last executing test programs: 3m23.79075066s ago: executing program 3 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x44) 3m23.229839618s ago: executing program 3 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) fcntl$setstatus(r3, 0x407, 0xa0018ce0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}}, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f0000000280)) 3m22.612367847s ago: executing program 3 (id=399): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4004000) 3m22.069345167s ago: executing program 3 (id=403): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x502ea01b, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x81f00, 0xd, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4dce, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) 3m21.564978261s ago: executing program 3 (id=407): fanotify_init(0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0xa, 0x8}, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 3m18.369957308s ago: executing program 3 (id=414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000001540)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x800}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a5dd390e2f57d3833000200000012000300680000000000000080706f72740000"], 0x4c}}, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2) write$FUSE_CREATE_OPEN(r2, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x5, 0x5f2, 0x3, 0x1, {0x2, 0x180, 0x80000000020ff, 0x7, 0xfd, 0xd615, 0x9, 0x4, 0xffffeffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 3m2.994718657s ago: executing program 32 (id=414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000001540)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x800}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a5dd390e2f57d3833000200000012000300680000000000000080706f72740000"], 0x4c}}, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2) write$FUSE_CREATE_OPEN(r2, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x5, 0x5f2, 0x3, 0x1, {0x2, 0x180, 0x80000000020ff, 0x7, 0xfd, 0xd615, 0x9, 0x4, 0xffffeffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 1m27.127278703s ago: executing program 1 (id=648): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) 1m26.406554804s ago: executing program 1 (id=652): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1m23.931285679s ago: executing program 1 (id=657): fanotify_init(0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0xa, 0x8}, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1m19.636877631s ago: executing program 4 (id=662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000", @ANYRES64], 0xdc}}, 0x0) 1m17.836951537s ago: executing program 4 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1, 0x86, &(0x7f0000000540)="$eJzs0qENAjEABdDPrYFgA3a4UQgSHAqCun1YhRHYAIHFQJoWQT0hubyX/Ca/31T0+rwsMyWrKXl1DsfTbrOvZ5ilIcnYUv5A6fexbou23x7n7Sf/fi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MKQdd+/Lt4BAAD//9+0I9A=") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) pipe(&(0x7f0000000080)) mount$nfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x123b058, 0x0) 1m15.396352948s ago: executing program 4 (id=667): iopl(0x3) socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4000800) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0x0, 0x47c, &(0x7f00000001c0)="$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") syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0c000310001a", @ANYRES64], 0xf) 1m13.692136861s ago: executing program 4 (id=672): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10a) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x1d7) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x40) 1m13.028682832s ago: executing program 4 (id=673): pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x80000000000000) 1m12.512008911s ago: executing program 4 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet(0x2, 0x5, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1m11.487311708s ago: executing program 1 (id=679): openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) unshare(0x22020600) timerfd_create(0x8, 0x80000) shutdown(r0, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x40000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x0, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0) 1m8.983762554s ago: executing program 1 (id=681): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000040174220a9055015bbe4010203010902120001000000000904000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f7117", 0xa0) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000014000000ee0016055e0301000000000016050000000100006916520000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private2, [0x0, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xffffff00], 'gre0\x00', 'veth0\x00', {0xff}, {0xff}, 0x87, 0xe, 0x6, 0x9}, 0x0, 0x258, 0x2b8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x4, 0x0, 0x2001000, 0x6, 0x3, 0x0, 0x20}, {0x2}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010101, [0xffffffff, 0xffffff00], 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x41f86f8c, 0x9, 0x49, 0x7, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x2}, 0x10) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a010000182b0000000000000000"], 0x0) 1m6.423113546s ago: executing program 1 (id=689): fanotify_init(0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0xa, 0x8}, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 57.001349933s ago: executing program 33 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet(0x2, 0x5, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 50.933222151s ago: executing program 34 (id=689): fanotify_init(0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0xa, 0x8}, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 11.627939704s ago: executing program 5 (id=762): socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000012c0)=""/4078, 0x2) 10.584078948s ago: executing program 2 (id=764): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x5f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x20}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 7.231904529s ago: executing program 5 (id=767): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000500)='./file2\x00', 0x10080, &(0x7f0000000440)=ANY=[@ANYBLOB='noinline_xattr,active_logs=4,jqfmt=vfsv1,noinline_data,user_xattr,checkpoint=disable,fastboot,fsync_mode=strict,discard_unit=section,\x00'], 0x25, 0x552d, &(0x7f000000abc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) 6.69990925s ago: executing program 2 (id=768): iopl(0x3) socket(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0x0, 0x47c, &(0x7f00000001c0)="$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") syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0c000310001a", @ANYRES64], 0xf) 5.519754367s ago: executing program 0 (id=771): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x20, 0x4, {0x0, 0x2710}, {0x0, 0xc, 0xf8, 0x7, 0x1, 0x0, "3b051c46"}, 0x10000, 0x2, {0x0}, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 4.955274717s ago: executing program 0 (id=773): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4004000) 4.75334312s ago: executing program 2 (id=774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x8}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) 4.667397958s ago: executing program 6 (id=775): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x20, 0x140d, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000080}, 0x24044890) 4.313020469s ago: executing program 0 (id=776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000"], 0xfc}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @loopback, 0x1}, {0xa, 0x4e20, 0x5a807add, @remote, 0x5}, r2, 0xb}}, 0x48) 3.978454932s ago: executing program 6 (id=777): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff}) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="2f9374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 3.660933897s ago: executing program 0 (id=778): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x10, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101442, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) 3.483754972s ago: executing program 2 (id=779): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x100) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) io_setup(0x3, &(0x7f00000003c0)=0x0) connect$unix(r5, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r8 = syz_open_procfs(0x0, 0x0) io_submit(r7, 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r8, 0x800c5011, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) 3.460596194s ago: executing program 6 (id=780): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) unlink(&(0x7f00000002c0)='./bus\x00') pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 3.046604174s ago: executing program 7 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x6, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}]}], {0x14}}, 0x80}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x4, 0xcc, &(0x7f0000000440)=""/204, 0x41000, 0x7a1fd6fd740cac65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x0, 0xf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000011008188040f46ecf14cb9cca7480ef407000000e3bd6efbbf4ae7220b0013", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x1e, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x400}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @tail_call, @jmp={0x5, 0x1, 0x0, 0xa, 0x9, 0x10}, @map_fd={0x18, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0x3, 0x1, 0x4, 0x4}, @alu={0x7, 0x0, 0xc, 0x0, 0x8, 0x38, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x9c, &(0x7f00000008c0)=""/156, 0x40f00, 0x62, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00), 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@fallback=r5, r4, 0x3b, 0x10, 0x0, @void, @value=r6}, 0x20) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x3}}, 0x18) sendmsg$kcm(r5, &(0x7f0000000c80)={&(0x7f0000000b00)=@pppoe={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000b80)="136a1ca98991be55c6f4c4f9d8b0a19052e39ea23af75f9f79bff992729cdc9970eaef5c751d8433049f3b0477895d930f038495815327c42918bf36ba06fd658e03fd3ece359df3017985a29a6a86ba5545f18b9fd998d70a011bbdde8bceabcf7c88199d2cd20e119f6c5d720c2ef13e79ffc1025d09a5a562bb4177f61abc0e59cd0214273764858e89f7278a4cc43f90eb4d0605222232228aeb90c6f525a053f7d874e348eb1c29e15af33c73fa048323efbeef7364890d6b1438f0d4e1f53bc739a028260ffc062afe4ebf3b3e9064f509221e87dae0c4a2f8409e566b31ff442400d9", 0xe6}], 0x1, &(0x7f00000025c0)=[{0xd8, 0x11, 0x38000000, "6bd14ea2a29b850a092fcff04daca4ef2d3f317c40d891b322db8baec9a7f2cf5bf482143a2052e2af56f6918c98dde54bfdeb4c42c157157a16676bcf5de80589aeca3201005a55029ffbc97daafe45225e6822c9cef22acf2bee0ef883f5a763cfd47fff07548b61568f2f24a190f290e909dc9536c51202d3a57b0fe23cdcb62cdc7e941b7d6849afd214fd96de1c26007047158df82befe3a84e2c3b93bc2d77d32de2750898d20fd423a0606391a2b1b693893a7fa74990236114cc188b064d65ad37806b"}, {0x28, 0x113, 0x6, "0e6bf58452732cc961164253a801fde114"}, {0x1010, 0x84, 0x0, "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"}, {0xf8, 0x111, 0xcfc1, "8eac6cbcda988985f4a146393ab22dcb004ae9c523fed516163baead6f3cdd2fd3350d0bf60ffd71669f843e44e7e9a2d960f8654780860be18bc7a35637ad8b9554f1942b7e1dd84e691f47ceff7eb5ccc6eeeef132b7e437507221ef14500dfbbb39fcdc4b0768539d5ddc3e37198b0fe9ada8e957b6425fc25d1f666d17a13b80d0f6826ccdfbf08ca77f73f23888fd7c371e46f1544d142faabe317aed20fdea83bad71fef3d7d8a33065d1edbb457196397cdd29b194450442e6e268c3c4636267c4e8416cf66d436f41bb8825cdef02c585940eeaea90e64bd1259d78fa17ab0741fdbd7"}, {0x20, 0x10e, 0x0, "55cc406780e485435edc"}, {0x70, 0x10c, 0x7, "7973861d68659f0afbc2687e53f6eae3e7ac31582665502723c7b85fdfb25a95178673b56d2bf1fa045a55e5d5248a59cfb02931e355eb7b1a78c78507bf1f2dbf6e1c493b297f49370daa590f1f619d58374b2a4232420098a63e5d"}], 0x1298}, 0x20048800) 3.025373585s ago: executing program 6 (id=781): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x82, &(0x7f0000000300)={r1}, &(0x7f0000000080)=0x8) 2.263892079s ago: executing program 5 (id=782): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@multiplanar_userptr={0x9, 0x1, 0x4, 0x20, 0x4, {0x0, 0x2710}, {0x0, 0xc, 0xf8, 0x7, 0x1, 0x0, "3b051c46"}, 0x10000, 0x2, {0x0}, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 2.183207626s ago: executing program 6 (id=783): iopl(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0x0, 0x47c, &(0x7f00000001c0)="$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") syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0c000310001a", @ANYRES64], 0xf) 2.06850715s ago: executing program 7 (id=784): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 1.703492438s ago: executing program 5 (id=785): socket(0x10, 0x3, 0x0) epoll_create1(0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4004000) 1.627333534s ago: executing program 7 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5903, &(0x7f00000043c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@data_err_abort}, {@noload}, {@quota}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") chdir(&(0x7f0000000280)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r0, &(0x7f0000004200)='t', 0x7ffff000) 1.60353178s ago: executing program 2 (id=787): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000"], 0xfc}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @loopback, 0x1}, {0xa, 0x4e20, 0x5a807add, @remote, 0x5}, r2, 0xb}}, 0x48) 1.066653613s ago: executing program 5 (id=788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) request_key(0x0, 0x0, 0x0, 0x0) 893.994313ms ago: executing program 0 (id=789): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff}) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="2f9374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 580.500374ms ago: executing program 6 (id=790): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x29, 0x60400, 0x0, 0x4, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3}) close(r0) 518.946378ms ago: executing program 2 (id=791): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(0x0, 0x167842, 0x19) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) unlink(&(0x7f00000002c0)='./bus\x00') pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 157.109961ms ago: executing program 5 (id=792): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000102a2201000000000000010902240001000010000904000302030000000921000038"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000048c0)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6}, 0x1c, 0x0}}], 0x1, 0x20040044) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x7, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=793): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) kernel console output (not intermixed with test programs): ler #102!!! [ 255.144077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 255.174189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 255.193982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 255.226356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 259.147393][ T44] IPVS: starting estimator thread 0... [ 259.160142][ T6028] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 259.318996][ T6030] IPVS: using max 240 ests per chain, 12000 per kthread [ 264.168769][ T1534] IPVS: starting estimator thread 0... [ 264.278378][ T6059] IPVS: using max 240 ests per chain, 12000 per kthread [ 265.798155][ T6070] loop4: detected capacity change from 0 to 256 [ 265.952712][ T6070] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 268.421563][ T6096] loop4: detected capacity change from 0 to 512 [ 268.639459][ T6096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.662199][ T6096] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.681085][ T6105] netlink: 32 bytes leftover after parsing attributes in process `syz.1.43'. [ 268.912559][ T6095] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.40: corrupted inode contents [ 268.967948][ T6095] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.40: mark_inode_dirty error [ 268.984525][ T6095] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.40: corrupted inode contents [ 269.086709][ T6095] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.40: mark_inode_dirty error [ 272.369227][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.220001][ T6120] loop1: detected capacity change from 0 to 512 [ 273.310155][ T6125] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 273.549490][ T6120] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.47: casefold flag without casefold feature [ 273.570358][ T6120] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.47: couldn't read orphan inode 15 (err -117) [ 273.632007][ T6120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.353343][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.600684][ T29] audit: type=1326 audit(1741147397.971:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.1.55" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89d978d169 code=0x0 [ 277.845121][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 277.853750][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 277.866293][ T52] Bluetooth: hci0: hardware error 0x00 [ 279.908482][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 280.789400][ T6169] capability: warning: `syz.4.63' uses deprecated v2 capabilities in a way that may be insecure [ 280.895813][ T6174] program syz.4.