last executing test programs: 7.284663971s ago: executing program 2 (id=641): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000200)={[{@noquota}]}, 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 6.775327926s ago: executing program 2 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000100), 0x0}, 0x20) 6.438311909s ago: executing program 2 (id=651): syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0x58d7, &(0x7f000000b240)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000540)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3.590683953s ago: executing program 2 (id=689): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5, 0x401}) 3.229950983s ago: executing program 0 (id=695): r0 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0245720, &(0x7f0000000000)={0x1000000}) 3.159697729s ago: executing program 3 (id=697): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 3.038519936s ago: executing program 0 (id=698): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) 2.848473523s ago: executing program 0 (id=702): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000280)) 2.651689696s ago: executing program 0 (id=704): setresuid(0x0, 0xee01, 0x0) mlockall(0x3) 2.435943069s ago: executing program 0 (id=706): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000002a82, 0x0) fadvise64(r0, 0x4000000000000017, 0x81, 0x7) 2.195044409s ago: executing program 0 (id=709): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone3(&(0x7f00000002c0)={0xca082480, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.447913705s ago: executing program 1 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0x74}}, 0x0) 1.256908967s ago: executing program 3 (id=718): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x1000000}}) 1.238317376s ago: executing program 1 (id=719): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x6, 0x4, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @loopback, @private0]}, 0x38) 1.120313577s ago: executing program 4 (id=720): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}}, 0x0) 983.91324ms ago: executing program 1 (id=721): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) 920.039854ms ago: executing program 3 (id=722): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 919.400507ms ago: executing program 4 (id=723): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x70051b8, "8f5151239582"}}) 774.707946ms ago: executing program 4 (id=724): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 769.633283ms ago: executing program 1 (id=725): r0 = socket(0x200000100000011, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x44, 0x7, 0xc, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x81, 0x5}}) 727.453999ms ago: executing program 3 (id=726): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000180)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@unhide}, {@map_acorn}, {@overriderock}, {@session={'session', 0x3d, 0x9}}, {@overriderock}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@mode={'mode', 0x3d, 0x94b}}, {@unhide}, {@hide}, {@unhide}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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") open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 533.213146ms ago: executing program 2 (id=727): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00, 0x800}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@local]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x44}}, 0x40000) 532.474106ms ago: executing program 1 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x0, 0x4, {0x2}, [@NDA_NH_ID={0x8, 0xd, 0x7}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}}, 0x0) 406.280045ms ago: executing program 4 (id=729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010100000000000000000000000a58000000090a030000000000000000000004000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021080003400000005408000f400000000a0c000b"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 397.590317ms ago: executing program 3 (id=730): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000c10701000000000000000a0000000900020054495043"], 0x7b}}, 0x8000) 239.16229ms ago: executing program 4 (id=731): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000440)={0x0, 0x86a1, 0x1, 0x8, 0xf7}, &(0x7f0000010080), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) 138.060496ms ago: executing program 1 (id=732): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000240)="020000", 0x3}, {&(0x7f0000000540)="009a", 0x2}], 0x2, 0x0, 0x0) 130.429156ms ago: executing program 2 (id=733): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0274206000400ff9782062f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 87.594329ms ago: executing program 3 (id=734): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x1, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 0s ago: executing program 4 (id=735): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 81.848223][ T5817] cgroup: Unknown subsys name 'net' [ 81.990570][ T5817] cgroup: Unknown subsys name 'cpuset' [ 81.999857][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.729354][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.566380][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.576980][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.584976][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.597105][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.605638][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.736323][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.744509][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.752736][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.761660][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.769910][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.798020][ T5149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.810575][ T5149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.818394][ T5149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.826928][ T5149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.834669][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.888302][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.899796][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.912400][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.921421][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.930565][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.979038][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.987189][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.994899][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.004241][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.014075][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.608490][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 87.714304][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.785342][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 87.902483][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.910385][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.918311][ T5827] bridge_slave_0: entered allmulticast mode [ 87.926042][ T5827] bridge_slave_0: entered promiscuous mode [ 87.968686][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.979281][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.986533][ T5827] bridge_slave_1: entered allmulticast mode [ 87.993770][ T5827] bridge_slave_1: entered promiscuous mode [ 88.043208][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.078565][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.125064][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.238859][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.246044][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.253731][ T5834] bridge_slave_0: entered allmulticast mode [ 88.260957][ T5834] bridge_slave_0: entered promiscuous mode [ 88.288888][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.296275][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.303646][ T5832] bridge_slave_0: entered allmulticast mode [ 88.311136][ T5832] bridge_slave_0: entered promiscuous mode [ 88.329345][ T5827] team0: Port device team_slave_0 added [ 88.335689][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.343440][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.351408][ T5834] bridge_slave_1: entered allmulticast mode [ 88.360141][ T5834] bridge_slave_1: entered promiscuous mode [ 88.392230][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.399515][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.407475][ T5832] bridge_slave_1: entered allmulticast mode [ 88.414619][ T5832] bridge_slave_1: entered promiscuous mode [ 88.424581][ T5827] team0: Port device team_slave_1 added [ 88.504810][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.511999][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.542007][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.556013][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.563329][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.589536][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.604042][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.629702][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 88.644007][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.664676][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.710604][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.717309][ T5830] Bluetooth: hci0: command tx timeout [ 88.764180][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.772056][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.780132][ T5837] bridge_slave_0: entered allmulticast mode [ 88.788349][ T5837] bridge_slave_0: entered promiscuous mode [ 88.797331][ T5830] Bluetooth: hci1: command tx timeout [ 88.828210][ T5832] team0: Port device team_slave_0 added [ 88.837391][ T5834] team0: Port device team_slave_0 added [ 88.843533][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.850983][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.858229][ T5837] bridge_slave_1: entered allmulticast mode [ 88.865297][ T5837] bridge_slave_1: entered promiscuous mode [ 88.876291][ T5830] Bluetooth: hci2: command tx timeout [ 88.922445][ T5832] team0: Port device team_slave_1 added [ 88.931426][ T5834] team0: Port device team_slave_1 added [ 88.954184][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.956779][ T5830] Bluetooth: hci3: command tx timeout [ 88.980055][ T5827] hsr_slave_0: entered promiscuous mode [ 88.986998][ T5827] hsr_slave_1: entered promiscuous mode [ 89.021551][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.066993][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.073977][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.100375][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.116347][ T5830] Bluetooth: hci4: command tx timeout [ 89.171109][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.178652][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.205035][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.224879][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.231999][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.258045][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.270907][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.278123][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.304293][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.319322][ T5837] team0: Port device team_slave_0 added [ 