTRFS info (device loop0): max_inline set to 4096 [ 109.113151][ T5638] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 109.155945][ T5626] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.335498][ T5626] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 109.352270][ T5626] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 109.352300][ T5626] usb 2-1: config 1 has no interface number 0 [ 109.355130][ T5626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.355157][ T5626] usb 2-1: Product: syz [ 109.355173][ T5626] usb 2-1: Manufacturer: syz [ 109.355283][ T5626] usb 2-1: SerialNumber: syz [ 109.480955][ T5626] usb 2-1: skipping empty audio interface (v1) [ 109.651990][ T5639] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.776097][ T5626] snd-usb-audio 2-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 109.806881][ T5626] usb 2-1: USB disconnect, device number 2 [ 109.880385][ T5652] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 109.951813][ T5655] udevd[5655]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.590474][ T5979] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 110.812792][ T5987] loop1: detected capacity change from 0 to 512 [ 110.907906][ T5987] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 110.908120][ T5987] System zones: 0-2, 18-18, 34-35 [ 111.018205][ T5987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.018358][ T5987] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.163770][ T5641] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.262091][ T5995] loop3: detected capacity change from 0 to 4096 [ 111.263226][ T5995] EXT4-fs: Ignoring removed nobh option [ 111.263304][ T5995] EXT4-fs: Ignoring removed bh option [ 111.317078][ T5995] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.387376][ T5995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.478277][ T5985] loop0: detected capacity change from 0 to 32768 [ 111.555602][ T5983] orangefs_mount: mount request failed with -4 [ 111.593248][ T5985] ======================================================= [ 111.593248][ T5985] WARNING: The mand mount option has been deprecated and [ 111.593248][ T5985] and is ignored by this kernel. Remove the mand [ 111.593248][ T5985] option from the mount to silence this warning. [ 111.593248][ T5985] ======================================================= [ 112.035729][ T5995] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 112.121891][ T6017] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.267146][ T5640] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.267331][ T6013] loop2: detected capacity change from 0 to 32768 [ 112.377883][ T6019] loop1: detected capacity change from 0 to 2048 [ 112.444554][ T6019] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 112.485749][ T6019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.646952][ T6013] JBD2: Ignoring recovery information on journal [ 112.660087][ T6013] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 112.660369][ T6013] JBD2: bad block at offset 32 [ 112.769856][ T6013] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 112.998267][ T6039] loop0: detected capacity change from 0 to 256 [ 113.018504][ T6039] vfat: Bad value for 'utf8' [ 113.101557][ T5642] ocfs2: Unmounting device (7,2) on (node local) [ 113.105981][ T6039] ecryptfs: Bad value for 'ecryptfs_key_bytes' [ 113.543292][ T6058] loop0: detected capacity change from 0 to 1024 [ 113.637803][ T6058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.696361][ T6058] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.66: missing EA_INODE flag [ 113.718660][ T6058] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.66: error while reading EA inode 11 err=-117 [ 113.727159][ T6058] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 113.810583][ T6066] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 113.943294][ T6071] netlink: 'syz.3.69': attribute type 2 has an invalid length. [ 114.035376][ T5639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.292250][ T6077] ip_tables: iptables: counters copy to user failed while replacing table [ 114.483387][ T6079] xt_hashlimit: size too large, truncated to 1048576 [ 114.614984][ T6084] loop0: detected capacity change from 0 to 512 [ 114.649745][ T6084] EXT4-fs: Ignoring removed i_version option [ 114.702305][ T6084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.732823][ T6084] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem [ 114.733016][ T6084] loop0: lost filesystem error report for type 5 error -117 [ 114.739392][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 114.739420][ C0] EXT4-fs (loop0): initial error at time 1793291010: ext4_process_orphan:346 [ 114.739446][ C0] EXT4-fs (loop0): last error at time 1793291010: ext4_process_orphan:346 [ 114.810268][ T6084] EXT4-fs (loop0): Remounting filesystem read-only [ 114.817483][ T6084] EXT4-fs (loop0): 2 truncates cleaned up [ 114.846063][ T6084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.956328][ T6070] loop4: detected capacity change from 0 to 32768 [ 114.998486][ T6070] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 114.998527][ T6070] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 115.106303][ T5639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.143877][ T6070] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 115.188145][ T5645] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 115.188172][ T5645] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 115.562496][ T5645] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 374ms [ 115.586621][ T5645] gfs2: fsid=syz:syz.0: jid=0: Done [ 115.587631][ T6070] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 115.836274][ T6070] gfs2: fsid=syz:syz.0: Corruption found in quota_change0 file: duplicate identifier in slot 57405 [ 115.856165][ T6070] gfs2: fsid=syz:syz.0: found 1 quota changes [ 115.949256][ T6111] loop2: detected capacity change from 0 to 256 [ 116.633210][ T6122] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.924138][ T6110] loop0: detected capacity change from 0 to 40427 [ 116.981266][ T6110] F2FS-fs (loop0): build fault injection rate: 14 [ 116.981296][ T6110] F2FS-fs (loop0): build fault injection type: 0xe4 [ 116.996266][ T6110] F2FS-fs (loop0): invalid crc value [ 117.227161][ T6138] loop4: detected capacity change from 0 to 512 [ 117.299714][ T6138] EXT4-fs (loop4): 1 truncate cleaned up [ 117.307541][ T6138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.509539][ T6110] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 117.540856][ T6110] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.547371][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.653146][ T6150] Bluetooth: MGMT ver 1.23 [ 117.653200][ T6150] Bluetooth: hci0: unsupported parameter 5135 [ 117.653219][ T6150] Bluetooth: hci0: unsupported parameter 8192 [ 117.653239][ T6150] Bluetooth: hci0: unsupported parameter 5135 [ 117.653255][ T6150] Bluetooth: hci0: unsupported parameter 8192 [ 117.902494][ T5639] syz-executor: attempt to access beyond end of device [ 117.902494][ T5639] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.929763][ T5639] CPU: 1 UID: 0 PID: 5639 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 117.929797][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.929826][ T5639] Call Trace: [ 117.929844][ T5639] [ 117.929854][ T5639] dump_stack_lvl+0xe8/0x150 [ 117.929906][ T5639] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 117.929949][ T5639] f2fs_write_end_bio+0x118e/0x15d0 [ 117.929996][ T5639] __submit_merged_bio+0x258/0x6a0 [ 117.930031][ T5639] ? rcu_is_watching+0x16/0xb0 [ 117.930075][ T5639] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 117.930114][ T5639] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 117.930167][ T5639] f2fs_write_data_pages+0x2a13/0x36e0 [ 117.930217][ T5639] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 117.930234][ T5639] ? is_bpf_text_address+0x26/0x2b0 [ 117.930264][ T5639] ? arch_stack_walk+0xfb/0x150 [ 117.930312][ T5639] ? add_lock_to_list+0xc7/0x100 [ 117.930342][ T5639] ? lockdep_unlock+0x5c/0xd0 [ 117.930361][ T5639] ? __lock_acquire+0x1511/0x2de0 [ 117.930407][ T5639] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.930435][ T5639] ? do_raw_spin_unlock+0xf5/0x200 [ 117.930455][ T5639] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 117.930476][ T5639] do_writepages+0x338/0x560 [ 117.930506][ T5639] ? do_raw_spin_unlock+0xf5/0x200 [ 117.930527][ T5639] filemap_fdatawrite+0x1e9/0x2f0 [ 117.930551][ T5639] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 117.930610][ T5639] ? do_raw_spin_unlock+0xf5/0x200 [ 117.930632][ T5639] f2fs_sync_dirty_inodes+0x471/0x970 [ 117.930669][ T5639] f2fs_write_checkpoint+0x867/0x24d0 [ 117.930725][ T5639] kill_f2fs_super+0x2df/0x700 [ 117.930754][ T5639] ? rcu_do_enqueue+0x616/0x870 [ 117.930778][ T5639] ? lockdep_hardirqs_on+0x7b/0x110 [ 117.930801][ T5639] ? __pfx_kill_f2fs_super+0x10/0x10 [ 117.930849][ T5639] ? __pfx_call_rcu+0x10/0x10 [ 117.930872][ T5639] ? shrinker_free+0x2a7/0x3b0 [ 117.930896][ T5639] deactivate_locked_super+0xbe/0x110 [ 117.930923][ T5639] cleanup_mnt+0x204/0x2a0 [ 117.930956][ T5639] task_work_run+0x1d9/0x260 [ 117.930985][ T5639] ? __pfx_task_work_run+0x10/0x10 [ 117.931022][ T5639] exit_to_user_mode_loop+0x204/0x770 [ 117.931051][ T5639] ? rcu_is_watching+0x16/0xb0 [ 117.931087][ T5639] do_syscall_64+0x328/0x520 [ 117.931113][ T5639] ? trace_irq_disable+0x3b/0x140 [ 117.931140][ T5639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.931161][ T5639] ? clear_bhb_loop+0x70/0xc0 [ 117.931187][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.931209][ T5639] RIP: 0033:0x7f2accba0797 [ 117.931245][ T5639] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 117.931261][ T5639] RSP: 002b:00007fff3f8a7098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 117.931283][ T5639] RAX: 0000000000000000 RBX: 00007f2accc35f63 RCX: 00007f2accba0797 [ 117.931297][ T5639] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3f8a7150 [ 117.931310][ T5639] RBP: 00007fff3f8a7150 R08: 00007fff3f8a8150 R09: 00000000ffffffff [ 117.931323][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3f8a81e0 [ 117.931335][ T5639] R13: 00007f2accc35f63 R14: 000000000001cbfd R15: 00007fff3f8a8220 [ 117.931367][ T5639] [ 117.956237][ T5639] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 118.171076][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.399537][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 118.403244][ T32] usb 5-1: New USB device found: idVendor=056a, idProduct=5200, bcdDevice=0.00 [ 118.409774][ T32] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.409813][ T32] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.409859][ T32] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.409891][ T32] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.409931][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.478036][ T32] usb 5-1: config 0 descriptor?? [ 118.992543][ T32] wacom 0003:056A:5200.0001: unknown main item tag 0x3 [ 118.992652][ T32] wacom 0003:056A:5200.0001: unknown main item tag 0x6 [ 118.992687][ T32] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 118.992718][ T32] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 118.992759][ T32] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 118.992791][ T32] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 118.992823][ T32] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 118.992853][ T32] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 118.992884][ T32] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 118.992969][ T32] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 118.998272][ T32] wacom 0003:056A:5200.0001: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 119.144580][ T32] usb 5-1: USB disconnect, device number 2 [ 119.427256][ T33] audit: type=1800 audit(1793291015.391:2): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.111" name="dummy_udc" dev="gadgetfs" ino=8233 res=0 errno=-16 [ 119.621580][ T6162] loop1: detected capacity change from 0 to 40427 [ 119.659940][ T6162] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 119.659973][ T6162] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.666265][ T6162] F2FS-fs (loop1): build fault injection rate: 17008 [ 119.666332][ T6162] F2FS-fs (loop1): build fault injection type: 0x1f8 [ 119.721669][ T6162] F2FS-fs (loop1): invalid crc value [ 119.788363][ T6172] loop0: detected capacity change from 0 to 32768 [ 120.016548][ T6172] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.163884][ T6162] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 120.195460][ T6162] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.195493][ T6162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.242536][ T6168] loop3: detected capacity change from 0 to 32768 [ 120.256211][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 120.256317][ T6189] netlink: 60 bytes leftover after parsing attributes in process `syz.4.113'. [ 120.328850][ T6168] JBD2: Ignoring recovery information on journal [ 120.418641][ T6189] geneve2: entered promiscuous mode [ 120.418674][ T6189] geneve2: entered allmulticast mode [ 120.466555][ T6172] XFS (loop0): Ending clean mount [ 120.528230][ T6168] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 120.656960][ T5641] syz-executor: attempt to access beyond end of device [ 120.656960][ T5641] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.682588][ T5641] CPU: 0 UID: 0 PID: 5641 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 120.682623][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.682639][ T5641] Call Trace: [ 120.682649][ T5641] [ 120.682659][ T5641] dump_stack_lvl+0xe8/0x150 [ 120.682707][ T5641] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 120.682754][ T5641] f2fs_write_end_bio+0x118e/0x15d0 [ 120.682808][ T5641] __submit_merged_bio+0x258/0x6a0 [ 120.682846][ T5641] ? rcu_is_watching+0x16/0xb0 [ 120.682892][ T5641] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 120.682935][ T5641] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 120.683004][ T5641] f2fs_write_data_pages+0x2a13/0x36e0 [ 120.683079][ T5641] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.683129][ T5641] ? is_bpf_text_address+0x292/0x2b0 [ 120.683156][ T5641] ? is_bpf_text_address+0x26/0x2b0 [ 120.683217][ T5641] ? stack_trace_save+0xa9/0x100 [ 120.683250][ T5641] ? __pfx_stack_trace_save+0x10/0x10 [ 120.683305][ T5641] ? lockdep_unlock+0x5c/0xd0 [ 120.683332][ T5641] ? __lock_acquire+0x1511/0x2de0 [ 120.683398][ T5641] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 120.683428][ T5641] do_writepages+0x338/0x560 [ 120.683470][ T5641] ? do_raw_spin_unlock+0xf5/0x200 [ 120.683503][ T5641] filemap_fdatawrite+0x1e9/0x2f0 [ 120.683537][ T5641] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 120.683632][ T5641] ? do_raw_spin_unlock+0xf5/0x200 [ 120.683665][ T5641] f2fs_sync_dirty_inodes+0x471/0x970 [ 120.683716][ T5641] f2fs_write_checkpoint+0x867/0x24d0 [ 120.683793][ T5641] kill_f2fs_super+0x2df/0x700 [ 120.683829][ T5641] ? rcu_do_enqueue+0x616/0x870 [ 120.683862][ T5641] ? lockdep_hardirqs_on+0x7b/0x110 [ 120.683894][ T5641] ? __pfx_kill_f2fs_super+0x10/0x10 [ 120.683944][ T5641] ? __pfx_call_rcu+0x10/0x10 [ 120.683975][ T5641] ? shrinker_free+0x2a7/0x3b0 [ 120.684007][ T5641] deactivate_locked_super+0xbe/0x110 [ 120.684042][ T5641] cleanup_mnt+0x204/0x2a0 [ 120.684084][ T5641] task_work_run+0x1d9/0x260 [ 120.684120][ T5641] ? __pfx_task_work_run+0x10/0x10 [ 120.684165][ T5641] exit_to_user_mode_loop+0x204/0x770 [ 120.684198][ T5641] ? rcu_is_watching+0x16/0xb0 [ 120.684239][ T5641] do_syscall_64+0x328/0x520 [ 120.684268][ T5641] ? trace_irq_disable+0x3b/0x140 [ 120.684302][ T5641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.684327][ T5641] ? clear_bhb_loop+0x70/0xc0 [ 120.684358][ T5641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.684383][ T5641] RIP: 0033:0x7fb4815a0797 [ 120.684406][ T5641] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 120.684426][ T5641] RSP: 002b:00007ffc0fc9e458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 120.684452][ T5641] RAX: 0000000000000000 RBX: 00007fb481635f63 RCX: 00007fb4815a0797 [ 120.684469][ T5641] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0fc9e510 [ 120.684484][ T5641] RBP: 00007ffc0fc9e510 R08: 00007ffc0fc9f510 R09: 00000000ffffffff [ 120.684502][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0fc9f5a0 [ 120.684518][ T5641] R13: 00007fb481635f63 R14: 000000000001d66c R15: 00007ffc0fc9f5e0 [ 120.684557][ T5641] [ 120.862296][ T5641] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 120.936194][ T6172] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.953350][ T6177] loop2: detected capacity change from 0 to 32768 [ 121.037825][ T6177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.112 (6177) [ 121.103450][ T6177] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.103506][ T6177] BTRFS info (device loop2): using sha256 checksum algorithm [ 121.180146][ T5640] ocfs2: Unmounting device (7,3) on (node local) [ 121.324145][ T6177] BTRFS info (device loop2): enabling ssd optimizations [ 121.324179][ T6177] BTRFS info (device loop2): turning on async discard [ 121.324200][ T6177] BTRFS info (device loop2): enabling free space tree [ 121.620384][ T5642] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.318866][ T6229] netlink: 36 bytes leftover after parsing attributes in process `syz.3.123'. [ 122.428147][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 122.859925][ T6235] loop2: detected capacity change from 0 to 4096 [ 123.044562][ T6235] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 123.148625][ T6225] loop0: detected capacity change from 0 to 32768 [ 123.213271][ T6235] ntfs3(loop2): ino=1a, mi_enum_attr [ 123.213456][ T6235] ntfs3(loop2): ino=1a, mi_enum_attr [ 123.213479][ T6235] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 123.399668][ T11] kernel write not supported for file /sg0 (pid: 11 comm: kworker/0:1) [ 123.690541][ T6258] mmap: syz.2.134 (6258) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.004562][ T6268] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 124.374340][ T6281] loop1: detected capacity change from 0 to 512 [ 124.760227][ T6293] capability: warning: `syz.0.151' uses deprecated v2 capabilities in a way that may be insecure [ 124.950462][ T6277] loop3: detected capacity change from 0 to 32768 [ 124.984495][ T6277] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 125.059904][ T917] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 125.136948][ T6277] XFS (loop3): Ending clean mount [ 125.173528][ T6277] XFS (loop3): Quotacheck needed: Please wait. [ 125.248059][ T917] usb 5-1: not running at top speed; connect to a high speed hub [ 125.248098][ T917] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 125.272164][ T917] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 125.272197][ T917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.272220][ T917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.272284][ T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.349024][ T6277] XFS (loop3): Quotacheck: Done. [ 125.363989][ T917] gspca_main: spca501-2.14.0 probing 0000:0000 [ 125.440369][ T6317] loop2: detected capacity change from 0 to 256 [ 125.445165][ T6317] exfat: Deprecated parameter 'utf8' [ 125.566317][ T917] gspca_spca501: reg write: error -71 [ 125.566341][ T917] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 125.566435][ T917] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 125.567067][ T917] uvcvideo 5-1:1.0: Found multiple Units with ID 1 [ 125.567173][ T917] uvcvideo 5-1:1.0: Found UVC 71.01 device (0000:0000) [ 125.567267][ T917] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 125.596892][ T6317] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x82675e9d, utbl_chksum : 0xe619d30d) [ 125.634560][ T917] usb 5-1: USB disconnect, device number 3 [ 125.685797][ T33] audit: type=1326 audit(1793291021.651:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.162" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48159f559 code=0x7ffc0000 [ 125.686115][ T33] audit: type=1326 audit(1793291021.651:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.162" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48159f559 code=0x7ffc0000 [ 125.757310][ T33] audit: type=1326 audit(1793291021.721:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.162" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48159f559 code=0x7ffc0000 [ 125.760697][ T33] audit: type=1326 audit(1793291021.731:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.162" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48159f559 code=0x7ffc0000 [ 125.787967][ T33] audit: type=1326 audit(1793291021.741:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.162" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb48159f559 code=0x7ffc0000 [ 125.826506][ T33] audit: type=1326 audit(1793291021.791:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.162" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb48159f559 code=0x7ffc0000 [ 125.826671][ T33] audit: type=1326 audit(1793291021.791:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.162" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb48159f2c2 code=0x7ffc0000 [ 125.826808][ T33] audit: type=1326 audit(1793291021.791:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.162" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb48159f357 code=0x7ffc0000 [ 125.838783][ T33] audit: type=1326 audit(1793291021.801:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.162" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb48155c251 code=0x7ffc0000 [ 125.839657][ T5645] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.865378][ T33] audit: type=1326 audit(1793291021.831:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.1.162" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb4815a0349 code=0x7ffc0000 [ 126.068771][ T5640] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 126.079997][ T5645] usb 1-1: Using ep0 maxpacket: 8 [ 126.088389][ T5645] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.088444][ T5645] usb 1-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 