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.271898][ T6173] loop2: detected capacity change from 0 to 512 [ 281.375578][ T6176] Zero length message leads to an empty skb [ 281.660914][ T6173] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.65: casefold flag without casefold feature [ 281.785327][ T6173] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.65: couldn't read orphan inode 15 (err -117) [ 281.986595][ T6173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.549739][ T6189] sit1: entered promiscuous mode [ 283.557213][ T6189] sit1: entered allmulticast mode [ 283.837141][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.235462][ T6201] autofs: Bad value for 'fd' [ 284.471728][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 284.677715][ T6207] vlan2: entered promiscuous mode [ 286.288613][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.295506][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.295980][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 286.311053][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 286.322048][ T52] Bluetooth: hci3: hardware error 0x00 [ 286.970912][ T6213] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 289.584405][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 291.349769][ T6225] loop0: detected capacity change from 0 to 512 [ 291.479770][ T6225] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.83: casefold flag without casefold feature [ 291.514938][ T6225] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.83: couldn't read orphan inode 15 (err -117) [ 291.532183][ T6225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.421918][ T6240] bridge0: port 3(netdevsim3) entered blocking state [ 292.429325][ T6240] bridge0: port 3(netdevsim3) entered disabled state [ 292.437067][ T6240] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 292.447690][ T6240] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 292.457548][ T6240] bridge0: port 3(netdevsim3) entered blocking state [ 292.464941][ T6240] bridge0: port 3(netdevsim3) entered forwarding state [ 292.623333][ T6233] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 292.727680][ T6244] loop4: detected capacity change from 0 to 16 [ 293.548262][ T6244] erofs (device loop4): mounted with root inode @ nid 36. [ 295.962669][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 295.972026][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 295.994946][ T52] Bluetooth: hci1: hardware error 0x00 [ 296.524167][ T6244] erofs (device loop4): readahead error at folio 12 @ nid 36 [ 296.532523][ T6244] erofs (device loop4): readahead error at folio 10 @ nid 36 [ 296.540445][ T6244] erofs (device loop4): readahead error at folio 6 @ nid 36 [ 296.548261][ T6244] erofs (device loop4): readahead error at folio 4 @ nid 36 [ 296.556102][ T6244] erofs (device loop4): invalid logical cluster 0 at nid 36 [ 296.563509][ T6244] erofs (device loop4): readahead error at folio 0 @ nid 36 [ 296.572601][ T6244] syz.4.89: attempt to access beyond end of device [ 296.572601][ T6244] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 296.586835][ T6244] syz.4.89: attempt to access beyond end of device [ 296.586835][ T6244] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 296.604456][ T6244] syz.4.89: attempt to access beyond end of device [ 296.604456][ T6244] loop4: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 296.619459][ T6244] syz.4.89: attempt to access beyond end of device [ 296.619459][ T6244] loop4: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 296.634080][ T6244] syz.4.89: attempt to access beyond end of device [ 296.634080][ T6244] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 296.647853][ T6244] syz.4.89: attempt to access beyond end of device [ 296.647853][ T6244] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 296.661768][ T6244] syz.4.89: attempt to access beyond end of device [ 296.661768][ T6244] loop4: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 297.160594][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.614720][ T6253] loop3: detected capacity change from 0 to 64 [ 298.064224][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 298.136223][ T6256] loop0: detected capacity change from 0 to 16 [ 298.191048][ T6256] erofs (device loop0): mounted with root inode @ nid 36. [ 302.214491][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 302.474295][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 302.632315][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.648760][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.660721][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 302.674144][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 302.683441][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.897578][ T25] usb 3-1: config 0 descriptor?? [ 303.737193][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 303.743815][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 303.845921][ T25] usb 3-1: USB disconnect, device number 2 [ 304.961886][ T6285] loop4: detected capacity change from 0 to 512 [ 305.140396][ T6281] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 305.179743][ T6285] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.102: casefold flag without casefold feature [ 305.215668][ T6285] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.102: couldn't read orphan inode 15 (err -117) [ 305.250522][ T6285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.219465][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.345181][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 309.353758][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 309.362802][ T52] Bluetooth: hci2: hardware error 0x00 [ 309.643181][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 310.456299][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 310.467847][ T44] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 310.476429][ T44] usb 2-1: config 0 has no interface number 0 [ 310.482759][ T44] usb 2-1: config 0 interface 89 has no altsetting 0 [ 311.455127][ T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 311.488402][ T44] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 311.497948][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.506974][ T44] usb 2-1: Product: syz [ 311.511364][ T44] usb 2-1: Manufacturer: syz [ 311.516304][ T44] usb 2-1: SerialNumber: syz [ 311.662594][ T44] usb 2-1: config 0 descriptor?? [ 311.730306][ T44] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 311.740396][ T44] em28xx 2-1:0.89: Video interface 89 found: bulk [ 312.341522][ T44] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 313.056967][ T44] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 313.067131][ T44] em28xx 2-1:0.89: board has no eeprom [ 313.164293][ T1534] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 313.175151][ T44] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 313.182647][ T44] em28xx 2-1:0.89: analog set to bulk mode. [ 313.204838][ T25] em28xx 2-1:0.89: Registering V4L2 extension [ 313.244289][ T44] usb 2-1: USB disconnect, device number 2 [ 313.251673][ T44] em28xx 2-1:0.89: Disconnecting em28xx [ 313.374359][ T1534] usb 3-1: Using ep0 maxpacket: 16 [ 313.420651][ T1534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.432501][ T1534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.442792][ T1534] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 313.456388][ T1534] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 313.465846][ T1534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.826740][ T1534] usb 3-1: config 0 descriptor?? [ 313.995232][ T25] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 314.002480][ T25] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 314.014680][ T25] em28xx 2-1:0.89: No AC97 audio processor [ 314.054864][ T25] usb 2-1: Decoder not found [ 314.059741][ T25] em28xx 2-1:0.89: failed to create media graph [ 314.066638][ T25] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 314.094366][ T25] em28xx 2-1:0.89: Registering snapshot button... [ 314.102824][ T25] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input5 [ 314.160863][ T25] em28xx 2-1:0.89: Remote control support is not available for this card. [ 314.187735][ T44] em28xx 2-1:0.89: Closing input extension [ 314.194097][ T44] em28xx 2-1:0.89: Deregistering snapshot button [ 314.244591][ T44] em28xx 2-1:0.89: Freeing device [ 314.246281][ T6322] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 314.716754][ T1534] usbhid 3-1:0.0: can't add hid device: -71 [ 314.728289][ T1534] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 314.742575][ T1534] usb 3-1: USB disconnect, device number 3 [ 314.917693][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 314.986788][ T6335] loop4: detected capacity change from 0 to 512 [ 315.080957][ T6335] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.119: casefold flag without casefold feature [ 315.099080][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.149627][ T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.159411][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.167963][ T44] usb 2-1: Product: syz [ 315.172343][ T44] usb 2-1: Manufacturer: syz [ 315.177293][ T44] usb 2-1: SerialNumber: syz [ 315.177738][ T6335] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.119: couldn't read orphan inode 15 (err -117) [ 315.256526][ T6335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.173237][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.269351][ T44] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 316.276533][ T44] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 316.284482][ T44] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 316.549753][ T6356] loop0: detected capacity change from 0 to 1024 [ 316.593801][ T6356] ======================================================= [ 316.593801][ T6356] WARNING: The mand mount option has been deprecated and [ 316.593801][ T6356] and is ignored by this kernel. Remove the mand [ 316.593801][ T6356] option from the mount to silence this warning. [ 316.593801][ T6356] ======================================================= [ 316.727343][ T44] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 316.745245][ T44] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 316.843153][ T44] usb 2-1: USB disconnect, device number 3 [ 316.850908][ T44] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 317.066634][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 317.157059][ T4107] hfsplus: b-tree write err: -5, ino 4 [ 317.241855][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.254134][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 317.269620][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 317.289857][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.305264][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.314911][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.365835][ T25] usb 3-1: config 0 descriptor?? [ 318.397009][ T25] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 318.437718][ T25] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 318.472545][ T6374] bridge0: port 3(netdevsim3) entered blocking state [ 318.479989][ T6374] bridge0: port 3(netdevsim3) entered disabled state [ 318.487740][ T6374] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 318.495711][ T1534] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 318.498425][ T6374] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 318.520006][ T6374] bridge0: port 3(netdevsim3) entered blocking state [ 318.527433][ T6374] bridge0: port 3(netdevsim3) entered forwarding state [ 318.624082][ T6365] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 318.718118][ T1534] usb 4-1: Using ep0 maxpacket: 16 [ 318.942647][ T1534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.954962][ T1534] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.966150][ T1534] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.979985][ T1534] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 318.989221][ T1534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.027093][ T1534] usb 4-1: config 0 descriptor?? [ 319.664640][ T1534] usbhid 4-1:0.0: can't add hid device: -71 [ 319.671267][ T1534] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 319.722368][ T1534] usb 4-1: USB disconnect, device number 2 [ 320.007925][ T25] usb 3-1: USB disconnect, device number 4 [ 320.136951][ T6392] netlink: 'syz.2.141': attribute type 10 has an invalid length. [ 320.145486][ T6392] veth0_to_bond: entered allmulticast mode [ 320.520923][ T5007] Bluetooth: hci5: Frame reassembly failed (-84) [ 321.585281][ T6411] bridge0: port 3(netdevsim3) entered blocking state [ 321.592588][ T6411] bridge0: port 3(netdevsim3) entered disabled state [ 321.600161][ T6411] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 321.610679][ T6411] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 321.620681][ T6411] bridge0: port 3(netdevsim3) entered blocking state [ 321.628037][ T6411] bridge0: port 3(netdevsim3) entered forwarding state [ 321.747079][ T6403] ALSA: mixer_oss: invalid OSS volume 'SPEA' [ 322.544510][ T5793] Bluetooth: hci5: command 0x1003 tx timeout [ 322.654511][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 323.172719][ T6416] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 323.904948][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 324.074300][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 324.132889][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.150024][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.161912][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 324.175602][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 324.185516][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.266176][ T25] usb 