89.338798][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.346590][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.353801][ T5839] bridge_slave_0: entered allmulticast mode [ 89.361270][ T5839] bridge_slave_0: entered promiscuous mode [ 89.370289][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.377943][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.385111][ T5839] bridge_slave_1: entered allmulticast mode [ 89.392937][ T5839] bridge_slave_1: entered promiscuous mode [ 89.425451][ T5837] team0: Port device team_slave_1 added [ 89.485837][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.551559][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.593607][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.601083][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.628137][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.644029][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.651153][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.681776][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.707445][ T5832] hsr_slave_0: entered promiscuous mode [ 89.713741][ T5832] hsr_slave_1: entered promiscuous mode [ 89.723448][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.731294][ T5832] Cannot create hsr debugfs directory [ 89.783843][ T5834] hsr_slave_0: entered promiscuous mode [ 89.795298][ T5834] hsr_slave_1: entered promiscuous mode [ 89.802321][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.810377][ T5834] Cannot create hsr debugfs directory [ 89.856643][ T5839] team0: Port device team_slave_0 added [ 89.865276][ T5839] team0: Port device team_slave_1 added [ 89.965157][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.972977][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.999316][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.070431][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.077905][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.104947][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.134120][ T5837] hsr_slave_0: entered promiscuous mode [ 90.140578][ T5837] hsr_slave_1: entered promiscuous mode [ 90.147089][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.154657][ T5837] Cannot create hsr debugfs directory [ 90.391377][ T5839] hsr_slave_0: entered promiscuous mode [ 90.398920][ T5839] hsr_slave_1: entered promiscuous mode [ 90.405024][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.413814][ T5839] Cannot create hsr debugfs directory [ 90.617638][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.650900][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.663108][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.708561][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.800553][ T5830] Bluetooth: hci0: command tx timeout [ 90.812655][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.823806][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.848468][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.876736][ T5830] Bluetooth: hci1: command tx timeout [ 90.896485][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.957319][ T5830] Bluetooth: hci2: command tx timeout [ 90.990642][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.002736][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.029789][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.036931][ T5830] Bluetooth: hci3: command tx timeout [ 91.068517][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.131952][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.164612][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.188341][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.196469][ T5830] Bluetooth: hci4: command tx timeout [ 91.208613][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.313269][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.337206][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.348014][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.361157][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.390111][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.443892][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.479125][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.530730][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.538036][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.560258][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.567451][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.617773][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.665063][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.672257][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.711334][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.739827][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.746984][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.765428][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.789569][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.799969][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.807664][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.834062][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.841245][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.903362][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.948773][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.956041][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.005379][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.012668][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.023812][ T24] cfg80211: failed to load regulatory.db [ 92.061320][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.174588][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.227550][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.280976][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.288235][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.374216][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.381474][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.777496][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.802383][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.883386][ T5830] Bluetooth: hci0: command tx timeout [ 92.963435][ T5830] Bluetooth: hci1: command tx timeout [ 92.991142][ T5837] veth0_vlan: entered promiscuous mode [ 93.037316][ T5830] Bluetooth: hci2: command tx timeout [ 93.069702][ T5837] veth1_vlan: entered promiscuous mode [ 93.111605][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.120477][ T5830] Bluetooth: hci3: command tx timeout [ 93.149199][ T5832] veth0_vlan: entered promiscuous mode [ 93.183130][ T5832] veth1_vlan: entered promiscuous mode [ 93.234439][ T5827] veth0_vlan: entered promiscuous mode [ 93.255192][ T5827] veth1_vlan: entered promiscuous mode [ 93.276697][ T5830] Bluetooth: hci4: command tx timeout [ 93.313213][ T5837] veth0_macvtap: entered promiscuous mode [ 93.331700][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.349233][ T5827] veth0_macvtap: entered promiscuous mode [ 93.360770][ T5837] veth1_macvtap: entered promiscuous mode [ 93.373252][ T5834] veth0_vlan: entered promiscuous mode [ 93.389464][ T5832] veth0_macvtap: entered promiscuous mode [ 93.413072][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.428286][ T5827] veth1_macvtap: entered promiscuous mode [ 93.441242][ T5832] veth1_macvtap: entered promiscuous mode [ 93.453346][ T5834] veth1_vlan: entered promiscuous mode [ 93.465690][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.502615][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.512462][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.543286][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.552225][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.595218][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.615989][ T5839] veth0_vlan: entered promiscuous mode [ 93.624090][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.659546][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.669620][ T5834] veth0_macvtap: entered promiscuous mode [ 93.689284][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.705225][ T5839] veth1_vlan: entered promiscuous mode [ 93.730259][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.752696][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.763554][ T5834] veth1_macvtap: entered promiscuous mode [ 93.792232][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.826638][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.854432][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.863684][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.885801][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.895673][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.903835][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.912734][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.953307][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.023597][ T5928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.035366][ T5928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.054315][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.086074][ T5839] veth0_macvtap: entered promiscuous mode [ 94.124615][ T5928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.140900][ T5839] veth1_macvtap: entered promiscuous mode [ 94.175485][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.200763][ T5928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.212747][ T5928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.222317][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.237474][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.252921][ T5928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.282723][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.319325][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.378075][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.415587][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.426002][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.466337][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.495680][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.512156][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.565631][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.575889][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.593330][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.615222][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.722061][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.739610][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.881900][ T5952] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.941695][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.957925][ T5830] Bluetooth: hci0: command tx timeout [ 94.962439][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.967127][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.036745][ T5830] Bluetooth: hci1: command tx timeout [ 95.082990][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.117871][ T5830] Bluetooth: hci2: command tx timeout [ 95.129458][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.186991][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.198885][ T5830] Bluetooth: hci3: command tx timeout [ 95.216306][ T5891] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.240329][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.249834][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.301337][ T5949] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.356966][ T5830] Bluetooth: hci4: command tx timeout [ 95.391251][ T5891] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.585147][ T5963] loop2: detected