126.119363][ T5645] usb 1-1: config 4 interface 0 has no altsetting 0 [ 126.127846][ T5645] usb 1-1: string descriptor 0 read error: -22 [ 126.127947][ T5645] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 126.176125][ T5645] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 126.191551][ T5645] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.192068][ T5645] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 126.192118][ T5645] usb 1-1: media controller created [ 126.233332][ T5645] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.643986][ T6336] Zero length message leads to an empty skb [ 127.186286][ T6357] syz_tun: entered allmulticast mode [ 127.328613][ T6320] usb 1-1: dvb_usb_au6610: wlen=4100, aborting [ 127.342442][ T917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.344825][ T5645] zl10353_read_register: readreg error (reg=127, ret==0) [ 127.447018][ T5645] usb 1-1: USB disconnect, device number 2 [ 127.490799][ T917] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 127.492078][ T917] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 127.492107][ T917] usb 3-1: config 1 has no interface number 0 [ 127.494861][ T917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.494891][ T917] usb 3-1: Product: syz [ 127.494910][ T917] usb 3-1: Manufacturer: syz [ 127.494927][ T917] usb 3-1: SerialNumber: syz [ 127.557542][ T917] usb 3-1: skipping empty audio interface (v1) [ 127.674174][ T917] snd-usb-audio 3-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 127.706579][ T6366] capability: warning: `syz.1.177' uses 32-bit capabilities (legacy support in use) [ 127.782740][ T917] usb 3-1: USB disconnect, device number 2 [ 127.861262][ T5665] udevd[5665]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.049487][ T5645] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.199576][ T5645] usb 4-1: Using ep0 maxpacket: 32 [ 128.200378][ T5645] usb 4-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 128.202589][ T5645] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 128.206449][ T5645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.206478][ T5645] usb 4-1: Product: syz [ 128.206495][ T5645] usb 4-1: Manufacturer: syz [ 128.206512][ T5645] usb 4-1: SerialNumber: syz [ 128.262413][ T5645] usb 4-1: config 0 descriptor?? [ 128.278044][ T5645] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 128.278622][ T5645] dvb-usb: bulk message failed: -22 (2/0) [ 128.300737][ T5645] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.302943][ T5645] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 128.303006][ T5645] usb 4-1: media controller created [ 128.366784][ T5645] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.412251][ T5645] usb 4-1: selecting invalid altsetting 7 [ 128.412277][ T5645] cxusb: set interface failed [ 128.412290][ T5645] dvb-usb: bulk message failed: -22 (1/0) [ 128.485455][ T6370] cxusb: i2c rd: len=136 is too big! [ 128.485455][ T6370] [ 128.606048][ T5645] DVB: Unable to find symbol lgdt330x_attach() [ 128.606083][ T5645] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 128.739410][ T5645] rc_core: IR keymap rc-dvico-portable not found [ 128.739433][ T5645] Registered IR keymap rc-empty [ 128.745750][ T5645] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 128.747459][ T6397] smc: net device lo applied user defined pnetid SYZ0 [ 128.747648][ T6397] smc: smcd device lo applied user defined pnetid SYZ0 [ 128.794646][ T5645] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 128.831884][ T5645] dvb-usb: schedule remote query interval to 100 msecs. [ 128.831914][ T5645] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 128.837437][ T6378] loop4: detected capacity change from 0 to 32768 [ 128.838240][ T5645] usb 4-1: USB disconnect, device number 2 [ 128.878036][ T6378] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.181 (6378) [ 128.933252][ T6378] BTRFS info (device loop4): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 128.933301][ T6378] BTRFS info (device loop4): using sha256 checksum algorithm [ 129.108848][ T5645] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 129.180318][ T6378] BTRFS info (device loop4): enabling ssd optimizations [ 129.180349][ T6378] BTRFS info (device loop4): turning on async discard [ 129.180367][ T6378] BTRFS info (device loop4): enabling free space tree [ 129.398175][ T6419] loop2: detected capacity change from 0 to 2048 [ 129.444841][ T6419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.742803][ T5638] BTRFS info (device loop4): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 130.346717][ T6412] loop1: detected capacity change from 0 to 32768 [ 131.190994][ T33] kauditd_printk_skb: 19 callbacks suppressed [ 131.191018][ T33] audit: type=1326 audit(1793291027.161:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.3.206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f9f559 code=0x7ffc0000 [ 131.192646][ T33] audit: type=1326 audit(1793291027.161:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.3.206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f9f559 code=0x7ffc0000 [ 131.274366][ T33] audit: type=1326 audit(1793291027.241:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.3.206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbb59f9f559 code=0x7ffc0000 [ 131.323865][ T33] audit: type=1326 audit(1793291027.291:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.3.206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f9f559 code=0x7ffc0000 [ 131.324037][ T33] audit: type=1326 audit(1793291027.291:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6465 comm="syz.3.206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb59f9f559 code=0x7ffc0000 [ 131.583506][ T6450] loop4: detected capacity change from 0 to 40427 [ 131.596473][ T6450] F2FS-fs: heap/no_heap options were deprecated [ 131.650146][ T6450] F2FS-fs (loop4): invalid crc value [ 131.742347][ T6478] loop3: detected capacity change from 0 to 4096 [ 131.789935][ T917] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.876851][ T6450] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 131.906161][ T6450] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 131.949695][ T917] usb 2-1: Using ep0 maxpacket: 16 [ 131.954716][ T917] usb 2-1: New USB device found: idVendor=0810, idProduct=0001, bcdDevice=0.00 [ 131.957060][ T917] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.957093][ T917] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.957125][ T917] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.957166][ T917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.016978][ T917] usb 2-1: config 0 descriptor?? [ 132.055602][ T6450] syz.4.199: attempt to access beyond end of device [ 132.055602][ T6450] loop4: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 132.055913][ T6450] syz.4.199: attempt to access beyond end of device [ 132.055913][ T6450] loop4: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 132.056525][ T33] audit: type=1800 audit(1793291028.021:37): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.199" name="/" dev="loop4" ino=8 res=0 errno=-5 [ 132.204313][ T6444] loop2: detected capacity change from 0 to 32768 [ 132.226665][ T6486] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.244019][ T6444] xfs: Deprecated parameter 'ikeep' [ 132.244045][ T6444] XFS: ikeep mount option is deprecated. [ 132.244071][ T6444] xfs: Deprecated parameter 'noattr2' [ 132.244087][ T6444] XFS: noattr2 mount option is deprecated. [ 132.321335][ T6444] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.544657][ T917] hid_parser_main: 2 callbacks suppressed [ 132.544686][ T917] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 132.544730][ T917] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 132.544762][ T917] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 132.544798][ T917] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 132.544829][ T917] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 132.544859][ T917] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 132.544898][ T917] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 132.544929][ T917] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 132.544959][ T917] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 132.544989][ T917] pantherlord 0003:0810:0001.0002: unknown main item tag 0x0 [ 132.545018][ T917] pantherlord 0003:0810:0001.0002: unbalanced collection at end of report description [ 132.652387][ T917] pantherlord 0003:0810:0001.0002: parse failed [ 132.652477][ T917] pantherlord 0003:0810:0001.0002: probe with driver pantherlord failed with error -22 [ 132.822127][ T6444] XFS (loop2): Ending clean mount [ 132.857394][ T6444] XFS (loop2): Quotacheck needed: Please wait. [ 132.881347][ T917] usb 2-1: USB disconnect, device number 3 [ 133.087514][ T6444] XFS (loop2): Quotacheck: Done. [ 133.252857][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.252940][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.405267][ T5642] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.240917][ T6538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.509894][ T6514] loop3: detected capacity change from 0 to 32768 [ 134.536278][ T6514] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.212 (6514) [ 134.540392][ T6548] syz.1.228 uses obsolete (PF_INET,SOCK_PACKET) [ 134.589057][ T6514] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.589101][ T6514] BTRFS info (device loop3): using crc32c checksum algorithm [ 134.787488][ T6533] loop0: detected capacity change from 0 to 32768 [ 134.798984][ T6533] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 134.812352][ T6533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.222 (6533) [ 134.874059][ T6533] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.874098][ T6533] BTRFS info (device loop0): using sha256 checksum algorithm [ 134.890841][ T6514] BTRFS info (device loop3): enabling ssd optimizations [ 134.890872][ T6514] BTRFS info (device loop3): turning on flush-on-commit [ 134.890891][ T6514] BTRFS info (device loop3): enabling free space tree [ 134.890910][ T6514] BTRFS info (device loop3): enabling auto defrag [ 134.890929][ T6514] BTRFS info (device loop3): use lzo compression, level 1 [ 134.890952][ T6514] BTRFS info (device loop3): max_inline set to 4096 [ 135.181734][ T6533] BTRFS info (device loop0): rebuilding free space tree [ 135.527504][ T6533] BTRFS info (device loop0): disabling free space tree [ 135.527602][ T6533] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.527630][ T6533] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.612642][ T5640] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.689120][ T6533] BTRFS info (device loop0): enabling ssd optimizations [ 135.689149][ T6533] BTRFS info (device loop0): force clearing of disk cache [ 135.689166][ T6533] BTRFS info (device loop0): enabling auto defrag [ 135.689185][ T6533] BTRFS info (device loop0): max_inline set to 0 [ 136.049268][ T5639] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.437911][ T6620] loop0: detected capacity change from 0 to 64 [ 136.602577][ T6619] [U] ¥ [ 