last executing test programs: 15.074899814s ago: executing program 0 (id=2709): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x80013, r2, 0x0) msync(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x74}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.69794864s ago: executing program 3 (id=2750): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, '\a\x00'}]}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040004000e010008152403"], 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="170100000000b2000500000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xfffe, @fixed, 0x80}, 0xe) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r9, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x0]}]}, 0x44}}, 0x0) 3.063385746s ago: executing program 1 (id=2759): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@nombcache}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@data_journal}, {@nombcache}]}, 0x8, 0x5fa, &(0x7f00000004c0)="$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") open(&(0x7f0000000000)='./file0\x00', 0x40c5, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2001095, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000840)='./file0\x00', 0x10a1b4, &(0x7f0000000e00)={[{@nouid32}, {@nodiscard}, {@data_err_abort}, {@noauto_da_alloc}, {@noinit_itable}, {@lazytime}, {@usrquota}, {@errors_continue}, {@data_err_ignore}, {@nobarrier}, {@dioread_nolock}, {@jqfmt_vfsold}]}, 0x11, 0x472, &(0x7f0000000240)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x4a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000c38f000041000000851000000100000095000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0xf6, &(0x7f0000000180)=""/246}, 0x22) r2 = syz_open_dev$vcsn(&(0x7f00000006c0), 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000180)={0x10000, 0xfffffffffffffdee, 0x1}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet6(0xa, 0x4, 0x31) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xa, &(0x7f0000000380)={[{@errors_remount}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@barrier_val={'barrier', 0x3d, 0x5f}}, {@errors_remount}, {@data_journal}, {@debug}, {@nogrpid}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3f}}]}, 0x1, 0x44e, &(0x7f0000000780)="$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") open(0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/105, 0x69) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8004551a, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001000080"]) 2.609380543s ago: executing program 3 (id=2761): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000340), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000037000000000000df9500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x35, 0xb2, &(0x7f0000000b40)="3487188b17b83a1bceb0a4291273fee0dd76ce28a412b233570f9b2a7fd7b26f34647a3883b87f2187fccd4f35a681d0d7f80bd210557bcfd732f331c1e52da8631fe9a875ed91ecd1921be5cca6c4d59b7baf5b1c90e118f56992b394b33a331fd21957509290cc4e235cd7c37fa40052795b2483decfb7db6a8b240ab85403166195f08f1a3b3719409a9b7383aba1fbc1c9a5c8952fad5e057bfa0645fc1406324780484cc75d725e79f8326a058507910e4960a34bf28c5629c8dd4222e43bdd98d7d36d9da984a4bffe342a7103fdb765c9faca0659c89d576888b99ac672b65f13", &(0x7f0000000a80)=""/178, 0xfffffffd, 0x0, 0xb2, 0x62, &(0x7f00000007c0)="b520610c75311127840b58a6e774c99d77a2786b5e40e99889424fbfc0176e825cd85cc8f395cc354a00ece16e23cd51984ae79fe0c634560c8f464090ce6439af15b4b269d3c63de01fb868c4ab750db87f3cc40f48caf494b88d4d332dcdad4a30b6d5f0c4a12a74a2d9d5600fa499513a6fa2fb6e973865e244bef4ba9c1290e7442c310436080fcaef33c26eab89dcd4237911034b8003ac93f1c2867de6b54ea530fa73610bbf08f1001b0ee02c0e68", &(0x7f0000000280)="4594193652f8997f4d29b3e8405a4466c300c63ff495e8c50c594b8d6d810087ac1dedc27528541a8b7d1eb0272035752624cf47d2ec5be8a5f08e8d45b19091ceb83a4f2665d95c616ca53641eaa5f607aa8619659f9dfc324ad0988188708276ac86c6ed8f5fe1a0bfdd5e8fa42bccb29234405ced7db7ca0f4a70f7d56a2b67c8a2f9aa1007b42a8e08ca54e01a0c96f169c16c46c1842cbc02ce3d2044acf47c43000000000000000000", 0x0, 0x1ff}, 0x28) 2.554377168s ago: executing program 1 (id=2762): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x35) 2.326022533s ago: executing program 1 (id=2764): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = mq_open(&(0x7f0000000440)='127.0.0.1\x00', 0x40, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x5451, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @rand_addr, @local, @local}}}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 2.131419401s ago: executing program 1 (id=2765): prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x1002efa}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000b40), 0x2b842ac, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000014c0)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000009c0)={0x44, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d7872ac05d8c"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]]}, 0x44}}, 0x0) 1.715293818s ago: executing program 0 (id=2748): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x6a5672979d8c2d89, 0x0, 0x0, {0x18}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 1.602268644s ago: executing program 3 (id=2768): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x7e) listen(r1, 0x3) 1.586644436s ago: executing program 0 (id=2770): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast1}, {}, {}, 0x4}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe4) r0 = syz_io_uring_setup(0x5fed, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.429436968s ago: executing program 3 (id=2771): syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000001780)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='background_compression=none,background_compression=zstd,str_hash=crc64,str_hash=crc32c,data_checksum=crc64,data_checksu\x00=crc32c,str_hash=siphash,background_compression=none,\x00'], 0x1, 0x5b83, &(0x7f0000011200)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') gettid() read$FUSE(r0, &(0x7f0000004400)={0x2020}, 0xfffffe5e) 1.330873877s ago: executing program 0 (id=2773): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 1.218568652s ago: executing program 0 (id=2775): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a0cc10, &(0x7f00000059c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b043ebd000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a73c3ffde033b57941ba92cbeb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f037f0b3c3b61f1f6d388072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a4995a430ca7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd7898eda864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4c191d0000000000140000000000c816bbeaa7c8efa7a7e5ee519013434e208fff9bac45b8fc653f68de8e581952e9f6f7284cd39925a9e2515c162d77f2ce25168bbad79ed034bba9226aeb33de4aa528e8f0f53bb9621147355a8ec1f0d67392f340f9f00364defbe60165252a82d1e94719a80a82306b3539a3a936463bac5ab9fdb75ef8b2747dd923fb9d703b02a9aa90490aab821449db6db447af297718481aae1e5a81a4ce5fe116dee0ee21fb6e21460dd11a351e50ae1dfe8190d221d94aa5dc7e9873863c57bc4aa81b993066770f4fd01fba00fd02dd28f9ea0d5857b29bc385700638f2722c0835945a49c2a1c696e0da61b2ecccd16011b842b0fbc49672dbfb53464fe22e78aa3ffad220909db66e951a7bbee66fc605dc5c7ff3481b870e61d88a3b6880e6cee7fbfe9fcd72f2e64d64060152460cea09e5c9b7b55fb87e397a1ea49be53bb1c8ac70192d311d2c08a09b8c9916eec7454f0948ff5dd11ad0c46ca603fd3e4aaf7eb636361ee32bd3058f6fdd5f735c743a0f21d770cbd0dd9f4ece37f78611d3fae73136d6f3555533d50b53e04d880c4f2a11b4406cf344e4c9c326288279584a7dcc3f560bfb3b07e5fd7ca24e8f9c4234a3d361165b746475990189e34415bde43d1f31c1552cd554d20a1d7ed4f5a14b81b427bb39aca2c2cee5b48daaddbdb49e7b26ff773335b8f88e88b919c6d445f5f3ef2926ab35bc9dfba18a51c36685d47066e8b454ae009562f1b4118ffcd517a2ff4e78e22224aff677dcf723ff8f3d92129209205a9e89ad6fc5933ed3384889847932cb29c85c761137ad16bca2743c09dfbc7983ea", @ANYBLOB="a93e1cbfeea088b9cb059ce91c144fd901b2d208e6ec16e9c0bdf78cda5604babe81021bae593d8bf404d46fe9ae1e8a141739e9717566c21648e8f46b4fc9d9eb0a646a28283f6f61bd31a6a5c909f53dcaf2e8a1914f6cbd8d230587ca11862216e1a7ea1aaca778c2b5eea4e08eeb7bbbfd55e1ba9fbcb378636cca2dcb46a029961a41e272c878b929b276ac2741c8f3b77e7850100e289c3b6edbf5d0377206c0bc212cf6a42ececcd4e98747c0423cc4b304569431e8b347fe68e9083d419f13de6e27d28126d9a4988919"], 0x1, 0x559f, &(0x7f0000000400)="$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") mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1) 1.202154518s ago: executing program 1 (id=2777): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000340), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000037000000000000df9500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x35, 0xb2, &(0x7f0000000b40)="3487188b17b83a1bceb0a4291273fee0dd76ce28a412b233570f9b2a7fd7b26f34647a3883b87f2187fccd4f35a681d0d7f80bd210557bcfd732f331c1e52da8631fe9a875ed91ecd1921be5cca6c4d59b7baf5b1c90e118f56992b394b33a331fd21957509290cc4e235cd7c37fa40052795b2483decfb7db6a8b240ab85403166195f08f1a3b3719409a9b7383aba1fbc1c9a5c8952fad5e057bfa0645fc1406324780484cc75d725e79f8326a058507910e4960a34bf28c5629c8dd4222e43bdd98d7d36d9da984a4bffe342a7103fdb765c9faca0659c89d576888b99ac672b65f13", &(0x7f0000000a80)=""/178, 0xfffffffd, 0x0, 0xb2, 0x62, &(0x7f00000007c0)="b520610c75311127840b58a6e774c99d77a2786b5e40e99889424fbfc0176e825cd85cc8f395cc354a00ece16e23cd51984ae79fe0c634560c8f464090ce6439af15b4b269d3c63de01fb868c4ab750db87f3cc40f48caf494b88d4d332dcdad4a30b6d5f0c4a12a74a2d9d5600fa499513a6fa2fb6e973865e244bef4ba9c1290e7442c310436080fcaef33c26eab89dcd4237911034b8003ac93f1c2867de6b54ea530fa73610bbf08f1001b0ee02c0e68", &(0x7f0000000280)="4594193652f8997f4d29b3e8405a4466c300c63ff495e8c50c594b8d6d810087ac1dedc27528541a8b7d1eb0272035752624cf47d2ec5be8a5f08e8d45b19091ceb83a4f2665d95c616ca53641eaa5f607aa8619659f9dfc324ad0988188708276ac86c6ed8f5fe1a0bfdd5e8fa42bccb29234405ced7db7ca0f4a70f7d56a2b67c8a2f9aa1007b42a8e08ca54e01a0c96f169c16c46c1842cbc02ce3d2044acf47c43000000000000000000", 0x0, 0x1ff}, 0x28) 980.858823ms ago: executing program 2 (id=2778): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2000007, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'], 0x0, 0x1a3, &(0x7f0000000280)="$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") 841.672635ms ago: executing program 3 (id=2779): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x7e) listen(r1, 0x3) 747.739882ms ago: executing program 2 (id=2780): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)={{0x81}}) 591.180526ms ago: executing program 2 (id=2781): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast1}, {}, {}, 0x4}, {{@in6=@remote}, 0x0, @in6=@empty}}, 0xe4) r0 = syz_io_uring_setup(0x5fed, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 449.39271ms ago: executing program 2 (id=2782): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)}, 0x10) 288.90818ms ago: executing program 0 (id=2783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x3cc, 0x100, 0x2b8, 0x182, 0x100, 0x0, 0x304, 0x3a8, 0x3a8, 0x304, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x100, 0x0, {0x0, 0x1800}, [@common=@unspec=@limit={{0x3c}, {0x0, 0x292}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private2, @private2, [], [], 'macsec0\x00', 'netdevsim0\x00'}, 0x0, 0x1dc, 0x204, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0xe, [@mcast2, @dev, @rand_addr=' \x01\x00', @local, @remote, @mcast1, @dev, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @empty, @dev, @mcast1, @loopback, @private0, @empty]}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) 261.354314ms ago: executing program 2 (id=2784): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 157.315664ms ago: executing program 1 (id=2785): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 153.112655ms ago: executing program 3 (id=2786): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50d4, &(0x7f00000051c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/55, 0x37) 0s ago: executing program 2 (id=2787): syz_open_dev$cec(0x0, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001840)={0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, "5518ae86fe0bf7b37086d1311f560e5d"}) kernel console output (not intermixed with test programs): mode [ 291.175350][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.181025][ T73] bridge_slave_0: left promiscuous mode [ 291.183905][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.274538][T12269] loop1: detected capacity change from 0 to 512 [ 291.331476][T12269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.337837][T12269] ext4 filesystem being mounted at /syzkaller.PRS4mO/58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.399764][T12269] EXT4-fs error (device loop1): ext4_readdir:258: inode #2: block 3: comm syz.1.2212: path /syzkaller.PRS4mO/58/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 291.620426][T12282] loop3: detected capacity change from 0 to 512 [ 291.629311][T12282] ext2: Unknown parameter 'dont_measure' [ 291.646048][T12278] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [R]L3 index 0 [ 291.760478][T12282] binder_alloc: 12281: binder_install_single_page failed to insert page at offset 1000 with -14 [ 291.791324][ T5213] Bluetooth: hci5: command tx timeout [ 291.874689][T12282] loop3: detected capacity change from 0 to 2048 [ 291.890683][T12282] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 291.916269][T12282] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 291.940580][T12282] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 291.947994][T12282] System zones: 0-19 [ 291.986313][T12282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.126680][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.186271][T11723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.223996][T11598] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.260250][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.290160][ T73] bond0 (unregistering): Released all slaves [ 292.349148][T12291] loop2: detected capacity change from 0 to 32768 [ 292.360568][T12291] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2222 (12291) [ 292.404033][T12291] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 292.408375][T12291] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 292.412043][T12291] BTRFS info (device loop2): disk space caching is enabled [ 292.437227][T12212] hsr_slave_0: entered promiscuous mode [ 292.443732][T12212] hsr_slave_1: entered promiscuous mode [ 292.447421][T12212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.450735][T12212] Cannot create hsr debugfs directory [ 292.553852][T12291] BTRFS info (device loop2): rebuilding free space tree [ 292.612307][T12293] loop1: detected capacity change from 0 to 32768 [ 292.618639][T12293] bcachefs (/dev/loop1): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78 [ 292.629647][T12291] BTRFS info (device loop2): disabling free space tree [ 292.634859][T12291] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 292.639074][T12291] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 292.752863][T12293] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=ro,compression=lz4,nojournal_transaction_names,read_only [ 