last executing test programs: 53.419206171s ago: executing program 1 (id=168): r0 = memfd_create(&(0x7f0000000080)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\xae\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[D=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\x02\x00\x00\x00\x00\x00\x00\x00#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9uc\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2\xfb<\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\x00\x00\x00\x00n>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\x1f\xf7U\xde\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x100000001) lseek(r0, 0x7fffd, 0x4) 51.805149886s ago: executing program 1 (id=172): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000140)=0x1f00, 0x11) 51.641042203s ago: executing program 1 (id=173): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@gettaction={0x14, 0x32, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9980030000000000280012800b00010065727370616e0000180002800400120006000e00000000000600020025000000140003006e69"], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.327251704s ago: executing program 1 (id=176): syz_mount_image$ext4(&(0x7f0000007380)='ext4\x00', &(0x7f00000073c0)='./file0\x00', 0x1008002, &(0x7f0000007400)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000007440)="$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") syz_mount_image$fuse(0x0, &(0x7f0000007a40)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000007a80)='./file0\x00', &(0x7f0000007ac0), &(0x7f0000007b00), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000007b40)='./file0\x00', &(0x7f0000007b80), 0x8, &(0x7f0000007bc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 50.962667872s ago: executing program 3 (id=180): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect$uac2(0x2, 0x9f, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x10001, &(0x7f00002ee000/0x3000)=nil, 0x2) 50.578379801s ago: executing program 1 (id=182): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) accept$netrom(r0, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) 49.628240058s ago: executing program 1 (id=185): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) 49.198574332s ago: executing program 32 (id=185): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) 49.173119604s ago: executing program 3 (id=187): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000001c000001"], 0x22) 48.876508625s ago: executing program 3 (id=189): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x169802, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000001c0)={0x600, 0x20000}) 47.349080001s ago: executing program 3 (id=192): syz_mount_image$ext4(&(0x7f0000007380)='ext4\x00', &(0x7f00000073c0)='./file0\x00', 0x1008002, &(0x7f0000007400)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000007440)="$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") syz_mount_image$fuse(0x0, &(0x7f0000007a40)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000007a80)='./file0\x00', &(0x7f0000007ac0), &(0x7f0000007b00), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000007b40)='./file0\x00', &(0x7f0000007b80), 0x8, &(0x7f0000007bc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 46.600727167s ago: executing program 3 (id=194): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0x2}], 0x1}, 0x20000000) 45.240320896s ago: executing program 3 (id=197): r0 = memfd_create(&(0x7f0000000080)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\xae\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[D=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\x02\x00\x00\x00\x00\x00\x00\x00#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9uc\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2\xfb<\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\x00\x00\x00\x00n>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\x1f\xf7U\xde\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x100000001) lseek(r0, 0x7fffd, 0x4) 44.70901988s ago: executing program 33 (id=197): r0 = memfd_create(&(0x7f0000000080)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\xae\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[D=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\x02\x00\x00\x00\x00\x00\x00\x00#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9uc\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2\xfb<\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\x00\x00\x00\x00n>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\x1f\xf7U\xde\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x100000001) lseek(r0, 0x7fffd, 0x4) 2.446573578s ago: executing program 4 (id=420): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="1a816e725da15d021b3c01dd04841a801a811d7123e67800a44f5391535cf0e74fba2fa73ced207027cde855a4a9dc2cd57c578e088b4372f7fc3157ce6e8cf64c62fccc3bb7a8fad5bb21c5c7143bc5ea485f2493a5f424c53a49ffc92b997138809cc82e55d24f91834d4d82b576f380d689ec12dfcc", 0x77}, {&(0x7f0000000880)="399d9d76de1b5dab38df3fa5cd161baeda6ace2391d8519decb90d8c1021f4d9a42525f28131affe5b3ca5fb087302cf5f7d3facc7275af4f5f405a1606d1c7a87cd094a51114879c7d841e34c3d55213533", 0x52}, {&(0x7f0000000a00)="4132efc42157c14e017dd43eea5724ee3b5ab28001aca51a4fa7300415f443450559adfb429f17b6b7a673385cfc99a67f7bd34a6f80441ce7bfcc7094629c91adedbed24827d11c9648c4601486f02581e2e63eec7cf51e5d4c94d903fba1c5", 0x60}, {&(0x7f0000000a80)="a01ab28b3f081beaa71745636881dc5cf74cd3d0875fcdb12782bcdcbc151513b0d86e386bb59615d932020486fe32488d5907564eedf269bd05863aa41fa7a51670e180468ae5d01924568ba7dc1bd86d19bc1a8b30", 0x56}], 0x4}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.280549675s ago: executing program 4 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r0, 0xa1, 0x0) 2.265378076s ago: executing program 2 (id=424): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000300), 0xf3, 0x481, &(0x7f0000000900)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 2.119820443s ago: executing program 0 (id=425): r0 = syz_open_dev$loop(&(0x7f0000001540), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/address_bits', 0x82803, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000015c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x11, 0x1d, 0x4, "7f12aaa9d802b5665e8fc89b7c6314a6bb462534ce80b43c0479187d69b3617861d429b40665a81cfe53e03bca0b5ea1bf3716d30a8b8e32dc8bb56673fc9a74", "b2b67709a251b9bcac61a179bc1051ca36db62acedf6b2e55fdd02f04499b80e3197257e53c7a59c9fa8faf9e0f7fda8500f5b1f3a34c1de8635c936518b724f", "ed166c5a4c49713592344127227d0903a8ac559239f6189263ac6be58740b449", [0x4, 0x1009]}) 2.076353028s ago: executing program 4 (id=426): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x140863) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000380)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x19, 0x5, "ed7c3aee8df1473533a4f0894408c7028291f278783dafed651368de23b75dc79bee86bb59b59e2cb1d2143e9787dadf7145257cfdc105a0ad0001f040888009", "7a7f5f731e06c7176b84f69d435a09cab467cb3aaa3bea6b7afb494e1ccc580e", [0x8000, 0x7fff]}) 1.928779993s ago: executing program 2 (id=428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@local, 0x4d4, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0xc5, 0xf, 0xa, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xc7, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000004) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.48426896s ago: executing program 0 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newnexthop={0x2c, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48041}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) 1.440250935s ago: executing program 4 (id=431): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x898, 0xfffffffe, 0xe}, 0x10) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e26, @empty=0x1000000}, 0x10) 1.341724285s ago: executing program 0 (id=432): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)="9d197713c48eb4c35bb48e7b74e280260d70ac2b24248696eff64f8a3d78cbd88191f8d15e812fc4f2747dc653a7dc619b0125dce605fa6a0042d3c749", 0x3d}, {&(0x7f0000000100)="bce2b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540f7ffd163c328f8a62a2cfa971d1928512e2efb2c057f8ea1b3f507644fb033253b38d738fa0ba9e12364b76641bfb3cae42c2c4f3af9757dc4ee6c191ce83d68b2425c8d1d0b22aea27e3336f1eebfce473ad42494679ec5c88a9423c4ecf65797a99fa8f79c97b1ae063c6f183fc4d004db589bd6bf6075fa7b3a4f578215e68a2a7c4db5691b0188c1a1e07b766160aec521e596397bbf", 0xc2}, {&(0x7f0000001680)='\tO', 0x2}], 0x3}, 0x84) 1.301033069s ago: executing program 2 (id=433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0, 0x0, 0x50}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 1.267534722s ago: executing program 4 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r2 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8, r1}) 1.200889469s ago: executing program 5 (id=435): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="1a816e725da15d021b3c01dd04841a801a811d7123e67800a44f5391535cf0e74fba2fa73ced207027cde855a4a9dc2cd57c578e088b4372f7fc3157ce6e8cf64c62fccc3bb7a8fad5bb21c5c7143bc5ea485f2493a5f424c53a49ffc92b997138809cc82e55d24f91834d4d82b576f380d689ec12dfcc", 0x77}, {&(0x7f0000000880)="399d9d76de1b5dab38df3fa5cd161baeda6ace2391d8519decb90d8c1021f4d9a42525f28131affe5b3ca5fb087302cf5f7d3facc7275af4f5f405a1606d1c7a87cd094a51114879c7d841e34c3d55213533", 0x52}, {&(0x7f0000000a00)="4132efc42157c14e017dd43eea5724ee3b5ab28001aca51a4fa7300415f443450559ad", 0x23}, {&(0x7f0000000a80)="a01ab28b3f081beaa71745636881dc5cf74cd3d0875fcdb12782bcdcbc151513b0d86e386bb59615d932020486fe32488d5907564eedf269bd05863aa41fa7a51670e180468ae5", 0x47}], 0x4}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.09034473s ago: executing program 0 (id=436): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRES64, @ANYBLOB="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", @ANYRESHEX, @ANYRES8], 0x1, 0x1f1, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0xfb) 1.08966049s ago: executing program 4 (id=437): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3108, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xa0, 0x11, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xfc, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0xfb, 0x10}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x0) 1.037358765s ago: executing program 2 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0', 0x39) 900.210058ms ago: executing program 5 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$eventfd(r0, 0x0, 0x0) 843.020794ms ago: executing program 2 (id=440): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}]}}]}, 0x48}}, 0x0) 748.070074ms ago: executing program 0 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e2984f49412c", @ANYRESDEC], 0xd) 699.978609ms ago: executing program 5 (id=442): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02204788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 631.906086ms ago: executing program 2 (id=443): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0xd, 0x0, 0x6, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x2, 0x1, 0x3, 0x4, 0x4}) 584.870301ms ago: executing program 5 (id=444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000840)={0x1, 0x0, [{0x28d, 0x0, 0x7ff}]}) 544.288745ms ago: executing program 0 (id=445): syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000100), 0x0, 0x559e, &(0x7f00000008c0)="$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") chdir(&(0x7f0000005e80)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000a480)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f000000a4c0)={0x0, 0x0, 0x0, 0x1000}) 281.832591ms ago: executing program 5 (id=446): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) setresgid(0xee00, r1, r1) 0s ago: executing program 5 (id=447): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 84.387732][ T5773] cgroup: Unknown subsys name 'net' [ 84.551147][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.223659][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.113281][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.123978][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.141302][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.163386][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.182680][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.190141][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.209098][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.217721][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.226620][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.234478][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.238258][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.243919][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.256890][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.257529][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.266162][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.273170][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.280371][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.286653][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.294047][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.301905][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.313512][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.320864][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.329714][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.337497][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.402144][ T5792] (null): rxe_set_mtu: Set mtu to 1024 [ 88.409023][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.432030][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.439515][ T5794] (null): rxe_set_mtu: Set mtu to 1024 [ 88.455414][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 88.461605][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.470102][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 88.477737][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.484788][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.493894][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.776094][ T5792] infiniband rxe0: set active [ 88.790530][ T5792] infiniband rxe0: added rxe_eth0 [ 88.796919][ T5447] infiniband rxe0: set active [ 88.803986][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.823511][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.915096][ T5792] RDS/IB: rxe0: added [ 88.919819][ T5792] smc: adding ib device rxe0 with port count 1 [ 88.931580][ T5792] smc: ib device rxe0 port 1 has pnetid [ 88.973988][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.026728][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.045207][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.093903][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 89.216608][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 89.249792][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 89.335497][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.347208][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.355721][ T5784] bridge_slave_0: entered allmulticast mode [ 89.367174][ T5784] bridge_slave_0: entered promiscuous mode [ 89.411746][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.421021][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.432466][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.440485][ T5784] bridge_slave_1: entered allmulticast mode [ 89.451695][ T5784] bridge_slave_1: entered promiscuous mode [ 89.625040][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.632343][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.640168][ T5785] bridge_slave_0: entered allmulticast mode [ 89.648186][ T5785] bridge_slave_0: entered promiscuous mode [ 89.667309][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.679947][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.738829][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.746194][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.754828][ T5785] bridge_slave_1: entered allmulticast mode [ 89.762333][ T5785] bridge_slave_1: entered promiscuous mode [ 89.780562][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.806565][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.823086][ T5794] bridge_slave_0: entered allmulticast mode [ 89.830577][ T5794] bridge_slave_0: entered promiscuous mode [ 89.869517][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.886479][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.926664][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.934045][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.941302][ T5794] bridge_slave_1: entered allmulticast mode [ 89.973292][ T5794] bridge_slave_1: entered promiscuous mode [ 90.018930][ T5784] team0: Port device team_slave_0 added [ 90.038179][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.093060][ T5784] team0: Port device team_slave_1 added [ 90.128323][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.188829][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.245233][ T5785] team0: Port device team_slave_0 added [ 90.253571][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.260570][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.286887][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.346236][ T5785] team0: Port device team_slave_1 added [ 90.361637][ T5794] team0: Port device team_slave_0 added [ 90.372081][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.380710][ T5098] Bluetooth: hci0: command tx timeout [ 90.383379][ T5800] Bluetooth: hci3: command tx timeout [ 90.387129][ T5788] Bluetooth: hci1: command tx timeout [ 90.392072][ T5791] Bluetooth: hci2: command tx timeout [ 90.402959][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.429041][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.440823][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.482246][ T5794] team0: Port device team_slave_1 added [ 90.528513][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.535655][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.566026][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.579435][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.586685][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.613051][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.645829][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.652955][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.682668][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.742334][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.749715][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.775732][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.826119][ T5784] hsr_slave_0: entered promiscuous mode [ 90.833145][ T5784] hsr_slave_1: entered promiscuous mode [ 90.865283][ T5785] hsr_slave_0: entered promiscuous mode [ 90.871987][ T5785] hsr_slave_1: entered promiscuous mode [ 90.878430][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.886509][ T5785] Cannot create hsr debugfs directory [ 90.921766][ T5794] hsr_slave_0: entered promiscuous mode [ 90.928487][ T5794] hsr_slave_1: entered promiscuous mode [ 90.934903][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.942512][ T5794] Cannot create hsr debugfs directory [ 91.400651][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.414498][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.433738][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.469782][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.537197][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 91.593338][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.629080][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.639653][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.672505][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.755038][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.762289][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.771900][ T5792] bridge_slave_0: entered allmulticast mode [ 91.779405][ T5792] bridge_slave_0: entered promiscuous mode [ 91.798025][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.808377][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.815905][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.823468][ T5792] bridge_slave_1: entered allmulticast mode [ 91.830729][ T5792] bridge_slave_1: entered promiscuous mode [ 91.861176][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.874963][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.885332][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.897400][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.910124][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.961304][ T5792] team0: Port device team_slave_0 added [ 91.971623][ T5792] team0: Port device team_slave_1 added [ 92.009460][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.018353][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.045096][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.077123][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.084636][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.110895][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.158935][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.217255][ T5792] hsr_slave_0: entered promiscuous mode [ 92.225749][ T5792] hsr_slave_1: entered promiscuous mode [ 92.232000][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.240531][ T5792] Cannot create hsr debugfs directory [ 92.403874][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.453568][ T5791] Bluetooth: hci0: command tx timeout [ 92.459039][ T5791] Bluetooth: hci1: command tx timeout [ 92.463059][ T5098] Bluetooth: hci2: command tx timeout [ 92.467745][ T5791] Bluetooth: hci3: command tx timeout [ 92.495720][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.503210][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.522868][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.530036][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.636947][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.646287][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.661600][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.681922][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.697369][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.732341][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.766430][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.781922][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.789599][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.828432][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.835678][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.871445][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.948137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.955470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.996132][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.003423][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.150704][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.274921][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.303968][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.321510][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.368571][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.375828][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.471219][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.478505][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.588801][ T5784] veth0_vlan: entered promiscuous mode [ 93.666996][ T5784] veth1_vlan: entered promiscuous mode [ 93.708636][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.807252][ T5784] veth0_macvtap: entered promiscuous mode [ 93.853616][ T5784] veth1_macvtap: entered promiscuous mode [ 93.908309][ T5794] veth0_vlan: entered promiscuous mode [ 93.927522][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.941630][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.959675][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.995854][ T5794] veth1_vlan: entered promiscuous mode [ 94.007220][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.023666][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.038405][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.047916][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.180755][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.197940][ T5785] veth0_vlan: entered promiscuous mode [ 94.208679][ T5794] veth0_macvtap: entered promiscuous mode [ 94.232486][ T5794] veth1_macvtap: entered promiscuous mode [ 94.291698][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.302187][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.317624][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.326255][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.342344][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.355951][ T5785] veth1_vlan: entered promiscuous mode [ 94.382004][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.395506][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.407529][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.448178][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.461101][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.471319][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.480943][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.515362][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.531853][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.540176][ T5791] Bluetooth: hci2: command tx timeout [ 94.540212][ T5791] Bluetooth: hci1: command tx timeout [ 94.545830][ T5788] Bluetooth: hci0: command tx timeout [ 94.545963][ T5788] Bluetooth: hci3: command tx timeout [ 94.600005][ T5792] veth0_vlan: entered promiscuous mode [ 94.645550][ T5792] veth1_vlan: entered promiscuous mode [ 94.680092][ T5784] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.717217][ T5785] veth0_macvtap: entered promiscuous mode [ 94.758490][ T5785] veth1_macvtap: entered promiscuous mode [ 94.801393][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.826352][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.850544][ T5792] veth0_macvtap: entered promiscuous mode [ 94.860901][ T5881] sd 0:0:1:0: PR command failed: 1026 [ 94.870506][ T5881] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 94.878715][ T5881] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 94.898073][ T5792] veth1_macvtap: entered promiscuous mode [ 