4-1: config 0 descriptor?? [ 325.085037][ T1534] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 325.284303][ T1534] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 325.293987][ T1534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.348148][ T1534] usb 3-1: config 0 descriptor?? [ 325.403400][ T1534] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 325.464302][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 325.470956][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 325.506901][ T25] usb 4-1: USB disconnect, device number 3 [ 326.459898][ T6451] Bluetooth: MGMT ver 1.23 [ 326.503643][ T1534] gp8psk: usb in 128 operation failed. [ 326.513730][ T1534] gp8psk: usb in 137 operation failed. [ 326.519648][ T1534] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.531759][ T1534] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 326.540960][ T1534] usb 3-1: media controller created [ 326.588726][ T1534] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.400018][ T1534] gp8psk_fe: Frontend attached [ 327.405182][ T1534] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 327.413612][ T1534] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 327.609538][ T1534] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 327.619797][ T1534] gp8psk: found Genpix USB device pID = 203 (hex) [ 327.849516][ T25] usb 3-1: USB disconnect, device number 5 [ 328.206769][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 328.554993][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 328.780471][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 328.791102][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 328.802869][ T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 328.815713][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.916331][ T44] usb 4-1: config 0 descriptor?? [ 329.142113][ T44] ath6kl: Failed to submit usb control message: -71 [ 329.149342][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 329.158061][ T44] ath6kl: Unable to send get target info: -71 [ 329.188178][ T44] ath6kl: Failed to init ath6kl core: -71 [ 329.196481][ T44] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 329.286839][ T44] usb 4-1: USB disconnect, device number 4 [ 329.565439][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 329.642323][ T6493] loop4: detected capacity change from 0 to 128 [ 329.654974][ T6493] qnx6: unable to set blocksize [ 329.765043][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 332.789645][ T25] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 332.797774][ T25] usb 1-1: can't read configurations, error -71 [ 333.224947][ T6508] lo speed is unknown, defaulting to 1000 [ 333.231671][ T6508] lo speed is unknown, defaulting to 1000 [ 333.239602][ T6508] lo speed is unknown, defaulting to 1000 [ 333.269367][ T6508] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 333.313482][ T6508] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 333.440990][ T6505] loop0: detected capacity change from 0 to 1024 [ 333.482828][ T6508] lo speed is unknown, defaulting to 1000 [ 333.492101][ T6508] lo speed is unknown, defaulting to 1000 [ 333.501294][ T6508] lo speed is unknown, defaulting to 1000 [ 333.510089][ T6508] lo speed is unknown, defaulting to 1000 [ 333.519028][ T6508] lo speed is unknown, defaulting to 1000 [ 334.737346][ T4427] hfsplus: b-tree write err: -5, ino 4 [ 339.794251][ T6551] loop1: detected capacity change from 0 to 512 [ 339.892416][ T6551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.905793][ T6551] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.125845][ T6551] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.196: corrupted inode contents [ 340.169236][ T6551] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.196: mark_inode_dirty error [ 340.185645][ T6551] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.196: corrupted inode contents [ 340.244741][ T6551] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.196: mark_inode_dirty error [ 341.031331][ T6562] loop4: detected capacity change from 0 to 4096 [ 341.107123][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.477917][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 341.586302][ T1534] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 342.216373][ T6570] syz.2.203 (6570): drop_caches: 2 [ 342.234609][ T1534] usb 1-1: Using ep0 maxpacket: 16 [ 344.022421][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.033794][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.044199][ T1534] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 344.054164][ T1534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.285470][ T6562] ntfs3(loop4): Failed to read $AttrDef (-4). [ 344.550600][ T1534] usb 1-1: config 0 descriptor?? [ 344.806841][ T1534] usb 1-1: can't set config #0, error -71 [ 344.852890][ T1534] usb 1-1: USB disconnect, device number 4 [ 345.089818][ T6580] loop3: detected capacity change from 0 to 128 [ 345.272012][ T6580] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.290414][ T6580] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.500911][ T6589] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 345.513328][ T6589] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 345.673067][ T5800] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.967521][ T6603] syz.3.216 (6603): drop_caches: 2 [ 347.308226][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.315396][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.434078][ T6607] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 347.440878][ T6607] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 347.449253][ T6607] vhci_hcd vhci_hcd.0: Device attached [ 348.106563][ T1534] vhci_hcd: vhci_device speed not set [ 348.264170][ T6607] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 348.270973][ T6607] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 348.307340][ T6607] vhci_hcd vhci_hcd.0: Device attached [ 348.674352][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 348.705045][ T1534] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 349.015148][ T6614] vhci_hcd: connection closed [ 349.079117][ T998] vhci_hcd: stop threads [ 349.089293][ T998] vhci_hcd: release socket [ 349.094724][ T998] vhci_hcd: disconnect device [ 349.144541][ T6608] vhci_hcd: connection reset by peer [ 349.344460][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 349.384377][ T3609] vhci_hcd: stop threads [ 349.389142][ T3609] vhci_hcd: release socket [ 349.393797][ T3609] vhci_hcd: disconnect device [ 349.584173][ T6621] loop3: detected capacity change from 0 to 64 [ 349.588762][ T6616] syz.0.217 (6616): drop_caches: 2 [ 349.660841][ T6621] hfs: Unknown parameter 'qïa¦‰Éuiet' [ 349.735587][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 349.775262][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.788021][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.799530][ T25] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 349.810294][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.976299][ T25] usb 5-1: config 0 descriptor?? [ 350.828072][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 350.835137][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 350.895653][ T25] usb 5-1: USB disconnect, device number 2 [ 350.925299][ T6629] loop0: detected capacity change from 0 to 128 [ 351.016235][ T6629] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.033779][ T6629] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.642892][ T5790] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.736125][ T6641] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 351.745468][ T6641] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 353.844921][ T1534] vhci_hcd: vhci_device speed not set [ 354.961310][ T6669] netlink: 88 bytes leftover after parsing attributes in process `syz.1.236'. [ 354.977254][ T6669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.236'. [ 355.021796][ T6666] syz.0.234 (6666): drop_caches: 2 [ 355.033117][ T6666] syz.0.234 (6666): drop_caches: 2 [ 356.195290][ T6677] loop2: detected capacity change from 0 to 128 [ 356.360636][ T6677] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.458439][ T6677] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.513360][ T6682] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 356.522839][ T6682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 357.039655][ T5799] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.783701][ T6690] loop2: detected capacity change from 0 to 512 [ 357.859598][ T6690] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 357.874105][ T6690] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 357.964981][ T6690] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 357.980195][ T6690] EXT4-fs (loop2): 1 truncate cleaned up [ 357.989042][ T6690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.202673][ T6692] loop1: detected capacity change from 0 to 4096 [ 358.443342][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.459527][ T6689] loop3: detected capacity change from 0 to 4096 [ 358.495501][ T6689] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 358.801155][ T6689] ntfs3(loop3): ino=19, mi_enum_attr [ 358.807418][ T6689] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 359.283366][ T6706] loop2: detected capacity change from 0 to 2048 [ 359.463767][ T6708] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.510909][ T6706] NILFS (loop2): error -2 truncating bmap (ino=16) [ 359.773768][ T6713] loop4: detected capacity change from 0 to 128 [ 359.915196][ T6713] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.977197][ T6713] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.022091][ T6708] NILFS (loop2): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 360.034096][ T6708] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 360.101732][ T6708] Remounting filesystem read-only [ 360.108772][ T5799] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 360.346435][ T6724] loop2: detected capacity change from 0 to 512 [ 360.411045][ T6724] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 360.505664][ T6724] EXT4-fs (loop2): orphan cleanup on readonly fs [ 360.523183][ T6724] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 360.534928][ T6724] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 360.548080][ T6724] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.259: Failed to acquire dquot type 1 [ 360.621790][ T6727] lo speed is unknown, defaulting to 1000 [ 360.706672][ T6724] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.259: bg 0: block 40: padding at end of block bitmap is not set [ 360.729665][ T5792] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.755892][ T6724] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 360.780076][ T6724] EXT4-fs (loop2): 1 truncate cleaned up [ 360.788088][ T6724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 361.157568][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.179364][ T6747] loop1: detected capacity change from 0 to 8192 [ 366.257058][ T25] IPVS: starting estimator thread 0... [ 366.271637][ T6762] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 366.342671][ T6747] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.364277][ T6764] IPVS: using max 240 ests per chain, 12000 per kthread [ 366.900682][ T6769] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 366.909120][ T6769] FAT-fs (loop1): Filesystem has been set read-only [ 367.464714][ T6777] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 367.805584][ T6775] loop2: detected capacity change from 0 to 2048 [ 367.945783][ T6775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.893619][ T6783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.999635][ T6790] loop4: detected capacity change from 0 to 4096 [ 374.312476][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.102471][ T6813] syz.3.291 (6813): drop_caches: 2 [ 375.266278][ T6813] syz.3.291 (6813): drop_caches: 2 [ 379.197097][ T6821] fuse: Unknown parameter 'user_i00000000000000000000' [ 382.745942][ T6842] fuse: Unknown parameter 'fd0x0000000000000004' [ 383.002615][ T6846] fuse: Bad value for 'fd' [ 383.704148][ T1534] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 383.909826][ T1534] usb 5-1: Using ep0 maxpacket: 32 [ 383.983543][ T1534] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 383.993079][ T1534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.001822][ T1534] usb 5-1: Product: syz [ 384.006270][ T1534] usb 5-1: Manufacturer: syz [ 384.011081][ T1534] usb 5-1: SerialNumber: syz [ 384.102791][ T1534] usb 5-1: config 0 descriptor?? [ 384.131503][ T1534] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 384.511567][ T6865] loop2: detected capacity change from 0 to 128 [ 384.590116][ T6865] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.644648][ T6865] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.789419][ T6852] xt_HMARK: proto mask must be zero with L3 mode [ 384.846898][ T1534] gspca_ov534_9: reg_w failed -71 [ 387.018677][ T1534] gspca_ov534_9: Unknown sensor 0000 [ 387.019038][ T1534] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 388.011284][ T1534] usb 5-1: USB disconnect, device number 3 [ 388.425062][ T5799] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.020221][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 391.045263][ T6900] vlan2: entered allmulticast mode [ 391.050637][ T6900] team0: entered allmulticast mode [ 391.056236][ T6900] team_slave_0: entered allmulticast mode [ 391.062180][ T6900] team_slave_1: entered allmulticast mode [ 391.076940][ T6900] team0: left allmulticast mode [ 391.082033][ T6900] team_slave_0: left allmulticast mode [ 391.087957][ T6900] team_slave_1: left allmulticast mode [ 391.654837][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 391.844713][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 391.863634][ T6906] loop4: detected capacity change from 0 to 128 [ 391.876596][ T25] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 391.886225][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.894659][ T25] usb 4-1: Product: syz [ 391.899058][ T25] usb 4-1: Manufacturer: syz [ 391.904195][ T25] usb 4-1: SerialNumber: syz [ 391.955264][ T6906] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.028354][ T6906] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.066987][ T25] usb 4-1: config 0 descriptor?? [ 392.111170][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 392.589449][ T5792] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.757907][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 393.104940][ T25] gspca_ov534_9: reg_w failed -110 [ 393.132879][ T6916] xt_HMARK: proto mask must be zero with L3 mode [ 393.434813][ T25] gspca_ov534_9: Unknown sensor 0000 [ 393.435146][ T25] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 393.512721][ T25] usb 4-1: USB disconnect, device number 5 [ 397.926695][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 397.950782][ T6941] vlan2: entered allmulticast mode [ 397.956270][ T6941] gretap0: entered allmulticast mode [ 397.969876][ T6941] gretap0: left allmulticast mode [ 401.390906][ T6948] loop2: detected capacity change from 0 to 128 [ 401.526078][ T6948] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 401.600105][ T6948] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.915842][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 402.104431][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 402.122886][ T5799] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.136181][ T25] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 