last executing test programs: 50.279093872s ago: executing program 3 (id=1745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0x4}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) 50.053074448s ago: executing program 3 (id=1750): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x178, [0x0, 0x2000000001c0, 0x2000000002d8, 0x200000000308], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x32, 0x809b, 'veth0_vlan\x00', 'ip6gre0\x00', 'pimreg\x00', 'ip6erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0xb0, 0xb0, 0xe8, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x8000, 0x4, 0x6, 0x1}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1f0) 49.815621014s ago: executing program 3 (id=1753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 49.571436409s ago: executing program 3 (id=1759): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x9, 0x610, &(0x7f0000000c80)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 49.189120209s ago: executing program 3 (id=1766): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x0, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 48.602713863s ago: executing program 3 (id=1773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "fff5000000000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) 48.179624503s ago: executing program 32 (id=1773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "fff5000000000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) 2.839459151s ago: executing program 5 (id=2323): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x4, "216827dd"}, 0x0, 0x0, 0x0, 0x0}) 2.186850827s ago: executing program 0 (id=2336): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f0000000a00)="437ab166972ce298f4681e", 0xb, 0xef8d) 2.095664719s ago: executing program 4 (id=2337): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@grpquota}]}, 0x1, 0x548, &(0x7f0000000640)="$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") quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0x0, 0x0) 1.995153352s ago: executing program 2 (id=2339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b91e76ea0c00000000000007007ef2", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.909448234s ago: executing program 0 (id=2340): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000008"], 0xfe44, 0x0) 1.581725642s ago: executing program 0 (id=2342): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000280)=@multiplanar_fd={0x6, 0x8, 0x4, 0x80, 0x10000, {}, {0x4, 0x0, 0x40, 0x1, 0x4, 0x2, "c279db31"}, 0x2, 0x4, {0x0}, 0x8001}) 1.480879674s ago: executing program 1 (id=2343): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000002dc0)) 1.367783327s ago: executing program 4 (id=2344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) 1.359336607s ago: executing program 2 (id=2345): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 1.269833519s ago: executing program 0 (id=2346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800060010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aa"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 1.203967851s ago: executing program 1 (id=2347): unshare(0x8000400) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) 1.103976663s ago: executing program 2 (id=2348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000002c0)="5c000000300005060000000000000000000000004800018044000180090001006761746500000000340002801800020000ffffffffffffffe4000000000000000000000018000580140001800800010000000000fc00030064000000", 0x5c, 0x0, 0x0, 0x0) 1.087144963s ago: executing program 4 (id=2349): unshare(0x20000600) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1.027333735s ago: executing program 0 (id=2350): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0x20000008}]}, &(0x7f0000000140)=0x10) 1.020641376s ago: executing program 5 (id=2351): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000500)={0x8, 0xa, 0x3, "3258c5c000baaa001b0000f4ff4000000000000000e926ba2800", 0x4745504d}) 1.020168845s ago: executing program 1 (id=2352): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 839.94014ms ago: executing program 4 (id=2353): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 838.26142ms ago: executing program 2 (id=2354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff27bd70100000000000000000", @ANYRES32=0x0, @ANYBLOB="31020500a38e05005000128008000100736974004400028008000100", @ANYRES32=0x0, @ANYBLOB="080014000000000006000e008100000008000100", @ANYRES32, @ANYBLOB="050009002900000008000c"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 791.562731ms ago: executing program 0 (id=2355): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@grpquota}]}, 0x1, 0x548, &(0x7f0000000640)="$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") quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0x0, 0x0) 758.156042ms ago: executing program 5 (id=2356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000100)) 646.393824ms ago: executing program 1 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@bridge_getneigh={0x30, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_NET_NS_PID={0x8}, @IFLA_WEIGHT={0x8, 0xf, 0xfffffffb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) 577.182286ms ago: executing program 4 (id=2358): r0 = fsopen(&(0x7f0000000200)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) 556.276736ms ago: executing program 2 (id=2359): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) 470.274449ms ago: executing program 5 (id=2360): creat(&(0x7f00000000c0)='./bus\x00', 0x107) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x44, &(0x7f0000000100)='trans=rdma,\xd6\xd2\x1e\x80\xc2W\xbe\xbf\x16S\x84j\xea1Z\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3.{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14j\xb3\x92\x13\x80\x96m\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xe4\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY\xc24\x99\x88\xe7\njs\xb2\x8f') 318.143192ms ago: executing program 1 (id=2361): capset(&(0x7f0000000cc0)={0x20080522}, &(0x7f0000000d00)={0x200002, 0x200003, 0x811, 0x4, 0x7, 0xfffffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000030000004200000040"], 0x50) 219.900975ms ago: executing program 5 (id=2362): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x1, 0x10, 0xf, 0x8, 0x9a84, 0x5, 0xa, 0x2}, 0x20) 192.775825ms ago: executing program 2 (id=2363): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x50) 173.543996ms ago: executing program 4 (id=2364): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x44, 0x4, 0x3e0, 0xffffffff, 0x0, 0x0, 0x1f0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @empty, [0x0, 0xff, 0xff], [], 'macsec0\x00', 'wg2\x00', {}, {}, 0x0, 0x0, 0x3}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}, {0x2, 0x0, 0x0, {0x6}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @loopback, [0xff, 0xffffff00, 0xffffffff, 0xff000000], [0x0, 0xff000000, 0xffffffff, 0xff000000], 'veth1_virt_wifi\x00', 'veth1_macvtap\x00', {0xff}, {}, 0x87, 0xd0, 0x2}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x1, "bdf9eb6e719cfa76e860b5bdcf044d9ca3eaf9e0f200b7851d1433fc6b81"}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[], 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 75.975918ms ago: executing program 1 (id=2365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 0s ago: executing program 5 (id=2366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0x4018aee2, &(0x7f0000000080)={0x1, 0x0, [{0x312, 0x0, 0xfffffffffffffffe}]}) kernel console output (not intermixed with test programs): id=6188 comm="syz.2.803" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f0ee7b9e559 code=0x7ffc0000 [ 144.250056][ T6196] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.269919][ T27] audit: type=1326 audit(2000000028.720:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.803" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee7b9e559 code=0x7ffc0000 [ 144.307323][ T6196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.333961][ T6196] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.356933][ T27] audit: type=1326 audit(2000000028.720:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.803" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee7b9e559 code=0x7ffc0000 [ 144.454972][ T27] audit: type=1326 audit(2000000028.720:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.803" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0ee7b9e559 code=0x7ffc0000 [ 144.507275][ T27] audit: type=1326 audit(2000000028.720:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.2.803" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0ee7b9e559 code=0x7ffc0000 [ 144.558164][ T27] audit: type=1326 audit(2000000028.830:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.0.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46d59e559 code=0x7ffc0000 [ 144.626507][ T27] audit: type=1326 audit(2000000028.830:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6191 comm="syz.0.804" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa46d59e559 code=0x7ffc0000 [ 144.891496][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 145.098350][ T6190] loop1: detected capacity change from 0 to 32768 [ 145.198965][ T6190] XFS (loop1): Mounting V5 Filesystem [ 145.285119][ T6228] loop2: detected capacity change from 0 to 4096 [ 145.385632][ T6190] XFS (loop1): Ending clean mount [ 145.393825][ T6228] ntfs3: loop2: Failed to load $Extend. [ 145.609045][ T4269] XFS (loop1): Unmounting Filesystem [ 145.762645][ T6247] loop0: detected capacity change from 0 to 16 [ 145.812312][ T6247] erofs: (device loop0): mounted with root inode @ nid 36. [ 145.911381][ T6247] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 145.981022][ T6247] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 146.195226][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 146.236459][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 146.254182][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 146.274839][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 146.294593][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 146.316234][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 146.343815][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.394606][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.419539][ T6256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.529532][ T6261] netlink: 'syz.0.831': attribute type 10 has an invalid length. [ 146.619165][ T6261] team0: Port device macvlan1 added [ 146.710405][ T6270] loop1: detected capacity change from 0 to 4096 [ 146.841355][ T6278] capability: warning: `syz.3.842' uses 32-bit capabilities (legacy support in use) [ 147.045597][ T4389] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 147.243554][ T4389] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 147.270869][ T4389] usb 3-1: config 0 has no interface number 0 [ 147.287350][ T4389] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.310202][ T4389] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 147.339875][ T4389] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 147.369380][ T4389] usb 3-1: Manufacturer: syz [ 147.381489][ T4389] usb 3-1: SerialNumber: syz [ 147.407139][ T4389] usb 3-1: config 0 descriptor?? [ 147.418387][ T6298] __nla_validate_parse: 69 callbacks suppressed [ 147.418406][ T6298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.852'. [ 147.712600][ T6308] jffs2: notice: (6308) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 147.848430][ T4389] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 147.883873][ T4389] usb 3-1: USB disconnect, device number 7 [ 148.227828][ T6325] loop1: detected capacity change from 0 to 4096 [ 148.236037][ T6330] netlink: 104 bytes leftover after parsing attributes in process `syz.3.868'. [ 148.352504][ T6334] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.526890][ T6336] netlink: 'syz.0.871': attribute type 15 has an invalid length. [ 148.727252][ T6336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.831272][ T6336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.849170][ T6336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.884094][ T6345] loop1: detected capacity change from 0 to 4096 [ 148.954581][ T6345] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 149.015217][ T6345] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 149.114671][ T4301] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 149.129511][ T4269] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 149.137549][ T4269] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 149.148170][ T4269] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 149.154919][ T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 149.166526][ T4269] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 149.225021][ T6341] netlink: 'syz.3.872': attribute type 21 has an invalid length. [ 149.448760][ T6353] device tunl0 entered promiscuous mode [ 149.473394][ T6353] netlink: 'syz.2.878': attribute type 4 has an invalid length. [ 149.511126][ T6353] netlink: 9 bytes leftover after parsing attributes in process `syz.2.878'. [ 149.908379][ T6372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.887'. [ 150.040654][ T4365] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 150.232138][ T4365] usb 1-1: not running at top speed; connect to a high speed hub [ 150.254552][ T4365] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.282181][ T6390] device gre2 entered promiscuous mode [ 150.289990][ T4365] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 150.319777][ T4365] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 150.342097][ T4365] usb 1-1: Product: syz [ 150.346386][ T4365] usb 1-1: Manufacturer: syz [ 150.391052][ T4365] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 150.588615][ T4365] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 150.638773][ T4365] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 150.654005][ T4365] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 150.708891][ T4365] usb 1-1: USB disconnect, device number 4 [ 150.843333][ T6407] netlink: 'syz.4.904': attribute type 1 has an invalid length. [ 151.179228][ T6398] loop1: detected capacity change from 0 to 32768 [ 151.276233][ T6398] jfs_lookup: iget failed on inum 4 [ 151.477044][ T6424] device gre1 entered promiscuous mode [ 151.530380][ T6427] jffs2: notice: (6427) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.572740][ T6429] CIFS: bad ip= option (::.) [ 151.796053][ T6412] loop2: detected capacity change from 0 to 32768 [ 151.834084][ T6412] XFS: attr2 mount option is deprecated. [ 152.035195][ T6412] XFS (loop2): Mounting V5 Filesystem [ 152.129674][ T6412] XFS (loop2): Ending clean mount [ 152.320695][ T4389] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.340691][ T4282] XFS (loop2): Unmounting Filesystem [ 152.510906][ T4389] usb 2-1: Using ep0 maxpacket: 8 [ 152.517900][ T4389] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 152.545819][ T4389] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 152.568570][ T6467] x_tables: duplicate entry at hook 3 [ 152.590513][ T4389] usb 2-1: config 0 has no interface number 0 [ 152.596780][ T4389] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 152.620908][ T4389] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 152.651468][ T4389] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.686629][ T4389] usb 2-1: config 0 interface 52 has no altsetting 0 [ 152.717588][ T4389] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 152.757492][ T4389] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 152.771400][ T4389] usb 2-1: Manufacturer: syz [ 152.796785][ T4389] usb 2-1: config 0 descriptor?? [ 152.833627][ T4389] hub 2-1:0.52: bad descriptor, ignoring hub [ 152.839713][ T4389] hub: probe of 2-1:0.52 failed with error -5 [ 153.024939][ T4389] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input7 [ 153.380775][ T4389] usb 2-1: USB disconnect, device number 7 [ 154.057940][ T6518] netlink: 'syz.1.955': attribute type 3 has an invalid length. [ 154.167143][ T6499] loop3: detected capacity change from 0 to 32768 [ 154.190106][ T6499] XFS: attr2 mount option is deprecated. [ 154.214808][ T6499] XFS (loop3): invalid log iosize: 0 [not 12-30] [ 154.240911][ T6523] [U] [ 154.280687][ T6070] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 154.475634][ T6070] usb 5-1: not running at top speed; connect to a high speed hub [ 154.496293][ T6070] usb 5-1: config index 0 descriptor too short (expected 4257, got 161) [ 154.515716][ T6070] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 154.537649][ T6070] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 154.557677][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.738445][ T6067] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 154.794199][ T6070] usb 5-1: string descriptor 0 read error: -71 [ 154.827446][ T6070] uvcvideo 5-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 154.857259][ T6070] usb 5-1: Found UVC 1.00 device (046d:0825) [ 154.867813][ T6070] uvcvideo 5-1:1.1: No supported video formats found. [ 154.887718][ T6070] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 154.905274][ T6070] usb 5-1: USB disconnect, device number 4 [ 154.933030][ T6067] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 154.943858][ T6067] usb 2-1: config 0 has no interface number 0 [ 154.956442][ T6067] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 154.971252][ T6067] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 154.981347][ T6067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.989947][ T6067] usb 2-1: Product: syz [ 154.995226][ T6067] usb 2-1: Manufacturer: syz [ 155.004883][ T6067] usb 2-1: SerialNumber: syz [ 155.016803][ T6067] usb 2-1: config 0 descriptor?? [ 155.028273][ T6532] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.070129][ T6067] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 5a:bd:81:67:ed:8e [ 155.291523][ T6070] usb 2-1: USB disconnect, device number 8 [ 155.305109][ T6070] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 156.024195][ T6583] loop4: detected capacity change from 0 to 2048 [ 156.174233][ T6583] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.375861][ T6605] @0Ù: renamed from virt_wifi0 [ 156.405337][ T6604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.453527][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 156.457052][ T6607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.110712][ T4389] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 157.301800][ T4389] usb 2-1: not running at top speed; connect to a high speed hub [ 157.321003][ T4389] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.347574][ T4389] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 157.363782][ T4389] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 157.410727][ T4389] usb 2-1: Product: syz [ 157.419552][ T4389] usb 2-1: Manufacturer: syz [ 157.484389][ T4389] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 157.671398][ T4389] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 157.701656][ T4389] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 157.731289][ T4389] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 157.797124][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'. [ 157.798997][ T4389] usb 2-1: USB disconnect, device number 9 [ 158.075993][ T6669] loop0: detected capacity change from 0 to 1024 [ 158.430691][ T6682] netlink: 'syz.0.1020': attribute type 2 has an invalid length. [ 158.448770][ T6682] netlink: 'syz.0.1020': attribute type 8 has an invalid length. [ 158.489403][ T6682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1020'. [ 158.492848][ T6684] loop1: detected capacity change from 0 to 16 [ 158.547033][ T6684] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 158.568183][ T4403] udevd[4403]: incorrect cramfs checksum on /dev/loop1 [ 158.624034][ T6655] loop4: detected capacity change from 0 to 32768 [ 158.780167][ T6655] XFS (loop4): Mounting V5 Filesystem [ 158.906914][ T6655] XFS (loop4): Ending clean mount [ 158.924675][ T6704] autofs4:pid:6704:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 159.005146][ T6706] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 159.145544][ T6711] cgroup: Unknown subsys name 'pcr' [ 159.233383][ T4275] XFS (loop4): Unmounting Filesystem [ 159.400617][ T6071] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 159.602745][ T6071] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 159.626972][ T6071] usb 1-1: config 0 has no interface number 0 [ 159.644015][ T6071] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 159.682367][ T6071] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 159.710564][ T6071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.734270][ T6071] usb 1-1: Product: syz [ 159.738519][ T6071] usb 1-1: Manufacturer: syz [ 159.766871][ T6071] usb 1-1: SerialNumber: syz [ 159.785342][ T6071] usb 1-1: config 0 descriptor?? [ 159.801175][ T6712] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 159.834264][ T6071] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1e:1a:40:ac:b4:a3 [ 160.070707][ T4389] usb 1-1: USB disconnect, device number 5 [ 160.077600][ T4389] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 160.618845][ T6759] loop4: detected capacity change from 0 to 128 [ 160.749473][ T6759] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 160.788897][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1055'. [ 160.828215][ T6759] VFS: Lookup of 'file0' in vfat loop4 would have caused loop [ 160.843490][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1055'. [ 160.865116][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1055'. [ 161.329723][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 161.610343][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 162.076786][ T6830] device bridge1 entered promiscuous mode [ 162.170869][ T6071] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.243748][ T6836] loop3: detected capacity change from 0 to 256 [ 162.298629][ T6836] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 162.300759][ T6070] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.338891][ T6842] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1086'. [ 162.362578][ T6071] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.390758][ T6071] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.450567][ T6071] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 162.499339][ T6071] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 162.512591][ T6070] usb 5-1: Using ep0 maxpacket: 16 [ 162.519616][ T6070] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 162.558610][ T6070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.578875][ T6071] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 162.608920][ T6070] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 162.618389][ T6071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.640749][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.648926][ T6071] usb 1-1: Product: syz [ 162.669172][ T6071] usb 1-1: Manufacturer: syz [ 162.689908][ T6070] usb 5-1: config 0 descriptor?? [ 162.705772][ T6071] usb 1-1: SerialNumber: syz [ 162.723664][ T6070] pxrc 5-1:0.0: Could not find endpoint [ 162.931980][ T4359] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 162.971139][ T6067] usb 5-1: USB disconnect, device number 5 [ 162.979368][ T6071] usb 1-1: Limiting number of CPorts to U8_MAX [ 162.987636][ T6071] usb 1-1: Not enough endpoints found in device, aborting! [ 163.148730][ T4359] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.169512][ T4359] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.195255][ T4359] usb 2-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 163.206546][ T6067] usb 1-1: USB disconnect, device number 6 [ 163.223944][ T4359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.252831][ T4359] usb 2-1: Product: syz [ 163.264490][ T4359] usb 2-1: Manufacturer: syz [ 163.274622][ T4359] usb 2-1: SerialNumber: syz [ 163.468507][ T6873] netlink: 'syz.2.1097': attribute type 2 has an invalid length. [ 163.508232][ T4359] usb 2-1: unit 1 not found! [ 163.529846][ T4359] usb 2-1: USB disconnect, device number 10 [ 163.788051][ T4403] udevd[4403]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.150358][ T6895] loop2: detected capacity change from 0 to 4096 [ 164.228678][ T6895] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 164.286521][ T6895] ntfs3: loop2: ino=9, attr_set_size [ 164.815980][ T6918] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 164.846472][ T6919] xt_ecn: cannot match TCP bits for non-tcp packets [ 165.198166][ T6908] loop1: detected capacity change from 0 to 32768 [ 165.283092][ T6908] (syz.1.1114,6908,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 165.332077][ T6908] (syz.1.1114,6908,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 165.396616][ T6932] loop0: detected capacity change from 0 to 2048 [ 165.410933][ T6908] (syz.1.1114,6908,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 165.485530][ T6936] netlink: 'syz.2.1129': attribute type 11 has an invalid length. [ 165.559888][ T6908] JBD2: Ignoring recovery information on journal [ 165.608826][ T6932] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 165.697971][ T6946] loop3: detected capacity change from 0 to 1756 [ 165.780663][ T6946] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 165.788445][ T6946] UDF-fs: Scanning with blocksize 512 failed [ 165.796276][ T6908] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 165.813935][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 165.959442][ T6946] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 165.990638][ T6946] UDF-fs: Scanning with blocksize 1024 failed [ 166.013769][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 166.042548][ T6946] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000) [ 166.353963][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 166.987091][ T6955] loop4: detected capacity change from 0 to 32768 [ 167.007731][ T6981] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1149'. [ 167.032786][ T6955] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1135 (6955) [ 167.119344][ T6955] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 167.161811][ T6955] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 167.184699][ T6982] loop1: detected capacity change from 0 to 4096 [ 167.196463][ T6955] BTRFS info (device loop4): turning off barriers [ 167.206795][ T6955] BTRFS info (device loop4): turning on async discard [ 167.250599][ T6955] BTRFS info (device loop4): doing ref verification [ 167.267590][ T6955] BTRFS info (device loop4): using free space tree [ 167.290824][ T4284] Bluetooth: hci1: command 0x0401 tx timeout [ 167.318824][ T6989] netlink: 'syz.0.1152': attribute type 2 has an invalid length. [ 167.327539][ T6989] netlink: 'syz.0.1152': attribute type 4 has an invalid length. [ 167.337227][ T6989] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1152'. [ 167.348390][ T6982] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 167.464480][ T6982] ntfs3: loop1: ino=9, attr_set_size [ 167.594019][ T7009] loop3: detected capacity change from 0 to 256 [ 167.636773][ T7009] exfat: Deprecated parameter 'namecase' [ 167.722202][ T6955] BTRFS info (device loop4): enabling ssd optimizations [ 167.755961][ T7009] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 167.889505][ T7020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1157'. [ 168.005548][ T4275] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 168.077810][ T7022] netlink: 'syz.1.1159': attribute type 2 has an invalid length. [ 168.125142][ T7022] netlink: 'syz.1.1159': attribute type 11 has an invalid length. [ 168.180068][ T7022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1159'. [ 168.268947][ T4403] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop4 scanned by udevd (4403) [ 169.132647][ T7026] loop0: detected capacity change from 0 to 32768 [ 169.207773][ T7026] JBD2: Ignoring recovery information on journal [ 169.240701][ T7034] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 169.369395][ T7026] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 169.430547][ T7034] usb 4-1: Using ep0 maxpacket: 16 [ 169.438783][ T7074] loop1: detected capacity change from 0 to 256 [ 169.448118][ T7034] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 169.468284][ T7034] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.498147][ T7034] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 169.507422][ T7026] (syz.0.1163,7026,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 169.531029][ T6067] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 169.549038][ T7034] usb 4-1: config 1 has no interface number 1 [ 169.560148][ T7034] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.569360][ T7026] (syz.0.1163,7026,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 169.607139][ T7034] usb 4-1: config 1 interface 105 has no altsetting 0 [ 169.613056][ T7026] (syz.0.1163,7026,1):ocfs2_mknod:299 ERROR: status = -2 [ 169.642540][ T7034] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 169.643531][ T7026] (syz.0.1163,7026,1):ocfs2_mknod:504 ERROR: status = -2 [ 169.682212][ T7034] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 169.703305][ T7034] usb 4-1: Product: syz [ 169.721212][ T7034] usb 4-1: Manufacturer: syz [ 169.725895][ T7034] usb 4-1: SerialNumber: syz [ 169.727880][ T6067] usb 5-1: unable to get BOS descriptor or descriptor too short [ 169.748560][ T7026] (syz.0.1163,7026,1):ocfs2_mkdir:661 ERROR: status = -2 [ 169.760199][ T6067] usb 5-1: not running at top speed; connect to a high speed hub [ 169.791861][ T6067] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 169.830540][ T6067] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 169.870527][ T6067] usb 5-1: config 4 has no interface number 0 [ 169.891801][ T6067] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 169.911328][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 169.917479][ T6067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.966731][ T6067] usb 5-1: Product: syz [ 169.980560][ T6067] usb 5-1: Manufacturer: syz [ 169.992766][ T7034] aqc111: probe of 4-1:1.105 failed with error -22 [ 170.010915][ T6067] usb 5-1: SerialNumber: syz [ 170.227785][ T7034] usb 4-1: USB disconnect, device number 5 [ 170.289474][ T6067] usb 5-1: Found UVC 0.00 device syz (04f2:b746) [ 170.308600][ T6067] usb 5-1: No valid video chain found. [ 170.339017][ T6067] usb 5-1: USB disconnect, device number 6 [ 170.546987][ T7099] loop0: detected capacity change from 0 to 8 [ 170.577966][ T7099] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 170.599446][ T7099] cramfs: empty filesystem [ 170.617775][ T4403] udevd[4403]: incorrect cramfs checksum on /dev/loop0 [ 170.694736][ T4403] udevd[4403]: incorrect cramfs checksum on /dev/loop0 [ 170.946303][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'. [ 170.989179][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 171.025399][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 171.157822][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 171.157837][ T27] audit: type=1326 audit(2000000055.910:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.4.1204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e559 code=0x7ffc0000 [ 171.229946][ T27] audit: type=1326 audit(2000000055.960:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.4.1204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fcedf39e559 code=0x7ffc0000 [ 171.276640][ T7127] loop3: detected capacity change from 0 to 8 [ 171.306161][ T7127] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 171.345255][ T27] audit: type=1326 audit(2000000055.960:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.4.1204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e559 code=0x7ffc0000 [ 171.355052][ T7127] cramfs: empty filesystem [ 171.376160][ T4403] udevd[4403]: incorrect cramfs checksum on /dev/loop3 [ 171.467202][ T27] audit: type=1326 audit(2000000055.960:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.4.1204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcedf39e559 code=0x7ffc0000 [ 171.966565][ T7132] loop0: detected capacity change from 0 to 32768 [ 172.032291][ T7132] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 172.032291][ T7132] [ 172.072102][ T7132] ialloc: diAlloc returned -5! [ 172.480656][ T7141] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 173.051768][ T7189] netlink: 'syz.3.1231': attribute type 2 has an invalid length. [ 173.080008][ T7189] netlink: 'syz.3.1231': attribute type 11 has an invalid length. [ 173.120568][ T7189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1231'. [ 173.522692][ T7176] loop2: detected capacity change from 0 to 32768 [ 173.527396][ T7179] loop0: detected capacity change from 0 to 32768 [ 173.638586][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1239'. [ 173.654000][ T7179] XFS (loop0): Mounting V5 Filesystem [ 173.687750][ T7176] XFS (loop2): Mounting V5 Filesystem [ 173.800111][ T7179] XFS (loop0): Ending clean mount [ 173.835203][ T7176] XFS (loop2): Ending clean mount [ 173.871600][ T7179] XFS (loop0): Quotacheck needed: Please wait. [ 173.999669][ T7179] XFS (loop0): Quotacheck: Done. [ 174.014877][ T7179] XFS (loop0): Unmounting Filesystem [ 174.074262][ T4282] XFS (loop2): Unmounting Filesystem [ 174.788526][ T7235] loop1: detected capacity change from 0 to 64 [ 174.817488][ T7201] loop4: detected capacity change from 0 to 40427 [ 174.824706][ T7239] netlink: 'syz.0.1247': attribute type 2 has an invalid length. [ 174.833589][ T7239] netlink: 'syz.0.1247': attribute type 11 has an invalid length. [ 174.878259][ T7239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1247'. [ 174.923729][ T7201] F2FS-fs (loop4): invalid crc value [ 174.945186][ T7201] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.002753][ T7220] loop3: detected capacity change from 0 to 32768 [ 175.150012][ T7201] F2FS-fs (loop4): Start checkpoint disabled! [ 175.201339][ T7220] XFS (loop3): Mounting V5 Filesystem [ 175.218115][ T7201] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 175.333049][ T7220] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 175.431674][ T7220] XFS (loop3): Starting recovery (logdev: internal) [ 175.510783][ T7220] XFS (loop3): Ending recovery (logdev: internal) [ 175.523854][ T7261] tmpfs: Bad value for 'mpol' [ 175.585726][ T6071] XFS (loop3): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 175.602047][ T7264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1256'. [ 175.623797][ T6071] XFS (loop3): Unmount and run xfs_repair [ 175.629604][ T6071] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 175.676936][ T6071] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 175.705685][ T6071] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 175.729863][ T6071] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 175.746194][ T6071] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 175.756687][ T6071] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 175.772215][ T6071] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 175.786041][ T6071] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 175.799135][ T6071] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 175.829775][ T7220] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 175.854042][ T7269] autofs4:pid:7269:autofs_fill_super: called with bogus options [ 175.981031][ T4273] XFS (loop3): Unmounting Filesystem [ 176.479272][ T7283] nvme_rdma: malformed src address passed: 1270.0.1 [ 176.493199][ T7288] loop0: detected capacity change from 0 to 4096 [ 176.537949][ T7288] EXT4-fs (loop0): Test dummy encryption mode enabled [ 176.575413][ T7288] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 176.642860][ T7288] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 176.795752][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 177.386934][ T7320] loop1: detected capacity change from 0 to 4096 [ 177.415409][ T7320] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 177.520313][ T7326] loop2: detected capacity change from 0 to 256 [ 177.607609][ T7326] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 177.838238][ T7309] loop0: detected capacity change from 0 to 32768 [ 178.003122][ T7319] loop4: detected capacity change from 0 to 32768 [ 178.039374][ T7309] XFS (loop0): Mounting V5 Filesystem [ 178.054290][ T7319] (syz.4.1277,7319,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.094301][ T7319] (syz.4.1277,7319,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.143323][ T7319] (syz.4.1277,7319,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 178.183683][ T7319] JBD2: Ignoring recovery information on journal [ 178.255226][ T7309] XFS (loop0): Ending clean mount [ 178.336510][ T7347] loop1: detected capacity change from 0 to 8192 [ 178.395702][ T7347] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.440538][ T7347] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 178.464446][ T7347] REISERFS (device loop1): using ordered