94.916980][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.941218][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.954454][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.971181][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.994406][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.025838][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.041776][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.053236][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.071812][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.084981][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.107925][ T604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.128151][ T604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.140379][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.155423][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.166040][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.185628][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.227306][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.254104][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.282810][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.302795][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.322097][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.348628][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.360973][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.408002][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.429915][ T5888] syz.2.6[5888]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.434142][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.462596][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.496402][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.506450][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.526863][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.547039][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.561496][ T5888] loop2: detected capacity change from 0 to 4096 [ 95.634685][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.658920][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.668680][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.677977][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.729689][ T5888] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 95.763446][ T5888] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 95.835096][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.865074][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.882943][ T5888] ntfs3: loop2: ino=5, "/" directory corrupted [ 95.894342][ T5888] ntfs3: loop2: ino=5, "/" directory corrupted [ 96.009917][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.021689][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.038032][ T61] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 96.054801][ T5784] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 96.061386][ T5784] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 96.082831][ T5784] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 96.103754][ T40] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 96.118926][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.155821][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.234258][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.242146][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.400840][ T5895] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.614182][ T5791] Bluetooth: hci3: command tx timeout [ 96.614202][ T5098] Bluetooth: hci0: command tx timeout [ 96.614266][ T5098] Bluetooth: hci2: command tx timeout [ 96.619673][ T5791] Bluetooth: hci1: command tx timeout [ 96.740629][ T5904] Zero length message leads to an empty skb [ 96.803745][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.007424][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 97.026156][ T5915] loop0: detected capacity change from 0 to 24 [ 97.035020][ T5915] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 97.047448][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.080736][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.090626][ T5915] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 97.119057][ T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 97.139831][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.187704][ T23] usb 4-1: config 0 descriptor?? [ 97.263250][ T8] cfg80211: failed to load regulatory.db [ 97.542826][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.637176][ T5926] loop0: detected capacity change from 0 to 128 [ 97.668375][ T23] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 97.686714][ T23] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 97.698786][ T23] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 97.706696][ T23] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 97.719053][ T23] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 97.739122][ T23] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 97.762858][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 97.784772][ T5878] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 97.809405][ T5878] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 97.822450][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.834554][ T5878] usb 3-1: Product: syz [ 97.845135][ T5878] usb 3-1: Manufacturer: syz [ 97.851117][ T5878] usb 3-1: SerialNumber: syz [ 97.880649][ T5878] usb 3-1: config 0 descriptor?? [ 97.925899][ T5878] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 97.953357][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 97.981375][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.004856][ T5878] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 98.022961][ T5878] usb 3-1: media controller created [ 98.115746][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.143843][ T5918] cxusb: i2c wr: len=80 is too big! [ 98.143843][ T5918] [ 98.187920][ T5878] usb 3-1: selecting invalid altsetting 7 [ 98.193887][ T5878] cxusb: set interface failed [ 98.198735][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 98.265529][ T5878] DVB: Unable to find symbol lgdt330x_attach() [ 98.272133][ T5878] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 98.275536][ T5850] usb 4-1: USB disconnect, device number 2 [ 98.421186][ T5933] loop1: detected capacity change from 0 to 512 [ 98.423148][ T5878] rc_core: IR keymap rc-dvico-portable not found [ 98.446301][ T5878] Registered IR keymap rc-empty [ 98.474822][ T5878] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 98.475981][ T5933] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.496417][ T5878] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5 [ 98.512399][ T5933] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 98.536500][ T5878] dvb-usb: schedule remote query interval to 100 msecs. [ 98.542880][ T5933] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 98.544092][ T5878] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 98.566955][ T5878] usb 3-1: USB disconnect, device number 2 [ 98.578328][ T5933] EXT4-fs error (device loop1): ext4_acquire_dquot:6958: comm syz.1.22: Failed to acquire dquot type 0 [ 98.595781][ T5933] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 98.616718][ T5933] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 98.649885][ T5933] EXT4-fs error (device loop1): ext4_acquire_dquot:6958: comm syz.1.22: Failed to acquire dquot type 0 [ 98.702141][ T5933] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.22: bg 0: block 64: padding at end of block bitmap is not set [ 98.731841][ T5878] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 98.754402][ T5933] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6660: Corrupt filesystem [ 98.767021][ T5933] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 98.779304][ T5933] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 98.789592][ T5933] EXT4-fs error (device loop1): ext4_acquire_dquot:6958: comm syz.1.22: Failed to acquire dquot type 0 [ 98.807254][ T5933] EXT4-fs (loop1): 1 orphan inode deleted [ 98.858606][ T5933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.013795][ T5940] Attempt to restore checkpoint with obsolete wellknown handles [ 99.055591][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.254079][ T5948] device-mapper: table: 248:0: ram3 too small for target: start=0, len=14352, dev_size=8192 [ 99.276028][ T5948] device-mapper: core: Cannot calculate initial queue limits [ 99.298866][ T5948] device-mapper: ioctl: unable to set up device queue for new table. [ 99.455975][ T5963] netlink: 104 bytes leftover after parsing attributes in process `syz.3.33'. [ 99.777226][ T5976] loop1: detected capacity change from 0 to 512 [ 99.835364][ T5976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.061678][ T5976] EXT4-fs error (device loop1): ext4_validate_block_bitmap:421: comm syz.1.40: bg 0: bad block bitmap checksum [ 100.109102][ T5988] Bluetooth: MGMT ver 1.22 [ 100.126998][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.430264][ T5998] loop1: detected capacity change from 0 to 1024 [ 100.660698][ T5798] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.860332][ T6013] netlink: 'syz.3.55': attribute type 9 has an invalid length. [ 101.083634][ T6024] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 101.334748][ T6033] loop3: detected capacity change from 0 to 512 [ 101.563768][ T6035] loop1: detected capacity change from 0 to 4096 [ 101.599396][ T6035] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 101.622685][ T5861] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 101.752927][ T6035] ntfs3: loop1: ino=19, mi_enum_attr [ 101.758330][ T6035] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 101.803550][ T6035] ntfs3: loop1: ino=19, mi_enum_attr [ 101.808929][ T6035] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 101.850532][ T5861] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 101.859906][ T5861] usb 1-1: config 0 has an invalid interface number: 255 but max is 1 [ 101.884110][ T5861] usb 1-1: config 0 has no interface number 0 [ 101.909170][ T5861] usb 1-1: config 0 has no interface number 1 [ 101.930115][ T5861] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 101.962709][ T5861] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 101.993333][ T5861] usb 1-1: config 0 interface 255 has no altsetting 0 [ 102.017673][ T5861] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 102.052064][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.092233][ T5861] usb 1-1: Product: syz [ 102.102501][ T5861] usb 1-1: Manufacturer: syz [ 102.108672][ T5861] usb 1-1: SerialNumber: syz [ 102.148349][ T5861] usb 1-1: config 0 descriptor?? [ 102.159467][ T6053] loop3: detected capacity change from 0 to 1024 [ 102.303878][ T6053] hfsplus: invalid extended attribute record [ 102.485725][ T5850] usb 1-1: USB disconnect, device number 2 [ 102.591970][ T11] hfsplus: b-tree write err: -5, ino 8 [ 102.779118][ T6072] macvlan0: entered promiscuous mode [ 102.803462][ T6072] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 102.820323][ T6072] netlink: 'syz.3.71': attribute type 2 has an invalid length. [ 103.187145][ T6091] loop0: detected capacity change from 0 to 1024 [ 103.521327][ T6101] loop1: detected capacity change from 0 to 128 [ 103.534666][ T6101] EXT4-fs: Ignoring removed i_version option [ 103.613771][ T6101] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.651599][ T6101] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.840562][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.602896][ T6121] netlink: 'syz.2.90': attribute type 3 has an invalid length. [ 104.862554][ C0] sched: RT throttling activated [ 105.044297][ T6111] loop0: detected capacity change from 0 to 131072 [ 105.063129][ T6111] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 105.071552][ T6111] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 105.105750][ T6111] F2FS-fs (loop0): invalid crc value [ 105.129088][ T6111] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.231005][ T6111] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 105.238400][ T6111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 105.276368][ T6133] bridge0: entered promiscuous mode [ 105.281990][ T6133] bridge0: entered allmulticast mode [ 105.767425][ T6146] bridge0: port 3(vlan2) entered blocking state [ 105.792835][ T6146] bridge0: port 3(vlan2) entered disabled state [ 105.865430][ T6146] vlan2: entered allmulticast mode [ 105.870632][ T6146] gretap0: entered allmulticast mode [ 105.888819][ T6146] vlan2: entered promiscuous mode [ 105.916077][ T6146] gretap0: entered promiscuous mode [ 105.939753][ T6146] bridge0: port 3(vlan2) entered blocking state [ 105.946741][ T6146] bridge0: port 3(vlan2) entered forwarding state [ 106.647108][ T6163] loop1: detected capacity change from 0 to 512 [ 106.743305][ T6165] binder: 6164:6165 ioctl c0306201 200000004a40 returned -11 [ 106.791190][ T6163] EXT4-fs (loop1): 1 truncate cleaned up [ 106.845492][ T6163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.938437][ T27] audit: type=1800 audit(1793506113.516:2): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.103" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 107.069632][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.847246][ T6192] loop0: detected capacity change from 0 to 8 [ 107.950246][ T6194] mmap: syz.1.106 (6194) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.121290][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 