402.145835][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.154279][ T25] usb 5-1: Product: syz [ 402.158648][ T25] usb 5-1: Manufacturer: syz [ 402.163483][ T25] usb 5-1: SerialNumber: syz [ 402.229106][ T6962] evm: overlay not supported [ 402.256847][ T25] usb 5-1: config 0 descriptor?? [ 402.291523][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 402.938989][ T6956] xt_HMARK: proto mask must be zero with L3 mode [ 403.058109][ T25] gspca_ov534_9: reg_w failed -71 [ 403.142346][ T6971] loop0: detected capacity change from 0 to 2048 [ 403.172387][ T6971] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 403.215673][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 403.222769][ T6974] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 403.239161][ T6973] vlan2: entered allmulticast mode [ 403.245086][ T6973] gretap0: entered allmulticast mode [ 403.259485][ T6973] gretap0: left allmulticast mode [ 403.387390][ T6971] overlayfs: upper fs does not support tmpfile. [ 403.434342][ T6971] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 403.441911][ T6971] overlayfs: failed to set xattr on upper [ 403.448198][ T6971] overlayfs: ...falling back to redirect_dir=nofollow. [ 403.456024][ T6971] overlayfs: ...falling back to index=off. [ 403.462014][ T6971] overlayfs: ...falling back to uuid=null. [ 403.988926][ T25] gspca_ov534_9: Unknown sensor 0000 [ 403.989252][ T25] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 404.010844][ T25] usb 5-1: USB disconnect, device number 4 [ 404.225421][ T6978] loop2: detected capacity change from 0 to 4096 [ 404.904916][ T6974] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 404.916455][ T6974] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 404.960533][ T6974] Remounting filesystem read-only [ 404.966518][ T6971] overlayfs: cleanup of 'work/#19' failed (-30) [ 405.000204][ T6986] loop3: detected capacity change from 0 to 128 [ 405.164321][ T6986] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 405.228590][ T6986] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.424501][ T5790] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 406.336471][ T5800] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 408.720823][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.729986][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.267727][ T1534] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 409.503012][ T1534] usb 3-1: Using ep0 maxpacket: 32 [ 409.674367][ T1534] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 409.684834][ T1534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.693078][ T1534] usb 3-1: Product: syz [ 409.697635][ T1534] usb 3-1: Manufacturer: syz [ 409.702454][ T1534] usb 3-1: SerialNumber: syz [ 409.845261][ T1534] usb 3-1: config 0 descriptor?? [ 409.879676][ T1534] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 410.468666][ T7029] loop0: detected capacity change from 0 to 128 [ 410.530632][ T7029] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.560566][ T7017] xt_HMARK: proto mask must be zero with L3 mode [ 410.626438][ T1534] gspca_ov534_9: reg_w failed -71 [ 410.686003][ T7029] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.901724][ T7026] loop3: detected capacity change from 0 to 4096 [ 410.924188][ T1534] gspca_ov534_9: Unknown sensor 0000 [ 410.924529][ T1534] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 410.994568][ T1534] usb 3-1: USB disconnect, device number 6 [ 411.163152][ T5790] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.293711][ T7047] fuse: Bad value for 'fd' [ 414.384548][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 415.352748][ T7063] loop4: detected capacity change from 0 to 128 [ 415.452058][ T7063] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.593203][ T7063] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.216326][ T1534] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 416.435692][ T1534] usb 1-1: Using ep0 maxpacket: 32 [ 416.476713][ T5792] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.495051][ T1534] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 416.504578][ T1534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.515822][ T1534] usb 1-1: Product: syz [ 416.520203][ T1534] usb 1-1: Manufacturer: syz [ 416.526166][ T1534] usb 1-1: SerialNumber: syz [ 416.559256][ T1534] usb 1-1: config 0 descriptor?? [ 416.600189][ T1534] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 417.238408][ T7075] xt_HMARK: proto mask must be zero with L3 mode [ 417.256151][ T1534] gspca_ov534_9: reg_w failed -71 [ 417.575476][ T1534] gspca_ov534_9: Unknown sensor 0000 [ 417.575819][ T1534] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 417.589171][ T7092] loop9: detected capacity change from 0 to 8 [ 417.610777][ T1534] usb 1-1: USB disconnect, device number 5 [ 417.628559][ T7092] Dev loop9: unable to read RDB block 8 [ 417.639713][ T7092] loop9: unable to read partition table [ 417.680718][ T7092] loop9: partition table beyond EOD, truncated [ 417.687869][ T7092] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 418.731853][ T7111] loop1: detected capacity change from 0 to 128 [ 418.856889][ T7111] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 418.876680][ T7111] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.479565][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.693278][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 421.151612][ T7136] loop4: detected capacity change from 0 to 256 [ 421.335239][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 421.381669][ T25] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 421.391390][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.399832][ T25] usb 1-1: Product: syz [ 421.404508][ T25] usb 1-1: Manufacturer: syz [ 421.409320][ T25] usb 1-1: SerialNumber: syz [ 421.506920][ T25] usb 1-1: config 0 descriptor?? [ 421.552024][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 421.851198][ T7144] loop2: detected capacity change from 0 to 65 [ 421.980322][ T7144] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 422.251901][ T7128] xt_HMARK: proto mask must be zero with L3 mode [ 422.430876][ T25] gspca_ov534_9: reg_w failed -71 [ 422.804103][ T25] gspca_ov534_9: Unknown sensor 0000 [ 422.804442][ T25] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 422.990837][ T25] usb 1-1: USB disconnect, device number 6 [ 423.835661][ T7151] loop3: detected capacity change from 0 to 512 [ 423.964475][ T7151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.978022][ T7151] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.490785][ T7163] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 428.566158][ T7171] loop2: detected capacity change from 0 to 256 [ 430.147231][ T7171] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 430.373431][ T7173] usb usb8: usbfs: process 7173 (syz.0.420) did not claim interface 0 before use [ 431.858831][ T1534] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 432.086039][ T1534] usb 3-1: device descriptor read/64, error -71 [ 432.564548][ T1534] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 432.744292][ T1534] usb 3-1: device descriptor read/64, error -71 [ 432.858123][ T1534] usb usb3-port1: attempt power cycle [ 433.179014][ T7190] loop4: detected capacity change from 0 to 4096 [ 433.274602][ T1534] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 433.318549][ T1534] usb 3-1: device descriptor read/8, error -71 [ 433.575217][ T1534] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 433.658583][ T1534] usb 3-1: device descriptor read/8, error -71 [ 433.780329][ T1534] usb usb3-port1: unable to enumerate USB device [ 434.299142][ T25] libceph: connect (1)[c::]:6789 error -101 [ 434.305599][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 434.605368][ T25] libceph: connect (1)[c::]:6789 error -101 [ 434.611833][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 435.008606][ T7213] loop4: detected capacity change from 0 to 256 [ 435.072255][ T7204] ceph: No mds server is up or the cluster is laggy [ 435.159543][ T7213] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 435.229579][ T7215] loop2: detected capacity change from 0 to 64 [ 436.134624][ T1534] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 436.326079][ T1534] usb 5-1: Using ep0 maxpacket: 16 [ 436.341782][ T1534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.353684][ T1534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.364077][ T1534] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.380499][ T1534] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.391004][ T1534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.593153][ T1534] usb 5-1: config 0 descriptor?? [ 437.386958][ T1534] usbhid 5-1:0.0: can't add hid device: -71 [ 437.394345][ T1534] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 437.452148][ T1534] usb 5-1: USB disconnect, device number 5 [ 438.694094][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 438.930067][ T7243] loop4: detected capacity change from 0 to 512 [ 439.050799][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.061335][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.070758][ T25] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 439.080185][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.159678][ T7243] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 439.185054][ T7243] EXT4-fs (loop4): orphan cleanup on readonly fs [ 439.270761][ T25] usb 2-1: config 0 descriptor?? [ 439.288422][ T7243] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 439.299113][ T7243] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 439.308832][ T7243] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.448: Failed to acquire dquot type 1 [ 439.355521][ T5793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 439.363284][ T7243] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.448: bg 0: block 40: padding at end of block bitmap is not set [ 439.380930][ T5793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 439.391281][ T5793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 439.405638][ T5793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 439.417626][ T5793] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 439.427343][ T5793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 439.429551][ T7243] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 439.493466][ T25] usb 2-1: USB disconnect, device number 4 [ 439.520765][ T7243] EXT4-fs (loop4): 1 truncate cleaned up [ 439.528966][ T7243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.590605][ T7247] lo speed is unknown, defaulting to 1000 [ 440.227385][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.588720][ T7260] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 441.504349][ T5793] Bluetooth: hci5: command tx timeout [ 441.517921][ T7247] chnl_net:caif_netlink_parms(): no params data found [ 442.426779][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 442.616844][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 442.660886][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.672732][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.683148][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 442.697030][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 442.709954][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.886073][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.894074][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.901949][ T7247] bridge_slave_0: entered allmulticast mode [ 442.910381][ T7247] bridge_slave_0: entered promiscuous mode [ 442.982483][ T25] usb 2-1: config 0 descriptor?? [ 443.097953][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.106008][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.113732][ T7247] bridge_slave_1: entered allmulticast mode [ 443.123427][ T7247] bridge_slave_1: entered promiscuous mode [ 443.216768][ T7282] loop2: detected capacity change from 0 to 256 [ 443.288122][ T7282] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 443.388784][ T7247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.413391][ T7247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.584803][ T5793] Bluetooth: hci5: command 0x041b tx timeout [ 443.622735][ T7247] team0: Port device team_slave_0 added [ 443.648873][ T7247] team0: Port device team_slave_1 added [ 443.650038][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 443.661769][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 443.702202][ T7284] loop0: detected capacity change from 0 to 512 [ 443.762848][ T7284] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 443.795852][ T7284] EXT4-fs (loop0): orphan cleanup on readonly fs [ 443.814429][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.821684][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.853016][ T7247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.869797][ T25] usb 2-1: USB disconnect, device number 5 [ 443.871401][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.883065][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.910066][ T7247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.986545][ T7284] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 443.997577][ T7284] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 444.007360][ T7284] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.460: Failed to acquire dquot type 1 [ 444.105300][ T7284] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.460: bg 0: block 40: padding at end of block bitmap is not set [ 444.195049][ T7284] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 444.218727][ T7284] EXT4-fs (loop0): 1 truncate cleaned up [ 444.227037][ T7284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 444.294586][ T7247] hsr_slave_0: entered promiscuous mode [ 444.302951][ T7247] hsr_slave_1: entered promiscuous mode [ 444.310697][ T7247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.318749][ T7247] Cannot create hsr debugfs directory [ 444.354777][ T7288] loop4: detected capacity change from 0 to 1024 [ 445.309532][ T1534] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 445.464413][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.581171][ T1534] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.595451][ T1534] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.606014][ T1534] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 445.615473][ T1534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.698949][ T5793] Bluetooth: hci5: command 0x041b tx timeout [ 445.809540][ T1534] usb 3-1: config 0 descriptor?? [ 446.031690][ T1534] usb 3-1: USB disconnect, device number 11 [ 446.430568][ T7297] vlan2: entered promiscuous mode [ 446.896743][ T7247] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 447.293781][ T7247] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 447.316840][ T7247] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 447.358879][ T7247] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 447.745660][ T5793] Bluetooth: hci5: command 0x041b tx timeout [ 448.349736][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.564061][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.629376][ T5007] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.637191][ T5007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.727618][ T5007] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.735356][ T5007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.778907][ T7316] loop2: detected capacity change from 0 to 256 [ 448.992913][ T7316] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 