136.602634][ T6619] [U] [ 136.602679][ T6619] [U] [ 136.602720][ T6619] [U] [ 136.602756][ T6619] [U] [ 136.602796][ T6619] [U] [ 136.602837][ T6619] [U] [ 136.602877][ T6619] [U] [ 136.602936][ T6619] [U] [ 136.602983][ T6619] [U] [ 136.603024][ T6619] [U] [ 136.603062][ T6619] [U] [ 136.603103][ T6619] [U] [ 136.603150][ T6619] [U] [ 136.603193][ T6619] [U] [ 136.603234][ T6619] [U] [ 136.603312][ T6619] [U] [ 136.603354][ T6619] [U] [ 136.603391][ T6619] [U] [ 136.603432][ T6619] [U] [ 136.603474][ T6619] [U] [ 136.603527][ T6619] [U] [ 136.603570][ T6619] [U] [ 136.603614][ T6619] [U] [ 136.614701][ T6619] [U] [ 136.614826][ T6619] [U] [ 136.614949][ T6619] [U] [ 136.615069][ T6619] [U] [ 136.615185][ T6619] [U] [ 136.615297][ T6619] [U] [ 136.615390][ T6619] [U] [ 136.615507][ T6619] [U] [ 136.615671][ T6619] [U] [ 136.615774][ T6619] [U] [ 136.615892][ T6619] [U] [ 136.616000][ T6619] [U] [ 136.616116][ T6619] [U] [ 136.616196][ T6619] [U] [ 136.616239][ T6619] [U] [ 136.616282][ T6619] [U] [ 136.641592][ T6619] [U] [ 136.641724][ T6619] [U] [ 136.641831][ T6619] [U] [ 136.641933][ T6619] [U] [ 136.641976][ T6619] [U] [ 136.642020][ T6619] [U] [ 136.642066][ T6619] [U] [ 136.642111][ T6619] [U] [ 136.642173][ T6619] [U] [ 136.642218][ T6619] [U] [ 136.642264][ T6619] [U] [ 136.642309][ T6619] [U] [ 136.642354][ T6619] [U] [ 136.642397][ T6619] [U] [ 136.642515][ T6619] [U] [ 136.642641][ T6619] [U] [ 136.642802][ T6619] [U] [ 136.642926][ T6619] [U] [ 136.643003][ T6619] [U] [ 136.643089][ T6619] [U] [ 136.643196][ T6619] [U] [ 136.643310][ T6619] [U] [ 136.643417][ T6619] [U] [ 136.643535][ T6619] [U] [ 136.661395][ T6619] [U] [ 136.661536][ T6619] [U] [ 136.661650][ T6619] [U] [ 136.661752][ T6619] [U] [ 136.661859][ T6619] [U] [ 136.661958][ T6619] [U] [ 136.662044][ T6619] [U] [ 136.662158][ T6619] [U] [ 136.662406][ T6619] [U] [ 136.662524][ T6619] [U] [ 136.662624][ T6619] [U] [ 136.662723][ T6619] [U] [ 136.662846][ T6619] [U] [ 136.662952][ T6619] [U] [ 136.663050][ T6619] [U] [ 136.663167][ T6619] [U] [ 136.712230][ T6619] [U] [ 136.712293][ T6619] [U] [ 136.712399][ T6619] [U] [ 136.712493][ T6619] [U] [ 136.712588][ T6619] [U] [ 136.712686][ T6619] [U] [ 136.712783][ T6619] [U] [ 136.712883][ T6619] [U] [ 136.776573][ T6619] [U] [ 136.776713][ T6619] [U] [ 136.776829][ T6619] [U] [ 136.776936][ T6619] [U] [ 136.777035][ T6619] [U] [ 136.777140][ T6619] [U] [ 136.777255][ T6619] [U] [ 136.777373][ T6619] [U] [ 136.777665][ T6619] [U] [ 136.777781][ T6619] [U] [ 136.777903][ T6619] [U] [ 136.778033][ T6619] [U] [ 136.778132][ T6619] [U] [ 136.778244][ T6619] [U] [ 136.778350][ T6619] [U] [ 136.778465][ T6619] [U] [ 136.831547][ T6619] [U] [ 136.831675][ T6619] [U] [ 136.831789][ T6619] [U] [ 136.831904][ T6619] [U] [ 136.832043][ T6619] [U] [ 136.832159][ T6619] [U] [ 136.832280][ T6619] [U] [ 136.832395][ T6619] [U] [ 136.832611][ T6619] [U] [ 136.832743][ T6619] [U] [ 136.832873][ T6619] [U] [ 136.832991][ T6619] [U] [ 136.833100][ T6619] [U] [ 136.833220][ T6619] [U] [ 136.833335][ T6619] [U] [ 136.980575][ T6626] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.056896][ T6617] [U] [ 137.756633][ T6654] loop0: detected capacity change from 0 to 512 [ 137.770905][ T6654] EXT4-fs: Ignoring removed nobh option [ 137.843768][ T6654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.843921][ T6654] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.004680][ T6661] loop3: detected capacity change from 0 to 1024 [ 138.006617][ T6651] loop4: detected capacity change from 0 to 4096 [ 138.081749][ T6662] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #2: comm syz.0.250: corrupted inode contents [ 138.103061][ T6662] EXT4-fs error (device loop0): ext4_dirty_inode:7679: inode #2: comm syz.0.250: mark_inode_dirty error [ 138.131357][ T6662] EXT4-fs error (device loop0): ext4_do_update_inode:6707: inode #2: comm syz.0.250: corrupted inode contents [ 138.136229][ T6662] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.250: mark_inode_dirty error [ 138.337454][ T6651] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 138.441004][ T5639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.609855][ T6672] loop2: detected capacity change from 0 to 1024 [ 138.665093][ T6672] hfsplus: failed to load catalog file [ 138.746542][ T6651] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB [ 139.255704][ T6685] loop3: detected capacity change from 0 to 4096 [ 139.361942][ T6695] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.756588][ T6708] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 139.779738][ T6708] team0: Port device dummy0 added [ 139.787380][ T6708] netlink: 'syz.3.267': attribute type 10 has an invalid length. [ 139.823299][ T6708] team0: Port device dummy0 removed [ 139.905045][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 139.961351][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 139.962958][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 139.963646][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 139.964297][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 139.964957][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 139.966488][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 139.968503][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 140.041934][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 140.043160][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 140.089973][ T6705] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 140.095845][ T6705] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 140.098861][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.251696][ T6713] netlink: 'syz.2.270': attribute type 15 has an invalid length. [ 140.290094][ T6713] vxlan0: entered promiscuous mode [ 140.290123][ T6713] vxlan0: entered allmulticast mode [ 140.304389][ T46] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 31488 - 0 [ 140.304533][ T46] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 31488 - 0 [ 140.304634][ T46] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 31488 - 0 [ 140.304735][ T46] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 31488 - 0 [ 140.830806][ T6742] loop1: detected capacity change from 0 to 2048 [ 140.864852][ T6742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.996449][ T5641] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.335959][ T6757] loop2: detected capacity change from 0 to 256 [ 141.680340][ T5645] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.790976][ T6776] device-mapper: multipath service-time: repeat_count > 1 is deprecated, using 1 instead [ 141.791442][ T6776] device-mapper: table: 248:2: multipath: service-time ps: invalid relative_throughput value (-EINVAL) [ 141.796192][ T6776] device-mapper: ioctl: error adding target to table [ 141.850444][ T5645] usb 4-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 141.851643][ T5645] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 141.853982][ T5645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.854009][ T5645] usb 4-1: Product: syz [ 141.854025][ T5645] usb 4-1: Manufacturer: syz [ 141.854040][ T5645] usb 4-1: SerialNumber: syz [ 141.924280][ T5645] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 141.924383][ T5645] dvb-usb: bulk message failed: -22 (3/0) [ 141.949043][ T5645] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.961334][ T5645] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 141.961397][ T5645] usb 4-1: media controller created [ 142.000012][ T5645] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.104486][ T5645] DVB: Unable to find symbol mt352_attach() [ 142.104760][ T5645] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 142.107076][ T5645] dvb-usb: bulk message failed: -22 (3/0) [ 142.129950][ T5645] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 142.228914][ T6791] loop0: detected capacity change from 0 to 256 [ 142.242786][ T6791] exfat: Deprecated parameter 'namecase' [ 142.242833][ T6791] exfat: Deprecated parameter 'utf8' [ 142.305739][ T5785] usb 4-1: USB disconnect, device number 3 [ 142.340766][ T6791] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 142.536427][ T5785] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 142.599014][ T6801] netlink: get zone limit has 4 unknown bytes [ 143.502397][ T6828] loop0: detected capacity change from 0 to 512 [ 143.535472][ T6828] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 143.542544][ T6828] EXT4-fs (loop0): invalid journal inode [ 143.542906][ T6828] EXT4-fs (loop0): can't get journal size [ 143.604058][ T6828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 143.604813][ T6828] System zones: 1-12, 13-13 [ 143.681099][ T6828] EXT4-fs (loop0): 1 truncate cleaned up [ 143.712661][ T6828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.776038][ T6828] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 143.937891][ T5639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.088404][ T6844] option changes via remount are deprecated (pid=6843 comm=syz.3.331) [ 144.571403][ T6860] loop0: detected capacity change from 0 to 4096 [ 144.594615][ T6860] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.594661][ T6860] NILFS (loop0): mounting unchecked fs [ 144.594677][ T6860] NILFS (loop0): recovery required for readonly filesystem [ 144.594692][ T6860] NILFS (loop0): write access will be enabled during recovery [ 144.774905][ T6860] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 144.797982][ T5665] udevd[5665]: incorrect nilfs2 checksum on /dev/loop0 [ 144.860886][ T6873] loop2: detected capacity change from 0 to 256 [ 144.865556][ T6873] exfat: Deprecated parameter 'namecase' [ 144.865642][ T6873] exfat: Deprecated parameter 'utf8' [ 144.962024][ T6873] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 145.079394][ T5665] udevd[5665]: incorrect nilfs2 checksum on /dev/loop0 [ 145.248545][ T6880] ip_tables: iptables: counters copy to user failed while replacing table [ 146.315868][ T6929] loop2: detected capacity change from 0 to 2048 [ 146.376678][ T6909] loop4: detected capacity change from 0 to 32768 [ 146.388012][ T6909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.358 (6909) [ 146.439417][ T6909] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.439458][ T6909] BTRFS info (device loop4): using crc32c checksum algorithm [ 146.456621][ T6929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.607241][ T6946] loop0: detected capacity change from 0 to 512 [ 146.630906][ T6909] BTRFS info (device loop4): enabling ssd optimizations [ 146.630937][ T6909] BTRFS info (device loop4): turning on flush-on-commit [ 146.630955][ T6909] BTRFS info (device loop4): enabling free space tree [ 146.630973][ T6909] BTRFS info (device loop4): enabling auto defrag [ 146.630992][ T6909] BTRFS info (device loop4): use lzo compression, level 1 [ 146.631013][ T6909] BTRFS info (device loop4): max_inline set to 4096 [ 146.746481][ T6946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.746618][ T6946] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.882591][ T6946] EXT4-fs (loop0): resizing filesystem from 64 to 1 blocks [ 146.882629][ T6946] EXT4-fs warning (device loop0): ext4_resize_fs:2044: can't shrink FS - resize aborted [ 147.065300][ T5639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.147563][ T5638] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.092081][ T6956] loop1: detected capacity change from 0 to 32768 [ 148.111779][ T6956] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.373 (6956) [ 148.134382][ T6956] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.134419][ T6956] BTRFS info (device loop1): using sha256 checksum algorithm [ 148.370598][ T6956] BTRFS info (device loop1 state E): enabling free space tree [ 148.370632][ T6956] BTRFS info (device loop1 state E): force clearing of disk cache [ 148.370656][ T6956] BTRFS info (device loop1 state E): ignoring unknown super block flags [ 148.454540][ T6956] BTRFS critical (device loop1 state EH): emergency shutdown [ 148.544971][ T5641] BTRFS info (device loop1 state EH): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.590023][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.759986][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 148.767194][ T10] usb 5-1: New USB device found: idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 148.772495][ T10] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 148.809772][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.809807][ T10] usb 5-1: Product: syz [ 148.809826][ T10] usb 5-1: Manufacturer: syz [ 148.809843][ T10] usb 5-1: SerialNumber: syz [ 148.851872][ T10] usb 5-1: config 0 descriptor?? [ 148.937515][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 148.937606][ T10] usb 5-1: setting power ON [ 148.937659][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 149.034824][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.045591][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 149.045659][ T10] usb 5-1: media controller created [ 149.173294][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.176109][ T7000] dvb-usb: bulk message failed: -22 (3/0) [ 149.335187][ T10] usb 5-1: selecting invalid altsetting 6 [ 149.335216][ T10] usb 5-1: digital interface selection failed (-22) [ 149.335233][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 149.378344][ T10] usb 5-1: setting power OFF [ 149.378413][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 149.378431][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 149.378445][ T10] (NULL device *): no alternate interface [ 149.668185][ T7022] loop2: detected capacity change from 0 to 16 [ 149.695716][ T7022] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 149.766231][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 149.778104][ T5655] udevd[5655]: incorrect cramfs checksum on /dev/loop2 [ 149.806756][ T10] usb 5-1: USB disconnect, device number 4 [ 150.239840][ T7015] loop0: detected capacity change from 0 to 40427 [ 150.258392][ T7015] F2FS-fs (loop0): invalid crc value [ 150.592379][ T7015] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 150.623557][ T7015] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 150.623589][ T7015] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 150.623666][ T7015] F2FS-fs (loop0): Start checkpoint disabled! [ 150.675400][ T7015] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 150.688567][ T7015] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 150.780954][ T46] kworker/u8:2: attempt to access beyond end of device [ 150.780954][ T46] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.839583][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 150.839620][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 150.839635][ T46] Workqueue: writeback wb_workfn (flush-7:0) [ 150.839799][ T46] Call Trace: [ 150.839813][ T46] [ 150.839824][ T46] dump_stack_lvl+0xe8/0x150 [ 150.839871][ T46] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 150.839919][ T46] f2fs_write_end_bio+0x118e/0x15d0 [ 150.839998][ T46] __submit_merged_bio+0x258/0x6a0 [ 150.840035][ T46] ? rcu_is_watching+0x16/0xb0 [ 150.840079][ T46] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 150.840122][ T46] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 150.840191][ T46] f2fs_write_data_pages+0x2a13/0x36e0 [ 150.840268][ T46] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 150.840315][ T46] ? stack_trace_save+0xa9/0x100 [ 150.840416][ T46] ? __lock_acquire+0x747/0x2de0 [ 150.840476][ T46] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 150.840506][ T46] do_writepages+0x338/0x560 [ 150.840538][ T46] ? __lock_acquire+0x747/0x2de0 [ 150.840576][ T46] ? reacquire_held_locks+0x117/0x1a0 [ 150.840613][ T46] ? writeback_sb_inodes+0x450/0x1af0 [ 150.840652][ T46] __writeback_single_inode+0x136/0x1220 [ 150.840688][ T46] ? do_raw_spin_unlock+0xf5/0x200 [ 150.840720][ T46] writeback_sb_inodes+0x9de/0x1af0 [ 150.840749][ T46] ? __lock_acquire+0x747/0x2de0 [ 150.840822][ T46] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 150.840911][ T46] ? rcu_is_watching+0x16/0xb0 [ 150.840962][ T46] ? queue_io+0x2d3/0x470 [ 150.840998][ T46] wb_writeback+0x41c/0xad0 [ 150.841033][ T46] ? queue_io+0x231/0x470 [ 150.841070][ T46] ? __pfx_wb_writeback+0x10/0x10 [ 150.841097][ T46] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.841146][ T46] wb_workfn+0x431/0x10f0 [ 150.841212][ T46] ? __pfx_wb_workfn+0x10/0x10 [ 150.841260][ T46] ? trace_hrtimer_start+0x82/0x200 [ 150.841298][ T46] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.841337][ T46] ? lock_acquire+0x115/0x350 [ 150.841381][ T46] ? rcu_is_watching+0x16/0xb0 [ 150.841421][ T46] ? process_scheduled_works+0x97a/0x1630 [ 150.841461][ T46] process_scheduled_works+0xc3d/0x1630 [ 150.841544][ T46] ? __pfx_process_scheduled_works+0x10/0x10 [ 150.841592][ T46] ? assign_work+0x3cf/0x5d0 [ 150.841638][ T46] worker_thread+0xa47/0xfb0 [ 150.841702][ T46] kthread+0x38b/0x480 [ 150.841734][ T46] ? __pfx_worker_thread+0x10/0x10 [ 150.841773][ T46] ? __pfx_kthread+0x10/0x10 [ 150.841806][ T46] ret_from_fork+0x514/0xb70 [ 150.841842][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 150.841872][ T46] ? __switch_to+0xc78/0x1410 [ 150.841917][ T46] ? __pfx_kthread+0x10/0x10 [ 150.841961][ T46] ret_from_fork_asm+0x1a/0x30 [ 150.842014][ T46] [ 150.842026][ T46] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 151.712741][ T7072] loop2: detected capacity change from 0 to 512 [ 151.747181][ T7072] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 151.747557][ T7072] EXT4-fs (loop2): orphan cleanup on readonly fs [ 151.772808][ T7072] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 151.772837][ T7072] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 151.772894][ T7072] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.416: Failed to acquire dquot type 1 [ 151.772922][ T7072] loop2: lost filesystem error report for type 5 error -5 [ 151.779388][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 151.779417][ C0] EXT4-fs (loop2): initial error at time 1793291047: ext4_acquire_dquot:7120 [ 151.779446][ C0] EXT4-fs (loop2): last error at time 1793291047: ext4_acquire_dquot:7120 [ 151.928744][ T7072] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.416: bg 0: block 40: padding at end of block bitmap is not set [ 151.928788][ T7072] loop2: lost filesystem error report for type 5 error -117 [ 152.000252][ T7072] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 152.000286][ T7072] loop2: lost filesystem error report for type 5 error -117 [ 152.010759][ T7072] EXT4-fs warning (device loop2): ext4_evict_inode:261: inode #16: comm syz.2.416: data will be lost [ 152.011374][ T7072] EXT4-fs (loop2): 1 truncate cleaned up [ 152.043959][ T7072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.103736][ T7072] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.416: bad symlink. [ 152.246556][ T5642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.465291][ T7063] loop4: detected capacity change from 0 to 32768 [ 152.498037][ T7063] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.702864][ T7063] XFS (loop4): Ending clean mount [ 152.738318][ T7063] XFS (loop4): Quotacheck needed: Please wait. [ 152.934352][ T7082] loop0: detected capacity change from 0 to 32768 [ 152.960087][ T7063] XFS (loop4): Quotacheck: Done. [ 153.040582][ T7082] JBD2: Ignoring recovery information on journal [ 153.087364][ T5638] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.175140][ T7106] tipc: Started in network mode [ 153.175189][ T7106] tipc: Node identity b6e3973091ef, cluster identity 4711 [ 153.201362][ T7106] tipc: Enabled bearer , priority 20 [ 153.211561][ T7082] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 153.220617][ T7100] loop3: detected capacity change from 0 to 32768 [ 153.268434][ T3323] (kworker/u8:11,3323,1):ocfs2_check_dir_entry:357 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 153.489373][ T7100] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 153.489373][ T7100] [ 153.501236][ T7100] ERROR: (device loop3): remounting filesystem as read-only [ 153.540544][ T7082] (syz.0.408,7082,1):ocfs2_check_dir_entry:357 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 153.540592][ T7082] (syz.0.408,7082,1):ocfs2_prepare_dir_for_insert:4507 ERROR: status = -2 [ 153.540622][ T7082] (syz.0.408,7082,1):__ocfs2_prepare_orphan_dir:2185 ERROR: status = -2 [ 153.540646][ T7082] (syz.0.408,7082,1):ocfs2_prepare_orphan_dir:2229 ERROR: status = -2 [ 153.540670][ T7082] (syz.0.408,7082,1):ocfs2_prepare_orphan_dir:2245 ERROR: status = -2 [ 153.540692][ T7082] (syz.0.408,7082,1):ocfs2_unlink:971 ERROR: status = -2 [ 153.916125][ T5639] ocfs2: Unmounting device (7,0) on (node local) [ 153.964174][ T7114] gretap0: entered promiscuous mode [ 153.976070][ T7114] vlan2: entered promiscuous mode [ 154.188561][ T32] tipc: Node number set to 655136560 [ 154.302278][ T7098] loop1: detected capacity change from 0 to 32768 [ 154.311070][ T7098] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.423 (7098) [ 154.450687][ T7098] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 154.450739][ T7098] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 154.613215][ T7098] BTRFS info (device loop1): enabling ssd optimizations [ 154.613247][ T7098] BTRFS info (device loop1): turning on async discard [ 154.613267][ T7098] BTRFS info (device loop1): enabling free space tree [ 154.856941][ T5641] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 154.888984][ T7144] ip_tables: iptables: counters copy to user failed while replacing table [ 155.125336][ T7152] process 'syz.3.439' launched '/dev/fd/3' with NULL argv: empty string added [ 155.324027][ T5785] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.377312][ T7162] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.412372][ T7156] kAFS: unable to lookup cell 'ÿ' [ 155.432853][ T7158] kAFS: unable to lookup cell '(,c¾Ì' [ 155.469371][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 155.470200][ T5785] usb 3-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 155.474325][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.474354][ T5785] usb 3-1: Product: syz [ 155.474370][ T5785] usb 3-1: Manufacturer: syz [ 