108.413417][ T6210] pimreg: tun_chr_ioctl cmd 1074025677 [ 108.422386][ T6210] pimreg: linktype set to 270 [ 108.802732][ T5798] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.012894][ T5798] usb 2-1: Using ep0 maxpacket: 8 [ 109.022070][ T5798] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 109.041392][ T5798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.063665][ T5798] pvrusb2: Hardware description: Terratec Grabster AV400 [ 109.089401][ T5798] pvrusb2: ********** [ 109.097841][ T5798] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 109.109764][ T5798] pvrusb2: Important functionality might not be entirely working. [ 109.117970][ T5798] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 109.131237][ T5798] pvrusb2: ********** [ 109.152945][ T5878] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.285378][ T2327] pvrusb2: Invalid write control endpoint [ 109.363731][ T5878] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.382183][ T5878] usb 3-1: config 0 has no interface number 0 [ 109.403103][ T5878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.444729][ T5878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.466128][ T5878] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.493373][ T5878] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 109.524731][ T2327] pvrusb2: Invalid write control endpoint [ 109.531408][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.554263][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 109.568453][ T5878] usb 3-1: config 0 descriptor?? [ 109.590250][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 109.610246][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 109.635161][ T2327] pvrusb2: Device being rendered inoperable [ 109.650415][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 109.658394][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 109.659109][ T5861] usb 2-1: USB disconnect, device number 2 [ 109.678388][ T6249] loop0: detected capacity change from 0 to 1024 [ 109.693649][ T6249] ======================================================= [ 109.693649][ T6249] WARNING: The mand mount option has been deprecated and [ 109.693649][ T6249] and is ignored by this kernel. Remove the mand [ 109.693649][ T6249] option from the mount to silence this warning. [ 109.693649][ T6249] ======================================================= [ 109.705920][ T2327] pvrusb2: Attached sub-driver cx25840 [ 109.768300][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 109.779441][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 109.837224][ T6249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.871066][ T6249] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.969822][ T6249] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.136: lblock 0 mapped to illegal pblock 0 (length 1) [ 109.989716][ T6249] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 110.005744][ T6249] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.005744][ T6249] [ 110.025007][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 110.038548][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 110.057534][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 110.119057][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.233566][ T5878] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0002/input/input6 [ 110.344456][ T5878] uclogic 0003:28BD:0042.0002: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 110.521299][ T5860] usb 3-1: USB disconnect, device number 3 [ 110.559814][ T6261] fido_id[6261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 110.745593][ T6258] loop0: detected capacity change from 0 to 32768 [ 110.796900][ T6258] JBD2: Ignoring recovery information on journal [ 110.807476][ T6258] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 110.816277][ T6258] JBD2: bad block at offset 32 [ 110.832393][ T6258] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.943415][ T6258] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 110.971892][ T6258] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 110.982155][ T6258] OCFS2: File system is now read-only. [ 110.992274][ T6258] (syz.0.138,6258,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 111.001088][ T6258] (syz.0.138,6258,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 111.061379][ T6258] (syz.0.138,6258,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 111.090894][ T6258] (syz.0.138,6258,0):ocfs2_convert_inline_data_to_extents:7116 ERROR: status = -30 [ 111.129351][ T6258] (syz.0.138,6258,0):ocfs2_allocate_unwritten_extents:1460 ERROR: status = -30 [ 111.172853][ T6258] (syz.0.138,6258,0):__ocfs2_change_file_space:2044 ERROR: status = -30 [ 111.286261][ T5794] ocfs2: Unmounting device (7,0) on (node local) [ 111.832671][ T5861] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.038059][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 112.056629][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 112.089479][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.101585][ T5861] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 112.113035][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.130816][ T5861] kobil_sct 4-1:1.0: KOBIL USB smart card terminal converter detected [ 112.177971][ T5861] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 112.828400][ T6312] loop1: detected capacity change from 0 to 256 [ 112.880379][ T6303] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL) [ 112.903793][ T6303] device-mapper: ioctl: error adding target to table [ 112.936107][ T791] usb 4-1: USB disconnect, device number 3 [ 112.970270][ T791] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 113.003409][ T791] kobil_sct 4-1:1.0: device disconnected [ 113.175019][ T6319] loop1: detected capacity change from 0 to 16 [ 113.207026][ T6319] erofs: (device loop1): mounted with root inode @ nid 36. [ 113.274982][ T6319] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 113.537787][ T6322] sctp: [Deprecated]: syz.1.164 (pid 6322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.537787][ T6322] Use struct sctp_sack_info instead [ 113.690530][ T6315] loop2: detected capacity change from 0 to 32768 [ 113.727771][ T6315] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.161 (6315) [ 113.823673][ T6315] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.863527][ T6315] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 113.883855][ T6315] BTRFS info (device loop2): metadata ratio 2 [ 113.891137][ T6315] BTRFS info (device loop2): force zlib compression, level 3 [ 113.911346][ T6315] BTRFS info (device loop2): enabling auto defrag [ 113.937161][ T6315] BTRFS info (device loop2): max_inline at 0 [ 113.962731][ T6315] BTRFS info (device loop2): using free space tree [ 114.143776][ T6315] BTRFS info (device loop2): auto enabling async discard [ 114.599373][ T5784] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.845618][ T5860] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.072679][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 115.085185][ T5860] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 115.112681][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.138745][ T5860] pvrusb2: Hardware description: Terratec Grabster AV400 [ 115.172727][ T5860] pvrusb2: ********** [ 115.176932][ T5860] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 115.202911][ T5860] pvrusb2: Important functionality might not be entirely working. [ 115.222699][ T5860] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 115.252771][ T5860] pvrusb2: ********** [ 115.374791][ T2327] pvrusb2: Invalid write control endpoint [ 115.502858][ T2327] pvrusb2: Invalid write control endpoint [ 115.508673][ T2327] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 115.538384][ T6354] loop3: detected capacity change from 0 to 32768 [ 115.545183][ T2327] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 115.568148][ T2327] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 115.623305][ T2327] pvrusb2: Device being rendered inoperable [ 115.639089][ T6354] JBD2: Ignoring recovery information on journal [ 115.645669][ T2327] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 115.657303][ T5860] usb 1-1: USB disconnect, device number 3 [ 115.682955][ T6354] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 115.717779][ T2327] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 115.740262][ T6354] JBD2: bad block at offset 32 [ 115.760601][ T2327] pvrusb2: Attached sub-driver cx25840 [ 115.773850][ T6364] block device autoloading is deprecated and will be removed. [ 115.791222][ T6354] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 115.824411][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 115.849384][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 115.968506][ T6354] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 116.003046][ T6354] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 116.013623][ T6369] loop2: detected capacity change from 0 to 256 [ 116.028683][ T6354] OCFS2: File system is now read-only. [ 116.040083][ T6354] (syz.3.170,6354,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 116.067399][ T6354] (syz.3.170,6354,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 116.079157][ T6354] (syz.3.170,6354,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 116.088580][ T6354] (syz.3.170,6354,0):ocfs2_convert_inline_data_to_extents:7116 ERROR: status = -30 [ 116.098996][ T6354] (syz.3.170,6354,0):ocfs2_allocate_unwritten_extents:1460 ERROR: status = -30 [ 116.112212][ T6354] (syz.3.170,6354,0):__ocfs2_change_file_space:2044 ERROR: status = -30 [ 116.259579][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 116.284528][ T6371] loop1: detected capacity change from 0 to 1024 [ 116.312857][ T6371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.403746][ T6371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.471875][ T6374] loop2: detected capacity change from 0 to 1024 [ 116.572215][ T6374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.594926][ T6374] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.743427][ T6371] overlayfs: invalid origin (0000) [ 116.752263][ T6374] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.178: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.803021][ T6374] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 116.837936][ T6374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.837936][ T6374] [ 116.940720][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.989093][ T5785] EXT4-fs warning (device loop1): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 117.029268][ T5785] EXT4-fs warning (device loop1): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 117.057040][ T5785] EXT4-fs warning (device loop1): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 117.086610][ T5785] EXT4-fs warning (device loop1): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 117.131035][ T5785] EXT4-fs warning (device loop1): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 117.158737][ T5785] EXT4-fs warning (device loop1): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 117.183242][ T5785] EXT4-fs warning (device loop1): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 117.210004][ T5785] EXT4-fs warning (device loop1): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 117.226370][ T5785] EXT4-fs warning (device loop1): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 117.246544][ T5785] EXT4-fs warning (device loop1): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 117.370284][ T6384] loop0: detected capacity change from 0 to 40427 [ 117.411126][ T6384] F2FS-fs (loop0): invalid crc value [ 117.461650][ T6384] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.598772][ T6384] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 117.711583][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.730508][ T27] audit: type=1800 audit(1793506124.306:3): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 117.822636][ T1152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.844949][ T6384] syz.0.181: attempt to access beyond end of device [ 117.844949][ T6384] loop0: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 117.949385][ T5794] syz-executor: attempt to access beyond end of device [ 117.949385][ T5794] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.974098][ T5794] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 118.008124][ T1152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.157712][ T1152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.312449][ T1152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.467864][ T6399] Bluetooth: MGMT ver 1.22 [ 118.472409][ T6399] Bluetooth: hci0: Invalid link key type 149 for 00:00:09:00:00:00 [ 119.393936][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.417107][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.426824][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.440414][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.462984][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.473208][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.712163][ T6416] rxe_eth0 speed is unknown, defaulting to 1000 [ 120.007929][ T6406] loop0: detected capacity change from 0 to 40427 [ 120.036066][ T6406] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff [ 120.065569][ T6406] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x30e4 [ 120.078245][ T6406] F2FS-fs (loop0): invalid crc value [ 120.097827][ T1152] bridge0: port 3(vlan2) entered disabled state [ 120.123465][ T6406] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.226346][ T1152] vlan2 (unregistering): left allmulticast mode [ 120.247051][ T1152] gretap0 (unregistering): left allmulticast mode [ 120.264586][ T1152] vlan2 (unregistering): left promiscuous mode [ 120.270819][ T1152] gretap0 (unregistering): left promiscuous mode [ 120.277324][ T6406] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 120.313417][ T1152] bridge0: port 3(vlan2) entered disabled state [ 120.359025][ T6434] loop3: detected capacity change from 0 to 1024 [ 120.387982][ T6434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.408191][ T6406] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.484109][ T6434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.586784][ T6406] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 120.600077][ T6443] loop2: detected capacity change from 0 to 128 [ 120.607988][ T6443] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.645221][ T6443] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.690620][ T6434] overlayfs: invalid origin (0000) [ 120.716422][ T6406] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x100b/0x1a00 [ 120.773086][ T6406] syz.0.188: attempt to access beyond end of device [ 120.773086][ T6406] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.851186][ T6406] F2FS-fs (loop0): Stopped filesystem due to reason: 1 [ 120.934942][ T604] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.958370][ T5792] EXT4-fs warning (device loop3): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 121.036893][ T5792] EXT4-fs warning (device loop3): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 121.094193][ T5792] EXT4-fs warning (device loop3): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 121.133342][ T5792] EXT4-fs warning (device loop3): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 121.167675][ T5792] EXT4-fs warning (device loop3): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 121.212516][ T5792] EXT4-fs warning (device loop3): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 121.239766][ T5792] EXT4-fs warning (device loop3): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 121.261773][ T5792] EXT4-fs warning (device loop3): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 121.297863][ T5792] EXT4-fs warning (device loop3): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 121.327429][ T5792] EXT4-fs warning (device loop3): empty_inline_dir:1873: bad inline directory (dir #12) - no `..' [ 121.574840][ T5788] Bluetooth: hci1: command tx timeout [ 121.712178][ T6416] chnl_net:caif_netlink_parms(): no params data found [ 121.992632][ T1152] hsr_slave_0: left promiscuous mode [ 121.999587][ T1152] hsr_slave_1: left promiscuous mode [ 122.015851][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.026831][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.037844][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.053136][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.073561][ T1152] bridge_slave_1: left allmulticast mode [ 122.079303][ T1152] bridge_slave_1: left promiscuous mode [ 122.102923][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.132170][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.145164][ T1152] bridge_slave_0: left allmulticast mode [ 122.150891][ T1152] bridge_slave_0: left promiscuous mode [ 122.174439][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.334690][ T1152] veth1_macvtap: left promiscuous mode [ 122.340905][ T1152] veth0_macvtap: left promiscuous mode [ 122.354267][ T6469] syz.0.204[6469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.354555][ T6469] syz.0.204[6469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.373036][ T1152] veth1_vlan: left promiscuous mode [ 122.413017][ T1152] veth0_vlan: left promiscuous mode [ 123.377793][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.388135][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.410116][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.418872][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.427266][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.439378][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.662863][ T5098] Bluetooth: hci1: command tx timeout [ 123.700314][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 123.749819][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 123.796845][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.842340][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.197142][ T1152] bond0 (unregistering): Released all slaves [ 124.549144][ T6489] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.549164][ T6504] loop0: detected capacity change from 0 to 1024 [ 124.608387][ T27] audit: type=1800 audit(1793506131.186:4): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.207" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 124.631732][ T6503] hfsplus: invalid extended attribute record [ 124.735075][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.742278][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.751172][ T1119] hfsplus: b-tree write err: -5, ino 8 [ 124.812902][ T6416] bridge_slave_0: entered allmulticast mode [ 124.842966][ T6416] bridge_slave_0: entered promiscuous mode [ 124.872485][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.900761][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.926712][ T6416] bridge_slave_1: entered allmulticast mode [ 124.964043][ T6416] bridge_slave_1: entered promiscuous mode [ 125.110917][ T6416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.165542][ T6416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.328594][ T6416] team0: Port device team_slave_0 added [ 125.407826][ T6416] team0: Port device team_slave_1 added [ 125.492960][ T5098] Bluetooth: hci2: command tx timeout [ 125.535505][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.571324][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.661347][ T6416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.737790][ T5098] Bluetooth: hci1: command tx timeout [ 125.748760][ T6416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.756943][ T6416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.783681][ T6416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.090949][ T1152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.196546][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.277591][ T6416] hsr_slave_0: entered promiscuous mode [ 126.317622][ T6416] hsr_slave_1: entered promiscuous mode [ 126.354488][ T6416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.373083][ T6416] Cannot create hsr debugfs directory [ 126.487089][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.690380][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.191495][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 127.384170][ T6558] loop2: detected capacity change from 0 to 4096 [ 127.512166][ T6563] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.572690][ T5098] Bluetooth: hci2: command tx timeout [ 127.815378][ T5098] Bluetooth: hci1: command tx timeout [ 128.194171][ T6416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.225919][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.243389][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.259264][ T6489] bridge_slave_0: entered allmulticast mode [ 128.282790][ T6489] bridge_slave_0: entered promiscuous mode [ 128.315983][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.351083][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.384581][ T6489] bridge_slave_1: entered allmulticast mode [ 128.404571][ T6489] bridge_slave_1: entered promiscuous mode [ 128.578182][ T6416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.756308][ T6416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.856237][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.882504][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 128.899996][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.919331][ T6416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.199876][ T6489] team0: Port device team_slave_0 added [ 129.261660][ T6489] team0: Port device team_slave_1 added [ 129.413664][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.435007][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.468088][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.546899][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.563471][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.612758][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.653152][ T5098] Bluetooth: hci2: command tx timeout [ 129.818936][ T6489] hsr_slave_0: entered promiscuous mode [ 129.850411][ T6489] hsr_slave_1: entered promiscuous mode [ 129.858485][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.882623][ T6489] Cannot create hsr debugfs directory [ 130.008853][ T6611] loop0: detected capacity change from 0 to 512 [ 130.089037][ T6611] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 130.114054][ T6611] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.235: inode #15: comm syz.0.235: iget: illegal inode # [ 130.168493][ T6611] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.235: couldn't read orphan inode 15 (err -117) [ 130.229909][ T6611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.507665][ T5794] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 130.513302][ T5878] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.536367][ T1152] hsr_slave_0: left promiscuous mode [ 130.554149][ T1152] hsr_slave_1: left promiscuous mode [ 130.558329][ T5794] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 130.581123][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.592699][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.602514][ T5794] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 130.629466][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.644272][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.651398][ T5794] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 130.676218][ T1152] bridge_slave_1: left allmulticast mode [ 130.681970][ T1152] bridge_slave_1: left promiscuous mode [ 130.692188][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.693561][ T5794] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 130.723070][ T1152] bridge_slave_0: left allmulticast mode [ 130.728783][ T1152] bridge_slave_0: left promiscuous mode [ 130.735257][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.742800][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 130.748339][ T5794] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 130.759557][ T5878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.781275][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.783875][ T5794] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 130.816064][ T5878] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 130.827255][ T5794] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 130.846879][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 130.856191][ T5878] usb 3-1: SerialNumber: syz [ 130.861880][ T5794] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 130.888859][ T5794] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 130.918841][ T1152] veth1_macvtap: left promiscuous mode [ 130.921887][ T5878] usb 3-1: 0:2 : does not exist [ 130.924811][ T1152] veth0_macvtap: left promiscuous mode [ 130.943005][ T1152] veth1_vlan: left promiscuous mode [ 130.948587][ T1152] veth0_vlan: left promiscuous mode [ 131.632967][ T5878] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 131.731700][ T5878] usb 3-1: USB disconnect, device number 4 [ 131.748500][ T5098] Bluetooth: hci2: command tx timeout [ 131.856756][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 131.922770][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 131.965013][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.014718][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.411802][ T6624] loop2: detected capacity change from 0 to 4096 [ 132.442006][ T6624] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 132.455659][ T1152] bond0 (unregistering): Released all slaves [ 132.516908][ T6624] ntfs3: loop2: ino=19, mi_enum_attr [ 132.522428][ T6624] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 132.546510][ T6624] ntfs3: loop2: ino=19, mi_enum_attr [ 132.552158][ T6624] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 132.719595][ T6416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.840651][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.005637][ T6416] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.056528][ T6489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.108288][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.115300][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.137959][ T604] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.145934][ T604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.180756][ T6489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.201946][ T6489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.251127][ T604] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.258425][ T604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.284781][ T6489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.451297][ T6416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.618050][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.687783][ T1152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.752093][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.828635][ T1152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.850565][ T604] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.857896][ T604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.889496][ T604] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.896761][ T604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.940614][ T1152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.037979][ T1152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.081082][ T6416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.681978][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.885623][ T6416] veth0_vlan: entered promiscuous mode [ 134.949965][ T6416] veth1_vlan: entered promiscuous mode [ 135.098576][ T6416] veth0_macvtap: entered promiscuous mode [ 135.129815][ T6416] veth1_macvtap: entered promiscuous mode [ 135.207877][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.232684][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.253481][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.278849][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.291536][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.374430][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.385892][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.403878][ T6416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.415779][ T6416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.428623][ T6416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.462008][ T6416] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.471503][ T6416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.480844][ T6416] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.491148][ T6416] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.640959][ T6489] veth0_vlan: entered promiscuous mode [ 135.755686][ T6489] veth1_vlan: entered promiscuous mode [ 135.764519][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.772417][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.890245][ T1152] hsr_slave_0: left promiscuous mode [ 135.897738][ T1152] hsr_slave_1: left promiscuous mode [ 135.908820][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.916598][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.925991][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.933710][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.941443][ T1152] bridge_slave_1: left allmulticast mode [ 135.947435][ T1152] bridge_slave_1: left promiscuous mode [ 135.954332][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.964221][ T1152] bridge_slave_0: left allmulticast mode [ 135.969927][ T1152] bridge_slave_0: left promiscuous mode [ 135.976248][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.006272][ T1152] veth1_macvtap: left promiscuous mode [ 136.011828][ T1152] veth0_macvtap: left promiscuous mode [ 136.019562][ T1152] veth1_vlan: left promiscuous mode [ 136.025420][ T1152] veth0_vlan: left promiscuous mode [ 136.653405][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 136.701432][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 136.746393][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.792677][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.126217][ T1152] bond0 (unregistering): Released all slaves [ 137.207369][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.238322][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.250442][ T6489] veth0_macvtap: entered promiscuous mode [ 137.279294][ T6489] veth1_macvtap: entered promiscuous mode [ 137.387431][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.399701][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.413055][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.424210][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.450966][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.470453][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.483159][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.493560][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.504613][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.516643][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.561833][ T6489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.596104][ T6489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.612684][ T6489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.621461][ T6489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.806872][ T604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.828294][ T604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.928757][ T604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.954865][ T604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.451869][ T6682] loop4: detected capacity change from 0 to 32768 [ 138.456412][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.483436][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.497084][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.506219][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.516332][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.524497][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.567017][ T6682] JBD2: Ignoring recovery information on journal [ 138.584865][ T6682] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 138.649068][ T6696] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.651805][ T6682] JBD2: bad block at offset 32 [ 138.714548][ T6682] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 138.868813][ T6682] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 138.922673][ T6682] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 138.947132][ T6682] OCFS2: File system is now read-only. [ 138.967231][ T6682] (syz.4.186,6682,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 138.998525][ T6682] (syz.4.186,6682,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 139.022789][ T6682] (syz.4.186,6682,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 139.062731][ T6682] (syz.4.186,6682,1):ocfs2_convert_inline_data_to_extents:7116 ERROR: status = -30 [ 139.082137][ T6682] (syz.4.186,6682,1):ocfs2_allocate_unwritten_extents:1460 ERROR: status = -30 [ 139.111172][ T6682] (syz.4.186,6682,1):__ocfs2_change_file_space:2044 ERROR: status = -30 [ 139.273219][ T6416] ocfs2: Unmounting device (7,4) on (node local) [ 139.298580][ T6713] loop5: detected capacity change from 0 to 4096 [ 139.417748][ T6717] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.898729][ T6731] macvlan0: entered promiscuous mode [ 139.978605][ T6731] netlink: 'syz.2.243': attribute type 2 has an invalid length. [ 139.999685][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 140.099425][ T6696] chnl_net:caif_netlink_parms(): no params data found [ 140.566411][ T6696] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.610512][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.618395][ T5788] Bluetooth: hci3: command tx timeout [ 140.661683][ T6696] bridge_slave_0: entered allmulticast mode [ 140.684779][ T6696] bridge_slave_0: entered promiscuous mode [ 140.695050][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.702268][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.709637][ T6696] bridge_slave_1: entered allmulticast mode [ 140.716999][ T6696] bridge_slave_1: entered promiscuous mode [ 140.826147][ T6696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.879631][ T6696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.963632][ T6761] netlink: 'syz.5.255': attribute type 11 has an invalid length. [ 140.975639][ T6696] team0: Port device team_slave_0 added [ 141.004675][ T6696] team0: Port device team_slave_1 added [ 141.126915][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.154606][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.198842][ T6696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.248510][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.264842][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.325249][ T6696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.485637][ T6696] hsr_slave_0: entered promiscuous mode [ 141.523366][ T6696] hsr_slave_1: entered promiscuous mode [ 141.539700][ T6696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.563128][ T6696] Cannot create hsr debugfs directory [ 141.630098][ T6778] loop5: detected capacity change from 0 to 4096 [ 141.691316][ T6778] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 141.782584][ T6778] ntfs3: loop5: ino=19, mi_enum_attr [ 141.788006][ T6778] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 141.815922][ T6778] ntfs3: loop5: ino=19, mi_enum_attr [ 141.832139][ T6778] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 141.852717][ T5878] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.051575][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.092755][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.119532][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.162665][ T5878] usb 3-1: New USB device found, idVendor=047f, idProduct=0017, bcdDevice= 0.00 [ 142.171786][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.239519][ T5878] usb 3-1: config 0 descriptor?? [ 142.536576][ T6800] loop2: detected capacity change from 0 to 8 [ 142.558871][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.568457][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.582463][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.592028][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.602278][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.611571][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.615245][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 142.635493][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.644770][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.653382][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.662660][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.671652][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.680925][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.690142][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.699437][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.709365][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.718629][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.723049][ T5788] Bluetooth: hci3: command tx timeout [ 142.726994][ T6800] ldm_validate_partition_table(): Disk read failed. [ 142.764144][ T5878] plantronics 0003:047F:0017.0003: unknown main item tag 0x3 [ 142.771726][ T5878] plantronics 0003:047F:0017.0003: unknown main item tag 0x3 [ 142.804368][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.813662][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.822034][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 142.841111][ T5878] plantronics 0003:047F:0017.0003: unknown main item tag 0x1 [ 142.848960][ T6800] Dev loop2: unable to read RDB block 0 [ 142.865082][ T5878] plantronics 0003:047F:0017.0003: unknown main item tag 0x0 [ 142.893860][ T5878] plantronics 0003:047F:0017.0003: unknown main item tag 0x0 [ 142.901341][ T5878] plantronics 0003:047F:0017.0003: unknown main item tag 0x0 [ 142.917874][ T6800] loop2: unable to read partition table [ 142.935924][ T6696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.943142][ T6800] loop2: partition table beyond EOD, truncated [ 142.952862][ T6800] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 142.954880][ T5878] plantronics 0003:047F:0017.0003: No inputs registered, leaving [ 142.985749][ T6696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.049760][ T6696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.070178][ T5878] plantronics 0003:047F:0017.