449.009939][ T7320] loop0: detected capacity change from 0 to 512 [ 449.112905][ T7320] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 449.124397][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 449.155489][ T7320] EXT4-fs (loop0): orphan cleanup on readonly fs [ 449.236594][ T7320] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 449.248133][ T7320] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 449.257955][ T7320] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.473: Failed to acquire dquot type 1 [ 449.299423][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 449.362202][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.374957][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.390581][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 449.405509][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.414959][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.474219][ T7320] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.473: bg 0: block 40: padding at end of block bitmap is not set [ 449.524658][ T7320] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 449.619659][ T7320] EXT4-fs (loop0): 1 truncate cleaned up [ 449.626929][ T7320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.831770][ T5793] Bluetooth: hci5: command 0x041b tx timeout [ 449.867840][ T25] usb 2-1: config 0 descriptor?? [ 450.167884][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.580180][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 450.590509][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 450.647788][ T7158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.680590][ T25] usb 2-1: USB disconnect, device number 6 [ 451.104901][ T7331] vlan2: entered promiscuous mode [ 451.352606][ T7247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.465202][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 451.716810][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.727396][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 451.740003][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 451.751469][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.902837][ T8] usb 1-1: config 0 descriptor?? [ 452.132617][ T8] usb 1-1: USB disconnect, device number 7 [ 453.227131][ T3463] bridge0: port 3(netdevsim3) entered disabled state [ 453.325393][ T3463] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 453.335232][ T3463] netdevsim netdevsim3 netdevsim3 (unregistering): left promiscuous mode [ 453.345073][ T3463] bridge0: port 3(netdevsim3) entered disabled state [ 453.479909][ T3463] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.535542][ T7360] loop2: detected capacity change from 0 to 512 [ 453.592469][ T7359] loop1: detected capacity change from 0 to 256 [ 453.635046][ T7360] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 453.652900][ T3463] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.660720][ T7360] EXT4-fs (loop2): orphan cleanup on readonly fs [ 453.735716][ T7359] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 453.777603][ T7360] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 453.789571][ T3463] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.805883][ T7360] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 453.815773][ T7360] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.484: Failed to acquire dquot type 1 [ 453.890888][ T3463] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.939939][ T7360] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.484: bg 0: block 40: padding at end of block bitmap is not set [ 454.013091][ T7360] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 454.106893][ T7360] EXT4-fs (loop2): 1 truncate cleaned up [ 454.115006][ T7360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.380527][ T7247] veth0_vlan: entered promiscuous mode [ 454.604213][ T3463] bridge_slave_1: left allmulticast mode [ 454.610142][ T3463] bridge_slave_1: left promiscuous mode [ 454.617029][ T3463] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.723266][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.856142][ T3463] bridge_slave_0: left allmulticast mode [ 454.862046][ T3463] bridge_slave_0: left promiscuous mode [ 454.869968][ T3463] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.032521][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.166430][ T3463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.235479][ T3463] bond0 (unregistering): Released all slaves [ 458.546475][ T5848] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 458.730435][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.741959][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 458.758964][ T5848] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 458.771584][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.812943][ T5848] usb 1-1: config 0 descriptor?? [ 458.820905][ T7247] veth1_vlan: entered promiscuous mode [ 458.858448][ T7373] vlan2: entered promiscuous mode [ 459.042863][ T5848] ath6kl: Failed to submit usb control message: -71 [ 459.050074][ T5848] ath6kl: unable to send the bmi data to the device: -71 [ 459.057661][ T5848] ath6kl: Unable to send get target info: -71 [ 459.067223][ T5848] ath6kl: Failed to init ath6kl core: -71 [ 459.075439][ T5848] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 459.103470][ T5848] usb 1-1: USB disconnect, device number 8 [ 459.304647][ T3463] hsr_slave_0: left promiscuous mode [ 459.335273][ T3463] hsr_slave_1: left promiscuous mode [ 459.343243][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.351875][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.376533][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.384723][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.410192][ T3463] veth1_macvtap: left promiscuous mode [ 459.421541][ T3463] veth0_macvtap: left promiscuous mode [ 459.427791][ T3463] veth1_vlan: left promiscuous mode [ 459.433361][ T3463] veth0_vlan: left promiscuous mode [ 460.328277][ T7407] loop0: detected capacity change from 0 to 512 [ 460.499713][ T7407] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 460.535566][ T7407] EXT4-fs (loop0): orphan cleanup on readonly fs [ 460.605161][ T7407] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 460.616543][ T7407] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 460.626503][ T7407] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.497: Failed to acquire dquot type 1 [ 460.764169][ T7407] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.497: bg 0: block 40: padding at end of block bitmap is not set [ 460.837086][ T7407] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 460.888244][ T7407] EXT4-fs (loop0): 1 truncate cleaned up [ 460.955464][ T7407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 461.017253][ T3463] team0 (unregistering): Port device team_slave_1 removed [ 461.095895][ T3463] team0 (unregistering): Port device team_slave_0 removed [ 461.295521][ T7411] loop1: detected capacity change from 0 to 4096 [ 461.364942][ T7411] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 461.890623][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.917644][ T7247] veth0_macvtap: entered promiscuous mode [ 462.006194][ T7247] veth1_macvtap: entered promiscuous mode [ 462.122683][ T7411] ntfs3(loop1): ino=19, mi_enum_attr [ 462.128750][ T7411] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 462.245697][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.256831][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.267348][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.278537][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.291521][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.303199][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.313626][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.324526][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.339275][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.644968][ T3463] IPVS: stop unused estimator thread 0... [ 462.669587][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.680488][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.696790][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.709797][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.720277][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.731006][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.741139][ T7247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.751974][ T7247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.766600][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.066612][ T7423] vlan2: entered promiscuous mode [ 463.328025][ T7247] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.337314][ T7247] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.347268][ T7247] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.356854][ T7247] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.394774][ T44] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 464.651833][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.662752][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 464.676500][ T44] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 464.686025][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.986796][ T44] usb 1-1: config 0 descriptor?? [ 465.178296][ T7443] loop2: detected capacity change from 0 to 256 [ 465.188044][ T7443] exfat: Deprecated parameter 'namecase' [ 465.194372][ T7443] exfat: Deprecated parameter 'utf8' [ 465.200090][ T7443] exfat: Deprecated parameter 'namecase' [ 465.230612][ T44] ath6kl: Failed to submit usb control message: -71 [ 465.236832][ T7443] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 465.237583][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 465.262818][ T44] ath6kl: Unable to send get target info: -71 [ 465.309663][ T44] ath6kl: Failed to init ath6kl core: -71 [ 465.330505][ T44] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 465.360161][ T44] usb 1-1: USB disconnect, device number 9 [ 465.616817][ T7451] loop4: detected capacity change from 0 to 256 [ 465.756950][ T7451] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 466.227288][ T7458] loop1: detected capacity change from 0 to 512 [ 466.329137][ T7458] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 466.370704][ T7458] EXT4-fs (loop1): orphan cleanup on readonly fs [ 466.438773][ T7458] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 466.449841][ T7458] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 466.459723][ T7458] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.511: Failed to acquire dquot type 1 [ 466.596745][ T7458] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.511: bg 0: block 40: padding at end of block bitmap is not set [ 466.666010][ T7458] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 466.690189][ T7458] EXT4-fs (loop1): 1 truncate cleaned up [ 466.698259][ T7458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.214723][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.607263][ T7472] vlan2: entered promiscuous mode [ 470.248078][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.254996][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.387216][ T44] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 471.671171][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.681857][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 471.695351][ T44] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 471.708599][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.916171][ T44] usb 1-1: config 0 descriptor?? [ 472.124226][ T7506] loop2: detected capacity change from 0 to 256 [ 472.152396][ T44] ath6kl: Failed to submit usb control message: -71 [ 472.160777][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 472.170217][ T44] ath6kl: Unable to send get target info: -71 [ 472.179725][ T44] ath6kl: Failed to init ath6kl core: -71 [ 472.188280][ T44] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 472.255361][ T44] usb 1-1: USB disconnect, device number 10 [ 472.280871][ T7506] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 472.343449][ T7509] loop1: detected capacity change from 0 to 512 [ 472.442175][ T7509] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 472.496075][ T7509] EXT4-fs (loop1): orphan cleanup on readonly fs [ 472.549802][ T7509] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 472.561004][ T7509] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 472.570958][ T7509] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.525: Failed to acquire dquot type 1 [ 472.626178][ T7509] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.525: bg 0: block 40: padding at end of block bitmap is not set [ 472.694402][ T7509] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 472.752138][ T7509] EXT4-fs (loop1): 1 truncate cleaned up [ 472.760311][ T7509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 473.083273][ T3609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.094462][ T3609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.129534][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.164504][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.172582][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.248425][ T7516] vlan2: entered promiscuous mode [ 477.830497][ T7549] loop1: detected capacity change from 0 to 512 [ 477.915965][ T7549] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 477.920642][ T7553] loop0: detected capacity change from 0 to 256 [ 477.964498][ T7549] EXT4-fs (loop1): orphan cleanup on readonly fs [ 478.015265][ T7549] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 478.026228][ T7549] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 478.036057][ T7549] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.538: Failed to acquire dquot type 1 [ 478.077610][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 478.091328][ T7549] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.538: bg 0: block 40: padding at end of block bitmap is not set [ 478.136498][ T7553] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 478.170098][ T7549] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 478.183629][ T7549] EXT4-fs (loop1): 1 truncate cleaned up [ 478.192166][ T7549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 478.301023][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.312041][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 478.322183][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.335598][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 478.345070][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.506120][ T7556] vlan2: entered promiscuous mode [ 478.515629][ T8] usb 3-1: config 0 descriptor?? [ 478.556629][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.784347][ T8] ath6kl: Failed to submit usb control message: -71 [ 478.791330][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 478.798990][ T8] ath6kl: Unable to send get target info: -71 [ 478.841983][ T8] ath6kl: Failed to init ath6kl core: -71 [ 478.851144][ T8] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 478.919942][ T7561] loop1: detected capacity change from 0 to 128 [ 478.931192][ T8] usb 3-1: USB disconnect, device number 12 [ 479.275228][ T4427] kworker/u8:22: attempt to access beyond end of device [ 479.275228][ T4427] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 483.657389][ T7588] loop4: detected capacity change from 0 to 512 [ 483.750373][ T7588] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 483.805089][ T7588] EXT4-fs (loop4): orphan cleanup on readonly fs [ 483.849389][ T7588] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 