155.474386][ T5785] usb 3-1: SerialNumber: syz [ 155.523262][ T5785] usb 3-1: config 0 descriptor?? [ 155.529159][ T5785] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 155.544391][ T5785] dvb-usb: bulk message failed: -22 (4/0) [ 155.544413][ T5785] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 155.544550][ T5785] dvb-usb: bulk message failed: -22 (5/0) [ 155.544568][ T5785] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 155.594431][ T5785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.595939][ T5785] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 155.595994][ T5785] usb 3-1: media controller created [ 155.636602][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.672750][ T5785] usb 3-1: selecting invalid altsetting 3 [ 155.672775][ T5785] ttusb2: set interface to alts=3 failed [ 155.744808][ T7151] dvb-usb: bulk message failed: -22 (7/0) [ 155.744833][ T7151] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 155.744879][ T7151] ttusb2: i2c transfer failed. [ 155.793272][ T5785] DVB: Unable to find symbol tda10086_attach() [ 155.793293][ T5785] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 155.796454][ T5785] dvb-usb: bulk message failed: -22 (4/0) [ 155.796479][ T5785] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 155.796637][ T5785] dvb-usb: bulk message failed: -22 (5/0) [ 155.796654][ T5785] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 155.796733][ T5785] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 155.833109][ T5785] usb 3-1: USB disconnect, device number 3 [ 155.920989][ T5785] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 156.297378][ T7186] loop1: detected capacity change from 0 to 1024 [ 156.401488][ T5785] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.552773][ T5785] usb 5-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 156.577671][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.577700][ T5785] usb 5-1: Product: syz [ 156.577716][ T5785] usb 5-1: Manufacturer: syz [ 156.577731][ T5785] usb 5-1: SerialNumber: syz [ 156.610289][ T5785] usb 5-1: config 0 descriptor?? [ 156.618643][ T7196] loop2: detected capacity change from 0 to 512 [ 156.644467][ T5785] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 156.678618][ T5785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.680066][ T5785] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 156.680136][ T5785] usb 5-1: media controller created [ 156.724552][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.817279][ T7196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.817410][ T7196] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.933183][ T5785] DVB: Unable to find symbol mt352_attach() [ 157.005145][ T5785] DVB: Unable to find symbol nxt6000_attach() [ 157.005165][ T5785] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 157.009086][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 157.056450][ T5785] dvb-usb: schedule remote query interval to 1000 msecs. [ 157.056486][ T5785] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 157.056505][ T5785] dvb-usb: bulk message failed: -22 (7/0) [ 157.056520][ T5785] dvb-usb: bulk message failed: -22 (7/0) [ 157.095334][ T5785] usb 5-1: USB disconnect, device number 5 [ 157.149527][ T7196] EXT4-fs: Ignoring removed i_version option [ 157.149633][ T7196] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 157.149652][ T7196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.202438][ T7196] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 157.224916][ T7196] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 157.279551][ T5785] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 157.313537][ T7209] __nla_validate_parse: 8 callbacks suppressed [ 157.313561][ T7209] netlink: 128 bytes leftover after parsing attributes in process `syz.0.463'. [ 157.313612][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.463'. [ 157.449091][ T5642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.756145][ T7222] loop4: detected capacity change from 0 to 4096 [ 157.826394][ T7230] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.831675][ T7228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.472'. [ 157.831936][ T7228] netlink: 17 bytes leftover after parsing attributes in process `syz.3.472'. [ 157.831985][ T7228] tipc: Invalid UDP bearer configuration [ 157.832166][ T7228] tipc: Enabling of bearer rejected, failed to enable media [ 158.043747][ T7222] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 158.319723][ T7246] loop4: detected capacity change from 0 to 2048 [ 158.340592][ T7246] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.508901][ T7253] ucma_write: process 220 (syz.3.485) changed security contexts after opening file descriptor, this is not allowed. [ 158.914231][ T7262] gretap0: entered promiscuous mode [ 158.914478][ T7262] vlan2: entered promiscuous mode [ 159.096700][ C1] sd 0:0:1:0: [sda] tag#2986 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 159.096810][ C1] sd 0:0:1:0: [sda] tag#2986 CDB: Read(6) 08 00 43 7a 00 00 [ 159.122899][ T7252] loop1: detected capacity change from 0 to 32768 [ 159.194696][ T7273] syz.0.495 (7273): drop_caches: 4 [ 159.279505][ T5785] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 159.335911][ T7277] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 159.441998][ T5785] usb 3-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 159.443639][ T5785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.443667][ T5785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 159.443724][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.492946][ T5785] usb 3-1: config 0 descriptor?? [ 159.505672][ T5785] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 159.505736][ T5785] dvb-usb: bulk message failed: -22 (3/0) [ 159.525928][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 159.527911][ T5785] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 159.527967][ T5785] usb 3-1: media controller created [ 159.546463][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.568153][ T5785] dvb-usb: bulk message failed: -22 (6/0) [ 159.568336][ T5785] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 159.606761][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 159.656798][ T5785] dvb-usb: schedule remote query interval to 150 msecs. [ 159.656827][ T5785] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 159.817515][ T7267] dvb-usb: bulk message failed: -22 (2/0) [ 159.818204][ T5785] dvb-usb: bulk message failed: -22 (1/0) [ 159.818254][ T5785] dvb-usb: error while querying for an remote control event. [ 159.884270][ T5645] usb 3-1: USB disconnect, device number 4 [ 160.012481][ T5645] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 160.279878][ T7300] Bluetooth: MGMT ver 1.23 [ 160.299561][ T7297] gretap0: entered promiscuous mode [ 160.299737][ T7297] vlan2: entered promiscuous mode [ 160.613968][ T7279] loop4: detected capacity change from 0 to 32768 [ 160.634903][ T7279] (syz.4.497,7279,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 160.636988][ T7279] (syz.4.497,7279,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 160.715229][ T7279] JBD2: Ignoring recovery information on journal [ 160.800126][ T7279] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 161.203597][ T5638] ocfs2: Unmounting device (7,4) on (node local) [ 161.706867][ T7314] loop1: detected capacity change from 0 to 32768 [ 161.718363][ T7314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.513 (7314) [ 161.768444][ T7314] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.768484][ T7314] BTRFS info (device loop1): using crc32c checksum algorithm [ 161.846793][ T7316] loop3: detected capacity change from 0 to 32768 [ 161.851867][ T7316] BTRFS warning: excessive commit interval 1025, use with care [ 161.855710][ T7316] BTRFS info: device /dev/loop3 (7:3) using temp-fsid b110dd86-c4c8-4f2a-8cef-cf33fe5ce28f [ 161.855936][ T7316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.514 (7316) [ 161.947911][ T7338] loop2: detected capacity change from 0 to 256 [ 161.972275][ T7314] BTRFS info (device loop1): turning on async discard [ 161.972310][ T7314] BTRFS info (device loop1): enabling free space tree [ 161.972331][ T7314] BTRFS info (device loop1): enabling auto defrag [ 161.972352][ T7314] BTRFS info (device loop1): force zlib compression, level 3 [ 161.972376][ T7314] BTRFS info (device loop1): max_inline set to 0 [ 162.017507][ T7316] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.017545][ T7316] BTRFS info (device loop3 state S): using crc32c checksum algorithm [ 162.103038][ T3323] BTRFS warning (device loop3 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x4e035593 level 0, ignored [ 162.106125][ T88] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x70c4680f level 0, ignored [ 162.108709][ T88] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xef168618 level 0, ignored [ 162.156489][ T14] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x49206b5e level 0, ignored [ 162.158016][ T7316] BTRFS info (device loop3 state ES): bdev /dev/loop3 errs: wr 0, rd 0, flush 0, corrupt 7, gen 0 [ 162.189806][ T7316] BTRFS error (device loop3 state ES): block group 5242880 len 1099503239424 mismatch with chunk 5242880 len 1638400 [ 162.197304][ T2225] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x95831ab6 level 0, ignored [ 162.197691][ T7316] BTRFS info (device loop3 state ES): enabling ssd optimizations [ 162.197714][ T7316] BTRFS info (device loop3 state ES): disabling tree log [ 162.197732][ T7316] BTRFS info (device loop3 state ES): turning on flush-on-commit [ 162.197752][ T7316] BTRFS info (device loop3 state ES): enabling free space tree [ 162.197770][ T7316] BTRFS info (device loop3 state ES): ignoring bad roots [ 162.197787][ T7316] BTRFS info (device loop3 state ES): ignoring meta csums [ 162.197805][ T7316] BTRFS info (device loop3 state ES): force zlib compression, level 3 [ 162.197826][ T7316] BTRFS info (device loop3 state ES): max_inline set to 0 [ 162.198304][ T2225] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x9b2456e4 level 0, ignored [ 162.413474][ T7358] loop4: detected capacity change from 0 to 1024 [ 162.414587][ T7358] EXT4-fs: Ignoring removed bh option [ 162.531097][ T7358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.576959][ T5640] BTRFS info (device loop3 state ES): last unmount of filesystem b110dd86-c4c8-4f2a-8cef-cf33fe5ce28f [ 162.696756][ T5641] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.876247][ T7369] vcan0: tx drop: invalid da for name 0x0000000000020000 [ 163.014565][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.059741][ T7373] netlink: 71 bytes leftover after parsing attributes in process `syz.3.526'. [ 163.981668][ T7391] netlink: 256 bytes leftover after parsing attributes in process `syz.0.532'. [ 163.981697][ T7391] netlink: 'syz.0.532': attribute type 2 has an invalid length. [ 164.458453][ T7378] loop2: detected capacity change from 0 to 32768 [ 164.513361][ T7378] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 164.726149][ T7378] XFS (loop2): Ending clean mount [ 164.759496][ T7378] XFS (loop2): Quotacheck needed: Please wait. [ 164.881781][ T7378] XFS (loop2): Quotacheck: Done. [ 165.139078][ T5642] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 166.271848][ T7412] loop3: detected capacity change from 0 to 32768 [ 166.331335][ T7412] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.574197][ T7412] XFS (loop3): Ending clean mount [ 166.623168][ T7412] XFS (loop3): Quotacheck needed: Please wait. [ 166.666183][ T7447] loop4: detected capacity change from 0 to 256 [ 166.774711][ T7449] sd 0:0:1:0: PR command failed: 1026 [ 166.774768][ T7449] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 166.774826][ T7449] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 166.867064][ T7412] XFS (loop3): Quotacheck: Done. [ 167.116144][ T33] audit: type=1400 audit(1793291063.081:38): apparmor="STATUS" info="unsupported interface version" error=-93 profile="unconfined" pid=7458 comm="syz.2.555" offset=16 [ 167.216890][ T5640] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.464095][ T7466] warning: `syz.4.559' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 167.776199][ T7453] loop1: detected capacity change from 0 to 32768 [ 167.832079][ T7453] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 167.924209][ T7453] XFS (loop1): Ending clean mount [ 168.180096][ T5641] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 168.267294][ T7464] loop2: detected capacity change from 0 to 32768 [ 168.331671][ T7464] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 168.511114][ T7464] XFS (loop2): Ending clean mount [ 168.664607][ T5642] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 168.872133][ T7506] scsi_dev_info_list_add_str: bad dev info string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' '' '' [ 169.392601][ T7514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.667831][ T7526] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 169.667831][ T7526] The task syz.0.576 (7526) triggered the difference, watch for misbehavior. [ 169.939075][ T7536] loop4: detected capacity change from 0 to 512 [ 169.952984][ T7536] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 169.953006][ T7536] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 169.953023][ T7536] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.002591][ T7536] EXT4-fs (loop4): 1 truncate cleaned up [ 170.006664][ T7536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.060425][ T7536] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.581: corrupted xattr entries [ 170.086695][ T7536] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:73: inode #15: comm syz.4.581: corrupt xattr in inline inode [ 170.113353][ T7513] loop2: detected capacity change from 0 to 32768 [ 170.136283][ T7513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.571 (7513) [ 170.168328][ T7536] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.581: corrupted xattr entries [ 170.214356][ T7540] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.581: corrupted xattr entries [ 170.230511][ T7513] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.230553][ T7513] BTRFS info (device loop2): using crc32c checksum algorithm [ 170.332901][ T5638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.399814][ T7513] BTRFS info (device loop2): setting nodatasum [ 170.399843][ T7513] BTRFS info (device loop2): allowing degraded mounts [ 170.399861][ T7513] BTRFS info (device loop2): enabling ssd optimizations [ 170.399880][ T7513] BTRFS info (device loop2): turning on async discard [ 170.399897][ T7513] BTRFS info (device loop2): enabling free space tree [ 170.476580][ T7553] loop3: detected capacity change from 0 to 4096 [ 170.492497][ T7553] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 170.559933][ T33] audit: type=1800 audit(1793291066.521:39): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.571" name="file1" dev="loop2" ino=260 res=0 errno=-22 [ 170.687063][ T7553] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 170.772099][ T5642] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.404604][ T7559] loop4: detected capacity change from 0 to 32768 [ 171.526221][ T7559] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 171.802718][ T7559] XFS (loop4): Ending clean mount [ 171.815008][ T5851] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 171.825900][ T7559] XFS (loop4): Quotacheck needed: Please wait. [ 171.922148][ T7587] ip_tables: iptables: counters copy to user failed while replacing table [ 171.974460][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 171.976538][ T5851] usb 4-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00 [ 171.976580][ T5851] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 171.979529][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.980694][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.015602][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.048375][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.055254][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.077341][ T7559] XFS (loop4): Quotacheck: Done. [ 172.080649][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.088778][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.101408][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.132524][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 172.132565][ T5851] usb 4-1: SerialNumber: syz [ 172.227707][ T5851] usb 4-1: config 0 descriptor?? [ 172.228844][ T7569] loop2: detected capacity change from 0 to 32768 [ 172.255832][ T7569] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.587 (7569) [ 172.308631][ T5851] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 172.345902][ T7569] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 172.345944][ T7569] BTRFS info (device loop2): using crc32c checksum algorithm [ 172.504193][ T5638] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 172.550286][ T4989] bcm5974 4-1:0.0: could not read from device [ 172.592052][ T5851] usb 4-1: USB disconnect, device number 4 [ 172.617597][ T7569] BTRFS info (device loop2): enabling ssd optimizations [ 172.617625][ T7569] BTRFS info (device loop2): turning on async discard [ 172.617641][ T7569] BTRFS info (device loop2): enabling free space tree [ 173.113561][ T5642] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 173.697202][ T7627] comedi comedi4: bad chanlist[0]=0x000000d1 chan=209 range length=2 [ 173.933809][ T7605] loop1: detected capacity change from 0 to 32768 [ 173.953531][ T7605] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.596 (7605) [ 174.574623][ T7605] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.574660][ T7605] BTRFS info (device loop1): using crc32c checksum algorithm [ 174.770691][ T7621] loop3: detected capacity change from 0 to 131072 [ 174.776591][ T7621] F2FS-fs (loop3): invalid crc value [ 174.901748][ T7621] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 174.902954][ T7621] loop3: lost filesystem error report for type 5 error -117 [ 174.903174][ T7621] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 174.903616][ T7621] F2FS-fs (loop3): Failed to read root inode [ 175.027233][ T7605] BTRFS info (device loop1): enabling ssd optimizations [ 175.027263][ T7605] BTRFS info (device loop1): turning on flush-on-commit [ 175.027279][ T7605] BTRFS info (device loop1): turning on async discard [ 175.027295][ T7605] BTRFS info (device loop1): enabling free space tree [ 175.027311][ T7605] BTRFS info (device loop1): enabling auto defrag [ 175.027334][ T7605] BTRFS info (device loop1): use lzo compression, level 1 [ 175.027354][ T7605] BTRFS info (device loop1): max_inline set to 4096 [ 175.407496][ T5641] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.089672][ T5785] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.231659][ T7676] loop4: detected capacity change from 0 to 512 [ 176.259983][ T7676] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.260016][ T7676] EXT4-fs (loop4): group descriptors corrupted! [ 176.281313][ T5785] usb 4-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 176.308402][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.308450][ T5785] usb 4-1: Product: syz [ 176.308467][ T5785] usb 4-1: Manufacturer: syz [ 176.308485][ T5785] usb 4-1: SerialNumber: syz [ 176.359868][ T5785] usb 4-1: config 0 descriptor?? [ 176.389235][ T5785] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 176.417388][ T5785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.419778][ T5785] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 176.419837][ T5785] usb 4-1: media controller created [ 176.439903][ T7673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 176.446350][ T7673] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 176.482114][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.594381][ T7673] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 176.676586][ T7668] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 176.676607][ T7668] dvb-usb: bulk message failed: -22 (7/0) [ 176.721755][ T7673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.721872][ T7673] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.761630][ T7673] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 176.788821][ T7673] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.788938][ T7673] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 176.815605][ T7673] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 176.843461][ T7673] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 176.843565][ T7673] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 176.867159][ T7673] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 176.888470][ T7673] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.890148][ T7673] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 176.914576][ T7673] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 176.950956][ T5785] DVB: Unable to find symbol mt352_attach() [ 177.028075][ T5785] DVB: Unable to find symbol nxt6000_attach() [ 177.028096][ T5785] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 177.066369][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 177.090330][ T5785] dvb-usb: schedule remote query interval to 1000 msecs. [ 177.090359][ T5785] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 177.090378][ T5785] dvb-usb: bulk message failed: -22 (7/0) [ 177.090396][ T5785] dvb-usb: bulk message failed: -22 (7/0) [ 177.096110][ T5785] usb 4-1: USB disconnect, device number 5 [ 177.247545][ T5785] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 177.581385][ T7691] sg_write: data in/out 270376/136 bytes for SCSI command 0x0-- guessing data in; [ 177.581385][ T7691] program syz.0.623 not setting count and/or reply_len properly [ 178.020249][ T5771] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 178.093680][ T7712] netlink: 64 bytes leftover after parsing attributes in process `syz.2.633'. [ 178.171443][ T5771] usb 2-1: not running at top speed; connect to a high speed hub [ 178.171495][ T5771] usb 2-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 178.174246][ T5771] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.174280][ T5771] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 178.174340][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.262770][ T5771] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 178.443647][ T5652] Bluetooth: hci1: command 0x0c1a tx timeout [ 178.493181][ T5771] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC error code control 1 on unit 1: -71 (exp. 1). [ 178.495419][ T5771] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 178.495980][ T5771] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 178.496082][ T5771] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 178.555415][ T5771] usb 2-1: USB disconnect, device number 4 [ 178.704574][ T7710] loop4: detected capacity change from 0 to 40427 [ 178.722465][ T7710] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 178.722496][ T7710] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 178.747939][ T7710] F2FS-fs (loop4): invalid crc value [ 178.770203][ T5652] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.840183][ T5652] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.930004][ T5652] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.930071][ T5652] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.990952][ T7710] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 179.044651][ T7710] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 179.044688][ T7710] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 179.116158][ T33] audit: type=1400 audit(1793291075.071:40): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=7730 comm="syz.2.640" [ 179.417570][ T5638] syz-executor: attempt to access beyond end of device [ 179.417570][ T5638] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.424667][ T5638] CPU: 0 UID: 0 PID: 5638 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 179.424817][ T5638] Tainted: [L]=SOFTLOCKUP [ 179.424849][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 179.424885][ T5638] Call Trace: [ 179.424916][ T5638] [ 179.424948][ T5638] dump_stack_lvl+0xe8/0x150 [ 179.425068][ T5638] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 179.425185][ T5638] f2fs_write_end_bio+0x118e/0x15d0 [ 179.425303][ T5638] __submit_merged_bio+0x258/0x6a0 [ 179.425442][ T5638] ? rcu_is_watching+0x16/0xb0 [ 179.425564][ T5638] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 179.425679][ T5638] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 179.425866][ T5638] f2fs_write_data_pages+0x2a13/0x36e0 [ 179.426075][ T5638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.426212][ T5638] ? is_bpf_text_address+0x292/0x2b0 [ 179.426286][ T5638] ? is_bpf_text_address+0x26/0x2b0 [ 179.426462][ T5638] ? stack_trace_save+0xa9/0x100 [ 179.426546][ T5638] ? __pfx_stack_trace_save+0x10/0x10 [ 179.426694][ T5638] ? lockdep_unlock+0x5c/0xd0 [ 179.426765][ T5638] ? __lock_acquire+0x1511/0x2de0 [ 179.426949][ T5638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.427043][ T5638] do_writepages+0x338/0x560 [ 179.427156][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 179.427255][ T5638] filemap_fdatawrite+0x1e9/0x2f0 [ 179.427346][ T5638] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.427604][ T5638] ? do_raw_spin_unlock+0xf5/0x200 [ 179.427697][ T5638] f2fs_sync_dirty_inodes+0x471/0x970 [ 179.427969][ T5638] f2fs_write_checkpoint+0x867/0x24d0 [ 179.428207][ T5638] kill_f2fs_super+0x2df/0x700 [ 179.428481][ T5638] ? rcu_do_enqueue+0x616/0x870 [ 179.428567][ T5638] ? lockdep_hardirqs_on+0x7b/0x110 [ 179.428672][ T5638] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.428785][ T5638] ? __pfx_call_rcu+0x10/0x10 [ 179.428854][ T5638] ? shrinker_free+0x2a7/0x3b0 [ 179.428939][ T5638] deactivate_locked_super+0xbe/0x110 [ 179.429040][ T5638] cleanup_mnt+0x204/0x2a0 [ 179.429289][ T5638] task_work_run+0x1d9/0x260 [ 179.429413][ T5638] ? __pfx_task_work_run+0x10/0x10 [ 179.429526][ T5638] exit_to_user_mode_loop+0x204/0x770 [ 179.429629][ T5638] ? rcu_is_watching+0x16/0xb0 [ 179.429750][ T5638] do_syscall_64+0x328/0x520 [ 179.429832][ T5638] ? trace_irq_disable+0x3b/0x140 [ 179.429925][ T5638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.429986][ T5638] ? clear_bhb_loop+0x70/0xc0 [ 179.430069][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.430139][ T5638] RIP: 0033:0x7fa960da0797 [ 179.430209][ T5638] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.430269][ T5638] RSP: 002b:00007ffe804ea298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.430382][ T5638] RAX: 0000000000000000 RBX: 00007fa960e35f63 RCX: 00007fa960da0797 [ 179.430437][ T5638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe804ea350 [ 179.430490][ T5638] RBP: 00007ffe804ea350 R08: 00007ffe804eb350 R09: 00000000ffffffff [ 179.430529][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe804eb3e0 [ 179.430573][ T5638] R13: 00007fa960e35f63 R14: 000000000002bbb1 R15: 00007ffe804eb420 [ 179.430673][ T5638] [ 179.439192][ T5638] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 180.519437][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.547350][ T7751] loop1: detected capacity change from 0 to 2048 [ 180.617908][ T7751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.618029][ T7751] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.733013][ T7759] xt_hashlimit: size too large, truncated to 1048576 [ 180.826977][ T7760] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.649: bg 0: block 345: padding at end of block bitmap is not set [ 180.844889][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.870574][ T7760] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 180.870615][ T7760] EXT4-fs (loop1): This should not happen!! Data will be lost [ 180.870615][ T7760] [ 180.870634][ T7760] EXT4-fs (loop1): Total free blocks count 0 [ 180.870651][ T7760] EXT4-fs (loop1): Free/Dirty block details [ 180.870693][ T7760] EXT4-fs (loop1): free_blocks=0 [ 180.870729][ T7760] EXT4-fs (loop1): dirty_blocks=176 [ 180.870745][ T7760] EXT4-fs (loop1): Block reservation details [ 180.870760][ T7760] EXT4-fs (loop1): i_reserved_data_blocks=11 [ 180.878319][ T7761] xt_hashlimit: size too large, truncated to 1048576 [ 180.922179][ T56] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.011183][ T56] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.011972][ T56] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.040451][ T5771] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.081595][ T1018] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 158 with error 28 [ 181.191282][ T5771] usb 4-1: Using ep0 maxpacket: 32 [ 181.193247][ T5771] usb 4-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 181.195147][ T5771] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 181.195178][ T5771] usb 4-1: config 0 has no interface number 0 [ 181.195227][ T5771] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.195261][ T5771] usb 4-1: config 0 interface 85 has no altsetting 0 [ 181.198198][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.198227][ T5771] usb 4-1: Product: syz [ 181.198245][ T5771] usb 4-1: Manufacturer: syz [ 181.198262][ T5771] usb 4-1: SerialNumber: syz [ 181.294291][ T5771] usb 4-1: config 0 descriptor?? [ 181.400109][ T7748] loop2: detected capacity change from 0 to 32768 [ 181.474114][ T7771] TCP: tcp_parse_options: Illegal window scaling value 75 > 14 received [ 181.474141][ T7771] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 181.578666][ T7748] read_mapping_page failed! [ 181.578728][ T7748] ERROR: (device loop2): txCommit: [ 181.578728][ T7748] [ 181.596397][ T7748] ERROR: (device loop2): remounting filesystem as read-only [ 181.672600][ T126] BUG at fs/jfs/jfs_txnmgr.c:933 assert(mp->nohomeok > 0) [ 181.673252][ T126] ------------[ cut here ]------------ [ 181.673267][ T126] kernel BUG at fs/jfs/jfs_txnmgr.c:933! [ 181.673327][ T126] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 181.698826][ T126] CPU: 1 UID: 0 PID: 126 Comm: jfsCommit Tainted: G L syzkaller #0 PREEMPT(full) [ 181.709648][ T126] Tainted: [L]=SOFTLOCKUP [ 181.714021][ T126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 181.724596][ T126] RIP: 0010:txUnlock+0xd95/0xde0 [ 181.729872][ T126] Code: a6 fd 90 0f 0b e8 4b 04 48 fe 48 c7 c7 20 c7 6e 8c 48 c7 c6 19 c3 6e 8c ba a5 03 00 00 48 c7 c1 20 d4 6e 8c e8 9c aa a6 fd 90 <0f> 0b e8 24 04 48 fe 48 c7 c7 20 c7 6e 8c 48 c7 c6 19 c3 6e 8c ba [ 181.750146][ T126] RSP: 0018:ffffc90002dcfc48 EFLAGS: 00010246 [ 181.756979][ T126] RAX: 0000000000000037 RBX: ffff888056dfc488 RCX: 854ac49abdfc7700 [ 181.765002][ T126] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 181.773036][ T126] RBP: 1ffff1100adbf891 R08: ffffc90002dcf9c7 R09: 1ffff920005b9f38 [ 181.781587][ T126] R10: dffffc0000000000 R11: fffff520005b9f39 R12: ffffc90002932090 [ 181.789724][ T126] R13: dffffc0000000000 R14: 0000000000000012 R15: 0000000000000000 [ 181.798369][ T126] FS: 0000000000000000(0000) GS:ffff88812350d000(0000) knlGS:0000000000000000 [ 181.808648][ T126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.815472][ T126] CR2: 000000110c3e1f2c CR3: 00000000566d2000 CR4: 00000000003526f0 [ 181.823856][ T126] Call Trace: [ 181.827548][ T126] [ 181.830931][ T126] ? preempt_schedule_thunk+0x16/0x40 [ 181.836383][ T126] jfs_lazycommit+0x59f/0xac0 [ 181.841228][ T126] ? __pfx_jfs_lazycommit+0x10/0x10 [ 181.846496][ T126] ? __pfx_default_wake_function+0x10/0x10 [ 181.852414][ T126] ? __kthread_parkme+0x71/0x1f0 [ 181.857592][ T126] ? __kthread_parkme+0x199/0x1f0 [ 181.862730][ T126] kthread+0x38b/0x480 [ 181.867220][ T126] ? __pfx_jfs_lazycommit+0x10/0x10 [ 181.872493][ T126] ? __pfx_kthread+0x10/0x10 [ 181.877138][ T126] ret_from_fork+0x514/0xb70 [ 181.881885][ T126] ? __pfx_ret_from_fork+0x10/0x10 [ 181.887063][ T126] ? __switch_to+0xc78/0x1410 [ 181.891815][ T126] ? __pfx_kthread+0x10/0x10 [ 181.896464][ T126] ret_from_fork_asm+0x1a/0x30 [ 181.901590][ T126] [ 181.904652][ T126] Modules linked in: [ 181.909887][ T126] ---[ end trace 0000000000000000 ]--- [ 181.936467][ T126] RIP: 0010:txUnlock+0xd95/0xde0 [ 181.936517][ T126] Code: a6 fd 90 0f 0b e8 4b 04 48 fe 48 c7 c7 20 c7 6e 8c 48 c7 c6 19 c3 6e 8c ba a5 03 00 00 48 c7 c1 20 d4 6e 8c e8 9c aa a6 fd 90 <0f> 0b e8 24 04 48 fe 48 c7 c7 20 c7 6e 8c 48 c7 c6 19 c3 6e 8c ba [ 181.936547][ T126] RSP: 0018:ffffc90002dcfc48 EFLAGS: 00010246 [ 181.936570][ T126] RAX: 0000000000000037 RBX: ffff888056dfc488 RCX: 854ac49abdfc7700 [ 181.936589][ T126] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 181.936606][ T126] RBP: 1ffff1100adbf891 R08: ffffc90002dcf9c7 R09: 1ffff920005b9f38 [ 181.936625][ T126] R10: dffffc0000000000 R11: fffff520005b9f39 R12: ffffc90002932090 [ 181.936644][ T126] R13: dffffc0000000000 R14: 0000000000000012 R15: 0000000000000000 [ 181.936661][ T126] FS: 0000000000000000(0000) GS:ffff88812350d000(0000) knlGS:0000000000000000 [ 181.936682][ T126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.936700][ T126] CR2: 00007fa961027dac CR3: 00000000566d2000 CR4: 00000000003526f0 [ 181.936725][ T126] Kernel panic - not syncing: Fatal exception [ 183.261036][ T126] Shutting down cpus with NMI [ 183.266433][ T126] Kernel Offset: disabled [ 183.270817][ T126] Rebooting in 86400 seconds..