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:0017] on usb-dummy_hcd.2-1/input0 [ 143.120815][ T6696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.157726][ T5878] usb 3-1: USB disconnect, device number 5 [ 143.319469][ T6810] netlink: 192 bytes leftover after parsing attributes in process `syz.5.272'. [ 143.375187][ T6806] fido_id[6806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 143.481520][ T6696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.540450][ T6696] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.571869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.579241][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.618149][ T604] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.625473][ T604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.873968][ T6823] capability: warning: `syz.5.275' uses deprecated v2 capabilities in a way that may be insecure [ 144.419886][ T6696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.568806][ T6696] veth0_vlan: entered promiscuous mode [ 144.601586][ T6815] loop4: detected capacity change from 0 to 40427 [ 144.611160][ T6696] veth1_vlan: entered promiscuous mode [ 144.640881][ T6815] F2FS-fs (loop4): invalid crc value [ 144.718594][ T6815] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.759964][ T6696] veth0_macvtap: entered promiscuous mode [ 144.772894][ T5788] Bluetooth: hci3: command tx timeout [ 144.814381][ T6696] veth1_macvtap: entered promiscuous mode [ 144.989080][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.001877][ T6815] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 145.032609][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.052587][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.074445][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.097876][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.129098][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.156425][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.206945][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.237208][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.270270][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.302767][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.312975][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.323710][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.337612][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.338941][ T6416] syz-executor: attempt to access beyond end of device [ 145.338941][ T6416] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.387167][ T6696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.407055][ T6416] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 145.407903][ T6696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.433890][ T27] audit: type=1326 audit(1793506152.006:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1c39f559 code=0x7ffc0000 [ 145.443984][ T6696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.501505][ T6696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.520251][ T27] audit: type=1326 audit(1793506152.006:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1c39f559 code=0x7ffc0000 [ 145.611848][ T27] audit: type=1326 audit(1793506152.016:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1c39f559 code=0x7ffc0000 [ 145.699701][ T27] audit: type=1326 audit(1793506152.016:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1c39f559 code=0x7ffc0000 [ 145.741864][ T27] audit: type=1326 audit(1793506152.016:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fed1c39f559 code=0x7ffc0000 [ 145.813655][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.821590][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.846517][ T27] audit: type=1326 audit(1793506152.016:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1c39f559 code=0x7ffc0000 [ 145.882040][ T27] audit: type=1326 audit(1793506152.016:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1c39f559 code=0x7ffc0000 [ 145.939359][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.968130][ T27] audit: type=1326 audit(1793506152.016:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1c39f559 code=0x7ffc0000 [ 146.001605][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.034445][ T27] audit: type=1326 audit(1793506152.046:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fed1c39f559 code=0x7ffc0000 [ 146.107240][ T27] audit: type=1326 audit(1793506152.046:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.285" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed1c39f559 code=0x7ffc0000 [ 146.361328][ T6881] loop2: detected capacity change from 0 to 164 [ 146.853598][ T5788] Bluetooth: hci3: command tx timeout [ 146.972641][ T6683] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.156767][ T6683] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.183276][ T6683] usb 1-1: config 0 has no interface number 0 [ 147.200458][ T6683] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.237560][ T6683] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.259061][ T6683] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.287261][ T6683] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 147.307755][ T6683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.335600][ T6683] usb 1-1: config 0 descriptor?? [ 147.350147][ T6683] usbtest 1-1:0.1: Interface 1 is not authorized for usage [ 147.374001][ T6683] usbhid 1-1:0.1: Interface 1 is not authorized for usage [ 147.661545][ T6892] loop2: detected capacity change from 0 to 40427 [ 147.677180][ T6892] F2FS-fs (loop2): invalid crc value [ 147.707114][ T6892] F2FS-fs (loop2): Found nat_bits in checkpoint [ 147.852937][ T6892] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.063829][ T5784] syz-executor: attempt to access beyond end of device [ 148.063829][ T5784] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.145256][ T5784] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 149.156182][ T6955] erspan0: entered promiscuous mode [ 149.692693][ T5878] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 149.724451][ T6683] usb 1-1: USB disconnect, device number 4 [ 149.878238][ T6968] trusted_key: device-mapper: crypt: Selected cipher does not support IVs [ 149.893581][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 149.902903][ T6968] device-mapper: table: 248:2: crypt: Error decoding and setting key (-EINVAL) [ 149.919573][ T5878] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 149.937393][ T6968] device-mapper: ioctl: error adding target to table [ 149.946950][ T5878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.962705][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.993113][ T5878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.021523][ T5878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.052380][ T5878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.082032][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.330402][ T5878] usb 3-1: GET_CAPABILITIES returned 0 [ 150.348924][ T5878] usbtmc 3-1:16.0: can't read capabilities [ 150.560399][ T5850] usb 3-1: USB disconnect, device number 6 [ 150.794227][ T7003] loop5: detected capacity change from 0 to 1024 [ 151.141809][ T6994] loop4: detected capacity change from 0 to 32768 [ 151.174455][ T6994] (syz.4.318,6994,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear [ 151.174455][ T6994] " or missing value [ 151.220064][ T6994] (syz.4.318,6994,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 152.000893][ T7006] loop0: detected capacity change from 0 to 32768 [ 152.115084][ T7006] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.378369][ T7006] XFS (loop0): Ending clean mount [ 152.429084][ T7006] XFS (loop0): Quotacheck needed: Please wait. [ 152.444593][ T7053] warning: `syz.4.332' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.569688][ T7006] XFS (loop0): Quotacheck: Done. [ 152.852235][ T6696] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.047962][ T7104] loop5: detected capacity change from 0 to 128 [ 154.146748][ T7104] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.173607][ T7107] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 154.211945][ T7104] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.444476][ T6489] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.834653][ T7100] loop4: detected capacity change from 0 to 32768 [ 154.847332][ T7125] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 154.930384][ T7100] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.194995][ T7100] XFS (loop4): Ending clean mount [ 155.220640][ T7100] XFS (loop4): Quotacheck needed: Please wait. [ 155.345786][ T7100] XFS (loop4): Quotacheck: Done. [ 155.528279][ T6416] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.428073][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.547044][ T7174] page:ffffea0001d40000 refcount:5 mapcount:4 mapping:0000000000000000 index:0x0 pfn:0x75000 [ 156.568262][ T7174] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 156.582789][ T7174] page_type: 0x3() [ 156.586684][ T7174] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 156.605828][ T7174] raw: 0000000000000000 0000000000000000 0000000500000003 0000000000000000 [ 156.632038][ T7174] page dumped because: unmovable page [ 156.645269][ T7174] page_owner tracks the page as allocated [ 156.651907][ T5850] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.664558][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.672894][ T7174] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 5782, tgid 5782 (syz-executor), ts 87418255354, free_ts 87128624203 [ 156.704141][ T5850] usb 5-1: config 0 descriptor?? [ 156.729115][ T5850] cp210x 5-1:0.0: cp210x converter detected [ 156.740211][ T7174] post_alloc_hook+0x1c1/0x200 [ 156.749958][ T7174] get_page_from_freelist+0x2181/0x22a0 [ 156.756139][ T7174] __alloc_pages+0x1f0/0x460 [ 156.760943][ T7174] __vmalloc_node_range+0x962/0x1320 [ 156.787183][ T7174] vmalloc_user+0x74/0x80 [ 156.791786][ T7174] kcov_ioctl+0x58/0x610 [ 156.812887][ T7174] __se_sys_ioctl+0xfd/0x170 [ 156.817817][ T7174] do_syscall_64+0x55/0xb0 [ 156.838782][ T7174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.855502][ T7174] page last free stack trace: [ 156.868892][ T7174] free_unref_page_prepare+0x7d7/0x8f0 [ 156.874557][ T7174] free_unref_page_list+0xbe/0x860 [ 156.879856][ T7174] release_pages+0x208a/0x2300 [ 156.885147][ T7174] tlb_flush_mmu+0x379/0x510 [ 156.889840][ T7174] tlb_finish_mmu+0xf4/0x220 [ 156.924587][ T7174] unmap_region+0x311/0x370 [ 156.940958][ T7174] do_vmi_align_munmap+0x1057/0x16a0 [ 156.952657][ T7174] do_vmi_munmap+0x252/0x2d0 [ 156.967632][ T7174] __vm_munmap+0x19e/0x3c0 [ 156.979934][ T7174] __x64_sys_munmap+0x60/0x70 [ 156.992674][ T7174] do_syscall_64+0x55/0xb0 [ 157.020975][ T7174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.159835][ T5850] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 157.248457][ T5850] usb 5-1: cp210x converter now attached to ttyUSB0 [ 157.470837][ T5787] usb 5-1: USB disconnect, device number 2 [ 157.543914][ T5787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 157.593078][ T5787] cp210x 5-1:0.0: device disconnected [ 158.193530][ T7184] loop0: detected capacity change from 0 to 131072 [ 158.205807][ T7184] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 158.214153][ T7184] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 158.235161][ T7184] F2FS-fs (loop0): invalid crc value [ 158.283022][ T7184] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.321179][ T7200] CacheFiles: Failed to register: -95 [ 158.404490][ T7184] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 158.411670][ T7184] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 158.498279][ T7205] syzkaller1: tun_chr_ioctl cmd 3223345255 [ 159.080663][ T7219] loop5: detected capacity change from 0 to 64 [ 159.275606][ T7219] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 159.964233][ T7235] device-mapper: ioctl: Invalid ioctl structure: name p, dev 2f [ 160.491598][ T7229] loop5: detected capacity change from 0 to 32768 [ 160.606120][ T7229] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 160.695936][ T7256] loop0: detected capacity change from 0 to 1024 [ 160.885536][ T7229] XFS (loop5): Ending clean mount [ 160.936872][ T7265] loop4: detected capacity change from 0 to 8192 [ 161.057910][ T7265] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 161.134627][ T7229] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 161.148350][ T7265] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 161.174294][ T7265] REISERFS (device loop4): using ordered data mode [ 161.180887][ T7265] reiserfs: using flush barriers [ 161.210816][ T7265] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.276183][ T7265] REISERFS (device loop4): checking transaction log (loop4) [ 161.370682][ T7265] REISERFS (device loop4): Using rupasov hash to sort names [ 161.402033][ T7265] REISERFS (device loop4): using 3.5.x disk format [ 161.409294][ T6489] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 161.438635][ T7265] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 161.473907][ T7265] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 161.573239][ T7226] loop2: detected capacity change from 0 to 32768 [ 161.577756][ T7265] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 161.675131][ T7265] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 161.701659][ T7265] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 161.717252][ T7226] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 161.812253][ T7265] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 161.841135][ T7226] XFS (loop2): Ending clean mount [ 161.851794][ T7265] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 162.556851][ T5784] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.935019][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.397'. [ 163.397027][ T7294] loop5: detected capacity change from 0 to 40427 [ 163.472643][ T7294] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 163.479319][ T7294] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 163.516600][ T7319] capability: warning: `syz.4.401' uses 32-bit capabilities (legacy support in use) [ 163.535259][ T7294] F2FS-fs (loop5): invalid crc value [ 163.552001][ T7319] program syz.4.