483.860373][ T7588] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 483.870747][ T7588] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.550: Failed to acquire dquot type 1 [ 483.896983][ T7592] loop1: detected capacity change from 0 to 256 [ 483.943798][ T7588] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.550: bg 0: block 40: padding at end of block bitmap is not set [ 484.035136][ T7588] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 484.075264][ T7588] EXT4-fs (loop4): 1 truncate cleaned up [ 484.083113][ T7588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 484.182115][ T7592] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 484.286696][ T7598] vlan2: entered promiscuous mode [ 484.393443][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.904546][ T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 485.147831][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.158492][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 485.168660][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.181985][ T44] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 485.191595][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.274544][ T44] usb 6-1: config 0 descriptor?? [ 485.996068][ T44] ath6kl: Failed to submit usb control message: -71 [ 486.003134][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 486.010805][ T44] ath6kl: Unable to send get target info: -71 [ 487.019097][ T44] ath6kl: Failed to init ath6kl core: -71 [ 487.027282][ T44] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 487.956602][ T44] usb 6-1: USB disconnect, device number 2 [ 488.809330][ T7629] loop1: detected capacity change from 0 to 16 [ 488.849781][ T7630] loop2: detected capacity change from 0 to 65 [ 488.862793][ T7631] loop0: detected capacity change from 0 to 512 [ 488.898184][ T7629] erofs (device loop1): mounted with root inode @ nid 36. [ 488.949015][ T7633] loop5: detected capacity change from 0 to 256 [ 488.957033][ T7630] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 488.984530][ T7631] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 489.011127][ T7631] EXT4-fs (loop0): orphan cleanup on readonly fs [ 489.061726][ T7631] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 489.072861][ T7631] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 489.082880][ T7631] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.565: Failed to acquire dquot type 1 [ 489.159977][ T29] audit: type=1800 audit(1741147609.541:3): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.567" name="bus" dev="loop5" ino=8 res=0 errno=0 [ 489.596034][ T7631] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.565: bg 0: block 40: padding at end of block bitmap is not set [ 489.754996][ T7631] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 489.865100][ T7631] EXT4-fs (loop0): 1 truncate cleaned up [ 489.875731][ T7631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 490.273277][ T7638] vlan2: entered promiscuous mode [ 490.924906][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.791722][ T7643] loop4: detected capacity change from 0 to 256 [ 492.849831][ T7642] loop5: detected capacity change from 0 to 1024 [ 492.875908][ T7642] hfsplus: Unknown parameter '0x0000000000000003' [ 493.040327][ T7642] loop5: detected capacity change from 0 to 1024 [ 493.076175][ T7642] EXT4-fs: Ignoring removed bh option [ 493.086821][ T7643] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 493.246235][ T7642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.361001][ T29] audit: type=1800 audit(1741147613.731:4): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.570" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 493.664205][ T29] audit: type=1800 audit(1741147614.031:5): pid=7657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.570" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 495.834540][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 498.795376][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.805851][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 498.815919][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.830173][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 498.842140][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.803170][ T8] usb 2-1: config 0 descriptor?? [ 501.029128][ T7247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.378097][ T8] usb 2-1: can't set config #0, error -71 [ 501.405620][ T8] usb 2-1: USB disconnect, device number 7 [ 501.578198][ T7674] vlan2: entered promiscuous mode [ 502.743685][ T7683] loop2: detected capacity change from 0 to 65 [ 502.810095][ T7683] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 506.169766][ T7690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.585'. [ 511.364177][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 511.617717][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.628934][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 511.641579][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.656132][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 511.665691][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.025643][ T8] usb 5-1: config 0 descriptor?? [ 512.280044][ T7718] vlan2: entered promiscuous mode [ 513.238315][ T8] ath6kl: Failed to submit usb control message: -71 [ 513.245408][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 513.252685][ T8] ath6kl: Unable to send get target info: -71 [ 514.246430][ T8] ath6kl: Failed to init ath6kl core: -71 [ 514.254459][ T8] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 514.273140][ T8] usb 5-1: USB disconnect, device number 6 [ 514.742632][ T7741] loop5: detected capacity change from 0 to 8 [ 515.032938][ T7744] loop4: detected capacity change from 0 to 65 [ 515.083008][ T7744] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 515.135752][ T7739] loop0: detected capacity change from 0 to 4096 [ 515.145126][ T7739] ntfs3: Unknown parameter 'noforce' [ 515.178037][ T7745] loop2: detected capacity change from 0 to 1024 [ 515.944855][ T7745] EXT4-fs (loop2): Test dummy encryption mode enabled [ 515.960084][ T7745] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 516.071362][ T7745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.605046][ T7745] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 516.645124][ T44] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 517.015283][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.025856][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 517.036133][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.049728][ T44] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 517.060052][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.330327][ T7761] loop0: detected capacity change from 0 to 1024 [ 517.446580][ T44] usb 6-1: config 0 descriptor?? [ 517.471734][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.995971][ T44] ath6kl: Failed to submit usb control message: -71 [ 518.003027][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 518.010456][ T44] ath6kl: Unable to send get target info: -71 [ 518.022925][ T44] ath6kl: Failed to init ath6kl core: -71 [ 518.031182][ T44] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 518.213151][ T44] usb 6-1: USB disconnect, device number 3 [ 518.597676][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.722784][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.255835][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 520.582821][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 522.834536][ T7806] loop5: detected capacity change from 0 to 1024 [ 522.922681][ T7806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.034704][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 523.234524][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 523.273350][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.284671][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 523.294341][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 523.328986][ T7247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.340698][ T8] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 523.350474][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 523.358991][ T8] usb 5-1: SerialNumber: syz [ 523.466298][ T8] usb 5-1: config 0 descriptor?? [ 523.497610][ T8] usb-storage 5-1:0.0: USB Mass Storage device detected [ 523.546144][ T8] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 523.701865][ T7819] loop0: detected capacity change from 0 to 65 [ 523.733084][ T7819] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 525.778187][ T8] usb 5-1: USB disconnect, device number 7 [ 528.438464][ T7839] loop4: detected capacity change from 0 to 256 [ 528.529265][ T7839] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 528.664700][ T7839] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 528.675247][ T7839] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 528.683377][ T7839] UDF-fs: Scanning with blocksize 512 failed [ 528.779996][ T7839] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 528.855662][ T7839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.595838][ T7843] loop1: detected capacity change from 0 to 764 [ 529.734846][ T7843] rock: directory entry would overflow storage [ 529.741273][ T7843] rock: sig=0x4654, size=5, remaining=4 [ 529.877037][ T7845] loop0: detected capacity change from 0 to 1024 [ 530.087259][ T7845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.412011][ T7856] loop1: detected capacity change from 0 to 2048 [ 530.491351][ T7856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.493477][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.598790][ T29] audit: type=1800 audit(1741147650.971:6): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.640" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 530.723742][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.174461][ T44] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 531.404962][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 531.548894][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 531.578310][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.597371][ T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 531.613099][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 531.624585][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 532.178928][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.186170][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.510389][ T8] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 532.520267][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.531241][ T8] usb 1-1: Product: syz [ 532.536557][ T8] usb 1-1: Manufacturer: syz [ 532.541381][ T8] usb 1-1: SerialNumber: syz [ 532.634892][ T44] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 532.644383][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 532.652638][ T44] usb 6-1: SerialNumber: syz [ 533.260470][ T8] usb 1-1: config 0 descriptor?? [ 533.342573][ T8] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 533.618143][ T44] usb 6-1: config 0 descriptor?? [ 534.090068][ T7869] xt_HMARK: proto mask must be zero with L3 mode [ 534.280330][ T44] usb 6-1: can't set config #0, error -71 [ 534.290865][ T8] gspca_ov534_9: reg_w failed -71 [ 534.438534][ T44] usb 6-1: USB disconnect, device number 4 [ 534.614806][ T8] gspca_ov534_9: Unknown sensor 0000 [ 534.615148][ T8] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 534.678028][ T8] usb 1-1: USB disconnect, device number 11 [ 534.728135][ T7889] loop5: detected capacity change from 0 to 65 [ 534.839387][ T7889] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 537.126677][ T7896] loop0: detected capacity change from 0 to 1024 [ 537.289287][ T7896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.358563][ T7901] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 537.417177][ T7901] EXT4-fs (loop0): Remounting filesystem read-only [ 538.225242][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.664513][ T5848] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 539.890044][ T5848] usb 1-1: Using ep0 maxpacket: 32 [ 539.937122][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.947910][ T5848] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 539.957315][ T5848] usb 1-1: config 0 interface 0 has no altsetting 0 [ 540.121301][ T5848] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 540.131129][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 540.139703][ T5848] usb 1-1: SerialNumber: syz [ 540.267066][ T5848] usb 1-1: config 0 descriptor?? [ 540.340241][ T5848] usb-storage 1-1:0.0: USB Mass Storage device detected [ 540.362258][ T5848] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 542.195387][ T7928] netlink: 64 bytes leftover after parsing attributes in process `syz.4.662'. [ 542.698162][ T1534] usb 1-1: USB disconnect, device number 12 [ 543.656996][ T7938] loop4: detected capacity change from 0 to 65 [ 543.677189][ T7938] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 543.724704][ T5848] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 543.888101][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 544.357679][ T5848] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 544.367696][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.376199][ T5848] usb 3-1: Product: syz [ 544.380709][ T5848] usb 3-1: Manufacturer: syz [ 544.387069][ T5848] usb 3-1: SerialNumber: syz [ 545.468392][ T5848] usb 3-1: config 0 descriptor?? [ 545.857216][ T5848] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 546.317955][ T7945] loop4: detected capacity change from 0 to 512 [ 546.399542][ T7945] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.667: casefold flag without casefold feature [ 546.557766][ T7945] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.667: couldn't read orphan inode 15 (err -117) [ 546.585511][ T7931] xt_HMARK: proto mask must be zero with L3 mode [ 546.613642][ T7945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.646886][ T5848] gspca_ov534_9: reg_w failed -71 [ 546.934153][ T5848] gspca_ov534_9: Unknown sensor 0000 [ 546.934494][ T5848] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 547.005300][ T5848] usb 3-1: USB disconnect, device number 13 [ 547.512550][ T7957] loop5: detected capacity change from 0 to 1024 [ 547.529505][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.902512][ T7957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.306261][ T7247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.172908][ T7979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.676'. [ 549.315707][ T44] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 549.511822][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 549.568112][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.579510][ T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 549.589087][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 549.641339][ T44] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 549.650900][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 549.659207][ T44] usb 6-1: SerialNumber: syz [ 549.718065][ T44] usb 6-1: config 0 descriptor?? [ 549.771181][ T44] usb-storage 6-1:0.0: USB Mass Storage device detected [ 549.781440][ T7982] loop2: detected capacity change from 0 to 65 [ 549.846767][ T44] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 549.857967][ T7982] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 552.538028][ T7929] usb 6-1: USB disconnect, device number 5 [ 552.805223][ T44] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 