292.758742][T12293] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 292.781080][T11726] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 292.840138][T12293] bcachefs (loop1): alloc_read... done [ 292.842436][T12293] bcachefs (loop1): stripes_read... done [ 292.845761][T12293] bcachefs (loop1): snapshots_read... done [ 292.854451][T12293] bcachefs (loop1): journal_replay... done [ 292.857060][T12293] bcachefs (loop1): resume_logged_ops... done [ 292.859557][T12293] bcachefs (loop1): done starting filesystem [ 292.882027][ T73] hsr_slave_0: left promiscuous mode [ 292.889936][T12313] loop3: detected capacity change from 0 to 32768 [ 292.904566][ T73] hsr_slave_1: left promiscuous mode [ 292.922963][T11598] bcachefs (loop1): shutting down [ 292.937747][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.940976][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.975255][T12313] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 292.984924][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.984947][T11598] bcachefs (loop1): shutdown complete [ 292.988028][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.092552][ T73] veth1_macvtap: left promiscuous mode [ 293.094926][ T73] veth0_macvtap: left promiscuous mode [ 293.097854][ T73] veth1_vlan: left promiscuous mode [ 293.100322][ T73] veth0_vlan: left promiscuous mode [ 293.105940][T12313] XFS (loop3): Ending clean mount [ 293.117080][T12313] XFS (loop3): Quotacheck needed: Please wait. [ 293.131843][ T5253] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x26/0xe0, xfs_rmapbt block 0x14 [ 293.139328][ T5253] XFS (loop3): Unmount and run xfs_repair [ 293.142281][ T5253] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 293.151272][ T5253] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 293.160710][ T5253] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 293.178704][ T5253] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 293.182160][ T5253] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 293.197817][ T5253] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 293.205412][ T5253] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 293.208694][ T5253] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 293.211874][ T5253] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 293.217189][ T13] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x14 len 4 error 74 [ 293.266860][ T13] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x414/0x990 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 293.272148][ T13] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 293.312058][T12313] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 293.331774][T12313] XFS (loop3): Error -5 reserving per-AG metadata reserve pool. [ 293.610707][T12337] loop2: detected capacity change from 0 to 32768 [ 293.617940][T12337] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2230 (12337) [ 293.663547][T12337] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 293.668694][T12337] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 293.672046][T12337] BTRFS info (device loop2): using free-space-tree [ 293.830047][T12362] block nbd1: Unsupported socket: shutdown callout must be supported. [ 293.861270][T12337] BTRFS info (device loop2): rebuilding free space tree [ 293.867996][ T5213] Bluetooth: hci5: command tx timeout [ 293.910801][T12366] loop1: detected capacity change from 0 to 512 [ 293.915173][T12366] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.919233][T12366] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 293.924869][T12366] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 293.937635][T12366] EXT4-fs (loop1): group descriptors corrupted! [ 293.973644][ T39] audit: type=1800 audit(1719399900.240:754): pid=12337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2230" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 294.646591][T11726] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.303486][T12391] loop1: detected capacity change from 0 to 256 [ 295.411492][T12393] xt_connbytes: Forcing CT accounting to be enabled [ 295.620554][T12402] tracefs: Bad value for 'uid' [ 295.863629][T12409] loop2: detected capacity change from 0 to 8 [ 295.925026][ T5213] Bluetooth: hci5: command tx timeout [ 296.198536][ T73] team0 (unregistering): Port device team_slave_1 removed [ 296.305046][T12414] loop1: detected capacity change from 0 to 256 [ 296.507624][ T73] team0 (unregistering): Port device team_slave_0 removed [ 296.696432][T12423] tracefs: Bad value for 'uid' [ 296.919102][T12424] loop2: detected capacity change from 0 to 32768 [ 296.939761][T12424] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 46c1343f should be 29d2fb78 [ 296.942847][T12429] loop1: detected capacity change from 0 to 256 [ 297.028470][T12429] Invalid option length (1048381) for dns_resolver key [ 297.062806][T12429] Invalid option length (1048381) for dns_resolver key [ 297.143756][T12424] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=ro,compression=lz4,nojournal_transaction_names,read_only [ 297.150338][T12424] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 297.184346][T12429] could not allocate digest TFM handle sha256-arm64-neon [ 297.190399][T12424] bcachefs (loop2): alloc_read... done [ 297.192608][T12424] bcachefs (loop2): stripes_read... done [ 297.195375][T12424] bcachefs (loop2): snapshots_read... done [ 297.200812][T12424] bcachefs (loop2): journal_replay... done [ 297.204249][T12424] bcachefs (loop2): resume_logged_ops... done [ 297.227883][T12424] bcachefs (loop2): done starting filesystem [ 297.291892][T11726] bcachefs (loop2): shutting down [ 297.348976][T11726] bcachefs (loop2): shutdown complete [ 297.358148][T12443] fuse: Bad value for 'fd' [ 297.853392][T12445] loop1: detected capacity change from 0 to 40427 [ 297.858037][T12445] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 297.861429][T12445] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 297.873398][T12445] F2FS-fs (loop1): invalid crc value [ 297.878670][T12445] F2FS-fs (loop1): Found nat_bits in checkpoint [ 297.943525][T12445] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 297.946335][T12445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 298.006596][ T5213] Bluetooth: hci5: command tx timeout [ 298.087158][T12445] syz.1.2262: attempt to access beyond end of device [ 298.087158][T12445] loop1: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 298.289585][T12452] loop2: detected capacity change from 0 to 32768 [ 298.307844][T12452] ERROR: (device loop2): diAllocBit: iag inconsistent [ 298.307844][T12452] [ 298.343113][T12452] ialloc: diAlloc returned -5! [ 298.786570][T12454] loop2: detected capacity change from 0 to 40427 [ 298.852412][T12454] F2FS-fs (loop2): Found nat_bits in checkpoint [ 298.948453][T12454] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 298.963604][ T39] audit: type=1800 audit(1719399905.240:755): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2265" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 299.067349][T12454] syz.2.2265: attempt to access beyond end of device [ 299.067349][T12454] loop2: rw=2049, sector=54112, nr_sectors = 864 limit=40427 [ 299.098341][ T39] audit: type=1800 audit(1719399905.380:756): pid=12462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2265" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 299.154324][T11726] syz-executor: attempt to access beyond end of device [ 299.154324][T11726] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.173638][T11726] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 299.223139][T12212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.236884][T12212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.269421][T12212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.278196][T12212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.388554][T12212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.407644][T12212] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.421206][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.424550][ T5573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.459454][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.462717][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.518167][T12212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.617995][T12471] loop2: detected capacity change from 0 to 256 [ 299.622005][T12471] FAT-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 299.694217][T12212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.739816][T12212] veth0_vlan: entered promiscuous mode [ 299.763488][T12212] veth1_vlan: entered promiscuous mode [ 299.789759][T12212] veth0_macvtap: entered promiscuous mode [ 299.797356][T12212] veth1_macvtap: entered promiscuous mode [ 299.813841][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.818304][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.822057][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.826236][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.830075][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.836771][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.841026][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.845500][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.852532][T12212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.863761][T12477] evm: overlay not supported [ 299.864367][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.873148][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.877532][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.883931][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.888779][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.894253][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.914339][T12212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.919344][T12212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.926192][T12212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.941623][T12212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.948976][T12212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.953455][T12212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.960339][T12212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.082970][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.089146][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.129955][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.133683][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.664017][T12504] binder: transaction release 39 bad object at offset 71, size 72 [ 300.966616][ T39] audit: type=1326 audit(1719399907.250:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7406579 code=0x7ffc0000 [ 300.977275][ T39] audit: type=1326 audit(1719399907.250:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7406579 code=0x7ffc0000 [ 300.987638][ T39] audit: type=1326 audit(1719399907.270:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7406579 code=0x7ffc0000 [ 301.000037][ T39] audit: type=1326 audit(1719399907.270:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7406579 code=0x7ffc0000 [ 301.010271][ T39] audit: type=1326 audit(1719399907.270:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7406579 code=0x7ffc0000 [ 301.020533][ T39] audit: type=1326 audit(1719399907.280:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7406579 code=0x7ffc0000 [ 301.030336][ T39] audit: type=1326 audit(1719399907.280:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7406579 code=0x7ffc0000 [ 301.071413][ T39] audit: type=1326 audit(1719399907.280:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7406579 code=0x7ffc0000 [ 301.081237][ T39] audit: type=1326 audit(1719399907.280:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf74065a7 code=0x7ffc0000 [ 301.377386][T12527] loop3: detected capacity change from 0 to 512 [ 301.437482][T12527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.443742][T12527] ext4 filesystem being mounted at /syzkaller.z1nAkb/65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.502950][T12527] EXT4-fs error (device loop3): ext4_readdir:258: inode #2: block 3: comm syz.3.2289: path /syzkaller.z1nAkb/65/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 301.530124][T12524] loop0: detected capacity change from 0 to 32768 [ 301.606382][T12524] ERROR: (device loop0): diAllocBit: iag inconsistent [ 301.606382][T12524] [ 301.613429][T12524] ialloc: diAlloc returned -5! [ 302.038535][T11723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.075183][T12535] loop2: detected capacity change from 0 to 32768 [ 302.081872][T12535] XFS: attr2 mount option is deprecated. [ 302.085786][T12535] XFS: noikeep mount option is deprecated. [ 302.139667][T12535] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 302.164901][T12535] XFS (loop2): Ending clean mount [ 302.177982][T12535] XFS (loop2): Quotacheck needed: Please wait. [ 302.212547][T12535] XFS (loop2): Quotacheck: Done. [ 302.231439][T12549] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.2295' resets device [ 302.292491][T12551] Unknown uid [ 302.390817][T11726] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 302.805987][T12569] loop3: detected capacity change from 0 to 512 [ 302.836979][T12569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.843978][T12569] ext4 filesystem being mounted at /syzkaller.z1nAkb/71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.957652][T12569] EXT4-fs error (device loop3): ext4_readdir:258: inode #2: block 3: comm syz.3.2304: path /syzkaller.z1nAkb/71/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 302.993067][ T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 303.184372][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 303.193059][ T30] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 303.199896][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.217551][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.221491][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.236028][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.251965][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.260474][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.305987][T11723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.492643][ T30] usb 7-1: usb_control_msg returned -32 [ 303.495878][ T30] usbtmc 7-1:16.0: can't read capabilities [ 303.600211][T12582] Unknown uid [ 304.068591][T12593] loop3: detected capacity change from 0 to 32768 [ 304.745232][T12605] loop3: detected capacity change from 0 to 512 [ 304.759760][T12602] loop0: detected capacity change from 0 to 32768 [ 304.763202][T12605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.764631][T12602] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2318 (12602) [ 304.769201][T12605] ext4 filesystem being mounted at /syzkaller.z1nAkb/80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.782884][T12602] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 304.788321][T12602] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 304.792201][T12602] BTRFS info (device loop0): using free-space-tree [ 304.838640][T12605] EXT4-fs error (device loop3): ext4_readdir:258: inode #2: block 3: comm syz.3.2314: path /syzkaller.z1nAkb/80/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 304.992761][ T1085] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 305.281780][ T39] kauditd_printk_skb: 143 callbacks suppressed [ 305.281797][ T39] audit: type=1800 audit(1719399911.560:909): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2318" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 305.411812][ T73] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 305.485552][T12212] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 305.655391][T11723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.700723][T11827] usb 7-1: USB disconnect, device number 6 [ 305.803661][T12629] loop3: detected capacity change from 0 to 512 [ 305.841106][T12629] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 305.849100][T12629] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 305.887769][T12629] EXT4-fs error (device loop3): __ext4_get_inode_loc:4356: comm syz.3.2320: Invalid inode table block 0 in block_group 0 [ 305.907074][T12629] EXT4-fs (loop3): get root inode failed [ 305.909728][T12629] EXT4-fs (loop3): mount failed [ 305.922623][T12632] __nla_validate_parse: 1 callbacks suppressed [ 305.922640][T12632] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2322'. [ 306.028436][T12627] loop2: detected capacity change from 0 to 40427 [ 306.040485][T12627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 306.103557][T12627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 306.141789][ T39] audit: type=1326 audit(1719399912.420:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12641 comm="syz.3.2325" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e5579 code=0x0 [ 306.465881][T12654] loop0: detected capacity change from 0 to 512 [ 306.523993][T12654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.554858][T12654] ext4 filesystem being mounted at /syzkaller.CJ2E63/20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.655083][T12654] EXT4-fs error (device loop0): ext4_readdir:258: inode #2: block 3: comm syz.0.2329: path /syzkaller.CJ2E63/20/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 307.156072][T12667] loop3: detected capacity change from 0 to 512 [ 307.162047][T12667] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 307.166650][T12667] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 307.191516][T12667] EXT4-fs error (device loop3): __ext4_get_inode_loc:4356: comm syz.3.2334: Invalid inode table block 0 in block_group 0 [ 307.196933][T12667] EXT4-fs (loop3): get root inode failed [ 307.199124][T12667] EXT4-fs (loop3): mount failed [ 307.373946][T12212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.630067][ T4643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.639529][ T4643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.650182][ T4643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.667201][ T4643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.671280][ T4643] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.675307][ T4643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.679667][T12674] loop3: detected capacity change from 0 to 32768 [ 307.855656][T12677] chnl_net:caif_netlink_parms(): no params data found [ 307.999407][T12680] loop0: detected capacity change from 0 to 40427 [ 308.032467][T12680] F2FS-fs (loop0): Found nat_bits in checkpoint [ 308.066066][T12677] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.069424][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.072716][T12677] bridge_slave_0: entered allmulticast mode [ 308.078521][T12677] bridge_slave_0: entered promiscuous mode [ 308.084149][T12677] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.087188][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.091029][T12677] bridge_slave_1: entered allmulticast mode [ 308.093829][T12680] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 308.100054][T12677] bridge_slave_1: entered promiscuous mode [ 308.178979][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.196688][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.223798][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 308.300212][T12677] team0: Port device team_slave_0 added [ 308.312708][T12677] team0: Port device team_slave_1 added [ 308.334305][T12706] loop3: detected capacity change from 0 to 512 [ 308.337921][T12706] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.373923][T12706] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 308.384173][T12706] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 308.387990][T12706] EXT4-fs (loop3): orphan cleanup on readonly fs [ 308.399213][T12706] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.2345: Invalid block bitmap block 0 in block_group 0 [ 308.407981][T12677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.408473][T12701] loop2: detected capacity change from 0 to 32768 [ 308.411109][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.413116][T12706] EXT4-fs (loop3): Remounting filesystem read-only [ 308.414919][T12706] Quota error (device loop3): write_blk: dquota write failed [ 308.418877][T12701] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2343 (12701) [ 308.436547][T12706] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 308.442189][T12677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.444924][T12706] EXT4-fs (loop3): 1 orphan inode deleted [ 308.445914][T12701] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 308.445974][T12701] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 308.445997][T12701] BTRFS info (device loop2): using free-space-tree [ 308.450383][T12677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.469390][T12706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.474954][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.492211][T12677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.582934][T11723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.628209][T11726] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 308.776387][T12677] hsr_slave_0: entered promiscuous mode [ 308.780029][T12677] hsr_slave_1: entered promiscuous mode [ 308.783642][T12677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.786764][T12677] Cannot create hsr debugfs directory [ 308.801009][T12724] netlink: 'syz.3.2346': attribute type 9 has an invalid length. [ 308.811317][T12724] bond0: entered promiscuous mode [ 308.814525][T12724] bond_slave_0: entered promiscuous mode [ 308.817284][T12724] bond_slave_1: entered promiscuous mode [ 308.831855][T12724] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.876685][T12724] bond0: left promiscuous mode [ 308.878562][T12724] bond_slave_0: left promiscuous mode [ 308.880953][T12724] bond_slave_1: left promiscuous mode [ 308.926428][T12728] Bluetooth: MGMT ver 1.22 [ 309.034864][T12735] loop3: detected capacity change from 0 to 512 [ 309.040522][T12735] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 309.052854][T12735] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 309.063175][T12735] EXT4-fs error (device loop3): __ext4_get_inode_loc:4356: comm syz.3.2351: Invalid inode table block 0 in block_group 0 [ 309.069703][T12735] EXT4-fs (loop3): get root inode failed [ 309.071580][T12735] EXT4-fs (loop3): mount failed [ 309.078827][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 309.128749][T12677] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.184686][T12743] loop2: detected capacity change from 0 to 512 [ 309.188347][T12743] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.192380][T12743] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 309.197657][T12743] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 309.201552][T12743] EXT4-fs (loop2): orphan cleanup on readonly fs [ 309.215261][T12743] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.2354: Invalid block bitmap block 0 in block_group 0 [ 309.223759][T12743] EXT4-fs (loop2): Remounting filesystem read-only [ 309.227663][T12743] Quota error (device loop2): write_blk: dquota write failed [ 309.232316][T12743] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 309.236828][T12743] EXT4-fs (loop2): 1 orphan inode deleted [ 309.256018][T12677] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.256999][T12743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.309529][T11726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.398002][T12677] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.490839][T12677] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.698990][T12677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 309.707888][T12677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 309.728279][T12677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 309.736625][T12677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 309.763198][ T4643] Bluetooth: hci4: command tx timeout [ 309.868558][T12677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.891471][T12677] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.919925][T11827] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.922897][T11827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.931485][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.934452][T11827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.961563][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2360'. [ 309.970496][T12677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.977570][T12677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.141612][T12784] loop0: detected capacity change from 0 to 512 [ 310.147121][T12784] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 310.150807][T12784] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 310.183752][T12784] EXT4-fs error (device loop0): __ext4_get_inode_loc:4356: comm syz.0.2363: Invalid inode table block 0 in block_group 0 [ 310.193618][T12784] EXT4-fs (loop0): get root inode failed [ 310.196628][T12784] EXT4-fs (loop0): mount failed [ 310.237371][T12677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.302617][T12677] veth0_vlan: entered promiscuous mode [ 310.313576][T12677] veth1_vlan: entered promiscuous mode [ 310.345035][T12677] veth0_macvtap: entered promiscuous mode [ 310.354146][T12677] veth1_macvtap: entered promiscuous mode [ 310.376870][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.381397][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.387616][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.391726][T12791] loop2: detected capacity change from 0 to 256 [ 310.392330][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.399863][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.406401][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.410937][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.414012][T12791] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 310.418313][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.425964][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.431517][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.440553][T12677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.454284][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.458326][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.473119][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.477451][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.481406][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.486006][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.490198][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.494806][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.499019][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.503397][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.508452][T12791] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.509125][T12677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.523147][T12677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.526655][T12677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.530294][T12677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.534069][T12677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.624069][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.627932][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.648981][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.663659][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.667451][ T39] audit: type=1800 audit(1719399916.950:911): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2368" name="file0" dev="sda1" ino=2046 res=0 errno=0 [ 310.748495][T12794] loop0: detected capacity change from 0 to 32768 [ 310.758010][T12794] (syz.0.2366,12794,3):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "@ý…l§ƒ±Œ»×alLòM¶A.ÊpgkÓBnÃrüÅ^ôËðåUD" or missing value [ 310.765205][T12794] (syz.0.2366,12794,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 310.772767][ T39] audit: type=1326 audit(1719399917.050:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.2.2367" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7406579 code=0x0 [ 311.854124][ T4643] Bluetooth: hci4: command tx timeout [ 311.893208][ T1398] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 311.924628][T12794] loop0: detected capacity change from 0 to 32768 [ 311.928401][T12794] XFS: noikeep mount option is deprecated. [ 311.941955][T12794] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 311.965028][T12794] XFS (loop0): Ending clean mount [ 311.967879][ T39] audit: type=1800 audit(1719399918.250:913): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2378" name="/" dev="fuse" ino=1 res=0 errno=0 [ 311.971105][T12794] XFS (loop0): Quotacheck needed: Please wait. [ 312.028287][T12794] XFS (loop0): Quotacheck: Done. [ 312.073273][ T1398] usb 8-1: Using ep0 maxpacket: 8 [ 312.078574][ T1398] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 312.082161][ T1398] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.090450][ T1398] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.094866][ T1398] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.100683][ T1398] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.107054][ T1398] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.111673][ T1398] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.123647][T12212] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 312.345419][ T1398] usb 8-1: usb_control_msg returned -32 [ 312.348277][ T1398] usbtmc 8-1:16.0: can't read capabilities [ 312.712406][T12842] loop0: detected capacity change from 0 to 8 [ 312.774284][T12842] loop0: detected capacity change from 0 to 8 [ 313.018367][T12846] loop2: detected capacity change from 0 to 32768 [ 313.027596][T12846] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 313.070430][T12846] XFS (loop2): Ending clean mount [ 313.142625][ T5253] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x10 [ 313.147909][ T5253] XFS (loop2): Unmount and run xfs_repair [ 313.150136][ T5253] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 313.153131][ T5253] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 313.156629][ T5253] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 313.160031][ T5253] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 313.163916][ T5253] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 313.167327][ T5253] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 313.170751][ T5253] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 313.175234][ T5253] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 313.178625][ T5253] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 313.185431][T12846] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x10 len 8 error 74 [ 313.191541][T12846] XFS (loop2): page discard on page ffffea0000b0fa40, inode 0x1149, pos 0. [ 313.250965][T11726] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 313.261914][T11726] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 313.484003][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 313.517804][T12859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2384'. [ 313.819203][T12867] loop2: detected capacity change from 0 to 32768 [ 313.833175][T12867] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2388 (12867) [ 313.842033][T12867] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.846420][T12867] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 313.849752][T12867] BTRFS info (device loop2): using free-space-tree [ 313.923167][ T4643] Bluetooth: hci4: command tx timeout [ 313.998087][T11726] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 314.314707][T12887] loop0: detected capacity change from 0 to 40427 [ 314.328367][T12887] F2FS-fs (loop0): Found nat_bits in checkpoint [ 314.369846][T12887] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 314.420242][T12889] loop2: detected capacity change from 0 to 40427 [ 314.424840][T12889] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 314.436139][T12889] F2FS-fs (loop2): Found nat_bits in checkpoint [ 314.471199][T12889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 314.537629][T12889] syz.2.2390: attempt to access beyond end of device [ 314.537629][T12889] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 314.636344][ T1398] usb 8-1: USB disconnect, device number 5 [ 314.834118][T12905] netlink: 'syz.3.2394': attribute type 5 has an invalid length. [ 315.118157][T12909] loop3: detected capacity change from 0 to 32768 [ 315.124756][T12909] XFS: attr2 mount option is deprecated. [ 315.127336][T12909] XFS: noikeep mount option is deprecated. [ 315.169810][T12909] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 315.208327][T12909] XFS (loop3): Ending clean mount [ 315.218769][T12909] XFS (loop3): Quotacheck needed: Please wait. [ 315.280798][T12924] loop0: detected capacity change from 0 to 8192 [ 315.292414][T12909] XFS (loop3): Quotacheck: Done. [ 315.444136][T12932] loop2: detected capacity change from 0 to 32768 [ 315.463316][T12932] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2402 (12932) [ 315.479638][T11723] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 315.480249][T12932] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 315.489938][T12932] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 315.492946][T12932] BTRFS info (device loop2): using free-space-tree [ 315.632632][T12913] loop1: detected capacity change from 40427 to 11 [ 315.782375][T11726] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 315.796053][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2404'. [ 315.819269][T12955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2404'. [ 316.015172][ T4643] Bluetooth: hci4: command tx timeout [ 316.117128][T12966] loop2: detected capacity change from 0 to 256 [ 316.121020][T12966] FAT-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 316.147532][T12964] loop3: detected capacity change from 0 to 512 [ 316.248948][T12964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.254546][T12964] ext4 filesystem being mounted at /syzkaller.z1nAkb/104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.285695][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 316.292829][T12964] EXT4-fs error (device loop3): ext4_readdir:258: inode #2: block 3: comm syz.3.2407: path /syzkaller.z1nAkb/104/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 316.419339][T12976] netlink: 'syz.1.2414': attribute type 6 has an invalid length. [ 316.448640][ T39] audit: type=1326 audit(1719399922.730:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.0.2413" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x0 [ 316.663463][T11723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.905502][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 316.940846][T12987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2417'. [ 317.172742][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2423'. [ 317.299442][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.319868][T13008] loop0: detected capacity change from 0 to 64 [ 317.382718][T13008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2425'. [ 317.414805][T13005] loop3: detected capacity change from 0 to 40427 [ 317.430375][T13005] F2FS-fs (loop3): Found nat_bits in checkpoint [ 317.472455][T13005] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 317.507287][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'. [ 317.598191][T13017] loop0: detected capacity change from 0 to 256 [ 317.603887][T13017] FAT-fs (loop0): Unrecognized mount option "18446744073709551615" or missing value [ 318.037497][T13022] netlink: 'syz.2.2431': attribute type 6 has an invalid length. [ 318.161172][ T39] audit: type=1326 audit(1719399924.440:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.2.2434" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7406579 code=0x0 [ 318.313393][T13041] ax25_connect(): syz.3.2435 uses autobind, please contact jreuter@yaina.de [ 318.363082][T13042] pimreg: entered allmulticast mode [ 318.576939][T13041] loop3: detected capacity change from 0 to 40427 [ 318.581102][T13041] F2FS-fs (loop3): Unrecognized mount option "jqfmt=vsold" or missing value [ 318.970505][T13049] loop0: detected capacity change from 0 to 8192 [ 319.156812][T13064] loop2: detected capacity change from 0 to 8192 [ 319.179346][T13067] netlink: 'syz.1.2442': attribute type 6 has an invalid length. [ 319.228769][T13068] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.408540][T13072] __nla_validate_parse: 1 callbacks suppressed [ 319.408556][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2445'. [ 319.932762][ T39] audit: type=1326 audit(1719399926.210:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.3.2450" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e5579 code=0x0 [ 320.248684][T13095] loop2: detected capacity change from 0 to 128 [ 320.253961][T13095] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 320.334252][ T57] kworker/u32:3: attempt to access beyond end of device [ 320.334252][ T57] loop1: rw=2049, sector=45184, nr_sectors = 8 limit=11 [ 320.351698][ T57] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 320.357872][ T1398] F2FS-fs (loop1): f2fs_commit_super fails to record stop_reason, err:-5 [ 320.560073][T13098] loop2: detected capacity change from 0 to 8192 [ 320.578931][T13102] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.583209][ T55] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 320.718318][ T39] audit: type=1326 audit(1719399927.000:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.1.2457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7489579 code=0x7ffc0000 [ 320.736652][ T39] audit: type=1326 audit(1719399927.010:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.1.2457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7489579 code=0x7ffc0000 [ 320.745672][ T39] audit: type=1326 audit(1719399927.010:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.1.2457" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf7489579 code=0x7ffc0000 [ 320.763191][ T39] audit: type=1326 audit(1719399927.010:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.1.2457" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7489579 code=0x7ffc0000 [ 320.780266][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 320.794154][ T55] usb 5-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 320.797988][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.812936][ T55] usb 5-1: config 0 descriptor?? [ 320.817042][ T55] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 320.832328][T13109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2460'. [ 320.981031][T13114] loop3: detected capacity change from 0 to 8192 [ 321.040655][ T55] usb 5-1: USB disconnect, device number 7 [ 321.233116][T13120] veth0_macvtap: left promiscuous mode [ 321.253691][T13120] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2463'. [ 321.257971][T13120] veth0_macvtap: entered promiscuous mode [ 321.600041][T13130] loop0: detected capacity change from 0 to 128 [ 321.736591][ T39] audit: type=1326 audit(1719399928.020:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.0.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x7ffc0000 [ 321.760473][ T39] audit: type=1326 audit(1719399928.020:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.0.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x7ffc0000 [ 321.773057][ T39] audit: type=1326 audit(1719399928.020:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.0.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=271 compat=1 ip=0xf73fb579 code=0x7ffc0000 [ 321.781743][ T39] audit: type=1326 audit(1719399928.020:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.0.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x7ffc0000 [ 321.791167][ T39] audit: type=1326 audit(1719399928.020:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.0.2468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x7ffc0000 [ 322.369276][T13164] loop3: detected capacity change from 0 to 8192 [ 322.596836][T13181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2489'. [ 322.910201][ T39] audit: type=1326 audit(1719399929.190:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.0.2493" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x0 [ 323.455046][T13205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2500'. [ 323.763529][ T4643] Bluetooth: hci4: command tx timeout [ 323.795876][T13222] loop2: detected capacity change from 0 to 8192 [ 324.203115][ T1398] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 324.414977][ T1398] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 324.420739][ T1398] usb 5-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 324.425297][ T1398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.435422][ T1398] usb 5-1: config 0 descriptor?? [ 324.444232][ T1398] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 324.659431][ T30] usb 5-1: USB disconnect, device number 8 [ 325.020166][T13258] loop3: detected capacity change from 0 to 4096 [ 325.025166][T13258] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 325.046812][T13258] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 325.264900][ T57] ntfs3: loop3: ino=5, ntfs3_write_inode failed, -22. [ 325.381242][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.401032][T13276] loop3: detected capacity change from 0 to 128 [ 325.414634][T13276] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 325.460677][ T39] audit: type=1804 audit(1719399931.740:927): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2529" name="/syzkaller.z1nAkb/130/file0/bus" dev="loop3" ino=115 res=1 errno=0 [ 325.478717][ T39] audit: type=1800 audit(1719399931.740:928): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2529" name="bus" dev="loop3" ino=115 res=0 errno=0 [ 325.513734][ T39] audit: type=1804 audit(1719399931.780:929): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2529" name="/syzkaller.z1nAkb/130/file0/bus" dev="loop3" ino=115 res=1 errno=0 [ 325.540134][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.631201][ T5213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.641281][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.647064][ T5213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.655218][ T5213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.663352][ T5213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.667666][ T5213] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 325.671046][ T5213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.769215][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.954087][ T40] bridge_slave_1: left allmulticast mode [ 325.955990][ T40] bridge_slave_1: left promiscuous mode [ 325.958021][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.965448][ T40] bridge_slave_0: left promiscuous mode [ 325.967932][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.974832][ T5253] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 326.186562][ T5253] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 326.191586][ T5253] usb 6-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 326.195148][ T5253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.199837][ T5253] usb 6-1: config 0 descriptor?? [ 326.209364][ T5253] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 326.274540][ T5252] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 326.421557][ T5253] usb 6-1: USB disconnect, device number 12 [ 326.455238][ T5252] usb 5-1: Using ep0 maxpacket: 8 [ 326.489885][ T5252] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 326.495422][ T5252] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.500528][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.504008][ T5252] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 326.508261][ T5252] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 326.512048][ T5252] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.516801][ T5252] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.519934][ T5252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.523412][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.532251][ T40] bond0 (unregistering): Released all slaves [ 326.550833][T13287] chnl_net:caif_netlink_parms(): no params data found [ 326.695508][T13287] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.699493][T13287] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.702520][T13287] bridge_slave_0: entered allmulticast mode [ 326.705886][T13287] bridge_slave_0: entered promiscuous mode [ 326.710918][T13287] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.715584][T13287] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.718380][T13287] bridge_slave_1: entered allmulticast mode [ 326.721237][T13287] bridge_slave_1: entered promiscuous mode [ 326.748310][ T5252] usb 5-1: usb_control_msg returned -32 [ 326.750803][ T5252] usbtmc 5-1:16.0: can't read capabilities [ 326.821817][T13287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.838691][T13287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.954949][T13287] team0: Port device team_slave_0 added [ 326.964137][T13287] team0: Port device team_slave_1 added [ 327.023825][ T40] hsr_slave_0: left promiscuous mode [ 327.027203][ T40] hsr_slave_1: left promiscuous mode [ 327.030792][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.034391][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.050495][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.052940][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.123791][ T40] veth1_macvtap: left promiscuous mode [ 327.125770][ T40] veth0_macvtap: left promiscuous mode [ 327.127760][ T40] veth1_vlan: left promiscuous mode [ 327.129537][ T40] veth0_vlan: left promiscuous mode [ 327.194841][ T39] audit: type=1326 audit(1719399933.480:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13336 comm="syz.3.2553" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e5579 code=0x0 [ 327.684860][ T4643] Bluetooth: hci3: command tx timeout [ 328.677133][T13354] loop3: detected capacity change from 0 to 256 [ 328.983346][ T4643] Bluetooth: hci0: command tx timeout [ 329.037748][ T3565] usb 5-1: USB disconnect, device number 9 [ 329.054828][T13362] loop3: detected capacity change from 0 to 64 [ 329.113487][T13364] loop0: detected capacity change from 0 to 512 [ 329.131944][T13364] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 329.136463][T13364] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 329.232597][T13364] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 329.233043][ T39] audit: type=1804 audit(1719399935.510:931): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2566" name="/syzkaller.CJ2E63/68/.log" dev="sda1" ino=2060 res=1 errno=0 [ 329.363553][ T40] team0 (unregistering): Port device team_slave_1 removed [ 329.600319][ T40] team0 (unregistering): Port device team_slave_0 removed [ 329.763369][ T4643] Bluetooth: hci3: command tx timeout [ 329.973812][T13373] loop0: detected capacity change from 0 to 32768 [ 330.126411][T13373] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 330.130854][T13373] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 330.152179][T13373] bcachefs (loop0): alloc_read... done [ 330.154204][T13373] bcachefs (loop0): stripes_read... done [ 330.156134][T13373] bcachefs (loop0): snapshots_read... done [ 330.159576][T13373] bcachefs (loop0): journal_replay... done [ 330.161638][T13373] bcachefs (loop0): resume_logged_ops... done [ 330.167090][T13373] bcachefs (loop0): going read-write [ 330.173478][T13373] bcachefs (loop0): done starting filesystem [ 330.574688][T13373] syz.0.2568 (13373) used greatest stack depth: 17008 bytes left [ 330.649303][T12212] bcachefs (loop0): shutting down [ 330.651417][T12212] bcachefs (loop0): going read-only [ 330.653826][T12212] bcachefs (loop0): finished waiting for writes to stop [ 330.684296][T12212] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9 [ 330.728562][T12212] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 330.736308][T12212] bcachefs (loop0): shutdown complete, journal seq 12 [ 330.739512][T12212] bcachefs (loop0): marking filesystem clean [ 330.754651][T12212] bcachefs (loop0): shutdown complete [ 331.043676][ T5213] Bluetooth: hci0: command tx timeout [ 331.403927][T13398] loop0: detected capacity change from 0 to 64 [ 331.545975][T13287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.548728][T13287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.558954][T13287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.563222][T13340] netlink: 'syz.1.2554': attribute type 5 has an invalid length. [ 331.633247][T13287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.643491][T13287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.654545][T13287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.724799][T13404] loop0: detected capacity change from 0 to 512 [ 331.729487][T13404] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 331.750966][T13404] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 331.773666][T13287] hsr_slave_0: entered promiscuous mode [ 331.776554][T13287] hsr_slave_1: entered promiscuous mode [ 331.779767][T13287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.782649][T13287] Cannot create hsr debugfs directory [ 331.842504][T13408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2579'. [ 331.843248][ T5213] Bluetooth: hci3: command tx timeout [ 331.852872][ T39] audit: type=1804 audit(1719399938.130:932): pid=13404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2576" name="/syzkaller.CJ2E63/76/.log" dev="sda1" ino=2060 res=1 errno=0 [ 331.870560][T13404] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 331.963516][ T5252] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 332.147189][T13414] loop3: detected capacity change from 0 to 256 [ 332.151127][T13414] exfat: Deprecated parameter 'namecase' [ 332.163562][T13414] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 332.174117][T13416] loop0: detected capacity change from 0 to 128 [ 332.183093][ T5252] usb 6-1: Using ep0 maxpacket: 8 [ 332.189756][ T5252] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 332.203116][ T5252] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 332.207477][ T5252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.214440][ T5252] usb 6-1: config 0 descriptor?? [ 332.218129][ T39] audit: type=1804 audit(1719399938.500:933): pid=13416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2581" name="/syzkaller.CJ2E63/77/file2/bus" dev="loop0" ino=1048879 res=1 errno=0 [ 332.219297][ T5252] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 332.229927][ T39] audit: type=1804 audit(1719399938.510:934): pid=13416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2581" name="/syzkaller.CJ2E63/77/file2/bus" dev="loop0" ino=1048879 res=1 errno=0 [ 332.249291][T13416] syz.0.2581: attempt to access beyond end of device [ 332.249291][T13416] loop0: rw=0, sector=97, nr_sectors = 32 limit=128 [ 332.257192][T13418] netlink: 'syz.3.2582': attribute type 5 has an invalid length. [ 332.301765][T13420] loop3: detected capacity change from 0 to 512 [ 332.309385][T13420] EXT4-fs: Ignoring removed oldalloc option [ 332.326071][T13420] EXT4-fs error (device loop3): ext4_xattr_inode_iget:435: comm syz.3.2583: Parent and EA inode have the same ino 15 [ 332.338339][T13420] EXT4-fs error (device loop3): ext4_xattr_inode_iget:435: comm syz.3.2583: Parent and EA inode have the same ino 15 [ 332.348687][T13420] EXT4-fs (loop3): 1 orphan inode deleted [ 332.352069][T13420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.365840][T13420] EXT4-fs error (device loop3): ext4_find_dest_de:2110: inode #2: block 13: comm syz.3.2583: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 332.437263][T11723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.461866][ T5252] usb 6-1: USB disconnect, device number 13 [ 332.593162][T13287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.606762][T13287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.612569][T13287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.620516][T13287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.628564][T13430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2587'. [ 332.736374][T13287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.760559][T13287] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.776286][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.779393][ T5252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.785803][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.789012][ T5252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.791565][T13428] loop0: detected capacity change from 0 to 32768 [ 332.857196][T13428] find_entry called with index = 0 [ 332.860414][T13428] find_entry called with index = 0 [ 332.872646][T13432] loop3: detected capacity change from 0 to 32768 [ 332.874735][T13428] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 332.874735][T13428] [ 332.887897][T13428] ERROR: (device loop0): remounting filesystem as read-only [ 332.891220][T13428] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 332.891220][T13428] [ 332.899889][T13428] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5 [ 332.899889][T13428] [ 332.916882][T13428] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 332.916882][T13428] [ 332.921503][T13428] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5 [ 332.921503][T13428] [ 332.964014][T13432] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 332.969364][T13432] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 333.000627][T13432] bcachefs (loop3): alloc_read... done [ 333.002849][T13432] bcachefs (loop3): stripes_read... done [ 333.005537][T13432] bcachefs (loop3): snapshots_read... done [ 333.010231][T13432] bcachefs (loop3): journal_replay... done [ 333.012391][T13432] bcachefs (loop3): resume_logged_ops... done [ 333.021568][T13432] bcachefs (loop3): going read-write [ 333.030738][T13432] bcachefs (loop3): done starting filesystem [ 333.050102][T13287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.095599][T13287] veth0_vlan: entered promiscuous mode [ 333.103895][T13287] veth1_vlan: entered promiscuous mode [ 333.147604][T13287] veth0_macvtap: entered promiscuous mode [ 333.151911][ T39] audit: type=1804 audit(1719404034.429:935): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2592" name="/syzkaller.HoZyTF/65/bus" dev="sda1" ino=2051 res=1 errno=0 [ 333.167472][T13287] veth1_macvtap: entered promiscuous mode [ 333.171591][ T39] audit: type=1804 audit(1719404034.449:936): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2592" name="/syzkaller.HoZyTF/65/bus" dev="sda1" ino=2051 res=1 errno=0 [ 333.183451][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.187967][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.191938][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.200801][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.204910][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.209136][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.213714][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.218326][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.222239][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.226565][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.235935][T13287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.256183][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.260841][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.273080][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.283071][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.287401][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.291966][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.297202][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.301760][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.313120][T13287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.320042][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.325656][T13287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.332059][T13287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.336653][T13287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.340670][T13287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.345115][T13287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.354404][T11723] bcachefs (loop3): shutting down [ 333.356535][T11723] bcachefs (loop3): going read-only [ 333.359169][T11723] bcachefs (loop3): finished waiting for writes to stop [ 333.371909][T11723] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 333.431013][T11723] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 333.439874][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.454385][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.463448][T11723] bcachefs (loop3): shutdown complete, journal seq 13 [ 333.468173][T11723] bcachefs (loop3): marking filesystem clean [ 333.491425][T13455] loop0: detected capacity change from 0 to 512 [ 333.499242][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.505265][T11723] bcachefs (loop3): shutdown complete [ 333.505667][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.520817][T13455] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 333.532432][T13455] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 333.662093][ T39] audit: type=1804 audit(1719404034.939:937): pid=13455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2589" name="/syzkaller.CJ2E63/80/.log" dev="sda1" ino=2063 res=1 errno=0 [ 333.662792][T13458] netlink: 'syz.1.2595': attribute type 1 has an invalid length. [ 333.671703][T13455] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 333.926406][ T5213] Bluetooth: hci3: command tx timeout [ 334.097238][T13472] loop2: detected capacity change from 0 to 128 [ 334.104353][T13472] FAT-fs (loop2): invalid media value (0x00) [ 334.106775][T13472] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 334.110186][T13472] FAT-fs (loop2): Can't find a valid FAT filesystem [ 334.133413][ T39] audit: type=1326 audit(1719404035.409:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13475 comm="syz.0.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x7ffc0000 [ 334.142787][ T39] audit: type=1326 audit(1719404035.409:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13475 comm="syz.0.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x7ffc0000 [ 334.167955][ T39] audit: type=1326 audit(1719404035.409:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13475 comm="syz.0.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf73fb579 code=0x7ffc0000 [ 334.188712][ T39] audit: type=1326 audit(1719404035.409:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13475 comm="syz.0.