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.798996][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 163.799013][ T27] audit: type=1400 audit(1793506170.376:23): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=7327 comm="syz.0.403" name="foo" offset=81 [ 163.889080][ T7294] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 163.906796][ T7294] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 164.098240][ T7294] syz.5.391: attempt to access beyond end of device [ 164.098240][ T7294] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 164.234707][ T6489] syz-executor: attempt to access beyond end of device [ 164.234707][ T6489] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.275381][ T6489] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 164.295520][ T27] audit: type=1326 audit(1793506170.876:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd026f9f559 code=0x7ffc0000 [ 164.360128][ T27] audit: type=1326 audit(1793506170.896:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd026f9f559 code=0x7ffc0000 [ 164.422846][ T27] audit: type=1326 audit(1793506170.916:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd026f9f559 code=0x7ffc0000 [ 164.492634][ T27] audit: type=1326 audit(1793506170.916:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd026f9f559 code=0x7ffc0000 [ 164.577565][ T27] audit: type=1326 audit(1793506170.916:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd026f9f559 code=0x7ffc0000 [ 164.667772][ T27] audit: type=1326 audit(1793506170.936:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fd026f9f559 code=0x7ffc0000 [ 164.736358][ T27] audit: type=1326 audit(1793506170.936:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd026f9f559 code=0x7ffc0000 [ 164.808922][ T27] audit: type=1326 audit(1793506170.936:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.4.411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd026f9f559 code=0x7ffc0000 [ 165.330044][ T7374] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.365328][ T7376] loop2: detected capacity change from 0 to 512 [ 165.432185][ T7376] EXT4-fs (loop2): 1 truncate cleaned up [ 165.440195][ T7376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.515895][ T7382] loop3: detected capacity change from 0 to 7 [ 165.533057][ C1] blk_print_req_error: 12 callbacks suppressed [ 165.533075][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.548591][ C1] buffer_io_error: 11 callbacks suppressed [ 165.548605][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 165.586610][ T7380] loop6: detected capacity change from 0 to 7 [ 165.599763][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.610175][ T7380] Dev loop6: unable to read RDB block 7 [ 165.614637][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.624972][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 165.638623][ T7380] loop6: unable to read partition table [ 165.645124][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.654364][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 165.662586][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.671842][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 165.690930][ T7380] loop6: partition table beyond EOD, truncated [ 165.697418][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.706737][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 165.717619][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.726946][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 165.733196][ T7380] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 165.758286][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.767548][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 165.779458][ T7386] bond0: option arp_validate: invalid value () [ 165.783244][ T7382] ldm_validate_partition_table(): Disk read failed. [ 165.799350][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.808620][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 165.823854][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.833131][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 165.844445][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.853696][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 165.865521][ T7382] Dev loop3: unable to read RDB block 0 [ 165.872056][ T7382] loop3: unable to read partition table [ 165.878505][ T7382] loop3: partition table beyond EOD, truncated [ 165.887538][ T7382] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 166.148210][ T7392] loop5: detected capacity change from 0 to 512 [ 166.532333][ T7408] loop0: detected capacity change from 0 to 8 [ 166.783049][ T5878] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 166.986953][ T5878] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 167.014804][ T5878] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 167.037345][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0 [ 167.051835][ T5878] usb 5-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 167.072001][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.115501][ T5878] usb 5-1: config 0 descriptor?? [ 167.131743][ T7406] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.193555][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.392763][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 167.404968][ T23] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 167.422683][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.446203][ T23] usb 3-1: config 0 descriptor?? [ 167.487934][ T23] as10x_usb: device has been detected [ 167.518124][ T23] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 167.600188][ T5878] input: HID 04b3:3108 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04B3:3108.0004/input/input7 [ 167.624379][ T23] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 167.641532][ T7442] loop5: detected capacity change from 0 to 512 [ 167.675643][ T7425] ------------[ cut here ]------------ [ 167.681208][ T7425] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 167.707253][ T7425] WARNING: CPU: 0 PID: 7425 at kernel/locking/mutex.c:582 __mutex_lock+0xb9d/0xce0 [ 167.722833][ T7425] Modules linked in: [ 167.726825][ T7425] CPU: 0 PID: 7425 Comm: syz.2.443 Not tainted syzkaller #0 [ 167.734299][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 167.744498][ T7425] RIP: 0010:__mutex_lock+0xb9d/0xce0 [ 167.749834][ T7425] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d dc 7c ed 04 00 0f 85 7c f5 ff ff 48 c7 c7 e0 bb ea 8a 48 c7 c6 80 bc ea 8a e8 d3 f0 b0 f6 <0f> 0b e9 62 f5 ff ff 0f 0b e9 20 f9 ff ff 0f 0b e9 fa f5 ff ff 48 [ 167.769629][ T7425] RSP: 0018:ffffc900042a7ac0 EFLAGS: 00010246 [ 167.775854][ T7425] RAX: 54f32086650f9800 RBX: ffff888079cfece0 RCX: 0000000000080000 [ 167.784898][ T7425] RDX: ffffc9000cbf9000 RSI: 0000000000002f8c RDI: 0000000000002f8d [ 167.793170][ T7425] RBP: ffffc900042a7c20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 167.801206][ T7425] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff92000854f68 [ 167.804921][ T23] as10x_usb: error during firmware upload part1 [ 167.809496][ T7425] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 167.823771][ T7425] FS: 00007f1b442ff6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 167.832801][ T7425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.839435][ T7425] CR2: 000055af52348050 CR3: 0000000064923000 CR4: 00000000003506f0 [ 167.847495][ T7425] Call Trace: [ 167.850822][ T7425] [ 167.851517][ T23] Registered device nBox DVB-T Dongle [ 167.853811][ T7425] ? trace_contention_end+0x39/0xe0 [ 167.853842][ T7425] ? __mutex_lock+0x30d/0xce0 [ 167.853863][ T7425] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 167.853894][ T7425] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 167.853914][ T7425] ? mutex_lock_nested+0x20/0x20 [ 167.853932][ T7425] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 167.892962][ T7425] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 167.898933][ T7425] ? mutex_unlock+0x10/0x10 [ 167.903526][ T7425] ? mutex_lock_nested+0x20/0x20 [ 167.908529][ T7425] ? _raw_spin_lock_irq+0xbb/0xf0 [ 167.913676][ T7425] ? _raw_spin_unlock_irq+0x23/0x50 [ 167.918934][ T7425] as102_dvb_dmx_start_feed+0x70/0x280 [ 167.924503][ T7425] dmx_ts_feed_start_filtering+0x120/0x220 [ 167.930373][ T7425] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 167.936361][ T7425] dvb_dmxdev_filter_start+0x422/0x10a0 [ 167.942004][ T7425] dvb_demux_do_ioctl+0x482/0x530 [ 167.947121][ T7425] dvb_usercopy+0x195/0x2b0 [ 167.951682][ T7425] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 167.957329][ T7425] ? dvb_generic_ioctl+0xb0/0xb0 [ 167.962337][ T7425] ? dvb_demux_poll+0x210/0x210 [ 167.967279][ T7425] dvb_demux_ioctl+0x29/0x30 [ 167.971928][ T7425] __se_sys_ioctl+0xfd/0x170 [ 167.976678][ T7425] do_syscall_64+0x55/0xb0 [ 167.981157][ T7425] ? clear_bhb_loop+0x40/0x90 [ 167.986986][ T7425] ? clear_bhb_loop+0x40/0x90 [ 167.991769][ T7425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.997863][ T7425] RIP: 0033:0x7f1b4339f559 [ 168.002348][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.022187][ T7425] RSP: 002b:00007f1b442ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.030769][ T7425] RAX: ffffffffffffffda RBX: 00007f1b43625fa0 RCX: 00007f1b4339f559 [ 168.038900][ T7425] RDX: 00002000000001c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 168.046954][ T7425] RBP: 00007f1b43436b50 R08: 0000000000000000 R09: 0000000000000000 [ 168.055099][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.063232][ T7425] R13: 00007f1b43626038 R14: 00007f1b43625fa0 R15: 00007ffea7424ef8 [ 168.071273][ T7425] [ 168.074414][ T7425] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.081766][ T7425] CPU: 0 PID: 7425 Comm: syz.2.443 Not tainted syzkaller #0 [ 168.089106][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 168.099210][ T7425] Call Trace: [ 168.102537][ T7425] [ 168.105515][ T7425] dump_stack_lvl+0x18c/0x250 [ 168.110251][ T7425] ? show_regs_print_info+0x20/0x20 [ 168.115510][ T7425] ? load_image+0x420/0x420 [ 168.120077][ T7425] panic+0x2ca/0x720 [ 168.124061][ T7425] ? bpf_jit_dump+0xd0/0xd0 [ 168.128621][ T7425] __warn+0x2e0/0x470 [ 168.132646][ T7425] ? __mutex_lock+0xb9d/0xce0 [ 168.137372][ T7425] ? __mutex_lock+0xb9d/0xce0 [ 168.142379][ T7425] report_bug+0x2be/0x4f0 [ 168.146809][ T7425] ? __mutex_lock+0xb9d/0xce0 [ 168.151560][ T7425] ? __mutex_lock+0xb9d/0xce0 [ 168.156309][ T7425] ? __mutex_lock+0xb9f/0xce0 [ 168.161060][ T7425] handle_bug+0xcf/0x120 [ 168.165382][ T7425] exc_invalid_op+0x1a/0x50 [ 168.170020][ T7425] asm_exc_invalid_op+0x1a/0x20 [ 168.174998][ T7425] RIP: 0010:__mutex_lock+0xb9d/0xce0 [ 168.180350][ T7425] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d dc 7c ed 04 00 0f 85 7c f5 ff ff 48 c7 c7 e0 bb ea 8a 48 c7 c6 80 bc ea 8a e8 d3 f0 b0 f6 <0f> 0b e9 62 f5 ff ff 0f 0b e9 20 f9 ff ff 0f 0b e9 fa f5 ff ff 48 [ 168.200013][ T7425] RSP: 0018:ffffc900042a7ac0 EFLAGS: 00010246 [ 168.206128][ T7425] RAX: 54f32086650f9800 RBX: ffff888079cfece0 RCX: 0000000000080000 [ 168.214138][ T7425] RDX: ffffc9000cbf9000 RSI: 0000000000002f8c RDI: 0000000000002f8d [ 168.222144][ T7425] RBP: ffffc900042a7c20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 168.230164][ T7425] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff92000854f68 [ 168.238178][ T7425] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 168.246211][ T7425] ? trace_contention_end+0x39/0xe0 [ 168.251448][ T7425] ? __mutex_lock+0x30d/0xce0 [ 168.256156][ T7425] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 168.261837][ T7425] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 168.267504][ T7425] ? mutex_lock_nested+0x20/0x20 [ 168.272473][ T7425] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 168.278491][ T7425] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 168.284452][ T7425] ? mutex_unlock+0x10/0x10 [ 168.289010][ T7425] ? mutex_lock_nested+0x20/0x20 [ 168.294004][ T7425] ? _raw_spin_lock_irq+0xbb/0xf0 [ 168.299080][ T7425] ? _raw_spin_unlock_irq+0x23/0x50 [ 168.304323][ T7425] as102_dvb_dmx_start_feed+0x70/0x280 [ 168.309832][ T7425] dmx_ts_feed_start_filtering+0x120/0x220 [ 168.315677][ T7425] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 168.321609][ T7425] dvb_dmxdev_filter_start+0x422/0x10a0 [ 168.327201][ T7425] dvb_demux_do_ioctl+0x482/0x530 [ 168.332268][ T7425] dvb_usercopy+0x195/0x2b0 [ 168.336809][ T7425] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 168.342392][ T7425] ? dvb_generic_ioctl+0xb0/0xb0 [ 168.347488][ T7425] ? dvb_demux_poll+0x210/0x210 [ 168.352434][ T7425] dvb_demux_ioctl+0x29/0x30 [ 168.357107][ T7425] __se_sys_ioctl+0xfd/0x170 [ 168.361748][ T7425] do_syscall_64+0x55/0xb0 [ 168.366208][ T7425] ? clear_bhb_loop+0x40/0x90 [ 168.370931][ T7425] ? clear_bhb_loop+0x40/0x90 [ 168.375653][ T7425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.381591][ T7425] RIP: 0033:0x7f1b4339f559 [ 168.386039][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.405684][ T7425] RSP: 002b:00007f1b442ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.414132][ T7425] RAX: ffffffffffffffda RBX: 00007f1b43625fa0 RCX: 00007f1b4339f559 [ 168.422136][ T7425] RDX: 00002000000001c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 168.430137][ T7425] RBP: 00007f1b43436b50 R08: 0000000000000000 R09: 0000000000000000 [ 168.438145][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.446154][ T7425] R13: 00007f1b43626038 R14: 00007f1b43625fa0 R15: 00007ffea7424ef8 [ 168.454176][ T7425] [ 168.457377][ T7425] Kernel Offset: disabled [ 168.461725][ T7425] Rebooting in 86400 seconds..