552.984625][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 553.090626][ T44] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 553.100276][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.114131][ T44] usb 2-1: Product: syz [ 553.118547][ T44] usb 2-1: Manufacturer: syz [ 553.123360][ T44] usb 2-1: SerialNumber: syz [ 553.235676][ T44] usb 2-1: config 0 descriptor?? [ 553.259487][ T44] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 553.553438][ T8005] loop2: detected capacity change from 0 to 512 [ 553.672486][ T8005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.755873][ T8005] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.684: bg 0: block 425: padding at end of block bitmap is not set [ 553.772809][ T8005] EXT4-fs (loop2): Remounting filesystem read-only [ 553.801054][ T8005] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1605: inode #18: comm syz.2.684: cleanup dec ref error -117 [ 554.159211][ T44] gspca_ov534_9: reg_w failed -71 [ 554.192742][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.474192][ T44] gspca_ov534_9: Unknown sensor 0000 [ 554.474550][ T44] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 554.551485][ T44] usb 2-1: USB disconnect, device number 8 [ 554.835027][ T8018] vlan2: entered promiscuous mode [ 555.448220][ T8022] loop5: detected capacity change from 0 to 65 [ 555.509000][ T8022] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 559.567186][ T7929] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 559.851088][ T7929] usb 6-1: Using ep0 maxpacket: 32 [ 562.724884][ T7929] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 562.735524][ T7929] usb 6-1: can't read configurations, error -71 [ 564.384509][ T8046] Bluetooth: hci5: command 0x041b tx timeout [ 565.788493][ T8070] vlan2: entered promiscuous mode [ 566.295119][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 566.313600][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 566.364837][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 566.381623][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 566.411929][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 566.438405][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 566.465287][ T5793] Bluetooth: hci5: command 0x041b tx timeout [ 566.656470][ T8073] lo speed is unknown, defaulting to 1000 [ 566.974398][ T8077] loop5: detected capacity change from 0 to 128 [ 567.265206][ T8077] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 567.330791][ T8073] chnl_net:caif_netlink_parms(): no params data found [ 567.375589][ T8077] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.136482][ T7247] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 568.544541][ T8075] Bluetooth: hci4: command tx timeout [ 569.120911][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.128837][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.136541][ T8073] bridge_slave_0: entered allmulticast mode [ 569.144851][ T8073] bridge_slave_0: entered promiscuous mode [ 569.172655][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.180544][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.191153][ T8073] bridge_slave_1: entered allmulticast mode [ 569.199305][ T8073] bridge_slave_1: entered promiscuous mode [ 570.123792][ T8073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.242901][ T8073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.624797][ T8075] Bluetooth: hci4: command tx timeout [ 570.858442][ T8073] team0: Port device team_slave_0 added [ 570.916939][ T8073] team0: Port device team_slave_1 added [ 571.119120][ T8108] sp0: Synchronizing with TNC [ 571.433292][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.444861][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.472263][ T8073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.649055][ T8113] loop0: detected capacity change from 0 to 256 [ 571.718007][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.725811][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.754756][ T8073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.894944][ T8113] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 571.919069][ T8046] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 571.938044][ T8046] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 571.956189][ T8046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 571.976073][ T8046] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 571.989831][ T8046] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 571.999631][ T8046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 572.704147][ T8075] Bluetooth: hci4: command tx timeout [ 572.898477][ T8116] lo speed is unknown, defaulting to 1000 [ 573.010045][ T8073] hsr_slave_0: entered promiscuous mode [ 573.021537][ T8073] hsr_slave_1: entered promiscuous mode [ 573.031523][ T8073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.039756][ T8073] Cannot create hsr debugfs directory [ 573.324651][ T8122] loop0: detected capacity change from 0 to 1024 [ 573.802484][ T3862] hfsplus: b-tree write err: -5, ino 4 [ 574.145619][ T8075] Bluetooth: hci6: command tx timeout [ 574.529938][ T8073] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 574.681427][ T8073] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 574.785499][ T8075] Bluetooth: hci4: command tx timeout [ 574.786260][ T8073] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 574.909031][ T8073] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 575.069057][ T8116] chnl_net:caif_netlink_parms(): no params data found [ 576.225481][ T8075] Bluetooth: hci6: command tx timeout [ 576.346046][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.176618][ T8073] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.235529][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.243152][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.410293][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.418299][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.314151][ T8075] Bluetooth: hci6: command tx timeout [ 578.405554][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.416935][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.425184][ T8116] bridge_slave_0: entered allmulticast mode [ 578.434556][ T8116] bridge_slave_0: entered promiscuous mode [ 578.727406][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.738620][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.746760][ T8116] bridge_slave_1: entered allmulticast mode [ 578.756060][ T8116] bridge_slave_1: entered promiscuous mode [ 580.665922][ T8075] Bluetooth: hci6: command tx timeout [ 580.729462][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.885685][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.622124][ T8116] team0: Port device team_slave_0 added [ 585.706172][ T4427] bridge0: port 3(netdevsim3) entered disabled state [ 585.805655][ T4427] netdevsim netdevsim1 netdevsim3 (unregistering): left allmulticast mode [ 585.814718][ T4427] netdevsim netdevsim1 netdevsim3 (unregistering): left promiscuous mode [ 585.823664][ T4427] bridge0: port 3(netdevsim3) entered disabled state [ 586.000741][ T4427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.127881][ T8116] team0: Port device team_slave_1 added [ 586.179083][ T8169] vlan2: entered promiscuous mode [ 586.469599][ T4427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.703498][ T4427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.829778][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.837549][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.864703][ T8116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.011988][ T4427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.112194][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.119887][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.146885][ T8116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.233665][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.820075][ T8116] hsr_slave_0: entered promiscuous mode [ 587.831618][ T8116] hsr_slave_1: entered promiscuous mode [ 587.839417][ T8116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.847265][ T8116] Cannot create hsr debugfs directory [ 588.225122][ T4427] bridge_slave_1: left allmulticast mode [ 588.239430][ T4427] bridge_slave_1: left promiscuous mode [ 588.246224][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.358643][ T4427] bridge_slave_0: left allmulticast mode [ 588.364982][ T4427] bridge_slave_0: left promiscuous mode [ 588.371511][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.816506][ T8191] loop5: detected capacity change from 0 to 256 [ 588.824956][ T8191] exfat: Deprecated parameter 'utf8' [ 588.830678][ T8191] exfat: Deprecated parameter 'utf8' [ 588.836504][ T8191] exfat: Deprecated parameter 'utf8' [ 589.093651][ T8191] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 589.325486][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.406883][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.471513][ T4427] bond0 (unregistering): Released all slaves [ 590.748331][ T4427] hsr_slave_0: left promiscuous mode [ 590.779230][ T4427] hsr_slave_1: left promiscuous mode [ 590.787116][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.801950][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.867392][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.875381][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.813349][ T4427] veth1_macvtap: left promiscuous mode [ 592.820081][ T4427] veth0_macvtap: left promiscuous mode [ 592.826925][ T4427] veth1_vlan: left promiscuous mode [ 592.832506][ T4427] veth0_vlan: left promiscuous mode [ 593.055791][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.064224][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 594.105044][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 594.131066][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 594.367771][ T1534] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 594.490869][ T5848] lo speed is unknown, defaulting to 1000 [ 594.497225][ T5848] infiniband syz2: ib_query_port failed (-19) [ 594.505904][ T8209] vlan2: entered promiscuous mode [ 594.584593][ T1534] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 594.596085][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.608018][ T1534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.618187][ T1534] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 594.809445][ T1534] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 594.819240][ T1534] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 594.827772][ T1534] usb 1-1: Manufacturer: syz [ 594.919103][ T1534] usb 1-1: config 0 descriptor?? [ 595.157046][ T8116] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 595.228830][ T8116] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 595.343198][ T4427] IPVS: stop unused estimator thread 0... [ 595.366426][ T1534] usbhid 1-1:0.0: can't add hid device: -71 [ 595.373030][ T1534] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 595.385554][ T8116] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 595.416463][ T1534] usb 1-1: USB disconnect, device number 13 [ 595.499281][ T8116] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 595.553793][ T4427] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.639448][ T4427] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.737097][ T8223] loop5: detected capacity change from 0 to 2048 [ 595.774484][ T4427] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.863501][ T4427] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.897221][ T8223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.970506][ T8073] veth0_vlan: entered promiscuous mode [ 596.190921][ T8073] veth1_vlan: entered promiscuous mode [ 596.338811][ T4427] bridge_slave_1: left allmulticast mode [ 596.344839][ T4427] bridge_slave_1: left promiscuous mode [ 596.351416][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.444284][ T7247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.455932][ T4427] bridge_slave_0: left allmulticast mode [ 596.461831][ T4427] bridge_slave_0: left promiscuous mode [ 596.469605][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.097195][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.127650][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.146154][ T4427] bond0 (unregistering): Released all slaves [ 597.452986][ T8073] veth0_macvtap: entered promiscuous mode [ 598.147536][ T8240] netlink: 36 bytes leftover after parsing attributes in process `syz.5.749'. [ 598.321061][ T8237] loop2: detected capacity change from 0 to 40427 [ 598.340568][ T8237] F2FS-fs (loop2): heap/no_heap options were deprecated [ 598.342453][ T4427] hsr_slave_0: left promiscuous mode [ 598.352214][ T8237] F2FS-fs (loop2): invalid crc value [ 598.370662][ T8237] F2FS-fs (loop2): Found nat_bits in checkpoint [ 598.429133][ T4427] hsr_slave_1: left promiscuous mode [ 598.437064][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.445017][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.596885][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.605395][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.648775][ T8237] F2FS-fs (loop2): Start checkpoint disabled! [ 598.664794][ T4427] veth1_macvtap: left promiscuous mode [ 598.670562][ T4427] veth0_macvtap: left promiscuous mode [ 598.678652][ T4427] veth1_vlan: left promiscuous mode [ 598.684364][ T4427] veth0_vlan: left promiscuous mode [ 598.992944][ T8237] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 599.452696][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 599.491519][ T8237] syz.2.747 (8237): drop_caches: 2 [ 599.507220][ T8237] syz.2.747 (8237): drop_caches: 2 [ 599.548077][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 599.921640][ T8073] veth1_macvtap: entered promiscuous mode [ 600.139950][ T8246] vlan2: entered promiscuous mode [ 600.195507][ T7929] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 600.246483][ T4107] kworker/u8:20: attempt to access beyond end of device [ 600.246483][ T4107] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 600.261981][ T4107] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 600.269346][ T4107] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 600.357316][ T8073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.368186][ T8073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.379691][ T8073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.391406][ T8073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.402466][ T8073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.413403][ T8073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.429590][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.471277][ T7929] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 600.484218][ T7929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.495635][ T7929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.505841][ T7929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 600.560131][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.786048][ T8073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.797113][ T8073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.807361][ T8073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.818337][ T8073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.829691][ T8073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.840847][ T8073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.855776][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.904577][ T7929] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 600.914117][ T7929] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 600.916405][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.922552][ T7929] usb 1-1: Manufacturer: syz [ 600.947537][ T8073] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.957186][ T8073] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.966336][ T8073] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.975633][ T8073] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.002813][ T4427] IPVS: stop unused estimator thread 0... [ 601.028498][ T7929] usb 1-1: config 0 descriptor?? [ 601.078830][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.086582][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.230298][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.238252][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.726393][ T7929] usbhid 1-1:0.0: can't add hid device: -71 [ 601.733253][ T7929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 601.817784][ T7929] usb 1-1: USB disconnect, device number 14 [ 603.710460][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.709514][ T8280] loop0: detected capacity change from 0 to 512 [ 606.840021][ T8280] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.759: casefold flag without casefold feature [ 606.889783][ T8280] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.759: couldn't read orphan inode 15 (err -117) [ 607.061957][ T8280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.225307][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.773202][ T8116] veth0_vlan: entered promiscuous mode [ 609.877722][ T8116] veth1_vlan: entered promiscuous mode [ 610.120484][ T8116] veth0_macvtap: entered promiscuous mode [ 610.207942][ T8116] veth1_macvtap: entered promiscuous mode [ 610.263581][ T8306] vlan2: entered promiscuous mode [ 610.479734][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.490739][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.501103][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.512035][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.522448][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.533333][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.543704][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.555870][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.570913][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.723107][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.734883][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.745189][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.756165][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.767485][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.778695][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.788976][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.799915][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.814601][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.982008][ T8116] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.992362][ T8116] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.002310][ T8116] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.011688][ T8116] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.997309][ T7929] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 612.218373][ T4107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.227923][ T4107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.260170][ T7929] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 612.272933][ T7929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.285161][ T7929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.296711][ T7929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 612.433562][ T8162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.441795][ T8162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.263196][ T7929] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 613.272890][ T7929] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 613.281526][ T7929] usb 1-1: Manufacturer: syz [ 613.290722][ T7929] usb 1-1: config 0 descriptor?? [ 614.466659][ T7929] usbhid 1-1:0.0: can't add hid device: -71 [ 614.473391][ T7929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 614.537779][ T7929] usb 1-1: USB disconnect, device number 15 [ 615.221445][ T8336] loop2: detected capacity change from 0 to 512 [ 615.334588][ T8336] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.768: casefold flag without casefold feature [ 615.394724][ T8336] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.768: couldn't read orphan inode 15 (err -117) [ 615.417473][ T8336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.734862][ T8345] trusted_key: encrypted_key: keylen parameter is missing [ 616.540762][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.621474][ T8356] vlan2: entered promiscuous mode [ 617.475881][ T8162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.484149][ T8162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.602732][ T2196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.611075][ T2196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.124273][ T7929] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 618.355011][ T7929] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 618.366307][ T7929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.377762][ T7929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.388033][ T7929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 618.657370][ T7929] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 618.667138][ T7929] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 618.676169][ T7929] usb 1-1: Manufacturer: syz [ 618.751132][ T7929] usb 1-1: config 0 descriptor?? [ 619.406322][ T7929] usbhid 1-1:0.0: can't add hid device: -71 [ 619.412952][ T7929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 619.456048][ T7929] usb 1-1: USB disconnect, device number 16 [ 619.532349][ T8391] loop6: detected capacity change from 0 to 512 [ 619.625165][ T8391] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.783: casefold flag without casefold feature [ 619.694406][ T8391] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.783: couldn't read orphan inode 15 (err -117) [ 619.720114][ T8391] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.802111][ T8396] vlan2: entered promiscuous mode [ 620.634901][ T8399] loop7: detected capacity change from 0 to 32768 [ 620.666109][ T8073] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.826647][ T8399] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 620.849136][ T8399] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 620.858664][ T8399] bcachefs (loop7): Version upgrade required: [ 620.858664][ T8399] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 620.858664][ T8399] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 620.858664][ T8399] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 620.962867][ T8399] bcachefs (loop7): dropping and reconstructing all alloc info [ 621.068350][ T8413] loop2: detected capacity change from 0 to 2048 [ 621.138613][ T8399] bcachefs (loop7): accounting_read... done [ 621.145654][ T8399] bcachefs (loop7): alloc_read... done [ 621.151625][ T8399] bcachefs (loop7): stripes_read... done [ 621.157936][ T8399] bcachefs (loop7): snapshots_read... done [ 621.164538][ T8399] bcachefs (loop7): check_allocations... done [ 621.392719][ T8399] bcachefs (loop7): going read-write [ 621.452864][ T8399] bcachefs (loop7): done starting filesystem [ 621.526920][ T8413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.701198][ T8399] ===================================================== [ 621.708671][ T8399] BUG: KMSAN: uninit-value in bch2_extent_crc_append+0x7c2/0x830 [ 621.722670][ T8399] bch2_extent_crc_append+0x7c2/0x830 [ 621.728432][ T8399] init_append_extent+0x466/0x1050 [ 621.733970][ T8399] __bch2_write+0x54a9/0x8490 [ 621.738873][ T8399] bch2_write+0xc98/0x1af0 [ 621.743506][ T8399] bch2_writepages+0x24a/0x3c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 621.748650][ T8399] do_writepages+0x427/0xc30 [ 621.753974][ T8399] file_write_and_wait_range+0x6f2/0x7b0 [ 621.760017][ T8399] bch2_fsync+0xb6/0x510 [ 621.764687][ T8399] vfs_fsync_range+0x1f9/0x260 [ 621.769667][ T8399] bch2_write_iter+0x4dce/0x50f0 [ 621.774930][ T8399] vfs_write+0xb34/0x1540 [ 621.779432][ T8399] ksys_write+0x240/0x4b0 [ 621.784142][ T8399] __x64_sys_write+0x93/0xe0 [ 621.788926][ T8399] x64_sys_call+0x3161/0x3c30 [ 621.795792][ T8399] do_syscall_64+0xcd/0x1e0 [ 621.802300][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.810145][ T8399] [ 621.812587][ T8399] Uninit was stored to memory at: [ 621.824078][ T8399] bch2_extent_crc_pack+0x686/0x6b0 [ 621.829487][ T8399] bch2_extent_crc_append+0x645/0x830 [ 621.835960][ T8399] init_append_extent+0x466/0x1050 [ 621.841321][ T8399] __bch2_write+0x54a9/0x8490 [ 621.846386][ T8399] bch2_write+0xc98/0x1af0 [ 621.851022][ T8399] bch2_writepages+0x24a/0x3c0 [ 621.856135][ T8399] do_writepages+0x427/0xc30 [ 621.860932][ T8399] file_write_and_wait_range+0x6f2/0x7b0 [ 621.866934][ T8399] bch2_fsync+0xb6/0x510 [ 621.871349][ T8399] vfs_fsync_range+0x1f9/0x260 [ 621.876480][ T8399] bch2_write_iter+0x4dce/0x50f0 [ 621.881626][ T8399] vfs_write+0xb34/0x1540 [ 621.886399][ T8399] ksys_write+0x240/0x4b0 [ 621.890919][ T8399] __x64_sys_write+0x93/0xe0 [ 621.898088][ T8399] x64_sys_call+0x3161/0x3c30 [ 621.903060][ T8399] do_syscall_64+0xcd/0x1e0 [ 621.908486][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.914747][ T8399] [ 621.917172][ T8399] Uninit was created at: [ 621.926412][ T8399] __alloc_frozen_pages_noprof+0x9a7/0xe00 [ 621.932579][ T8399] alloc_pages_mpol+0x4cd/0x890 [ 621.939373][ T8399] alloc_frozen_pages_noprof+0x1bf/0x1e0 [ 621.945338][ T8399] allocate_slab+0x23a/0x1110 [ 621.950235][ T8399] ___slab_alloc+0x1287/0x3540 [ 621.955345][ T8399] kmem_cache_alloc_noprof+0x84e/0xe10 [ 621.961001][ T8399] mempool_alloc_slab+0x36/0x50 [ 621.966185][ T8399] mempool_init_node+0x202/0x4d0 [ 621.971311][ T8399] mempool_init_noprof+0x57/0x70 [ 621.976507][ T8399] bioset_init+0x279/0xb30 [ 621.981142][ T8399] bch2_fs_fs_io_buffered_init+0x4a/0xc0 [ 621.987171][ T8399] bch2_fs_open+0x5654/0x5ba0 [ 621.992080][ T8399] bch2_fs_get_tree+0x98a/0x24e0 [ 621.997433][ T8399] vfs_get_tree+0xb1/0x5a0 [ 622.004125][ T8399] do_new_mount+0x71f/0x15e0 [ 622.008942][ T8399] path_mount+0x742/0x1f10 [ 622.013580][ T8399] __se_sys_mount+0x71f/0x800 [ 622.019279][ T8399] __x64_sys_mount+0xe4/0x150 [ 622.029036][ T8399] x64_sys_call+0x39bf/0x3c30 [ 622.035476][ T8399] do_syscall_64+0xcd/0x1e0 [ 622.040190][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.046494][ T8399] [ 622.048965][ T8399] CPU: 1 UID: 0 PID: 8399 Comm: syz.7.786 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 622.059990][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 622.070896][ T8399] ===================================================== [ 622.078037][ T8399] Disabling lock debugging due to kernel taint [ 622.084443][ T8399] Kernel panic - not syncing: kmsan.panic set ... [ 622.091013][ T8399] CPU: 1 UID: 0 PID: 8399 Comm: syz.7.786 Tainted: G B 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 622.103311][ T8399] Tainted: [B]=BAD_PAGE [ 622.107598][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 622.117996][ T8399] Call Trace: [ 622.121927][ T8399] [ 622.124973][ T8399] dump_stack_lvl+0x216/0x2d0 [ 622.129829][ T8399] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 622.135859][ T8399] dump_stack+0x1e/0x24 [ 622.140168][ T8399] panic+0x4e2/0xcf0 [ 622.144268][ T8399] ? kmsan_get_metadata+0x61/0x1c0 [ 622.149603][ T8399] kmsan_report+0x2c7/0x2d0 [ 622.154396][ T8399] ? kmsan_internal_chain_origin+0x57/0xd0 [ 622.160416][ T8399] ? bch2_writepages+0x24a/0x3c0 [ 622.165559][ T8399] ? vfs_fsync_range+0x1f9/0x260 [ 622.170695][ T8399] ? bch2_write_iter+0x4dce/0x50f0 [ 622.175985][ T8399] ? vfs_write+0xb34/0x1540 [ 622.180668][ T8399] ? ksys_write+0x240/0x4b0 [ 622.185369][ T8399] ? __x64_sys_write+0x93/0xe0 [ 622.190311][ T8399] ? __msan_warning+0x95/0x120 [ 622.195256][ T8399] ? bch2_extent_crc_append+0x7c2/0x830 [ 622.200976][ T8399] ? init_append_extent+0x466/0x1050 [ 622.206484][ T8399] ? __bch2_write+0x54a9/0x8490 [ 622.211536][ T8399] ? bch2_write+0xc98/0x1af0 [ 622.216317][ T8399] ? bch2_writepages+0x24a/0x3c0 [ 622.221436][ T8399] ? do_writepages+0x427/0xc30 [ 622.226379][ T8399] ? file_write_and_wait_range+0x6f2/0x7b0 [ 622.232393][ T8399] ? bch2_fsync+0xb6/0x510 [ 622.236972][ T8399] ? vfs_fsync_range+0x1f9/0x260 [ 622.242111][ T8399] ? bch2_write_iter+0x4dce/0x50f0 [ 622.247396][ T8399] ? vfs_write+0xb34/0x1540 [ 622.252069][ T8399] ? ksys_write+0x240/0x4b0 [ 622.256740][ T8399] ? __x64_sys_write+0x93/0xe0 [ 622.261671][ T8399] ? x64_sys_call+0x3161/0x3c30 [ 622.266717][ T8399] ? do_syscall_64+0xcd/0x1e0 [ 622.271626][ T8399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.277916][ T8399] ? kmsan_get_metadata+0x13e/0x1c0 [ 622.283318][ T8399] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 622.289842][ T8399] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 622.296094][ T8399] ? __msan_memset+0xf5/0x1b0 [ 622.300946][ T8399] ? kmsan_get_metadata+0x13e/0x1c0 [ 622.306340][ T8399] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 622.312359][ T8399] ? bch2_extent_crc_pack+0x5fd/0x6b0 [ 622.317901][ T8399] ? kmsan_get_metadata+0x13e/0x1c0 [ 622.323638][ T8399] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 622.329662][ T8399] __msan_warning+0x95/0x120 [ 622.334453][ T8399] bch2_extent_crc_append+0x7c2/0x830 [ 622.340009][ T8399] init_append_extent+0x466/0x1050 [ 622.345331][ T8399] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 622.351794][ T8399] __bch2_write+0x54a9/0x8490 [ 622.356774][ T8399] bch2_write+0xc98/0x1af0 [ 622.361471][ T8399] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 622.367502][ T8399] bch2_writepages+0x24a/0x3c0 [ 622.372458][ T8399] ? __pfx_bch2_writepages+0x10/0x10 [ 622.377922][ T8399] do_writepages+0x427/0xc30 [ 622.382693][ T8399] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 622.388817][ T8399] ? _raw_spin_unlock+0x30/0x50 [ 622.393892][ T8399] file_write_and_wait_range+0x6f2/0x7b0 [ 622.399802][ T8399] bch2_fsync+0xb6/0x510 [ 622.404215][ T8399] ? __pfx_bch2_fsync+0x10/0x10 [ 622.409227][ T8399] vfs_fsync_range+0x1f9/0x260 [ 622.414202][ T8399] bch2_write_iter+0x4dce/0x50f0 [ 622.419336][ T8399] ? kmsan_get_metadata+0x13e/0x1c0 [ 622.424783][ T8399] vfs_write+0xb34/0x1540 [ 622.429390][ T8399] ? __pfx_bch2_write_iter+0x10/0x10 [ 622.434868][ T8399] ksys_write+0x240/0x4b0 [ 622.439395][ T8399] ? kmsan_get_metadata+0x13e/0x1c0 [ 622.444805][ T8399] __x64_sys_write+0x93/0xe0 [ 622.449837][ T8399] x64_sys_call+0x3161/0x3c30 [ 622.454691][ T8399] do_syscall_64+0xcd/0x1e0 [ 622.459402][ T8399] ? clear_bhb_loop+0x25/0x80 [ 622.464278][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.470380][ T8399] RIP: 0033:0x7fa010f8d169 [ 622.474927][ T8399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.494734][ T8399] RSP: 002b:00007fa011de6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 622.503343][ T8399] RAX: ffffffffffffffda RBX: 00007fa0111a5fa0 RCX: 00007fa010f8d169 [ 622.511637][ T8399] RDX: 000000007ffff000 RSI: 0000400000004200 RDI: 0000000000000004 [ 622.519772][ T8399] RBP: 00007fa01100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 622.527977][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.536080][ T8399] R13: 0000000000000000 R14: 00007fa0111a5fa0 R15: 00007ffcc3d8e3e8 [ 622.544217][ T8399] [ 622.547665][ T8399] Kernel Offset: disabled [ 622.552051][ T8399] Rebooting in 86400 seconds..