data mode [ 178.490742][ T7319] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 178.553767][ T7347] reiserfs: using flush barriers [ 178.606211][ T7347] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.625371][ T4274] XFS (loop0): Unmounting Filesystem [ 178.719628][ T7347] REISERFS (device loop1): checking transaction log (loop1) [ 178.915518][ T4275] ocfs2: Unmounting device (7,4) on (node local) [ 179.161851][ T7347] REISERFS (device loop1): Using tea hash to sort names [ 179.223765][ T7347] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 179.320869][ T7347] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 179.702646][ T7369] loop0: detected capacity change from 0 to 4096 [ 179.834997][ T7369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 179.970656][ T7357] loop3: detected capacity change from 0 to 32768 [ 180.033476][ T7357] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 180.033476][ T7357] [ 180.105214][ T7381] rtc_cmos 00:00: Alarms can be up to one day in the future [ 180.110606][ T7357] ERROR: (device loop3): remounting filesystem as read-only [ 180.141983][ T7357] ERROR: (device loop3): jfs_unlink: [ 180.141983][ T7357] [ 180.241814][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 180.331488][ T4273] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 180.331488][ T4273] [ 180.585394][ T7395] ip_tables: iptables: counters copy to user failed while replacing table [ 181.058606][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 181.836549][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1322'. [ 181.979355][ T7446] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.008519][ T7448] loop4: detected capacity change from 0 to 512 [ 182.077885][ T7412] loop0: detected capacity change from 0 to 32768 [ 182.124573][ T7448] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 182.131145][ T7412] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1312 (7412) [ 182.156782][ T7419] loop1: detected capacity change from 0 to 32768 [ 182.219305][ T7412] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.230080][ T7448] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 182.244611][ T7448] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1325: Failed to acquire dquot type 1 [ 182.276985][ T7412] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 182.298697][ T7419] JBD2: Ignoring recovery information on journal [ 182.343137][ T7448] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 182.370717][ T7412] BTRFS info (device loop0): force clearing of disk cache [ 182.378039][ T7412] BTRFS info (device loop0): enabling auto defrag [ 182.384304][ T7458] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1328'. [ 182.497195][ T7448] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 182.507473][ T7412] BTRFS info (device loop0): max_inline at 0 [ 182.538399][ T7448] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1325: Failed to acquire dquot type 1 [ 182.561414][ T7419] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 182.570793][ T7412] BTRFS info (device loop0): enabling disk space caching [ 182.577914][ T7412] BTRFS info (device loop0): disk space caching is enabled [ 182.608282][ T7448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1325: bg 0: block 248: padding at end of block bitmap is not set [ 182.710819][ T7448] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 182.722010][ T7448] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 182.750333][ T7448] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 182.761508][ T7448] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1325: Failed to acquire dquot type 1 [ 182.777644][ T7448] EXT4-fs (loop4): 1 orphan inode deleted [ 182.784035][ T7448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.795048][ T7448] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.824708][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 182.933931][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 182.963516][ T7412] BTRFS info (device loop0): enabling ssd optimizations [ 182.996497][ T7412] BTRFS info (device loop0): rebuilding free space tree [ 183.248372][ T7412] BTRFS info (device loop0): disabling free space tree [ 183.266266][ T7412] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 183.306024][ T7412] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.817654][ T9] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 183.911724][ T4274] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.604223][ T7546] loop2: detected capacity change from 0 to 4096 [ 184.643482][ T7546] EXT4-fs (loop2): Unsupported encryption level 59 [ 184.968030][ T7564] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 185.736757][ T7573] Could not find key with description: [0123456789abcdef] [ 185.760752][ T7573] process_request_key_err: No key [ 185.776178][ T7573] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 185.808232][ T7573] One or more global auth toks could not properly register; rc = [-2] [ 185.831130][ T7554] loop4: detected capacity change from 0 to 32768 [ 185.838894][ T7573] Error parsing options; rc = [-2] [ 185.857697][ T7554] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1356 (7554) [ 185.946661][ T7554] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.989779][ T7554] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 186.005109][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1368'. [ 186.046523][ T7554] BTRFS info (device loop4): force clearing of disk cache [ 186.075257][ T7554] BTRFS info (device loop4): enabling auto defrag [ 186.116332][ T7554] BTRFS info (device loop4): max_inline at 0 [ 186.151240][ T7554] BTRFS info (device loop4): enabling disk space caching [ 186.158370][ T7554] BTRFS info (device loop4): disk space caching is enabled [ 186.539152][ T7567] loop1: detected capacity change from 0 to 40427 [ 186.607735][ T7567] F2FS-fs (loop1): invalid crc value [ 186.623657][ T7554] BTRFS info (device loop4): enabling ssd optimizations [ 186.631237][ T7619] netlink: 'syz.2.1374': attribute type 16 has an invalid length. [ 186.639106][ T7619] netlink: 'syz.2.1374': attribute type 17 has an invalid length. [ 186.666714][ T7567] F2FS-fs (loop1): Found nat_bits in checkpoint [ 186.683862][ T7554] BTRFS info (device loop4): rebuilding free space tree [ 186.728011][ T7628] Illegal XDP return value 4096756058 on prog (id 56) dev N/A, expect packet loss! [ 186.738911][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.760858][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.800670][ T7554] BTRFS info (device loop4): disabling free space tree [ 186.810310][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.831681][ T7554] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.851265][ T7619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.870235][ T7554] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 186.921605][ T7567] F2FS-fs (loop1): Start checkpoint disabled! [ 186.992480][ T7567] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 187.132696][ T11] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 187.241535][ T4275] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.380996][ T7643] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.607678][ T7645] loop3: detected capacity change from 0 to 4096 [ 187.720986][ T7645] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 187.843429][ T7645] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 187.864433][ T7645] ntfs3: loop3: Failed to load $Extend. [ 187.904393][ T7645] ntfs3: loop3: no free space to extend mft [ 188.438547][ T7674] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 189.153290][ T7705] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.173393][ T7709] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 189.179937][ T7709] comedi comedi1: 8255: I/O port conflict (0xffffffffffffffff,4) [ 189.200384][ T7710] trusted_key: encrypted_key: insufficient parameters specified [ 189.234349][ T7709] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 189.265113][ T7709] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 189.285892][ T7709] comedi comedi1: 8255: I/O port conflict (0x20000004,4) [ 189.306582][ T7709] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 189.337825][ T7709] comedi comedi1: 8255: I/O port conflict (0xffe,4) [ 189.357930][ T7709] comedi comedi1: 8255: I/O port conflict (0x7fffffff,4) [ 189.387009][ T7709] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 189.395811][ T7709] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 189.426068][ T7709] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 189.435106][ T7709] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 189.470621][ T7709] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 189.486618][ T7721] loop1: detected capacity change from 0 to 256 [ 189.523295][ T7709] comedi comedi1: 8255: I/O port conflict (0x100830,4) [ 189.530296][ T7709] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 189.561260][ T7721] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 189.573564][ T7709] comedi comedi1: 8255: I/O port conflict (0x10000,4) [ 189.590893][ T7709] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 189.630691][ T7709] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 189.637280][ T7709] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 189.686705][ T7709] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 190.173391][ T7749] loop4: detected capacity change from 0 to 1024 [ 190.955895][ T7776] loop4: detected capacity change from 0 to 256 [ 190.999823][ T7746] loop2: detected capacity change from 0 to 40427 [ 191.023268][ T7746] F2FS-fs (loop2): invalid crc value [ 191.058051][ T7746] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.237511][ T7746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 191.452935][ T7788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.479392][ T7788] device bridge_slave_0 left promiscuous mode [ 191.494747][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.521187][ T7788] device bridge_slave_1 left promiscuous mode [ 191.527766][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.603346][ T7788] bond0: (slave bond_slave_0): Releasing backup interface [ 191.667015][ T7788] bond0: (slave bond_slave_1): Releasing backup interface [ 191.732838][ T7771] loop1: detected capacity change from 0 to 32768 [ 191.788176][ T7788] team0: Port device team_slave_0 removed [ 191.810765][ T7771] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 191.830285][ T7788] team0: Port device team_slave_1 removed [ 191.889741][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.935944][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.986495][ T7788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.006892][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 192.017149][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.051580][ T7788] bond0: (slave macvlan0): Releasing backup interface [ 192.110368][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 192.124262][ T7792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1443'. [ 192.630821][ T7815] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 192.639376][ T7815] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 192.757817][ T7823] ip6t_srh: unknown srh invflags 4000 [ 193.996474][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.044119][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.078802][ T7869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.173070][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.179454][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.236810][ T7878] loop1: detected capacity change from 0 to 512 [ 194.247082][ T7873] loop4: detected capacity change from 0 to 8192 [ 194.281707][ T7878] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.310972][ T7873] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 194.362151][ T7873] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 194.371814][ T7873] REISERFS (device loop4): using ordered data mode [ 194.383133][ T7873] reiserfs: using flush barriers [ 194.389843][ T7873] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 194.466831][ T7873] REISERFS (device loop4): checking transaction log (loop4) [ 194.516630][ T7878] syz.1.1484: attempt to access beyond end of device [ 194.516630][ T7878] loop1: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 194.572331][ T7878] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 194.619981][ T7878] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 194.759217][ T7873] REISERFS (device loop4): Using tea hash to sort names [ 194.770980][ T7873] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 195.062726][ T7903] loop3: detected capacity change from 0 to 1024 [ 195.671738][ T7925] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.731103][ T7929] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 196.024868][ T7943] netlink: 'syz.3.1515': attribute type 21 has an invalid length. [ 196.040384][ T7943] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1515'. [ 196.066686][ T7943] netlink: 'syz.3.1515': attribute type 4 has an invalid length. [ 196.083599][ T7943] netlink: 'syz.3.1515': attribute type 5 has an invalid length. [ 196.107369][ T7943] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1515'. [ 196.249159][ T7951] binder: 7950:7951 unknown command 0 [ 196.254994][ T7951] binder: 7950:7951 ioctl c0306201 2000000001c0 returned -22 [ 196.381610][ T7959] overlayfs: conflicting options: nfs_export=on,index=off [ 196.639351][ T7971] loop4: detected capacity change from 0 to 1024 [ 196.939165][ T7982] loop0: detected capacity change from 0 to 256 [ 197.100582][ T7993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1539'. [ 197.111609][ T7993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1539'. [ 197.145628][ T7983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.269435][ T7991] loop4: detected capacity change from 0 to 4096 [ 197.372166][ T7991] ntfs3: loop4: Failed to load $Extend. [ 197.416929][ T7991] ntfs3: loop4: ino=5, "/" directory corrupted [ 197.683689][ T8007] MTD: Couldn't look up 'my_sys': -2 [ 197.877141][ T8013] netlink: 'syz.1.1549': attribute type 16 has an invalid length. [ 197.894783][ T8013] netlink: 'syz.1.1549': attribute type 3 has an invalid length. [ 197.904165][ T8013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1549'. [ 198.253555][ T7995] loop0: detected capacity change from 0 to 40427 [ 198.296974][ T7995] F2FS-fs (loop0): invalid crc value [ 198.312525][ T7995] F2FS-fs (loop0): Found nat_bits in checkpoint [ 198.367402][ T8031] loop1: detected capacity change from 0 to 256 [ 198.485290][ T7995] F2FS-fs (loop0): Start checkpoint disabled! [ 198.499658][ T8031] FAT-fs (loop1): Directory bread(block 64) failed [ 198.542792][ T7995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 198.560663][ T8031] FAT-fs (loop1): Directory bread(block 65) failed [ 198.611273][ T8031] FAT-fs (loop1): Directory bread(block 66) failed [ 198.617903][ T8031] FAT-fs (loop1): Directory bread(block 67) failed [ 198.677037][ T8031] FAT-fs (loop1): Directory bread(block 68) failed [ 198.702690][ T8031] FAT-fs (loop1): Directory bread(block 69) failed [ 198.735696][ T8031] FAT-fs (loop1): Directory bread(block 70) failed [ 198.745806][ T8031] FAT-fs (loop1): Directory bread(block 71) failed [ 198.762776][ T8031] FAT-fs (loop1): Directory bread(block 72) failed [ 198.779658][ T8031] FAT-fs (loop1): Directory bread(block 73) failed [ 198.840587][ T7535] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 199.060601][ T7535] usb 4-1: Using ep0 maxpacket: 32 [ 199.068026][ T7535] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 199.103358][ T7535] usb 4-1: config 0 has no interface number 0 [ 199.124022][ T7535] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.162563][ T7535] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.201439][ T7535] usb 4-1: config 0 interface 85 has no altsetting 0 [ 199.237525][ T7535] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 199.273151][ T7535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.303379][ T7535] usb 4-1: Product: syz [ 199.316615][ T7535] usb 4-1: Manufacturer: syz [ 199.341480][ T7535] usb 4-1: SerialNumber: syz [ 199.377763][ T7535] usb 4-1: config 0 descriptor?? [ 199.635510][ T8069] kAFS: unable to lookup cell '@G|' [ 199.821442][ T7535] appletouch 4-1:0.85: Failed to request geyser raw mode [ 199.828807][ T7535] appletouch: probe of 4-1:0.85 failed with error -5 [ 199.902331][ T7535] usb 4-1: USB disconnect, device number 6 [ 200.097432][ T8088] loop1: detected capacity change from 0 to 1764 [ 200.457006][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.491003][ T8096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.504832][ T8096] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.871642][ T8112] IPVS: length: 127 != 8 [ 201.106598][ T8086] loop2: detected capacity change from 0 to 40427 [ 201.180784][ T8086] F2FS-fs (loop2): invalid crc value [ 201.210361][ T8086] F2FS-fs (loop2): Found nat_bits in checkpoint [ 201.421515][ T8086] F2FS-fs (loop2): Start checkpoint disabled! [ 201.492728][ T8086] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 201.622228][ T8141] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (6) [ 202.278642][ T8129] loop1: detected capacity change from 0 to 32768 [ 202.343749][ T8129] JBD2: Ignoring recovery information on journal [ 202.389917][ T8129] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 202.447341][ T8129] JBD2: bad block at offset 32 [ 202.470789][ T6071] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 202.529786][ T8129] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 202.577769][ T8129] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 202.677572][ T8129] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 202.688986][ T6071] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.718589][ T8129] OCFS2: File system is now read-only. [ 202.731378][ T6071] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.741743][ T8129] (syz.1.1594,8129,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 202.773489][ T6071] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.785050][ T8129] (syz.1.1594,8129,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 202.813980][ T6071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.816763][ T8129] (syz.1.1594,8129,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 202.858738][ T8158] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.875329][ T8129] (syz.1.1594,8129,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 202.904420][ T8129] (syz.1.1594,8129,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 202.953448][ T8129] (syz.1.1594,8129,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 202.989738][ T8129] (syz.1.1594,8129,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 203.019235][ T8129] (syz.1.1594,8129,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 203.077428][ T8129] (syz.1.1594,8129,0):ocfs2_mknod:299 ERROR: status = -5 [ 203.130649][ T8129] (syz.1.1594,8129,0):ocfs2_mknod:504 ERROR: status = -5 [ 203.178951][ T8129] (syz.1.1594,8129,0):ocfs2_mkdir:661 ERROR: status = -5 [ 203.188961][ T7535] usb 5-1: USB disconnect, device number 7 [ 203.384670][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 203.508435][ T8197] loop2: detected capacity change from 0 to 1764 [ 203.664780][ T8203] loop0: detected capacity change from 0 to 8 [ 204.095653][ T8219] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 204.119129][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 204.134295][ T8219] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1633'. [ 204.149913][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.165577][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.192316][ T8221] device bridge_slave_0 left promiscuous mode [ 204.218398][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.255633][ T8221] device bridge_slave_1 left promiscuous mode [ 204.268914][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.272945][ T8215] loop1: detected capacity change from 0 to 8192 [ 204.346078][ T8215] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 204.363744][ T8215] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 204.366356][ T8221] bond0: (slave bond_slave_0): Releasing backup interface [ 204.391069][ T8215] REISERFS (device loop1): using ordered data mode [ 204.407899][ T8221] bond0: (slave bond_slave_1): Releasing backup interface [ 204.447272][ T8215] reiserfs: using flush barriers [ 204.474702][ T8215] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 204.494045][ T8232] loop3: detected capacity change from 0 to 64 [ 204.501322][ T8215] REISERFS (device loop1): checking transaction log (loop1) [ 204.590181][ T8234] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 204.688921][ T8221] team0: Port device team_slave_0 removed [ 204.769993][ T8221] team0: Port device team_slave_1 removed [ 204.838665][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.868035][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.892223][ T8215] REISERFS (device loop1): Using tea hash to sort names [ 204.899555][ T8215] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 204.927338][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.937956][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1641'. [ 204.971151][ T8221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.053462][ T8221] bond0: (slave macvlan0): Releasing backup interface [ 205.160963][ T8221] device veth1_vlan left promiscuous mode [ 205.203148][ T8221] team0: Port device macvlan1 removed [ 205.637179][ T8254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.159702][ T8265] loop0: detected capacity change from 0 to 8192 [ 206.186608][ T8265] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.244246][ T8265] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 206.257565][ T8265] REISERFS (device loop0): using ordered data mode [ 206.268473][ T8265] reiserfs: using flush barriers [ 206.318416][ T8265] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.368175][ T8265] REISERFS (device loop0): checking transaction log (loop0) [ 206.387470][ T8265] REISERFS (device loop0): Using rupasov hash to sort names [ 206.419607][ T8265] REISERFS (device loop0): using 3.5.x disk format [ 206.452329][ T8265] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.492045][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 206.498217][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 206.504484][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 206.505427][ T8265] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.531492][ T8285] loop4: detected capacity change from 0 to 4096 [ 206.541179][ T8265] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 206.583650][ T8291] loop1: detected capacity change from 0 to 64 [ 206.598502][ T8285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.671258][ T8265] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 206.700394][ T8285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 206.731560][ T8265] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 206.814622][ T8295] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1667'. [ 206.841823][ T8265] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 207.168242][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 207.337918][ T8307] device sit0 entered promiscuous mode [ 207.413418][ T8307] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 207.461459][ T8307] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1672'. [ 207.474312][ T8310] loop3: detected capacity change from 0 to 164 [ 207.982734][ T27] audit: type=1326 audit(2000000092.740:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.3.1684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a579e559 code=0x7ffc0000 [ 208.041466][ T8333] xt_TCPMSS: Only works on TCP SYN packets [ 208.047492][ T27] audit: type=1326 audit(2000000092.740:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.3.1684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a579e559 code=0x7ffc0000 [ 208.080405][ T8332] loop1: detected capacity change from 0 to 2048 [ 208.120525][ T27] audit: type=1326 audit(2000000092.770:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.3.1684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f03a579e559 code=0x7ffc0000 [ 208.175060][ T8332] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 208.242563][ T27] audit: type=1326 audit(2000000092.770:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.3.1684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a579e559 code=0x7ffc0000 [ 208.271556][ T8332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.314891][ T8340] netlink: 'syz.0.1689': attribute