capacity change from 0 to 64 [ 95.665471][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.715947][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.759085][ T30] audit: type=1800 audit(1750704334.145:2): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 95.859061][ T9] usb 5-1: USB disconnect, device number 2 [ 96.483258][ T5976] @ÿ: renamed from vlan0 (while UP) [ 96.711072][ T5956] loop0: detected capacity change from 0 to 32768 [ 96.906279][ T5828] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.096391][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 97.156804][ T5828] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 97.228563][ T5828] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 97.256811][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 97.282756][ T5828] usb 5-1: Product: syz [ 97.300813][ T5828] usb 5-1: Manufacturer: syz [ 97.305485][ T5828] usb 5-1: SerialNumber: syz [ 97.355327][ T5828] usb 5-1: config 0 descriptor?? [ 97.403515][ T5981] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.439523][ T5828] hub 5-1:0.0: bad descriptor, ignoring hub [ 97.473740][ T5828] hub 5-1:0.0: probe with driver hub failed with error -5 [ 97.569451][ T5998] netlink: 'syz.3.18': attribute type 4 has an invalid length. [ 97.651015][ T5998] netlink: 152 bytes leftover after parsing attributes in process `syz.3.18'. [ 97.725071][ T5998] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 97.826541][ T10] usb 5-1: USB disconnect, device number 3 [ 97.887972][ T6006] loop2: detected capacity change from 0 to 64 [ 98.139274][ T5974] loop1: detected capacity change from 0 to 32768 [ 98.332564][ T5974] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 98.367725][ T5974] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 98.458957][ T6018] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 98.474351][ T6019] loop2: detected capacity change from 0 to 4096 [ 98.534686][ T6018] overlayfs: missing 'lowerdir' [ 98.545724][ T6019] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 98.652733][ T5974] XFS (loop1): Ending clean mount [ 98.740357][ T5974] XFS (loop1): Quotacheck needed: Please wait. [ 98.837169][ T6019] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 98.879930][ T5974] XFS (loop1): Quotacheck: Done. [ 99.214776][ T5834] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.386054][ T6039] warning: `syz.2.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.602941][ T6004] loop0: detected capacity change from 0 to 32768 [ 99.666567][ T6004] XFS: ikeep mount option is deprecated. [ 99.707510][ T6043] netlink: 292 bytes leftover after parsing attributes in process `syz.4.32'. [ 99.737467][ T6043] netlink: 144 bytes leftover after parsing attributes in process `syz.4.32'. [ 99.763214][ T6004] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.766885][ T6041] loop3: detected capacity change from 0 to 4096 [ 99.816278][ T6041] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 99.911297][ T6004] XFS (loop0): Ending clean mount [ 99.970352][ T6004] XFS (loop0): Quotacheck needed: Please wait. [ 100.163762][ T6004] XFS (loop0): Quotacheck: Done. [ 100.262896][ T6064] loop1: detected capacity change from 0 to 8 [ 100.354645][ T5832] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.601277][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.38'. [ 100.651538][ T6072] netlink: 212 bytes leftover after parsing attributes in process `syz.2.38'. [ 100.799862][ T6078] loop1: detected capacity change from 0 to 256 [ 100.883597][ T6078] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 100.995749][ T6075] netlink: set zone limit has 4 unknown bytes [ 101.235549][ T6083] wlan0 speed is unknown, defaulting to 1000 [ 101.273710][ T6083] wlan0 speed is unknown, defaulting to 1000 [ 101.286906][ T927] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.301142][ T6083] wlan0 speed is unknown, defaulting to 1000 [ 101.341443][ T6083] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.425526][ T6083] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.455758][ T6091] netlink: 'syz.4.47': attribute type 2 has an invalid length. [ 101.468957][ T927] usb 2-1: Using ep0 maxpacket: 8 [ 101.474505][ T6091] netlink: 132 bytes leftover after parsing attributes in process `syz.4.47'. [ 101.487382][ T927] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 101.526200][ T927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 34821, setting to 1024 [ 101.552202][ T927] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 101.593545][ T927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.594571][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.613827][ T6095] IPv6: NLM_F_CREATE should be set when creating new route [ 101.614657][ T6093] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 101.621202][ T6095] IPv6: NLM_F_CREATE should be set when creating new route [ 101.630672][ T6083] wlan0 speed is unknown, defaulting to 1000 [ 101.639672][ T927] usb 2-1: New USB device found, idVendor=0582, idProduct=00f0, bcdDevice=c7.3d [ 101.660388][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.677537][ T6083] wlan0 speed is unknown, defaulting to 1000 [ 101.694833][ T6083] wlan0 speed is unknown, defaulting to 1000 [ 101.701564][ T927] usb 2-1: Product: syz [ 101.703246][ T6083] wlan0 speed is unknown, defaulting to 1000 [ 101.705762][ T927] usb 2-1: Manufacturer: syz [ 101.705780][ T927] usb 2-1: SerialNumber: syz [ 101.761077][ T927] usb 2-1: config 0 descriptor?? [ 101.768628][ T6083] wlan0 speed is unknown, defaulting to 1000 [ 101.786725][ T6078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.176686][ T927] usb 2-1: USB disconnect, device number 2 [ 102.489163][ T6121] loop0: detected capacity change from 0 to 512 [ 102.508578][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.524858][ T6121] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.555241][ T6121] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 102.566413][ T6123] wg1 speed is unknown, defaulting to 1000 [ 102.572343][ T6123] wg1 speed is unknown, defaulting to 1000 [ 102.578462][ T6125] loop3: detected capacity change from 0 to 128 [ 102.655306][ T6121] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 102.685052][ T6123] wg1 speed is unknown, defaulting to 1000 [ 102.699775][ T6121] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.734843][ T6121] EXT4-fs (loop0): 1 truncate cleaned up [ 102.766828][ T6121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.787058][ T6129] netlink: 88 bytes leftover after parsing attributes in process `syz.4.65'. [ 102.818082][ T6129] netlink: 88 bytes leftover after parsing attributes in process `syz.4.65'. [ 102.824986][ T6123] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 102.912282][ T6123] wg1 speed is unknown, defaulting to 1000 [ 102.944266][ T6123] wg1 speed is unknown, defaulting to 1000 [ 103.028332][ T6123] wg1 speed is unknown, defaulting to 1000 [ 103.097776][ T6123] wg1 speed is unknown, defaulting to 1000 [ 103.136366][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.183406][ T6123] wg1 speed is unknown, defaulting to 1000 [ 103.362707][ T6141] netlink: 'syz.1.71': attribute type 1 has an invalid length. [ 103.403378][ T6141] netlink: 224 bytes leftover after parsing attributes in process `syz.1.71'. [ 103.666943][ T6149] openvswitch: netlink: Message has 736 unknown bytes. [ 103.956627][ T6163] netlink: 'syz.2.80': attribute type 10 has an invalid length. [ 103.986268][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.80'. [ 104.038560][ T6163] batman_adv: batadv0: Adding interface: vlan1 [ 104.074006][ T6163] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.120920][ T6163] batman_adv: batadv0: Interface activated: vlan1 [ 104.387768][ T6175] lo: entered promiscuous mode [ 104.406998][ T6175] tunl0: entered promiscuous mode [ 104.424562][ T6175] gre0: entered promiscuous mode [ 104.442067][ T6175] gretap0: entered promiscuous mode [ 104.467134][ T6175] erspan0: entered promiscuous mode [ 104.489324][ T6175] ip_vti0: entered promiscuous mode [ 104.508701][ T6175] ip6_vti0: entered promiscuous mode [ 104.557729][ T6175] sit0: entered promiscuous mode [ 104.564585][ T6175] ip6tnl0: entered promiscuous mode [ 104.580508][ T6175] ip6gre0: entered promiscuous mode [ 104.603720][ T6175] syz_tun: entered promiscuous mode [ 104.620169][ T6175] ip6gretap0: entered promiscuous mode [ 104.629652][ T6175] bridge0: entered promiscuous mode [ 104.641164][ T6175] vcan0: entered promiscuous mode [ 104.650038][ T6175] bond0: entered promiscuous mode [ 104.664626][ T6175] bond_slave_0: entered promiscuous mode [ 104.684254][ T6175] bond_slave_1: entered promiscuous mode [ 104.693075][ T6175] team0: entered promiscuous mode [ 104.698749][ T6175] team_slave_0: entered promiscuous mode [ 104.705495][ T6175] team_slave_1: entered promiscuous mode [ 104.713052][ T6175] dummy0: entered promiscuous mode [ 104.713780][ T6155] loop1: detected capacity change from 0 to 32768 [ 104.722703][ T6175] nlmon0: entered promiscuous mode [ 104.745197][ T6175] caif0: entered promiscuous mode [ 104.755550][ T6175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.755672][ T6155] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 104.826464][ T927] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.987891][ T927] usb 4-1: Using ep0 maxpacket: 8 [ 105.013917][ T6155] XFS (loop1): Ending clean mount [ 105.026338][ T927] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 105.051313][ T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 105.070198][ T927] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 105.089381][ T6155] XFS (loop1): Quotacheck needed: Please wait. [ 105.105837][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.116071][ T927] usb 4-1: Product: syz [ 105.117410][ T5891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.134387][ T927] usb 4-1: Manufacturer: syz [ 105.152117][ T927] usb 4-1: SerialNumber: syz [ 105.185538][ T927] usb 4-1: config 0 descriptor?? [ 105.204834][ T6155] XFS (loop1): Quotacheck: Done. [ 105.242251][ T927] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 105.327169][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 105.366692][ T5891] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 105.375098][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.394292][ T5891] usb 1-1: config 0 has no interface number 0 [ 105.403343][ T5834] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 105.413225][ T5891] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 105.426036][ T5891] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 105.459937][ T5891] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.473157][ T5891] usb 1-1: config 0 interface 52 has no altsetting 0 [ 105.482245][ T5891] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 105.496267][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 105.513267][ T5891] usb 1-1: SerialNumber: syz [ 105.522864][ T5891] usb 1-1: config 0 descriptor?? [ 105.761580][ T5891] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 105.796418][ T5891] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5 [ 105.989705][ T5899] usb 1-1: USB disconnect, device number 2 [ 106.041993][ T6216] loop4: detected capacity change from 0 to 512 [ 106.092880][ T6216] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.118864][ T6216] EXT4-fs (loop4): orphan cleanup on readonly fs [ 106.139651][ T6216] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 106.165904][ T6216] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 