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x7ffc0000 [ 334.200419][ T39] audit: type=1326 audit(1719404035.409:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13475 comm="syz.0.2599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x7ffc0000 [ 334.252966][T13484] loop3: detected capacity change from 0 to 128 [ 334.315753][T13484] syz.3.2602: attempt to access beyond end of device [ 334.315753][T13484] loop3: rw=0, sector=97, nr_sectors = 32 limit=128 [ 334.470588][T13481] loop0: detected capacity change from 0 to 32768 [ 334.482812][T13481] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2601 (13481) [ 334.520096][T13481] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.528695][T13481] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 334.553095][T13481] BTRFS info (device loop0): using free-space-tree [ 334.657816][T13512] loop3: detected capacity change from 0 to 256 [ 334.662312][T13512] exfat: Unknown parameter 'ÿÿÿÿ' [ 334.794651][T13497] netlink: 'syz.2.2607': attribute type 1 has an invalid length. [ 335.020199][T12212] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 335.261531][T13538] loop2: detected capacity change from 0 to 128 [ 335.452504][T13538] syz.2.2615: attempt to access beyond end of device [ 335.452504][T13538] loop2: rw=0, sector=97, nr_sectors = 32 limit=128 [ 335.593121][ T1398] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 335.665167][T13557] loop2: detected capacity change from 0 to 256 [ 335.679764][T13557] exfat: Unknown parameter 'ÿÿÿÿ' [ 335.741540][T13559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2624'. [ 335.798553][ T1398] usb 6-1: Using ep0 maxpacket: 8 [ 335.802467][ T1398] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 335.809876][ T1398] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 335.817638][ T1398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.823394][ T1398] usb 6-1: config 0 descriptor?? [ 335.839869][ T1398] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 336.072684][ T5252] usb 6-1: USB disconnect, device number 14 [ 336.079140][T13575] loop3: detected capacity change from 0 to 128 [ 336.138889][T13575] syz.3.2631: attempt to access beyond end of device [ 336.138889][T13575] loop3: rw=0, sector=97, nr_sectors = 32 limit=128 [ 336.590027][T13594] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2641'. [ 336.686083][T13600] loop2: detected capacity change from 0 to 1024 [ 336.691682][T13600] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 336.700528][T13600] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 336.705895][T13600] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 336.710648][T13600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.838993][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.961901][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.105754][ T4643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.115035][ T4643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.119882][ T4643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.127624][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.135873][ T4643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.155454][ T4643] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.166376][ T4643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.269407][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.528923][ T11] bridge_slave_1: left allmulticast mode [ 337.531379][ T11] bridge_slave_1: left promiscuous mode [ 337.543204][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.549346][ T11] bridge_slave_0: left allmulticast mode [ 337.552005][ T11] bridge_slave_0: left promiscuous mode [ 337.555429][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.750465][T13633] loop0: detected capacity change from 0 to 8192 [ 337.759721][T13633] REISERFS warning (device loop0): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 337.774512][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.879175][T13638] loop2: detected capacity change from 0 to 512 [ 337.904840][T13638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 337.929183][T13638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.935236][T13638] ext4 filesystem being mounted at /syzkaller.rEKK5V/12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.979301][T13638] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 338.045699][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.154604][T13649] loop2: detected capacity change from 0 to 2048 [ 338.193125][T13650] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.297786][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.300045][T13647] loop0: detected capacity change from 0 to 32768 [ 338.307626][T13647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2662 (13647) [ 338.322510][T13647] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.326849][T13647] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 338.327257][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.331092][T13647] BTRFS info (device loop0): using free-space-tree [ 338.347830][ T11] bond0 (unregistering): Released all slaves [ 338.497758][T13612] chnl_net:caif_netlink_parms(): no params data found [ 338.728692][T13612] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.732488][T13612] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.737184][T13612] bridge_slave_0: entered allmulticast mode [ 338.741316][T13612] bridge_slave_0: entered promiscuous mode [ 338.764656][T13612] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.768459][T13612] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.772021][T13612] bridge_slave_1: entered allmulticast mode [ 338.776223][T13612] bridge_slave_1: entered promiscuous mode [ 338.819111][T12212] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 338.823405][ T1398] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 339.043389][ T1398] usb 7-1: Using ep0 maxpacket: 8 [ 339.058382][ T1398] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.073117][ T1398] usb 7-1: config 0 interface 0 has no altsetting 0 [ 339.083829][ T11] hsr_slave_0: left promiscuous mode [ 339.088189][ T1398] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 339.092231][ T1398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 339.096232][ T1398] usb 7-1: SerialNumber: syz [ 339.101144][ T1398] usb 7-1: config 0 descriptor?? [ 339.119527][ T11] hsr_slave_1: left promiscuous mode [ 339.139657][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.142591][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.159323][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.162930][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.203651][ T5213] Bluetooth: hci0: command tx timeout [ 339.251816][ T11] veth1_macvtap: left promiscuous mode [ 339.254472][ T11] veth0_macvtap: left promiscuous mode [ 339.257704][ T11] veth1_vlan: left promiscuous mode [ 339.260739][ T11] veth0_vlan: left promiscuous mode [ 341.209994][ T11] team0 (unregistering): Port device team_slave_1 removed [ 341.283739][ T5213] Bluetooth: hci0: command tx timeout [ 341.449982][ T11] team0 (unregistering): Port device team_slave_0 removed [ 342.755131][ C0] hrtimer: interrupt took 933315 ns [ 343.340576][T13612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.363355][ T5213] Bluetooth: hci0: command tx timeout [ 343.471923][ T1398] usb 7-1: Found UVC 0.00 device (05ac:8501) [ 343.475689][ T1398] usb 7-1: No valid video chain found. [ 343.480521][ T1398] usb 7-1: USB disconnect, device number 7 [ 343.512149][T13612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.559395][T13689] loop0: detected capacity change from 0 to 64 [ 343.682278][T13612] team0: Port device team_slave_0 added [ 343.701591][T13689] hfs: request for non-existent node 131072 in B*Tree [ 343.705874][T13612] team0: Port device team_slave_1 added [ 343.715043][T13689] hfs: request for non-existent node 131072 in B*Tree [ 343.787038][T13612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.790257][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.801876][T13612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.808939][T13612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.812438][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.822860][T13612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.957549][T13612] hsr_slave_0: entered promiscuous mode [ 343.961564][T13612] hsr_slave_1: entered promiscuous mode [ 343.967332][T13612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.970985][T13612] Cannot create hsr debugfs directory [ 344.088106][T13705] loop2: detected capacity change from 0 to 64 [ 344.413439][T13707] loop0: detected capacity change from 0 to 32768 [ 344.422966][T13707] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 344.493854][T13707] XFS (loop0): Ending clean mount [ 344.498743][T13707] XFS (loop0): Quotacheck needed: Please wait. [ 344.582667][T13707] XFS (loop0): Quotacheck: Done. [ 344.585347][ T1398] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 344.639685][T13612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.646284][T13612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.653758][T13612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.660901][T13612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.769449][T13612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.783478][ T1398] usb 7-1: Using ep0 maxpacket: 8 [ 344.789503][ T1398] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.812955][ T1398] usb 7-1: config 0 interface 0 has no altsetting 0 [ 344.821916][ T1398] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 344.825933][ T1398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 344.827841][T13612] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.829486][ T1398] usb 7-1: SerialNumber: syz [ 344.839584][ T1398] usb 7-1: config 0 descriptor?? [ 344.845985][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.848957][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.877462][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.880748][ T5251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.927307][T13612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.974779][T12212] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 345.137671][ T1398] usb 7-1: Found UVC 0.00 device (05ac:8501) [ 345.140952][ T1398] usb 7-1: No valid video chain found. [ 345.161100][ T1398] usb 7-1: USB disconnect, device number 8 [ 345.181106][T13612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.248719][T13612] veth0_vlan: entered promiscuous mode [ 345.263837][T13612] veth1_vlan: entered promiscuous mode [ 345.296392][T13612] veth0_macvtap: entered promiscuous mode [ 345.305703][T13612] veth1_macvtap: entered promiscuous mode [ 345.319924][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.324176][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.327907][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.331931][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.335813][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.340413][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.344023][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.347774][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.351681][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.355850][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.361625][T13612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.367347][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.371255][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.376063][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.381406][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.387478][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.391853][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.395643][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.401566][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.405273][T13612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.408377][T13612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.412965][T13612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.433522][T13612] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.436846][T13612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.439571][T13612] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.442837][T13612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.448086][ T5213] Bluetooth: hci0: command tx timeout [ 345.555801][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.562117][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.594629][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.597473][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.769062][T13761] loop2: detected capacity change from 0 to 1024 [ 345.782969][T13761] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 345.794821][T13761] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 345.798817][T13761] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 345.803282][T13761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.087671][T13765] loop3: detected capacity change from 0 to 32768 [ 346.167621][T13765] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names [ 346.175865][T13765] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 346.199683][T13765] bcachefs (loop3): alloc_read... done [ 346.202144][T13765] bcachefs (loop3): stripes_read... done [ 346.205585][T13765] bcachefs (loop3): snapshots_read... done [ 346.210252][T13765] bcachefs (loop3): journal_replay... done [ 346.212787][T13765] bcachefs (loop3): resume_logged_ops... done [ 346.217245][T13765] bcachefs (loop3): going read-write [ 346.223138][T13765] bcachefs (loop3): done starting filesystem [ 346.385779][T13612] bcachefs (loop3): shutting down [ 346.398609][T13612] bcachefs (loop3): going read-only [ 346.400962][T13612] bcachefs (loop3): finished waiting for writes to stop [ 346.428943][T13612] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13 [ 346.452406][T13612] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 346.473713][T13612] bcachefs (loop3): shutdown complete, journal seq 15 [ 346.495185][T13612] bcachefs (loop3): marking filesystem clean [ 346.564992][T13612] bcachefs (loop3): shutdown complete [ 346.711098][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 346.711114][ T39] audit: type=1326 audit(1719408142.983:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13784 comm="syz.0.2698" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fb579 code=0x0 [ 346.820262][T13287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.992605][T13789] loop2: detected capacity change from 0 to 256 [ 347.248502][T13789] loop2: detected capacity change from 0 to 32768 [ 347.252413][T13789] bcachefs (/dev/loop2): error reading default superblock: checksum error, type crc32c_nonzero: got 21cb763f should be 29d2fb78 [ 347.306756][T13789] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,nojournal_transaction_names [ 347.311301][T13789] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 347.327149][T13789] bcachefs (loop2): alloc_read... done [ 347.329637][T13789] bcachefs (loop2): stripes_read... done [ 347.332286][T13789] bcachefs (loop2): snapshots_read... done [ 347.335094][ T5252] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 347.343370][T13789] bcachefs (loop2): journal_replay... done [ 347.346151][T13789] bcachefs (loop2): resume_logged_ops... done [ 347.349119][T13789] bcachefs (loop2): going read-write [ 347.364831][T13789] bcachefs (loop2): done starting filesystem [ 347.367038][T13794] loop3: detected capacity change from 0 to 32768 [ 347.382551][T13794] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 347.413676][T13794] XFS (loop3): Ending clean mount [ 347.546445][ T5252] usb 6-1: Using ep0 maxpacket: 8 [ 347.551723][ T5252] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.555295][ T5252] usb 6-1: config 0 interface 0 has no altsetting 0 [ 347.557323][T13794] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x8 [ 347.562383][T13794] XFS (loop3): Unmount and run xfs_repair [ 347.563393][ T5252] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 347.565017][T13794] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 347.568787][ T5252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 347.568810][ T5252] usb 6-1: SerialNumber: syz [ 347.570325][ T5252] usb 6-1: config 0 descriptor?? [ 347.571966][T13794] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 347.583095][T13794] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 347.586275][T13794] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 347.589278][T13794] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 347.592407][T13794] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 347.595919][T13794] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 347.598821][T13794] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 347.601931][T13794] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 347.606439][T13794] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x8 