106.178114][ T6216] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.104: bad orphan inode 768 [ 106.200771][ T6220] loop1: detected capacity change from 0 to 2048 [ 106.239296][ T6216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.298541][ T6216] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 106.313831][ T6223] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.352590][ T6220] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=0, inode=35184372097012, rec_len=8192, name_len=0 [ 106.387744][ T6216] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 106.390097][ T6220] Remounting filesystem read-only [ 106.480772][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.678112][ T6230] 8021q: VLANs not supported on lo [ 106.946382][ T5828] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.117686][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 107.135038][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.152832][ T5828] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 107.172631][ T5828] usb 1-1: config 0 has no interface number 0 [ 107.190912][ T5828] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 107.204102][ T6245] netlink: 'syz.1.116': attribute type 32 has an invalid length. [ 107.223370][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 107.232700][ T5828] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 107.252454][ T5828] usb 1-1: config 0 interface 88 has no altsetting 0 [ 107.273625][ T5828] usb 1-1: language id specifier not provided by device, defaulting to English [ 107.303707][ T5828] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 107.318927][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 107.346294][ T5828] usb 1-1: Product: syz [ 107.351716][ T5828] usb 1-1: SerialNumber: syz [ 107.399386][ T5828] usb 1-1: config 0 descriptor?? [ 107.504095][ T6235] loop2: detected capacity change from 0 to 32768 [ 107.587300][ T6253] xt_socket: unknown flags 0x8 [ 107.605035][ T10] usb 4-1: USB disconnect, device number 2 [ 107.685006][ T6232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.801398][ T5828] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input6 [ 107.832530][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 107.872146][ T6260] netlink: 60 bytes leftover after parsing attributes in process `syz.4.120'. [ 107.910939][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 107.952446][ T5828] usb 1-1: USB disconnect, device number 3 [ 107.977869][ T6260] netlink: 60 bytes leftover after parsing attributes in process `syz.4.120'. [ 108.063329][ T6235] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 108.063364][ T6235] allowing incompatible features above 0.0: (unknown version) [ 108.063375][ T6235] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 108.096364][ T6260] netlink: 104 bytes leftover after parsing attributes in process `syz.4.120'. [ 108.321818][ T6235] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 108.346406][ T6235] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 108.360754][ T6235] bcachefs (loop2): Version upgrade required: [ 108.360754][ T6235] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 108.360754][ T6235] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 108.360754][ T6235] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 108.677144][ T6235] bcachefs (loop2): dropping and reconstructing all alloc info [ 108.767459][ T6235] bcachefs (loop2): accounting_read... done [ 108.806289][ T6235] bcachefs (loop2): alloc_read... done [ 108.813453][ T6235] bcachefs (loop2): snapshots_read... done [ 108.833416][ T6235] bcachefs (loop2): check_allocations... [ 108.976387][ T6292] AppArmor: change_hat: Invalid input '0' [ 108.992157][ T6235] done [ 109.035285][ T6235] bcachefs (loop2): going read-write [ 109.166511][ T6235] bcachefs (loop2): done starting filesystem [ 109.475481][ T6278] loop3: detected capacity change from 0 to 32768 [ 109.498881][ T6235] bcachefs (loop2): inode 536870912 i_sectors underflow: 8 + -32 < 0 [ 109.613329][ T6278] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.686908][ T6235] bcachefs (loop2): inode 536870912 i_blocks underflow: 8 + -32 < 0 (ondisk 8) [ 109.725976][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.138'. [ 109.759677][ T6235] syz.2.112 (6235) used greatest stack depth: 17016 bytes left [ 109.776880][ T6317] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 109.793781][ T6278] XFS (loop3): Ending clean mount [ 109.804878][ T5837] bcachefs (loop2): shutting down [ 109.817070][ T5837] bcachefs (loop2): going read-only [ 109.823383][ T5837] bcachefs (loop2): finished waiting for writes to stop [ 109.852427][ T5837] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 109.873229][ T6320] binder: 6319:6320 ioctl c0306201 2000000001c0 returned -22 [ 109.903432][ T6278] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 110.031157][ T5837] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 110.102590][ T5839] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.139875][ T5837] bcachefs (loop2): unclean shutdown complete, journal seq 13 [ 110.217926][ T6303] loop1: detected capacity change from 0 to 32768 [ 110.222719][ T5837] bcachefs (loop2): done going read-only, filesystem not clean [ 110.234919][ T6303] ======================================================= [ 110.234919][ T6303] WARNING: The mand mount option has been deprecated and [ 110.234919][ T6303] and is ignored by this kernel. Remove the mand [ 110.234919][ T6303] option from the mount to silence this warning. [ 110.234919][ T6303] ======================================================= [ 110.402118][ T5837] bcachefs (loop2): shutdown complete [ 110.895846][ T6303] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 110.895873][ T6303] allowing incompatible features above 0.0: (unknown version) [ 110.895886][ T6303] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 111.073373][ T6303] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 111.112149][ T6303] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 111.178291][ T6303] bcachefs (loop1): Version upgrade required: [ 111.178291][ T6303] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 111.178291][ T6303] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 111.178291][ T6303] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 111.260224][ T6345] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 111.273632][ T6303] bcachefs (loop1): dropping and reconstructing all alloc info [ 111.403943][ T6350] [U] ^C [ 111.408247][ T6349] netlink: 'syz.2.140': attribute type 10 has an invalid length. [ 111.415997][ T6349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.140'. [ 111.441163][ T6303] bcachefs (loop1): accounting_read... done [ 111.467532][ T6303] bcachefs (loop1): alloc_read... done [ 111.469321][ T6349] bridge0: port 3(macvlan1) entered blocking state [ 111.487587][ T6303] bcachefs (loop1): snapshots_read... done [ 111.494768][ T6303] bcachefs (loop1): done starting filesystem [ 111.538512][ T6349] bridge0: port 3(macvlan1) entered disabled state [ 111.560142][ T6349] macvlan1: entered allmulticast mode [ 111.597089][ T6349] veth1_vlan: entered allmulticast mode [ 111.622180][ T6349] macvlan1: entered promiscuous mode [ 111.650963][ T6349] bridge0: port 3(macvlan1) entered blocking state [ 111.657943][ T6349] bridge0: port 3(macvlan1) entered forwarding state [ 111.855766][ T6360] loop3: detected capacity change from 0 to 256 [ 111.863551][ T5834] bcachefs (loop1): shutting down [ 112.048537][ T5834] bcachefs (loop1): shutdown complete [ 112.262971][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.161'. [ 112.857767][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 112.866793][ T6393] IPVS: length: 211 != 24 [ 112.897541][ T6392] netlink: 72 bytes leftover after parsing attributes in process `syz.0.172'. [ 112.927770][ T6392] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 113.308080][ T6401] loop4: detected capacity change from 0 to 4096 [ 113.328833][ T6401] ntfs3(loop4): It is recommened to use chkdsk. [ 113.363172][ T6401] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 113.396362][ T6401] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 113.420791][ T6401] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 113.455434][ T6401] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 113.455634][ T6413] loop2: detected capacity change from 0 to 256 [ 113.465219][ T6401] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 113.487388][ T6409] loop3: detected capacity change from 0 to 4096 [ 113.512480][ T6401] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 113.534360][ T6401] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 113.563485][ T6415] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.591379][ T6401] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 113.611151][ T6416] usb usb1: usbfs: process 6416 (syz.0.184) did not claim interface 0 before use [ 113.625833][ T6409] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 113.676065][ T6409] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 113.684243][ T6401] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 113.750336][ T6409] Remounting filesystem read-only [ 113.784074][ T6409] NILFS (loop3): error -5 truncating bmap (ino=12) [ 113.980904][ T5839] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 114.289162][ T6430] loop0: detected capacity change from 0 to 8 [ 114.343230][ T6430] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 114.450948][ T5960] udevd[5960]: incorrect cramfs checksum on /dev/loop0 [ 114.614255][ T5950] udevd[5950]: incorrect cramfs checksum on /dev/loop0 [ 114.898314][ T6445] veth2: entered allmulticast mode [ 115.223383][ T6458] loop3: detected capacity change from 0 to 1024 [ 115.311331][ T6458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.331022][ T6462] loop0: detected capacity change from 0 to 1024 [ 115.372582][ T6462] hfsplus: unable to change nls mapping [ 115.383395][ T6458] EXT4-fs warning (device loop3): ext4_empty_dir:3095: inode #11: comm syz.3.199: directory missing '..' [ 115.624923][ T6474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.203'. [ 115.748244][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.888885][ T6483] capability: warning: `syz.4.208' uses 32-bit capabilities (legacy support in use) [ 117.003514][ T6522] netlink: 'syz.4.226': attribute type 5 has an invalid length. [ 117.300294][ T6531] loop3: detected capacity change from 0 to 16 [ 117.410766][ T6531] erofs (device loop3): mounted with root inode @ nid 36. [ 117.937931][ T6541] loop2: detected capacity change from 0 to 256 [ 118.384945][ T6531] erofs (device loop3): corrupted dir block 72 @ nid 36 [ 118.536469][ T6556] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 119.315045][ T6589] loop0: detected capacity change from 0 to 16 [ 119.421611][ T6589] erofs (device loop0): mounted with root inode @ nid 36. [ 119.787710][ T30] audit: type=1326 audit(1750704358.165:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 119.865439][ T30] audit: type=1326 audit(1750704358.175:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 119.987174][ T30] audit: type=1326 audit(1750704358.175:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 120.066373][ T30] audit: type=1326 audit(1750704358.175:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 120.314316][ T6621] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 120.791713][ T6638] loop1: detected capacity change from 0 to 64 [ 120.990860][ T6641] netlink: 328 bytes leftover after parsing attributes in process `syz.2.279'. [ 121.267519][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 121.291531][ T6653] loop2: detected capacity change from 0 to 512 [ 121.332677][ T6613] loop3: detected capacity change from 0 to 32768 [ 121.377607][ T6613] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 0 transid 8 /dev/loop3 (7:3) scanned by syz.3.266 (6613) [ 121.425337][ T6653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 121.469902][ T6653] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.570340][ T6653] EXT4-fs warning (device loop2): ext4_empty_dir:3095: inode #12: comm syz.2.283: directory missing '..' [ 121.723383][ T5950] udevd[5950]: incorrect btrfs checksum on /dev/loop3 [ 121.819585][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 121.950036][ T6674] netlink: 56 bytes leftover after parsing attributes in process `syz.1.292'. [ 122.235586][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 123.058354][ T6711] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 123.080842][ T6711] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 123.786296][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.973978][ T5899] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 124.013173][ T6751] loop2: detected capacity change from 0 to 256 [ 124.020640][ T6751] exfat: Deprecated parameter 'utf8' [ 124.025453][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.031372][ T6751] exfat: Deprecated parameter 'namecase' [ 124.046070][ T6751] exfat: Deprecated parameter 'utf8' [ 124.081130][ T5899] usb 1-1: config 0 descriptor?? [ 124.083398][ T6751] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 124.105667][ T927] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.208941][ T6755] kAFS: No cell specified [ 124.296502][ T927] usb 2-1: Using ep0 maxpacket: 8 [ 124.324914][ T927] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.326946][ T5899] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 124.346456][ T927] usb 2-1: config 179 has no interface number 0 [ 124.352789][ T927] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 124.395430][ T927] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 124.437393][ T927] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.482416][ T927] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 124.512140][ T927] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.525971][ T5899] [drm:udl_init] *ERROR* Selecting channel failed [ 124.569775][ T927] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 124.607644][ T5899] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 124.607675][ T5899] [drm] Initialized udl on minor 2 [ 124.609670][ T5899] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 124.627137][ T927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.628519][ T5899] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 124.632038][ T5891] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 124.632810][ T5891] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 124.665587][ T5899] usb 1-1: USB disconnect, device number 4 [ 124.673716][ T6744] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 125.184457][ T6744] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 125.191256][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 125.216760][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 125.340728][ T6779] vhci_hcd: connection closed [ 125.343961][ T13] vhci_hcd: stop threads [ 125.356882][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 125.365285][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.384778][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.342'. [ 125.386805][ T5913] usb 2-1: USB disconnect, device number 3 [ 125.400443][ T13] vhci_hcd: release socket [ 125.406540][ T13] vhci_hcd: disconnect device [ 125.428836][ T5899] vhci_hcd: vhci_device speed not set [ 125.593726][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.029816][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 126.126363][ T927] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.296870][ T927] usb 4-1: Using ep0 maxpacket: 32 [ 126.327701][ T927] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 126.346208][ T927] usb 4-1: config 0 has no interface number 0 [ 126.382877][ T927] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 126.402510][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.417822][ T30] audit: type=1326 audit(1750704364.815:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15958e929 code=0x7ffc0000 [ 126.452372][ T927] usb 4-1: Product: syz [ 126.468632][ T927] usb 4-1: Manufacturer: syz [ 126.483458][ T927] usb 4-1: SerialNumber: syz [ 126.498574][ T30] audit: type=1326 audit(1750704364.825:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc15958e929 code=0x7ffc0000 [ 126.525692][ T927] usb 4-1: config 0 descriptor?? [ 126.531726][ T30] audit: type=1326 audit(1750704364.825:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15958e929 code=0x7ffc0000 [ 126.578409][ T927] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 126.586002][ T927] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 126.602901][ T30] audit: type=1326 audit(1750704364.825:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15958e929 code=0x7ffc0000 [ 126.811806][ T927] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 126.828568][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.872240][ T30] audit: type=1326 audit(1750704365.265:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 126.906925][ T30] audit: type=1326 audit(1750704365.265:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 126.934027][ T30] audit: type=1326 audit(1750704365.295:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 126.960348][ T30] audit: type=1326 audit(1750704365.295:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 126.975101][ T6834] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 127.008870][ T6836] loop1: detected capacity change from 0 to 8 [ 127.016689][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 127.024168][ T927] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 127.047032][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.055606][ T5913] usb 3-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 127.087946][ T927] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 127.095523][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.106886][ T5913] usb 3-1: Product: syz [ 127.112730][ T927] usb 4-1: USB disconnect, device number 3 [ 127.126188][ T5913] usb 3-1: Manufacturer: syz [ 127.135526][ T927] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 127.148734][ T5913] usb 3-1: SerialNumber: syz [ 127.164674][ T5913] usb 3-1: config 0 descriptor?? [ 127.190444][ T5913] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 127.239296][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 127.286811][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 127.306165][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.334660][ T43] usb 5-1: Product: syz [ 127.340943][ T43] usb 5-1: Manufacturer: syz [ 127.351495][ T43] usb 5-1: SerialNumber: syz [ 127.402070][ T43] usb 5-1: config 0 descriptor?? [ 127.407759][ T6841] loop1: detected capacity change from 0 to 256 [ 127.415689][ T9] usb 3-1: USB disconnect, device number 2 [ 127.425250][ T43] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 127.494643][ T6843] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 127.525875][ T6841] FAT-fs (loop1): Directory bread(block 64) failed [ 127.536436][ T6841] FAT-fs (loop1): Directory bread(block 65) failed [ 127.564095][ T6841] FAT-fs (loop1): Directory bread(block 66) failed [ 127.599972][ T6841] FAT-fs (loop1): Directory bread(block 67) failed [ 127.608281][ T6841] FAT-fs (loop1): Directory bread(block 68) failed [ 127.622636][ T6841] FAT-fs (loop1): Directory bread(block 69) failed [ 127.646817][ T6841] FAT-fs (loop1): Directory bread(block 70) failed [ 127.661029][ T6841] FAT-fs (loop1): Directory bread(block 71) failed [ 127.693534][ T6841] FAT-fs (loop1): Directory bread(block 72) failed [ 127.721116][ T6841] FAT-fs (loop1): Directory bread(block 73) failed [ 127.753800][ T6848] bond0: entered promiscuous mode [ 127.885421][ T43] gspca_sn9c20x: Write register 1001 failed -71 [ 127.899588][ T43] gspca_sn9c20x: Device initialization failed [ 127.919617][ T43] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 127.967884][ T43] usb 5-1: USB disconnect, device number 4 [ 128.820811][ T6881] loop0: detected capacity change from 0 to 256 [ 128.974318][ T6881] FAT-fs (loop0): Directory bread(block 64) failed [ 128.996525][ T6881] FAT-fs (loop0): Directory bread(block 65) failed [ 129.019646][ T6881] FAT-fs (loop0): Directory bread(block 66) failed [ 129.070517][ T6881] FAT-fs (loop0): Directory bread(block 67) failed [ 129.101473][ T6881] FAT-fs (loop0): Directory bread(block 68) failed [ 129.145875][ T6881] FAT-fs (loop0): Directory bread(block 69) failed [ 129.174945][ T6881] FAT-fs (loop0): Directory bread(block 70) failed [ 129.198200][ T6881] FAT-fs (loop0): Directory bread(block 71) failed [ 129.205088][ T6881] FAT-fs (loop0): Directory bread(block 72) failed [ 129.226276][ T6881] FAT-fs (loop0): Directory bread(block 73) failed [ 129.513157][ T6862] loop1: detected capacity change from 0 to 32768 [ 129.753604][ T6902] rtc_cmos 00:00: Alarms can be up to one day in the future [ 130.646670][ T6928] loop0: detected capacity change from 0 to 2048 [ 130.686049][ T6886] loop4: detected capacity change from 0 to 40427 [ 130.718882][ T6928] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.759039][ T6886] F2FS-fs (loop4): build fault injection rate: 690 [ 130.765804][ T6886] F2FS-fs (loop4): Image doesn't support compression [ 130.841617][ T6886] F2FS-fs (loop4): heap/no_heap options were deprecated [ 130.898173][ T6886] F2FS-fs (loop4): Image doesn't support compression [ 130.976696][ T6886] F2FS-fs (loop4): invalid crc value [ 131.161671][ T6945] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.544491][ T6886] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 131.758257][ T6886] syz.4.387: attempt to access beyond end of device [ 131.758257][ T6886] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.905754][ T5827] syz-executor: attempt to access beyond end of device [ 131.905754][ T5827] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 131.968315][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 131.968343][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.968355][ T5827] Call Trace: [ 131.968363][ T5827] [ 131.968372][ T5827] dump_stack_lvl+0x189/0x250 [ 131.968402][ T5827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.968423][ T5827] ? __pfx_queue_work_on+0x10/0x10 [ 131.968441][ T5827] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 131.968458][ T5827] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 131.968473][ T5827] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.968489][ T5827] ? f2fs_hw_is_readonly+0x39b/0x470 [ 131.968512][ T5827] f2fs_handle_critical_error+0x37c/0x540 [ 131.968537][ T5827] f2fs_write_end_io+0x495/0x810 [ 131.968549][ T5827] ? blkg_put+0x22/0x240 [ 131.968583][ T5827] __submit_merged_bio+0x27a/0x6a0 [ 131.968613][ T5827] __submit_merged_write_cond+0x255/0x530 [ 131.968638][ T5827] f2fs_write_data_pages+0x261d/0x3000 [ 131.968688][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 131.968749][ T5827] ? check_path+0x21/0x40 [ 131.968767][ T5827] ? check_noncircular+0xe0/0x160 [ 131.968830][ T5827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 131.968851][ T5827] do_writepages+0x32b/0x550 [ 131.968880][ T5827] ? do_raw_spin_unlock+0x122/0x240 [ 131.968898][ T5827] filemap_fdatawrite+0x199/0x240 [ 131.968918][ T5827] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 131.968979][ T5827] ? do_raw_spin_unlock+0x122/0x240 [ 131.968997][ T5827] f2fs_sync_dirty_inodes+0x31f/0x830 [ 131.969024][ T5827] f2fs_write_checkpoint+0x95a/0x1df0 [ 131.969084][ T5827] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 131.969132][ T5827] ? try_to_wake_up+0x7e5/0x1290 [ 131.969152][ T5827] ? kill_f2fs_super+0x298/0x6c0 [ 131.969170][ T5827] kill_f2fs_super+0x2c3/0x6c0 [ 131.969189][ T5827] ? __pfx_kill_f2fs_super+0x10/0x10 [ 131.969200][ T5827] ? radix_tree_delete_item+0x2b6/0x400 [ 131.969222][ T5827] ? shrinker_free+0x2ce/0x3e0 [ 131.969240][ T5827] deactivate_locked_super+0xbc/0x130 [ 131.969260][ T5827] cleanup_mnt+0x425/0x4c0 [ 131.969277][ T5827] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.969295][ T5827] task_work_run+0x1d4/0x260 [ 131.969315][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 131.969329][ T5827] ? __x64_sys_umount+0x122/0x160 [ 131.969353][ T5827] ? exit_to_user_mode_loop+0x40/0x110 [ 131.969374][ T5827] exit_to_user_mode_loop+0xec/0x110 [ 131.969392][ T5827] do_syscall_64+0x2bd/0x3b0 [ 131.969408][ T5827] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.969423][ T5827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.969436][ T5827] ? clear_bhb_loop+0x60/0xb0 [ 131.969454][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.969467][ T5827] RIP: 0033:0x7fc15958fc57 [ 131.969481][ T5827] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 131.969493][ T5827] RSP: 002b:00007ffe6ec4d5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 131.969510][ T5827] RAX: 0000000000000000 RBX: 00007fc159610925 RCX: 00007fc15958fc57 [ 131.969519][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6ec4d690 [ 131.969528][ T5827] RBP: 00007ffe6ec4d690 R08: 0000000000000000 R09: 0000000000000000 [ 131.969536][ T5827] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6ec4e720 [ 131.969545][ T5827] R13: 00007fc159610925 R14: 00000000000202db R15: 00007ffe6ec4e760 [ 131.969570][ T5827] [ 131.969579][ T5827] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 132.423492][ T6977] netlink: 'syz.2.419': attribute type 21 has an invalid length. [ 132.726825][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.891618][ T43] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 132.908205][ T5913] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.961302][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 132.976685][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.983638][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.020327][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.074789][ T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 0.00 [ 133.117157][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.149773][ T5913] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 133.183919][ T43] usb 4-1: config 0 descriptor?? [ 133.190856][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.231393][ T43] ttusbir 4-1:0.0: cannot find expected altsetting [ 133.257841][ T5913] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.276339][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.288745][ T5913] usb 3-1: Product: syz [ 133.292952][ T5913] usb 3-1: Manufacturer: syz [ 133.298562][ T43] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 133.342888][ T5913] usb 3-1: SerialNumber: syz [ 133.380513][ T5913] usb 3-1: config 0 descriptor?? [ 133.403901][ T5913] usb 3-1: selecting invalid altsetting 0 [ 133.459905][ T43] usb 4-1: USB disconnect, device number 4 [ 133.658754][ T5913] usb 3-1: USB disconnect, device number 3 [ 134.227700][ T7033] trusted_key: encrypted_key: master key parameter is missing [ 134.743068][ T7052] loop0: detected capacity change from 0 to 1024 [ 134.787341][ T7052] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 134.990930][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'. [ 135.410738][ T7075] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 135.446264][ T7075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.463'. [ 135.496924][ T7080] loop3: detected capacity change from 0 to 512 [ 135.527154][ T7080] EXT4-fs: Ignoring removed nobh option [ 135.756033][ T7090] netlink: 56 bytes leftover after parsing attributes in process `syz.4.469'. [ 135.774142][ T7080] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.466: corrupted inode contents [ 135.790548][ T7090] netlink: 56 bytes leftover after parsing attributes in process `syz.4.469'. [ 135.820305][ T7080] EXT4-fs (loop3): Remounting filesystem read-only [ 135.836818][ T7080] EXT4-fs (loop3): 1 truncate cleaned up [ 135.859246][ T7080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.860747][ T36] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 135.918268][ T7080] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.954917][ T36] Quota error (device loop3): write_blk: dquota write failed [ 135.970852][ T36] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 135.984388][ T36] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 136.002627][ T36] Quota error (device loop3): write_blk: dquota write failed [ 136.024192][ T7080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.028110][ T36] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 136.043753][ T36] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 136.084502][ T36] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 136.121222][ T36] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 136.467315][ T7069] loop2: detected capacity change from 0 to 32768 [ 136.532288][ T7069] [ 136.532288][ T7069] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.532288][ T7069] [ 136.585139][ T7113] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 136.709188][ T5837] [ 136.709188][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.709188][ T5837] [ 136.770142][ T7117] loop4: detected capacity change from 0 to 1764 [ 136.786221][ T5837] [ 136.786221][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.786221][ T5837] [ 136.914195][ T7117] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 137.226533][ T7133] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 137.263563][ T7135] netlink: 56 bytes leftover after parsing attributes in process `syz.4.489'. [ 137.337032][ T7133] CIFS mount error: No usable UNC path provided in device string! [ 137.337032][ T7133] [ 137.386141][ T7133] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 137.626320][ T5913] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.668219][ T7143] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 137.675943][ T7143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.495'. [ 137.724883][ T7146] capability: warning: `syz.3.496' uses deprecated v2 capabilities in a way that may be insecure [ 137.806248][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 137.829332][ T5913] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 137.856917][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.896242][ T5913] usb 1-1: config 0 has no interface number 0 [ 137.914645][ T5913] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 137.946877][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.954927][ T5913] usb 1-1: Product: syz [ 138.002903][ T5913] usb 1-1: Manufacturer: syz [ 138.026190][ T5913] usb 1-1: SerialNumber: syz [ 138.032163][ T7153] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.500'. [ 138.067277][ T5913] usb 1-1: config 0 descriptor?? [ 138.332143][ T5913] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 138.366168][ T5913] usb 1-1: No valid video chain found. [ 138.415652][ T7165] loop3: detected capacity change from 0 to 64 [ 138.576827][ T43] usb 1-1: USB disconnect, device number 5 [ 139.996468][ T7173] loop3: detected capacity change from 0 to 40427 [ 140.024074][ T7173] F2FS-fs (loop3): heap/no_heap options were deprecated [ 140.111068][ T7173] F2FS-fs (loop3): invalid crc value [ 140.129338][ T7173] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 140.202717][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.357799][ T7217] loop1: detected capacity change from 0 to 128 [ 140.379561][ T7217] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 140.406818][ T43] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 140.415054][ T43] usb 3-1: config 0 has no interface number 0 [ 140.448065][ T7217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.450757][ T7173] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.466284][ T43] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.488927][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 140.524021][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.581520][ T43] usb 3-1: Product: syz [ 140.616928][ T43] usb 3-1: Manufacturer: syz [ 140.621584][ T43] usb 3-1: SerialNumber: syz [ 140.638649][ T43] usb 3-1: config 0 descriptor?? [ 140.671784][ T43] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 141.069846][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 141.097293][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 141.162810][ T9] usb 3-1: USB disconnect, device number 4 [ 141.190490][ T9] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 141.225594][ T7210] loop0: detected capacity change from 0 to 32768 [ 141.320979][ T7210] (syz.0.528,7210,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.375990][ T7233] loop1: detected capacity change from 0 to 64 [ 141.387522][ T7210] (syz.0.528,7210,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.440741][ T7235] loop4: detected capacity change from 0 to 1024 [ 141.482387][ T7210] JBD2: Ignoring recovery information on journal [ 141.755094][ T7210] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 141.992297][ T7245] lo speed is unknown, defaulting to 1000 [ 142.024754][ T7249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.545'. [ 142.025084][ T7245] lo speed is unknown, defaulting to 1000 [ 142.086739][ T7245] lo speed is unknown, defaulting to 1000 [ 142.141431][ T7251] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[7251] [ 142.157499][ T5832] ocfs2: Unmounting device (7,0) on (node local) [ 142.436915][ T7253] loop3: detected capacity change from 0 to 4096 [ 142.467557][ T7253] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 142.543024][ T30] audit: type=1326 audit(1750704380.935:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 142.610433][ T7253] ntfs3(loop3): ino=19, mi_enum_attr [ 142.635835][ T7253] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 142.664358][ T30] audit: type=1326 audit(1750704380.975:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 142.754569][ T30] audit: type=1326 audit(1750704380.985:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 142.868440][ T30] audit: type=1326 audit(1750704380.985:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 142.970231][ T30] audit: type=1326 audit(1750704380.985:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51dbf8e929 code=0x7ffc0000 [ 143.069296][ T7272] netlink: 'syz.0.557': attribute type 13 has an invalid length. [ 143.234766][ T7275] loop3: detected capacity change from 0 to 64 [ 143.285992][ T7275] hfs: unable to locate alternate MDB [ 143.297133][ T7275] hfs: continuing without an alternate MDB [ 143.443079][ T5913] lo speed is unknown, defaulting to 1000 [ 143.455079][ T7245] infiniband sz1: set active [ 143.462796][ T7245] infiniband sz1: added lo [ 143.475171][ T7245] sz1: rxe_create_cq: returned err = -12 [ 143.497863][ T7245] infiniband sz1: Couldn't create ib_mad CQ [ 143.504118][ T7245] infiniband sz1: Couldn't open port 1 [ 143.516687][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.554388][ T7245] RDS/IB: sz1: added [ 143.580299][ T7245] smc: adding ib device sz1 with port count 1 [ 143.592113][ T7245] smc: ib device sz1 port 1 has pnetid [ 143.601199][ T9] lo speed is unknown, defaulting to 1000 [ 143.613610][ T7245] lo speed is unknown, defaulting to 1000 [ 143.696410][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 143.707783][ T43] usb 2-1: config 3 has an invalid interface number: 202 but max is 0 [ 143.726641][ T43] usb 2-1: config 3 has no interface number 0 [ 143.750145][ T43] usb 2-1: config 3 interface 202 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 143.796595][ T43] usb 2-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=b0.61 [ 143.836776][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.856779][ T43] usb 2-1: Product: syz [ 143.877336][ T43] usb 2-1: Manufacturer: syz [ 143.882189][ T43] usb 2-1: SerialNumber: syz [ 143.919726][ T7278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.175537][ T43] ax88179_178a 2-1:3.202: probe with driver ax88179_178a failed with error -71 [ 144.234199][ T43] usb 2-1: USB disconnect, device number 4 [ 145.077256][ T7245] lo speed is unknown, defaulting to 1000 [ 145.191914][ T7326] loop0: detected capacity change from 0 to 4096 [ 145.224529][ T7326] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 145.285900][ T7326] ntfs3(loop0): ino=1a, mi_enum_attr [ 145.325073][ T7326] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 146.245898][ T7361] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 146.276351][ T7361] netlink: 224 bytes leftover after parsing attributes in process `syz.2.600'. [ 146.285364][ T7361] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 146.410565][ T7245] lo speed is unknown, defaulting to 1000 [ 146.446047][ T7368] loop1: detected capacity change from 0 to 64 [ 146.571958][ T7370] loop2: detected capacity change from 0 to 256 [ 146.588262][ T7370] exfat: Deprecated parameter 'utf8' [ 146.613353][ T7372] loop3: detected capacity change from 0 to 16 [ 146.650243][ T7372] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 146.747508][ T7374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'. [ 146.781182][ T7370] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 147.590056][ T7396] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 147.621993][ T7245] lo speed is unknown, defaulting to 1000 [ 147.626523][ T7396] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.618'. [ 147.813152][ T7398] loop1: detected capacity change from 0 to 4096 [ 147.871271][ T7398] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 147.975577][ T7398] ntfs3(loop1): ino=19, mi_enum_attr [ 148.001681][ T7398] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 148.564671][ T7382] loop0: detected capacity change from 0 to 40427 [ 148.638593][ T7382] F2FS-fs (loop0): build fault injection rate: 690 [ 148.645192][ T7382] F2FS-fs (loop0): Image doesn't support compression [ 148.687233][ T7382] F2FS-fs (loop0): heap/no_heap options were deprecated [ 148.728513][ T7382] F2FS-fs (loop0): Image doesn't support compression [ 148.769963][ T7382] F2FS-fs (loop0): invalid crc value [ 148.845773][ T7245] lo speed is unknown, defaulting to 1000 [ 149.016611][ T7422] netlink: 'syz.1.630': attribute type 9 has an invalid length. [ 149.164793][ T7382] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 149.298156][ T7382] syz.0.610: attempt to access beyond end of device [ 149.298156][ T7382] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.357116][ T7408] loop3: detected capacity change from 0 to 32768 [ 149.451966][ T7408] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 149.587715][ T5832] syz-executor: attempt to access beyond end of device [ 149.587715][ T5832] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 149.666445][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 149.666473][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.666483][ T5832] Call Trace: [ 149.666489][ T5832] [ 149.666496][ T5832] dump_stack_lvl+0x189/0x250 [ 149.666527][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.666547][ T5832] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 149.666566][ T5832] ? __pfx_queue_work_on+0x10/0x10 [ 149.666594][ T5832] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 149.666612][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 149.666631][ T5832] ? f2fs_hw_is_readonly+0x39b/0x470 [ 149.666660][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 149.666691][ T5832] f2fs_write_end_io+0x495/0x810 [ 149.666706][ T5832] ? blkg_put+0x22/0x240 [ 149.666746][ T5832] __submit_merged_bio+0x27a/0x6a0 [ 149.666778][ T5832] __submit_merged_write_cond+0x255/0x530 [ 149.666808][ T5832] f2fs_write_data_pages+0x261d/0x3000 [ 149.666874][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 149.666953][ T5832] ? stack_depot_save_flags+0x429/0x900 [ 149.667019][ T5832] ? __lock_acquire+0xab9/0xd20 [ 149.667077][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 149.667106][ T5832] do_writepages+0x32b/0x550 [ 149.667146][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 149.667171][ T5832] filemap_fdatawrite+0x199/0x240 [ 149.667198][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 149.667278][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 149.667304][ T5832] f2fs_sync_dirty_inodes+0x31f/0x830 [ 149.667340][ T5832] f2fs_write_checkpoint+0x95a/0x1df0 [ 149.667387][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 149.667452][ T5832] ? try_to_wake_up+0x7e5/0x1290 [ 149.667479][ T5832] ? kill_f2fs_super+0x298/0x6c0 [ 149.667504][ T5832] kill_f2fs_super+0x2c3/0x6c0 [ 149.667531][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 149.667546][ T5832] ? radix_tree_delete_item+0x2b6/0x400 [ 149.667577][ T5832] ? shrinker_free+0x2ce/0x3e0 [ 149.667600][ T5832] deactivate_locked_super+0xbc/0x130 [ 149.667626][ T5832] cleanup_mnt+0x425/0x4c0 [ 149.667650][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.667675][ T5832] task_work_run+0x1d4/0x260 [ 149.667701][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 149.667718][ T5832] ? __x64_sys_umount+0x122/0x160 [ 149.667750][ T5832] ? exit_to_user_mode_loop+0x40/0x110 [ 149.667778][ T5832] exit_to_user_mode_loop+0xec/0x110 [ 149.667802][ T5832] do_syscall_64+0x2bd/0x3b0 [ 149.667823][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.667843][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.667861][ T5832] ? clear_bhb_loop+0x60/0xb0 [ 149.667885][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.667903][ T5832] RIP: 0033:0x7f8042d8fc57 [ 149.667922][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 149.667937][ T5832] RSP: 002b:00007fffa9722748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 149.667958][ T5832] RAX: 0000000000000000 RBX: 00007f8042e10925 RCX: 00007f8042d8fc57 [ 149.667970][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa9722800 [ 149.667981][ T5832] RBP: 00007fffa9722800 R08: 0000000000000000 R09: 0000000000000000 [ 149.667992][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa9723890 [ 149.668004][ T5832] R13: 00007f8042e10925 R14: 000000000002476a R15: 00007fffa97238d0 [ 149.668047][ T5832] [ 149.668056][ T5832] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 149.765794][ T7408] XFS (loop3): Ending clean mount [ 150.071074][ T7408] XFS (loop3): Quotacheck needed: Please wait. [ 150.136445][ T7442] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 150.144157][ T7442] netlink: 224 bytes leftover after parsing attributes in process `syz.4.636'. [ 150.216530][ T7408] XFS (loop3): Quotacheck: Done. [ 150.254100][ T7446] loop1: detected capacity change from 0 to 512 [ 150.277468][ T7446] EXT4-fs: Ignoring removed nobh option [ 150.363827][ T5839] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.405793][ T7446] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.638: corrupted inode contents [ 150.442744][ T7446] EXT4-fs (loop1): Remounting filesystem read-only [ 150.459700][ T7446] EXT4-fs (loop1): 1 truncate cleaned up [ 150.478710][ T7446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.494059][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 150.521150][ T7446] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.561852][ T12] Quota error (device loop1): write_blk: dquota write failed [ 150.597749][ T12] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 150.605420][ T7446] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.646630][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 150.726250][ T12] Quota error (device loop1): write_blk: dquota write failed [ 150.747235][ T12] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 150.796436][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 150.825818][ T12] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 150.840588][ T7453] loop2: detected capacity change from 0 to 128 [ 150.847112][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 150.981221][ T7453] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 151.209517][ T5837] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.259952][ T7464] x_tables: unsorted entry at hook 3 [ 151.390742][ T7471] loop4: detected capacity change from 0 to 128 [ 151.409008][ T7472] netlink: 'syz.1.648': attribute type 15 has an invalid length. [ 151.477932][ T7472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.648'. [ 151.720268][ T7474] loop0: detected capacity change from 0 to 4096 [ 151.730110][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 152.002980][ T30] audit: type=1326 audit(1750704390.395:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15958e929 code=0x7ffc0000 [ 152.096398][ T30] audit: type=1326 audit(1750704390.435:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15958e929 code=0x7ffc0000 [ 152.163668][ T30] audit: type=1326 audit(1750704390.435:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc15958d290 code=0x7ffc0000 [ 152.256199][ T30] audit: type=1326 audit(1750704390.435:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc15958e52b code=0x7ffc0000 [ 152.290230][ T5884] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.469222][ T5884] usb 5-1: config 0 has no interfaces? [ 152.484642][ T5884] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 152.496983][ T7496] loop1: detected capacity change from 0 to 1024 [ 152.521352][ T5884] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 152.550926][ T5884] usb 5-1: Manufacturer: syz [ 152.612971][ T5884] usb 5-1: config 0 descriptor?? [ 152.790135][ T2904] hfsplus: b-tree write err: -5, ino 4 [ 152.835928][ T7478] loop2: detected capacity change from 0 to 32768 [ 152.899177][ T5884] usb 5-1: USB disconnect, device number 5 [ 153.173514][ T7478] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 153.173543][ T7478] allowing incompatible features above 0.0: (unknown version) [ 153.173555][ T7478] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 153.352376][ T7478] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 153.377344][ T7528] loop3: detected capacity change from 0 to 256 [ 153.384970][ T7478] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 153.427393][ T7528] exfat: Deprecated parameter 'utf8' [ 153.466535][ T7478] bcachefs (loop2): Version upgrade required: [ 153.466535][ T7478] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 153.466535][ T7478] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 153.466535][ T7478] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 153.540103][ T7528] exfat: Deprecated parameter 'namecase' [ 153.540143][ T7528] exfat: Deprecated parameter 'utf8' [ 153.591280][ T7528] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 153.645166][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 153.726718][ T7478] bcachefs (loop2): dropping and reconstructing all alloc info [ 153.778478][ T7478] bcachefs (loop2): accounting_read... done [ 153.802725][ T7478] bcachefs (loop2): alloc_read... done [ 153.853879][ T7478] bcachefs (loop2): snapshots_read... done [ 153.897025][ T7478] bcachefs (loop2): done starting filesystem [ 153.970149][ T7543] random: crng reseeded on system resumption [ 154.390546][ T5837] bcachefs (loop2): shutting down [ 154.544751][ T5837] bcachefs (loop2): shutdown complete [ 155.156339][ T5884] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.170687][ T7581] loop4: detected capacity change from 0 to 4096 [ 155.222304][ T7586] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.280693][ T7581] syz.4.700: attempt to access beyond end of device [ 155.280693][ T7581] loop4: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 155.317670][ T7581] syz.4.700: attempt to access beyond end of device [ 155.317670][ T7581] loop4: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 155.335264][ T7588] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 155.342971][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 155.347352][ T7588] Cannot find set identified by id 0 to match [ 155.376839][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 155.406474][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.426547][ T5884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.448643][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 155.479676][ T5884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 155.502628][ T5884] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 155.570946][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.607590][ T5884] usb 4-1: config 0 descriptor?? [ 155.613692][ T7575] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.878259][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.896352][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.903365][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.910810][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.918289][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.925226][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.932954][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.939939][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.949003][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.957068][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.963976][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.970991][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.978000][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.986996][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 155.994022][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.002666][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.009729][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.016692][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.023925][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.030986][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.038137][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.046507][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.053463][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.061244][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.068257][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.075291][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.082898][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.089907][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.096910][ T5149] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 156.099008][ T10] usb 4-1: USB disconnect, device number 5 [ 156.105424][ T5830] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 156.284771][ T7602] wlan0 speed is unknown, defaulting to 1000 [ 156.341161][ T7602] wg1 speed is unknown, defaulting to 1000 [ 156.383498][ T7602] lo speed is unknown, defaulting to 1000 [ 156.856864][ T7620] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.291096][ T7632] loop4: detected capacity change from 0 to 8 [ 157.368343][ T7632] SQUASHFS error: Failed to read block 0x1ec: -5 [ 157.385877][ T7632] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 157.412402][ T7636] loop3: detected capacity change from 0 to 1764 [ 157.514531][ T7638] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 157.986341][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 157.998301][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 158.006753][ C1] CPU: 1 UID: 0 PID: 7649 Comm: syz.1.732 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 158.018237][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.028333][ C1] RIP: 0010:pidfs_free_pid+0xaf/0x140 [ 158.033830][ C1] Code: f0 ff ff 73 e4 43 80 3c 3c 00 74 08 4c 89 f7 e8 a7 1b de ff 49 83 3e 00 0f 85 84 00 00 00 e8 08 f2 79 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 82 1b de ff 4c 8b 33 4d 85 f6 74 [ 158.053448][ C1] RSP: 0018:ffffc90000a08b90 EFLAGS: 00010246 [ 158.059525][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8880257c0000 [ 158.067585][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff8880332aeaf0 [ 158.076228][ C1] RBP: 0000000000000001 R08: ffff8880332aea83 R09: 1ffff11006655d50 [ 158.085097][ C1] R10: dffffc0000000000 R11: ffffed1006655d51 R12: 1ffff11006655d5d [ 158.093087][ C1] R13: ffffffff81a83684 R14: ffff8880332aeae8 R15: dffffc0000000000 [ 158.101499][ C1] FS: 0000000000000000(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 158.110442][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.117048][ C1] CR2: 00005555737cf808 CR3: 000000000df38000 CR4: 00000000003526f0 [ 158.125041][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.133014][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.141246][ C1] Call Trace: [ 158.144525][ C1] [ 158.147391][ C1] ? __pfx_delayed_put_pid+0x10/0x10 [ 158.152766][ C1] put_pid+0x9c/0x130 [ 158.156764][ C1] rcu_core+0xca5/0x1710 [ 158.161015][ C1] ? __pfx_rcu_core+0x10/0x10 [ 158.165895][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 158.171542][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 158.177809][ C1] handle_softirqs+0x283/0x870 [ 158.182600][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 158.187382][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 158.192678][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 158.197883][ C1] __irq_exit_rcu+0xca/0x1f0 [ 158.202747][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 158.207968][ C1] irq_exit_rcu+0x9/0x30 [ 158.212224][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 158.217865][ C1] [ 158.220806][ C1] [ 158.223750][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.229725][ C1] RIP: 0010:page_table_check_clear+0x152/0x700 [ 158.235886][ C1] Code: e8 d3 bc 90 ff 4c 89 f8 48 83 e0 01 0f 85 d9 03 00 00 0f 1f 44 00 00 e8 dc b7 90 ff 4d 89 ef 49 83 c7 18 4c 89 f8 48 c1 e8 03 <48> b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 46 e1 [ 158.255836][ C1] RSP: 0018:ffffc90003b57350 EFLAGS: 00000a06 [ 158.261907][ C1] RAX: 1ffffd40002ec91b RBX: 1ffffd40002ec919 RCX: ffff8880257c0000 [ 158.269890][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.277859][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff822f2e4a [ 158.286264][ C1] R10: dffffc0000000000 R11: fffff940002ec919 R12: ffffea00017648f0 [ 158.294233][ C1] R13: ffffea00017648c0 R14: 0000000000000001 R15: ffffea00017648d8 [ 158.302305][ C1] ? pfn_valid+0xba/0x490 [ 158.306746][ C1] ? vm_normal_page+0xb7/0x230 [ 158.311534][ C1] unmap_page_range+0x3249/0x41c0 [ 158.316600][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 158.321984][ C1] ? unmap_vmas+0x144/0x580 [ 158.326488][ C1] unmap_vmas+0x399/0x580 [ 158.330819][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 158.335673][ C1] exit_mmap+0x248/0xb50 [ 158.339918][ C1] ? uprobe_clear_state+0x20f/0x290 [ 158.345127][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 158.349893][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 158.355536][ C1] ? __pfx_exit_aio+0x10/0x10 [ 158.360314][ C1] ? uprobe_clear_state+0x274/0x290 [ 158.365520][ C1] __mmput+0x118/0x420 [ 158.369597][ C1] exit_mm+0x1da/0x2c0 [ 158.373669][ C1] ? __pfx_exit_mm+0x10/0x10 [ 158.378261][ C1] ? rcu_is_watching+0x15/0xb0 [ 158.383030][ C1] do_exit+0x648/0x2300 [ 158.387188][ C1] ? do_raw_spin_lock+0x121/0x290 [ 158.392226][ C1] ? __pfx_do_exit+0x10/0x10 [ 158.396816][ C1] do_group_exit+0x21c/0x2d0 [ 158.401404][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.406603][ C1] get_signal+0x1286/0x1340 [ 158.411300][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 158.416846][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 158.423089][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 158.428560][ C1] exit_to_user_mode_loop+0x75/0x110 [ 158.433844][ C1] do_syscall_64+0x2bd/0x3b0 [ 158.438439][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.443636][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.449827][ C1] ? clear_bhb_loop+0x60/0xb0 [ 158.454578][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.460499][ C1] RIP: 0033:0x7f51dbf8e929 [ 158.465135][ C1] Code: Unable to access opcode bytes at 0x7f51dbf8e8ff. [ 158.472353][ C1] RSP: 002b:00007f51dceb30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 158.480960][ C1] RAX: fffffffffffffe00 RBX: 00007f51dc1b5fa8 RCX: 00007f51dbf8e929 [ 158.488937][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f51dc1b5fa8 [ 158.496949][ C1] RBP: 00007f51dc1b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 158.504921][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51dc1b5fac [ 158.512894][ C1] R13: 0000000000000000 R14: 00007ffcd31d3730 R15: 00007ffcd31d3818 [ 158.520964][ C1] [ 158.524014][ C1] Modules linked in: [ 158.527995][ C1] ---[ end trace 0000000000000000 ]--- [ 158.533483][ C1] RIP: 0010:pidfs_free_pid+0xaf/0x140 [ 158.538917][ C1] Code: f0 ff ff 73 e4 43 80 3c 3c 00 74 08 4c 89 f7 e8 a7 1b de ff 49 83 3e 00 0f 85 84 00 00 00 e8 08 f2 79 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 82 1b de ff 4c 8b 33 4d 85 f6 74 [ 158.559832][ C1] RSP: 0018:ffffc90000a08b90 EFLAGS: 00010246 [ 158.565938][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8880257c0000 [ 158.575024][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff8880332aeaf0 [ 158.583109][ C1] RBP: 0000000000000001 R08: ffff8880332aea83 R09: 1ffff11006655d50 [ 158.591141][ C1] R10: dffffc0000000000 R11: ffffed1006655d51 R12: 1ffff11006655d5d [ 158.599174][ C1] R13: ffffffff81a83684 R14: ffff8880332aeae8 R15: dffffc0000000000 [ 158.607204][ C1] FS: 0000000000000000(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 158.616186][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.622821][ C1] CR2: 00005555737cf808 CR3: 000000000df38000 CR4: 00000000003526f0 [ 158.630979][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.639113][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.647153][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 158.654517][ C1] Kernel Offset: disabled [ 158.658861][ C1] Rebooting in 86400 seconds..