len 8 error 74 [ 347.634480][T13794] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x414/0x990 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 347.640559][T13794] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 347.685939][T13612] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 347.859884][ T5252] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 347.863424][ T5252] usb 6-1: No valid video chain found. [ 347.866531][ T5252] usb 6-1: USB disconnect, device number 15 [ 347.960911][T13287] bcachefs (loop2): shutting down [ 347.963629][T13287] bcachefs (loop2): going read-only [ 347.965861][T13287] bcachefs (loop2): finished waiting for writes to stop [ 347.983804][T13287] bcachefs (loop2): flushing journal and stopping allocators, journal seq 7 [ 347.988321][T13287] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 7 [ 348.027781][T13287] bcachefs (loop2): shutdown complete, journal seq 8 [ 348.031924][T13287] bcachefs (loop2): marking filesystem clean [ 348.060972][T13287] bcachefs (loop2): shutdown complete [ 348.231195][T13824] loop3: detected capacity change from 0 to 32768 [ 348.380607][T13824] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names [ 348.395625][T13824] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 348.439302][T13848] loop2: detected capacity change from 0 to 16 [ 348.443339][T13848] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 348.455565][T13824] bcachefs (loop3): alloc_read... done [ 348.457861][T13824] bcachefs (loop3): stripes_read... done [ 348.459922][T13824] bcachefs (loop3): snapshots_read... done [ 348.466098][T13824] bcachefs (loop3): journal_replay... done [ 348.468477][T13824] bcachefs (loop3): resume_logged_ops... done [ 348.497030][T13824] bcachefs (loop3): going read-write [ 348.504806][T13824] bcachefs (loop3): done starting filesystem [ 348.632505][T13612] bcachefs (loop3): shutting down [ 348.645525][T13612] bcachefs (loop3): going read-only [ 348.647833][T13612] bcachefs (loop3): finished waiting for writes to stop [ 348.656438][T13612] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 348.670859][T13612] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 348.676308][T13612] bcachefs (loop3): shutdown complete, journal seq 15 [ 348.679980][T13612] bcachefs (loop3): marking filesystem clean [ 348.698873][T13612] bcachefs (loop3): shutdown complete [ 349.183237][T13862] loop2: detected capacity change from 0 to 40427 [ 349.187450][T13862] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 349.190475][T13862] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 349.205585][T13862] F2FS-fs (loop2): Found nat_bits in checkpoint [ 349.256486][T13862] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 349.259488][T13862] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 349.301455][ T39] audit: type=1800 audit(1719408145.573:955): pid=13862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2715" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 349.662797][T13882] loop2: detected capacity change from 0 to 1024 [ 349.821931][T13887] loop2: detected capacity change from 0 to 64 [ 350.026832][ T39] audit: type=1800 audit(1719408146.303:956): pid=13889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2724" name="file0" dev="sda1" ino=2068 res=0 errno=0 [ 350.200171][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.349964][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.477656][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.566893][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.678808][ T57] bridge_slave_1: left allmulticast mode [ 350.681572][ T57] bridge_slave_1: left promiscuous mode [ 350.684467][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.691484][ T57] bridge_slave_0: left allmulticast mode [ 350.694115][ T57] bridge_slave_0: left promiscuous mode [ 350.696780][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.235766][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.243204][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.250380][ T57] bond0 (unregistering): Released all slaves [ 351.632513][ T57] hsr_slave_0: left promiscuous mode [ 351.635171][ T57] hsr_slave_1: left promiscuous mode [ 351.637658][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.640285][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.643371][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.645948][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.676638][ T57] veth1_macvtap: left promiscuous mode [ 351.678597][ T57] veth0_macvtap: left promiscuous mode [ 351.680966][ T57] veth1_vlan: left promiscuous mode [ 351.684160][ T57] veth0_vlan: left promiscuous mode [ 353.266407][ T5213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.276037][ T5213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.286826][ T5213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.308337][ T5213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.312284][ T5213] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.323311][ T5213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.421756][ T57] team0 (unregistering): Port device team_slave_1 removed [ 353.645301][ T57] team0 (unregistering): Port device team_slave_0 removed [ 355.342456][T13906] loop3: detected capacity change from 0 to 1024 [ 355.444238][ T5213] Bluetooth: hci3: command tx timeout [ 355.527666][T13902] chnl_net:caif_netlink_parms(): no params data found [ 355.657312][T13902] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.660186][T13902] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.668606][T13902] bridge_slave_0: entered allmulticast mode [ 355.672434][T13902] bridge_slave_0: entered promiscuous mode [ 355.684731][T13902] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.688435][T13902] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.691526][T13902] bridge_slave_1: entered allmulticast mode [ 355.695677][T13902] bridge_slave_1: entered promiscuous mode [ 355.751216][T13902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.759463][T13902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.832502][T13902] team0: Port device team_slave_0 added [ 355.841440][T13902] team0: Port device team_slave_1 added [ 355.911716][T13902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.918858][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.932567][T13902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.932811][ T39] audit: type=1800 audit(1719408152.203:957): pid=13910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2732" name="bus" dev="sda1" ino=2068 res=0 errno=0 [ 355.939452][T13902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.950454][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.962903][T13902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.134582][T13902] hsr_slave_0: entered promiscuous mode [ 356.138258][T13902] hsr_slave_1: entered promiscuous mode [ 356.163203][T13902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.167938][T13902] Cannot create hsr debugfs directory [ 356.645606][ T39] audit: type=1804 audit(1719408152.923:958): pid=13926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2737" name=2F73797A6B616C6C65722E486F5A7954462F3131312FB7 dev="sda1" ino=2068 res=1 errno=0 [ 356.672518][T13920] loop3: detected capacity change from 0 to 32768 [ 356.726469][T13920] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 356.785826][T13920] XFS (loop3): Ending clean mount [ 356.794210][T13920] XFS (loop3): Quotacheck needed: Please wait. [ 356.826328][T13940] ptrace attach of "/syz-executor exec"[12677] was attempted by " [ 356.883561][T13940] @ÿ: renamed from veth0_vlan (while UP) [ 356.896855][T13920] XFS (loop3): Quotacheck: Done. [ 356.960926][T13902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.979073][T13902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.987521][T13902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.998510][T13902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 357.134654][T13902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.158064][T13902] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.161945][T13612] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 357.170011][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.173945][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.193968][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.197507][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.278499][T13902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.283849][T13902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.454266][T13902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.527968][T13902] veth0_vlan: entered promiscuous mode [ 357.533691][ T5213] Bluetooth: hci3: command tx timeout [ 357.544584][T13955] loop3: detected capacity change from 0 to 256 [ 357.552459][T13902] veth1_vlan: entered promiscuous mode [ 357.583897][T13902] veth0_macvtap: entered promiscuous mode [ 357.591141][T13902] veth1_macvtap: entered promiscuous mode [ 357.609426][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.615414][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.619686][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.631920][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.636358][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.640864][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.653082][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.663049][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.667894][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.683106][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.695100][T13902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.717402][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.723426][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.728605][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.734554][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.738918][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.744174][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.748837][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.753699][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.758280][T13902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.764020][T13902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.769256][T13902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.782653][T13902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.785954][T13902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.789297][T13902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.792507][T13902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.808503][ T39] audit: type=1804 audit(1719408154.083:959): pid=13957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2746" name=2F73797A6B616C6C65722E486F5A7954462F3131392FB7 dev="sda1" ino=2069 res=1 errno=0 [ 357.935689][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.939385][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.945263][T13955] loop3: detected capacity change from 0 to 32768 [ 357.954144][T13955] bcachefs (/dev/loop3): error reading default superblock: checksum error, type crc32c_nonzero: got 21cb763f should be 29d2fb78 [ 357.961108][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.969266][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.056961][T13955] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=errors=continue,compression=lz4,nojournal_transaction_names [ 358.062691][T13955] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 358.081100][T13968] loop2: detected capacity change from 0 to 1024 [ 358.086735][T13955] bcachefs (loop3): alloc_read... done [ 358.089300][T13955] bcachefs (loop3): stripes_read... done [ 358.091877][T13955] bcachefs (loop3): snapshots_read... done [ 358.099132][T13968] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 358.099589][T13955] bcachefs (loop3): journal_replay... done [ 358.103918][T13968] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 358.105948][T13955] bcachefs (loop3): resume_logged_ops... done [ 358.112039][T13955] bcachefs (loop3): going read-write [ 358.112807][T13968] JBD2: no valid journal superblock found [ 358.117319][T13968] EXT4-fs (loop2): Could not load journal inode [ 358.128099][T13955] bcachefs (loop3): done starting filesystem [ 358.189150][T13968] loop2: detected capacity change from 0 to 512 [ 358.199411][T13968] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: writeback. [ 358.337313][T13977] loop2: detected capacity change from 0 to 512 [ 358.359311][T13977] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.380406][T13977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c02c, mo2=0002] [ 358.393159][T13977] System zones: 1-12 [ 358.395885][T13977] EXT4-fs (loop2): 1 truncate cleaned up [ 358.398611][T13977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.486585][T13612] bcachefs (loop3): shutting down [ 358.492345][T13612] bcachefs (loop3): going read-only [ 358.497438][T13612] bcachefs (loop3): finished waiting for writes to stop [ 358.516160][T13612] bcachefs (loop3): flushing journal and stopping allocators, journal seq 7 [ 358.519236][T13612] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 7 [ 358.554650][T13612] bcachefs (loop3): shutdown complete, journal seq 8 [ 358.557965][T13612] bcachefs (loop3): marking filesystem clean [ 358.576907][T13902] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.609595][ T4643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 358.621166][T13612] bcachefs (loop3): shutdown complete [ 358.622493][ T4643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 358.633583][ T4643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 358.637568][ T4643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 358.641513][ T4643] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 358.647492][ T4643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 358.861342][T13983] chnl_net:caif_netlink_parms(): no params data found [ 359.077071][T13983] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.079835][T13983] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.082765][T13983] bridge_slave_0: entered allmulticast mode [ 359.085914][T13983] bridge_slave_0: entered promiscuous mode [ 359.090211][T13983] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.092677][T13983] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.100968][T13983] bridge_slave_1: entered allmulticast mode [ 359.107814][T13983] bridge_slave_1: entered promiscuous mode [ 359.168005][T13983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.178457][T13983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.259936][T13983] team0: Port device team_slave_0 added [ 359.269077][T13983] team0: Port device team_slave_1 added [ 359.323190][ T5573] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 359.334850][T13983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.337295][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.346730][T13983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.355139][T13983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.357968][T13983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.367706][T13983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.470315][T13983] hsr_slave_0: entered promiscuous mode [ 359.473241][T13983] hsr_slave_1: entered promiscuous mode [ 359.476346][T13983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.479123][T13983] Cannot create hsr debugfs directory [ 359.507840][ T5573] usb 8-1: Using ep0 maxpacket: 8 [ 359.512278][ T5573] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.518809][ T5573] usb 8-1: config 0 interface 0 has no altsetting 0 [ 359.523946][ T5573] usb 8-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 359.528988][ T5573] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 359.532675][ T5573] usb 8-1: SerialNumber: syz [ 359.542131][ T5573] usb 8-1: config 0 descriptor?? [ 359.603418][ T5213] Bluetooth: hci3: command tx timeout [ 359.705276][T13983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.820419][T13983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.898578][T14011] mkiss: ax0: crc mode is auto. [ 359.955652][T13983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.992709][ T5573] usb 8-1: Found UVC 0.00 device (05ac:8501) [ 359.996446][ T5573] usb 8-1: No valid video chain found. [ 360.000125][ T5573] usb 8-1: USB disconnect, device number 6 [ 360.002690][T14009] loop2: detected capacity change from 0 to 32768 [ 360.011889][T14009] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2757 (14009) [ 360.041687][T14009] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 360.045589][T14009] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 360.048856][T14009] BTRFS info (device loop2): using free-space-tree [ 360.092003][T13983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.282781][T13983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.291215][T13983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 360.300075][T13983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.309209][T13983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 360.375938][T13902] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 360.476744][T13983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.503935][T13983] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.520078][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.522684][ T5251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.568939][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.572176][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.723957][ T5213] Bluetooth: hci6: command tx timeout [ 360.836352][T13983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.879420][T13983] veth0_vlan: entered promiscuous mode [ 360.888264][T13983] veth1_vlan: entered promiscuous mode [ 360.910047][T13983] veth0_macvtap: entered promiscuous mode [ 360.915332][T13983] veth1_macvtap: entered promiscuous mode [ 360.932008][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.939246][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.944217][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.949226][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.954485][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.958938][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.962625][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.968042][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.972753][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.977351][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.981453][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.985507][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.991608][T13983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.998646][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.003592][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.007835][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.012296][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.017169][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.020620][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.024884][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.028926][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.032861][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.036897][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.040516][T13983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.044438][T13983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.049109][T13983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.074320][T13983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.077627][T13983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.080562][T13983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.084675][T13983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.322397][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.331784][T14056] loop2: detected capacity change from 0 to 8 [ 361.333086][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.341218][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.343954][T14056] unable to read xattr id index table [ 361.344929][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.684108][ T5213] Bluetooth: hci3: command tx timeout [ 362.052437][T14067] loop3: detected capacity change from 0 to 32768 [ 362.135304][T14067] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,background_compression=zstd,str_hash=crc32c,gc_reserve_bytes=485 KiB,nojournal_transaction_names [ 362.144329][T14067] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 362.166817][T14067] bcachefs (loop3): alloc_read... done [ 362.169436][T14067] bcachefs (loop3): stripes_read... done [ 362.172033][T14067] bcachefs (loop3): snapshots_read... done [ 362.186525][T14067] bcachefs (loop3): going read-write [ 362.194498][T14067] bcachefs (loop3): journal_replay... [ 362.250107][T14088] loop2: detected capacity change from 0 to 8 [ 362.266818][T14067] done [ 362.273813][T14067] bcachefs (loop3): resume_logged_ops... done [ 362.277708][T14067] bcachefs (loop3): delete_dead_inodes... done [ 362.279867][T14088] unable to read xattr id index table [ 362.302032][T14067] bcachefs (loop3): done starting filesystem [ 362.393971][T13612] bcachefs (loop3): shutting down [ 362.396558][T13612] bcachefs (loop3): going read-only [ 362.399262][T13612] bcachefs (loop3): finished waiting for writes to stop [ 362.432944][T13612] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 362.443197][T13612] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 362.457762][T13612] bcachefs (loop3): shutdown complete, journal seq 12 [ 362.461483][T13612] bcachefs (loop3): marking filesystem clean [ 362.480598][T14084] loop0: detected capacity change from 0 to 40427 [ 362.486210][T13612] bcachefs (loop3): shutdown complete [ 362.502345][T14084] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 362.512644][T14084] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 362.604018][T14084] F2FS-fs (loop0): invalid crc value [ 362.616508][T14084] F2FS-fs (loop0): Found nat_bits in checkpoint [ 362.698266][T14084] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 362.705258][T14084] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 362.813120][ T4643] Bluetooth: hci6: command tx timeout [ 363.077370][ T11] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 363.149992][ T11] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 363.240306][ T1870] BUG: kernel NULL pointer dereference, address: 000000000000001c [ 363.243749][ T1870] #PF: supervisor read access in kernel mode [ 363.246472][ T1870] #PF: error_code(0x0000) - not-present page [ 363.250646][ T1870] PGD 63c18067 P4D 63c18067 PUD 5e6ee067 PMD 0 [ 363.253391][ T1870] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 363.256018][ T1870] CPU: 3 PID: 1870 Comm: kworker/3:2 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 363.260346][ T1870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 363.265155][ T1870] Workqueue: slub_flushwq flush_cpu_slab [ 363.267647][ T1870] RIP: 0010:__put_partials+0x84/0x170 [ 363.269990][ T1870] Code: 7b 50 4c 89 6d 18 48 89 55 10 4d 89 7d 00 48 89 ef e8 90 b4 ff ff f0 80 48 01 02 4d 85 e4 0f 84 aa 00 00 00 48 89 df 4c 89 e5 <4d> 8b 64 24 10 48 8b 45 00 48 83 f8 ff 74 69 48 8b 45 00 48 8b 0c [ 363.278151][ T1870] RSP: 0018:ffffc9000d2dfc80 EFLAGS: 00010246 [ 363.280812][ T1870] RAX: 0000000000000006 RBX: ffff88801c655500 RCX: 1ffffffff28411df [ 363.284301][ T1870] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000000 [ 363.287793][ T1870] RBP: 000000000000000c R08: 0000000000000001 R09: fffffbfff283ea5e [ 363.291315][ T1870] R10: ffffffff941f52f7 R11: 0000000000000002 R12: 000000000000000c [ 363.294801][ T1870] R13: ffff88802c33db00 R14: 0000000000000000 R15: ffffc9000d2dfd80 [ 363.298292][ T1870] FS: 0000000000000000(0000) GS:ffff88802c300000(0000) knlGS:0000000000000000 [ 363.302247][ T1870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.305182][ T1870] CR2: 000000000000001c CR3: 000000005b164000 CR4: 0000000000352ef0 [ 363.308718][ T1870] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.312241][ T1870] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.315707][ T1870] Call Trace: [ 363.317159][ T1870] [ 363.318495][ T1870] ? show_regs+0x8c/0xa0 [ 363.320472][ T1870] ? __die+0x2c/0x80 [ 363.322239][ T1870] ? page_fault_oops+0x3b6/0xb80 [ 363.324451][ T1870] ? __pfx_page_fault_oops+0x10/0x10 [ 363.326803][ T1870] ? hlock_class+0x4e/0x130 [ 363.328847][ T1870] ? __lock_acquire+0x14f4/0x3b30 [ 363.331138][ T1870] ? mark_lock+0xb5/0xc60 [ 363.333093][ T1870] ? __pfx___lock_acquire+0x10/0x10 [ 363.335434][ T1870] ? do_user_addr_fault+0x5a2/0xe50 [ 363.337751][ T1870] ? rcu_is_watching+0x12/0xc0 [ 363.339870][ T1870] ? exc_page_fault+0x5c/0xc0 [ 363.342258][ T1870] ? asm_exc_page_fault+0x26/0x30 [ 363.344215][ T1870] ? __put_partials+0x84/0x170 [ 363.345848][ T1870] process_one_work+0x958/0x1ad0 [ 363.347561][ T1870] ? __pfx_lock_acquire+0x10/0x10 [ 363.349332][ T1870] ? __pfx_process_one_work+0x10/0x10 [ 363.351158][ T1870] ? assign_work+0x1a0/0x250 [ 363.352752][ T1870] worker_thread+0x6c8/0xf70 [ 363.354225][ T1870] ? __kthread_parkme+0x148/0x220 [ 363.355978][ T1870] ? __pfx_worker_thread+0x10/0x10 [ 363.357712][ T1870] kthread+0x2c1/0x3a0 [ 363.359105][ T1870] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.360911][ T1870] ? __pfx_kthread+0x10/0x10 [ 363.362483][ T1870] ret_from_fork+0x45/0x80 [ 363.364325][ T1870] ? __pfx_kthread+0x10/0x10 [ 363.366034][ T1870] ret_from_fork_asm+0x1a/0x30 [ 363.367825][ T1870] [ 363.368897][ T1870] Modules linked in: [ 363.370229][ T1870] CR2: 000000000000001c [ 363.371658][ T1870] ---[ end trace 0000000000000000 ]--- [ 363.373650][ T1870] RIP: 0010:__put_partials+0x84/0x170 [ 363.375620][ T1870] Code: 7b 50 4c 89 6d 18 48 89 55 10 4d 89 7d 00 48 89 ef e8 90 b4 ff ff f0 80 48 01 02 4d 85 e4 0f 84 aa 00 00 00 48 89 df 4c 89 e5 <4d> 8b 64 24 10 48 8b 45 00 48 83 f8 ff 74 69 48 8b 45 00 48 8b 0c [ 363.375680][T14107] loop3: detected capacity change from 0 to 32768 [ 363.382338][ T1870] RSP: 0018:ffffc9000d2dfc80 EFLAGS: 00010246 [ 363.387365][ T1870] RAX: 0000000000000006 RBX: ffff88801c655500 RCX: 1ffffffff28411df [ 363.390104][ T1870] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000000 [ 363.392835][ T1870] RBP: 000000000000000c R08: 0000000000000001 R09: fffffbfff283ea5e [ 363.395609][ T1870] R10: ffffffff941f52f7 R11: 0000000000000002 R12: 000000000000000c [ 363.398323][ T1870] R13: ffff88802c33db00 R14: 0000000000000000 R15: ffffc9000d2dfd80 [ 363.400719][ T1870] FS: 0000000000000000(0000) GS:ffff88802c300000(0000) knlGS:0000000000000000 [ 363.403824][ T1870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.406262][ T1870] CR2: 000000000000001c CR3: 000000005b164000 CR4: 0000000000352ef0 [ 363.409157][ T1870] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.411820][ T1870] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.414607][ T1870] Kernel panic - not syncing: Fatal exception [ 363.417540][ T1870] Kernel Offset: disabled [ 363.419292][ T1870] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:06:09 Registers: info registers vcpu 0 CPU#0 RAX=000000000026ff4c RBX=0000000000000000 RCX=ffffffff8adbfcb9 RDX=ffffed1005806fde RSI=ffffffff8b8fb8a0 RDI=ffffffff8167231c RBP=fffffbfff1b12af8 RSP=ffffffff8d807e20 R8 =0000000000000000 R9 =ffffed1005806fdd R10=ffff88802c037eeb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8d8957c0 R14=ffffffff8fe2a210 R15=0000000000000000 RIP=ffffffff8adc10af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005835f4c0 CR3=000000005271c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=0035d7de EBX=00000000 ECX=00000001 EDX=00000055 ESI=f5daabe0 EDI=0035d7dd EBP=f5daab54 ESP=f5daaae0 EIP=f71cea20 EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 f5dabb40 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000edce8000 CR3=0000000064a0e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc900060cf2c0 RCX=ffffffff813caf63 RDX=ffff88802262a440 RSI=ffffffff813caf71 RDI=0000000000000005 RBP=ffffc900060cf350 RSP=ffffc900060cf260 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=fffff52000c19e5a R14=fffff52000c19e59 R15=0000000000000001 RIP=ffffffff813caf71 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbb529dad00 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005628e6dd5000 CR3=000000001216c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=48fc09a648fc09a6 48fc09a648fc09a6 48fc09a648fc09a6 48fc09a648fc09a6 48fc09a648fc09a6 48fc09a648fc09a6 48fc09a648fc09a6 48fc09a648fc09a6 ZMM22=d97fb5bcd97fb5bc d97fb5bcd97fb5bc d97fb5bcd97fb5bc d97fb5bcd97fb5bc d97fb5bcd97fb5bc d97fb5bcd97fb5bc d97fb5bcd97fb5bc d97fb5bcd97fb5bc ZMM23=de5e5a73de5e5a73 de5e5a73de5e5a73 de5e5a73de5e5a73 de5e5a73de5e5a73 de5e5a73de5e5a73 de5e5a73de5e5a73 de5e5a73de5e5a73 de5e5a73de5e5a73 ZMM24=b4a20529b4a20529 b4a20529b4a20529 b4a20529b4a20529 b4a20529b4a20529 b4a20529b4a20529 b4a20529b4a20529 b4a20529b4a20529 b4a20529b4a20529 ZMM25=5e99d4e35e99d4e3 5e99d4e35e99d4e3 5e99d4e35e99d4e3 5e99d4e35e99d4e3 5e99d4e35e99d4e3 5e99d4e35e99d4e3 5e99d4e35e99d4e3 5e99d4e35e99d4e3 ZMM26=27ac591f27ac591f 27ac591f27ac591f 27ac591f27ac591f 27ac591f27ac591f 27ac591f27ac591f 27ac591f27ac591f 27ac591f27ac591f 27ac591f27ac591f ZMM27=06730cb906730cb9 06730cb906730cb9 06730cb906730cb9 06730cb906730cb9 06730cb906730cb9 06730cb906730cb9 06730cb906730cb9 06730cb906730cb9 ZMM28=000000b0000000af 000000ae000000ad 000000ac000000ab 000000aa000000a9 000000a8000000a7 000000a6000000a5 000000a4000000a3 000000a2000000a1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4927000049270000 4927000049270000 4927000049270000 4927000049270000 4927000049270000 4927000049270000 4927000049270000 4927000049270000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f95405 RDI=ffffffff94d5c040 RBP=ffffffff94d5c000 RSP=ffffc9000d2df5d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000002d R14=ffffffff84f953a0 R15=0000000000000000 RIP=ffffffff84f9542f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000000001c CR3=000000005b164000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 621648a40eb21492 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000