type 2 has an invalid length. [ 208.340724][ T27] audit: type=1326 audit(2000000092.770:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.3.1684" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a579e559 code=0x7ffc0000 [ 208.894624][ T27] audit: type=1326 audit(2000000093.650:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.1701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a579e559 code=0x7ffc0000 [ 208.971257][ T27] audit: type=1326 audit(2000000093.650:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.1701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a579e559 code=0x7ffc0000 [ 209.036453][ T27] audit: type=1326 audit(2000000093.680:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.1701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f03a579e559 code=0x7ffc0000 [ 209.120555][ T27] audit: type=1326 audit(2000000093.680:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.1701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a579e559 code=0x7ffc0000 [ 209.210578][ T27] audit: type=1326 audit(2000000093.680:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.3.1701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a579e559 code=0x7ffc0000 [ 209.366647][ T8377] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 209.540055][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.597347][ T8351] loop0: detected capacity change from 0 to 32768 [ 209.762317][ T8351] XFS (loop0): Mounting V5 Filesystem [ 209.921782][ T8351] XFS (loop0): Ending clean mount [ 210.124659][ T8400] loop4: detected capacity change from 0 to 4096 [ 210.131786][ T4274] XFS (loop0): Unmounting Filesystem [ 210.205305][ T8400] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 210.248349][ T8400] NILFS (loop4): mounting unchecked fs [ 210.306808][ T8400] NILFS (loop4): recovery required for readonly filesystem [ 210.340537][ T8400] NILFS (loop4): write access will be enabled during recovery [ 210.467486][ T8400] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 210.477858][ T7088] udevd[7088]: incorrect nilfs2 checksum on /dev/loop4 [ 210.796005][ T7088] udevd[7088]: incorrect nilfs2 checksum on /dev/loop4 [ 211.242600][ T6070] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 211.258181][ T8436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1733'. [ 211.277704][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 211.440577][ T6070] usb 2-1: Using ep0 maxpacket: 16 [ 211.451716][ T6070] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 211.469958][ T6070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.481896][ T6070] usb 2-1: Product: syz [ 211.499052][ T6070] usb 2-1: Manufacturer: syz [ 211.504076][ T6070] usb 2-1: SerialNumber: syz [ 211.531539][ T6070] usb 2-1: config 0 descriptor?? [ 211.561860][ T6070] gspca_main: spca508-2.14.0 probing 041e:4018 [ 211.809351][ T8452] 9pnet_fd: p9_fd_create_tcp (8452): problem connecting socket to 127.0.0.1 [ 211.900125][ T8454] loop3: detected capacity change from 0 to 16 [ 211.949110][ T8454] erofs: (device loop3): mounted with root inode @ nid 36. [ 211.985545][ T6070] gspca_spca508: reg_read err -71 [ 212.008871][ T6070] gspca_spca508: reg_read err -71 [ 212.020932][ T6070] gspca_spca508: reg_read err -71 [ 212.027392][ T6070] gspca_spca508: reg_read err -71 [ 212.041924][ T6070] gspca_spca508: reg write: error -71 [ 212.066352][ T6070] spca508: probe of 2-1:0.0 failed with error -71 [ 212.088410][ T6070] usb 2-1: USB disconnect, device number 11 [ 212.114190][ T8440] loop0: detected capacity change from 0 to 32768 [ 212.635151][ T8475] loop0: detected capacity change from 0 to 256 [ 212.755627][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 212.777919][ T8483] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1756'. [ 212.947507][ T8487] loop3: detected capacity change from 0 to 1024 [ 213.065883][ T8487] hfsplus: invalid length 1280 has been corrected to 255 [ 213.103540][ T8487] hfsplus: invalid length 1280 has been corrected to 255 [ 213.224585][ T4273] hfsplus: invalid length 1280 has been corrected to 255 [ 213.410610][ T4389] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 213.439370][ T8505] loop2: detected capacity change from 0 to 512 [ 213.602427][ T4389] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 213.618425][ T4389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.675860][ T4389] usb 1-1: config 0 descriptor?? [ 213.880501][ T8513] overlayfs: missing 'workdir' [ 213.893965][ T4389] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 213.918015][ T4389] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 214.034780][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.096009][ T4389] [drm:udl_init] *ERROR* Selecting channel failed [ 214.137869][ T4389] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 214.151369][ T4389] [drm] Initialized udl on minor 2 [ 214.160147][ T4389] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 214.175771][ T4389] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 214.189460][ T4389] usb 1-1: USB disconnect, device number 7 [ 214.203825][ T4363] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 214.222492][ T4363] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 214.237600][ T4363] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 214.332883][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.466114][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.550773][ T8523] loop2: detected capacity change from 0 to 8 [ 214.624658][ T8523] SQUASHFS error: zlib decompression failed, data probably corrupt [ 214.637924][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.709276][ T8523] SQUASHFS error: Failed to read block 0x9b: -5 [ 214.730045][ T8523] SQUASHFS error: Unable to read metadata cache entry [99] [ 214.780552][ T8523] SQUASHFS error: Unable to read inode 0x127 [ 215.120016][ T8534] ubi0: attaching mtd0 [ 215.131257][ T8539] loop2: detected capacity change from 0 to 64 [ 215.180567][ T8539] MINIX-fs: mounting file system with errors, running fsck is recommended [ 215.193369][ T8534] ubi0: scanning is finished [ 215.218843][ T4271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.221375][ T8534] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 215.239384][ T4271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.247919][ T4271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.255679][ T8539] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 215.265863][ T4271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.280806][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.288839][ T4271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.446119][ T8534] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 215.738359][ T8540] rxe_eth0 speed is unknown, defaulting to 1000 [ 215.828962][ T8540] rxe_eth0 speed is unknown, defaulting to 1000 [ 215.843615][ T8540] rxe_eth0 speed is unknown, defaulting to 1000 [ 216.076316][ T6070] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 216.110312][ T8540] infiniband rxe0: set active [ 216.115558][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 216.147433][ T8540] infiniband rxe0: added rxe_eth0 [ 216.270695][ T6070] usb 1-1: Using ep0 maxpacket: 8 [ 216.279762][ T6070] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.322550][ T8540] RDS/IB: rxe0: added [ 216.326614][ T8540] smc: adding ib device rxe0 with port count 1 [ 216.354132][ T6070] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.376547][ T8540] smc: ib device rxe0 port 1 has pnetid [ 216.394519][ T6070] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 216.437872][ T8577] loop1: detected capacity change from 0 to 4096 [ 216.438613][ T6070] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 216.513745][ T8577] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 216.551894][ T6070] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 216.574535][ T6070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.613151][ T8575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.632474][ T6070] hub 1-1:1.0: bad descriptor, ignoring hub [ 216.653731][ T8575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.661746][ T6070] hub: probe of 1-1:1.0 failed with error -5 [ 216.668306][ T6070] cdc_wdm 1-1:1.0: skipping garbage [ 216.680918][ T8575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.708682][ T6070] cdc_wdm 1-1:1.0: skipping garbage [ 216.726887][ T8575] device bridge_slave_0 left promiscuous mode [ 216.747572][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 216.805324][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.836799][ T6070] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 216.858900][ T6070] cdc_wdm 1-1:1.0: Unknown control protocol [ 216.906541][ T8575] device bridge_slave_1 left promiscuous mode [ 216.932073][ T6070] usb 1-1: USB disconnect, device number 8 [ 216.948344][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.007989][ T8575] bond0: (slave bond_slave_0): Releasing backup interface [ 217.052078][ T8575] bond0: (slave bond_slave_1): Releasing backup interface [ 217.170207][ T8575] team0: Port device team_slave_0 removed [ 217.258416][ T8575] team0: Port device team_slave_1 removed [ 217.278735][ T8575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.296430][ T8575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.313254][ T8575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.330757][ T8575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.375651][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 217.403768][ T8575] team0: Port device macvlan1 removed [ 217.445729][ T4389] rxe_eth0 speed is unknown, defaulting to 1000 [ 217.491970][ T8602] loop2: detected capacity change from 0 to 512 [ 217.558802][ T8602] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 217.581098][ T8602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 217.675983][ T8540] rxe_eth0 speed is unknown, defaulting to 1000 [ 217.690276][ T8602] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 1803188595: comm syz.2.1808: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 217.709657][ T8609] futex_wake_op: syz.4.1811 tries to shift op by 144; fix this program [ 217.808698][ T8602] EXT4-fs (loop2): mount failed [ 217.993518][ T8613] loop1: detected capacity change from 0 to 4096 [ 218.049908][ T8616] loop4: detected capacity change from 0 to 4096 [ 218.065399][ T8613] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 218.082801][ T8613] NILFS (loop1): mounting unchecked fs [ 218.088792][ T8613] NILFS (loop1): recovery required for readonly filesystem [ 218.159299][ T8613] NILFS (loop1): write access will be enabled during recovery [ 218.253791][ T8618] loop0: detected capacity change from 0 to 4096 [ 218.270732][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 218.274063][ T8613] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 218.362102][ T4403] udevd[4403]: incorrect nilfs2 checksum on /dev/loop1 [ 218.371199][ T8616] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 218.382779][ T8616] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 218.407670][ T8618] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 218.426452][ T8540] rxe_eth0 speed is unknown, defaulting to 1000 [ 218.495971][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.517505][ T14] usb 3-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 218.590281][ T14] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7 [ 218.645956][ T14] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 17780, setting to 1024 [ 218.720379][ T14] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 218.772543][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.810519][ T14] usb 3-1: Product: syz [ 218.816775][ T4403] udevd[4403]: incorrect nilfs2 checksum on /dev/loop1 [ 218.825006][ T14] usb 3-1: Manufacturer: syz [ 218.829665][ T14] usb 3-1: SerialNumber: syz [ 219.082464][ T14] usb 3-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 219.121819][ T14] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 219.142543][ T14] usb 3-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 219.165915][ T14] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 219.188354][ T14] usb 3-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 219.227698][ T8540] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.342741][ T14] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 219.380690][ T14] usb 3-1: USB disconnect, device number 8 [ 219.450740][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 219.485081][ T8638] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 219.539684][ T8642] loop1: detected capacity change from 0 to 256 [ 219.644908][ T4636] udevd[4636]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.926147][ T8540] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.975463][ T8645] loop0: detected capacity change from 0 to 4096 [ 220.101737][ T8654] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.177337][ T8645] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=77 [ 220.279667][ T8645] Remounting filesystem read-only [ 220.388033][ T8540] rxe_eth0 speed is unknown, defaulting to 1000 [ 220.856293][ T8679] 9pnet_fd: p9_fd_create_tcp (8679): problem connecting socket to 127.0.0.1 [ 221.010812][ T8540] rxe_eth0 speed is unknown, defaulting to 1000 [ 221.230537][ T57] device hsr_slave_0 left promiscuous mode [ 221.241217][ T57] device hsr_slave_1 left promiscuous mode [ 221.383317][ T57] device veth0_macvtap left promiscuous mode [ 221.392342][ T57] device veth1_vlan left promiscuous mode [ 221.398550][ T57] device veth0_vlan left promiscuous mode [ 221.537634][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 221.640705][ T6067] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 221.837689][ T6067] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 221.860501][ T6067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.881734][ T6067] usb 3-1: config 0 descriptor?? [ 221.985516][ T57] bond2 (unregistering): Released all slaves [ 222.107076][ T6067] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 222.130992][ T6067] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 222.228304][ T57] bond1 (unregistering): Released all slaves [ 222.312144][ T6067] [drm:udl_init] *ERROR* Selecting channel failed [ 222.325898][ T6067] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 222.333551][ T6067] [drm] Initialized udl on minor 2 [ 222.355068][ T6067] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.363322][ T6067] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 222.372110][ T6067] usb 3-1: USB disconnect, device number 9 [ 222.378671][ T6071] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 222.399273][ T6071] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 222.407940][ T6071] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 223.391862][ T57] bond0 (unregistering): Released all slaves [ 223.626268][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 223.708698][ T8722] loop0: detected capacity change from 0 to 1024 [ 223.861891][ T8722] hfsplus: extend alloc file! (16384,256,150995124) [ 223.869056][ T8722] hfsplus: failed to extend attributes file [ 224.110819][ T8736] loop4: detected capacity change from 0 to 8 [ 224.163387][ T8540] chnl_net:caif_netlink_parms(): no params data found [ 224.331325][ T6071] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 224.418966][ T8746] loop2: detected capacity change from 0 to 512 [ 224.447820][ T8746] FAT-fs (loop2): Directory bread(block 2080) failed [ 224.458620][ T8746] FAT-fs (loop2): Directory bread(block 2081) failed [ 224.473506][ T8746] FAT-fs (loop2): Directory bread(block 2082) failed [ 224.476405][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.489470][ T8746] FAT-fs (loop2): Directory bread(block 2083) failed [ 224.519883][ T8746] FAT-fs (loop2): Directory bread(block 2084) failed [ 224.533194][ T6071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 224.540802][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.556628][ T6071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 224.567743][ T8746] FAT-fs (loop2): Directory bread(block 2085) failed [ 224.576398][ T8540] device bridge_slave_0 entered promiscuous mode [ 224.588957][ T8746] FAT-fs (loop2): Directory bread(block 2086) failed [ 224.606423][ T6071] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 224.616303][ T8746] FAT-fs (loop2): Directory bread(block 2087) failed [ 224.620775][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.635666][ T6071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.640787][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.666899][ T6071] usb 1-1: Product: syz [ 224.673690][ T8746] FAT-fs (loop2): Directory bread(block 2080) failed [ 224.685067][ T6071] usb 1-1: Manufacturer: syz [ 224.695371][ T6071] usb 1-1: SerialNumber: syz [ 224.700852][ T8746] FAT-fs (loop2): Directory bread(block 2081) failed [ 224.702449][ T8540] device bridge_slave_1 entered promiscuous mode [ 224.742016][ T6071] usb 1-1: config 0 descriptor?? [ 224.800740][ T6071] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 224.859652][ T8540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.926583][ T8540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.118099][ T8540] team0: Port device team_slave_0 added [ 225.143155][ T8540] team0: Port device team_slave_1 added [ 225.209644][ T7535] usb 1-1: USB disconnect, device number 9 [ 225.287787][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.312326][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.382122][ T8540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.398573][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.405960][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.451033][ T8540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.564282][ T8540] device hsr_slave_0 entered promiscuous mode [ 225.591713][ T8540] device hsr_slave_1 entered promiscuous mode [ 225.727011][ T8759] loop2: detected capacity change from 0 to 4096 [ 225.766340][ T8759] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 225.833619][ T8765] loop1: detected capacity change from 0 to 164 [ 225.939748][ T8765] Symlink component flag not implemented [ 225.989054][ T8765] Symlink component flag not implemented (7) [ 226.025531][ T8749] loop4: detected capacity change from 0 to 40427 [ 226.052635][ T8767] loop0: detected capacity change from 0 to 512 [ 226.108009][ T8749] F2FS-fs (loop4): invalid crc value [ 226.136668][ T8767] EXT4-fs (loop0): 1 truncate cleaned up [ 226.169476][ T8749] F2FS-fs (loop4): Found nat_bits in checkpoint [ 226.187927][ T8767] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 226.308198][ T8540] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.379901][ T8540] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 226.390074][ T8749] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 226.435667][ T8540] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 226.525910][ T8540] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.624308][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 226.755762][ T8785] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 226.854204][ T8789] loop0: detected capacity change from 0 to 512 [ 226.936610][ T8789] FAT-fs (loop0): Directory bread(block 2080) failed [ 226.976376][ T8789] FAT-fs (loop0): Directory bread(block 2081) failed [ 227.020598][ T8789] FAT-fs (loop0): Directory bread(block 2082) failed [ 227.027390][ T8789] FAT-fs (loop0): Directory bread(block 2083) failed [ 227.049977][ T8540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.071406][ T8789] FAT-fs (loop0): Directory bread(block 2084) failed [ 227.078234][ T8789] FAT-fs (loop0): Directory bread(block 2085) failed [ 227.130634][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.141327][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.158627][ T8789] FAT-fs (loop0): Directory bread(block 2086) failed [ 227.200542][ T8789] FAT-fs (loop0): Directory bread(block 2087) failed [ 227.221545][ T8540] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.257609][ T8789] FAT-fs (loop0): Directory bread(block 2080) failed [ 227.280682][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.291134][ T8789] FAT-fs (loop0): Directory bread(block 2081) failed [ 227.310109][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.346913][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.354187][ T4382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.430104][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.452470][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.483081][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.510071][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.517598][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.546047][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.587953][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.628938][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.691563][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.720146][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.761537][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.789171][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.836610][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.855678][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.892687][ T8540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.925912][ T8540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.952579][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.972181][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.143463][ T8819] loop2: detected capacity change from 0 to 512 [ 228.204392][ T8819] EXT4-fs (loop2): 1 truncate cleaned up [ 228.210280][ T8819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 228.301039][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 228.689165][ T8827] loop1: detected capacity change from 0 to 8192 [ 228.750519][ T8827] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 228.840713][ T8827] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 228.851993][ T8827] REISERFS (device loop1): using ordered data mode [ 228.858570][ T8827] reiserfs: using flush barriers [ 228.870206][ T8827] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.887279][ T8827] REISERFS (device loop1): checking transaction log (loop1) [ 228.901611][ T8827] REISERFS (device loop1): Using r5 hash to sort names [ 228.908968][ T8827] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 228.936677][ T8827] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 228.956819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.967085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.979366][ T8846] loop2: detected capacity change from 0 to 64 [ 229.001909][ T8540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.196190][ T8852] loop4: detected capacity change from 0 to 512 [ 229.318305][ T8852] EXT4-fs (loop4): 1 truncate cleaned up [ 229.403154][ T8852] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 229.712357][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 229.952895][ T8875] loop2: detected capacity change from 0 to 256 [ 230.006773][ T8875] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 230.121412][ T8875] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 230.201481][ T8875] exFAT-fs (loop2): Filesystem has been set read-only [ 230.425589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.451784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.501184][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.531718][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.567297][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.599183][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.627960][ T8540] device veth0_vlan entered promiscuous mode [ 230.658554][ T8540] device veth1_vlan entered promiscuous mode [ 230.763939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.773359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.783443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.801917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.828735][ T8540] device veth0_macvtap entered promiscuous mode [ 230.858992][ T8540] device veth1_macvtap entered promiscuous mode [ 230.943875][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.974699][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.019651][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.052775][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.094922][ T8540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.126520][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.145358][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.165170][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.186101][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.218567][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.238460][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.249475][ T8540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.266169][ T8540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.306567][ T8540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.326210][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.338611][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.365934][ T8540] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.389657][ T8540] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.413495][ T8540] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.432488][ T8540] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.454645][ T8921] netlink: 'syz.0.1918': attribute type 15 has an invalid length. [ 231.638721][ T8928] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1921'. [ 231.702645][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.717243][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.765952][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.867196][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.878006][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.916156][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.207017][ T8944] loop5: detected capacity change from 0 to 512 [ 232.326994][ T8944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.342687][ T8944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.405754][ T8944] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 232.575356][ T8944] EXT4-fs (loop5): 1 truncate cleaned up [ 232.620631][ T8944] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 232.722325][ T8961] netlink: 'syz.4.1935': attribute type 2 has an invalid length. [ 232.836595][ T8932] loop1: detected capacity change from 0 to 32768 [ 232.836606][ T8540] EXT4-fs (loop5): unmounting filesystem. [ 232.967548][ T8961] device 0 entered promiscuous mode [ 233.051114][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1937'. [ 233.060080][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1937'. [ 233.117410][ T8972] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 233.435061][ T8984] sctp: [Deprecated]: syz.2.1943 (pid 8984) Use of int in maxseg socket option. [ 233.435061][ T8984] Use struct sctp_assoc_value instead [ 233.810372][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1949'. [ 233.841141][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1949'. [ 234.062992][ T9005] IPv6: sit1: Disabled Multicast RS [ 234.085813][ T9008] loop5: detected capacity change from 0 to 256 [ 234.128142][ T9011] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4269] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9011] [ 234.203084][ T9008] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 234.276396][ T9008] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 234.314244][ T9008] exFAT-fs (loop5): Filesystem has been set read-only [ 234.899336][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1963'. [ 234.970526][ T9034] netlink: 'syz.2.1963': attribute type 7 has an invalid length. [ 235.417214][ T9052] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1971'. [ 235.428312][ T9056] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1973'. [ 235.446509][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 235.724886][ T9070] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.1978'. [ 236.053444][ T9086] loop0: detected capacity change from 0 to 128 [ 236.097938][ T9086] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 236.164055][ T9089] loop2: detected capacity change from 0 to 128 [ 236.317926][ T9093] loop1: detected capacity change from 0 to 128 [ 236.960059][ T9111] loop5: detected capacity change from 0 to 512 [ 237.092492][ T9111] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 237.110933][ T9111] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.261440][ T8540] EXT4-fs (loop5): unmounting filesystem. [ 237.730520][ T6071] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 237.870550][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2013'. [ 237.922330][ T6071] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.963412][ T6071] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.000586][ T6071] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.041824][ T6071] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.074592][ T6071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.109126][ T6071] usb 5-1: Product: syz [ 238.123852][ T6071] usb 5-1: Manufacturer: syz [ 238.128566][ T6071] usb 5-1: SerialNumber: syz [ 238.159752][ T6071] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 238.197462][ T6071] cdc_ncm 5-1:1.0: bind() failure [ 238.242029][ T9165] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 238.488979][ T9174] netlink: 6692 bytes leftover after parsing attributes in process `syz.0.2023'. [ 238.571435][ T9178] loop5: detected capacity change from 0 to 1024 [ 238.704945][ T9181] IPv6: Can't replace route, no match found [ 239.303728][ T9207] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 239.349899][ T9211] loop5: detected capacity change from 0 to 512 [ 239.399895][ T9211] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.491874][ T9211] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 239.513126][ T9211] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2037: bg 0: block 248: padding at end of block bitmap is not set [ 239.533432][ T9211] Quota error (device loop5): write_blk: dquota write failed [ 239.541216][ T9211] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 239.551910][ T9211] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.2037: Failed to acquire dquot type 1 [ 239.604424][ T9211] EXT4-fs (loop5): 1 truncate cleaned up [ 239.611646][ T9211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 239.643390][ T9211] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 239.676448][ T9211] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 239.711619][ T9211] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.2037: Failed to acquire dquot type 1 [ 239.804391][ T8540] EXT4-fs (loop5): unmounting filesystem. [ 239.817047][ T4373] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 239.828637][ T4373] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1 [ 239.936025][ T9233] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2046'. [ 239.990663][ T14] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 240.021936][ T9235] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 240.044567][ T9235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.140706][ T6071] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 240.191925][ T14] usb 1-1: not running at top speed; connect to a high speed hub [ 240.202037][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.214326][ T14] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 240.223542][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.242243][ T14] gspca_main: spca501-2.14.0 probing 0000:0000 [ 240.330567][ T6071] usb 2-1: Using ep0 maxpacket: 8 [ 240.340372][ T6071] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 240.349806][ T6071] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.362760][ T6071] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 240.372596][ T6071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.381029][ T6071] usb 2-1: Product: syz [ 240.389216][ T6071] usb 2-1: Manufacturer: syz [ 240.394550][ T6071] usb 2-1: SerialNumber: syz [ 240.403290][ T6071] usb 2-1: config 0 descriptor?? [ 240.478653][ T6071] usb 5-1: USB disconnect, device number 8 [ 240.626667][ T6069] usb 2-1: USB disconnect, device number 12 [ 240.750772][ T14] gspca_spca501: reg write: error -110 [ 240.756433][ T14] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 240.771372][ T14] spca501: probe of 1-1:1.0 failed with error -22 [ 240.799138][ T14] usb 1-1: Found UVC 1.00 device (0000:0000) [ 240.822632][ T14] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 240.860737][ T14] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -32 (exp. 26). [ 240.897255][ T14] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 241.457073][ T14] usb 1-1: USB disconnect, device number 10 [ 241.555588][ T9278] netlink: 'syz.5.2068': attribute type 41 has an invalid length. [ 241.596070][ T9278] netlink: 'syz.5.2068': attribute type 4 has an invalid length. [ 241.607288][ T9278] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2068'. [ 241.626203][ T27] audit: type=1326 audit(2000000126.380:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.2070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee7b9e559 code=0x7ffc0000 [ 241.682760][ T9278] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 241.707572][ T27] audit: type=1326 audit(2000000126.410:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.2070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee7b9e559 code=0x7ffc0000 [ 241.756262][ T27] audit: type=1326 audit(2000000126.410:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.2070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee7b9e559 code=0x7ffc0000 [ 241.832192][ T27] audit: type=1326 audit(2000000126.410:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.2070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f0ee7b9e559 code=0x7ffc0000 [ 241.872299][ T9286] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 241.906755][ T27] audit: type=1326 audit(2000000126.410:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.2070" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee7b9e559 code=0x7ffc0000 [ 242.208685][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 242.514752][ T9314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.634196][ T9320] loop2: detected capacity change from 0 to 164 [ 242.662822][ T9320] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 242.704815][ T9320] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 242.720539][ T6069] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 242.727978][ T9316] loop1: detected capacity change from 0 to 4096 [ 242.746659][ T9320] Symlink component flag not implemented [ 242.761985][ T9320] Symlink component flag not implemented (7) [ 242.779708][ T9316] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 242.914651][ T6069] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 242.944698][ T6069] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.970603][ T6069] usb 6-1: Product: syz [ 242.974849][ T6069] usb 6-1: Manufacturer: syz [ 243.014020][ T6069] usb 6-1: SerialNumber: syz [ 243.063036][ T6069] usb 6-1: config 0 descriptor?? [ 243.086095][ T6069] ch341 6-1:0.0: ch341-uart converter detected [ 243.447297][ T9312] loop4: detected capacity change from 0 to 32768 [ 243.488430][ T6069] usb 6-1: failed to send control message: -71 [ 243.508043][ T6069] ch341-uart: probe of ttyUSB0 failed with error -71 [ 243.528568][ T9312] JBD2: Ignoring recovery information on journal [ 243.561096][ T6069] usb 6-1: USB disconnect, device number 2 [ 243.608576][ T6069] ch341 6-1:0.0: device disconnected [ 243.705834][ T9312] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 243.835906][ T9348] lo: Caught tx_queue_len zero misconfig [ 243.925319][ T4275] ocfs2: Unmounting device (7,4) on (node local) [ 244.139476][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 244.172437][ T9358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.652508][ T9386] loop0: detected capacity change from 0 to 8 [ 244.718323][ T9386] SQUASHFS error: lzo decompression failed, data probably corrupt [ 244.749449][ T9386] SQUASHFS error: Failed to read block 0x1c0: -5 [ 244.776041][ T9386] SQUASHFS error: Unable to read metadata cache entry [1be] [ 245.230617][ T9412] kAFS: unable to lookup cell '/,' [ 245.301804][ T9413] loop1: detected capacity change from 0 to 2048 [ 245.407576][ T9417] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.731675][ T9428] loop0: detected capacity change from 0 to 256 [ 245.803593][ T9428] FAT-fs (loop0): Directory bread(block 64) failed [ 245.810224][ T9428] FAT-fs (loop0): Directory bread(block 65) failed [ 245.858015][ T9428] FAT-fs (loop0): Directory bread(block 66) failed [ 245.871122][ T9428] FAT-fs (loop0): Directory bread(block 67) failed [ 245.901006][ T9428] FAT-fs (loop0): Directory bread(block 68) failed [ 245.907637][ T9428] FAT-fs (loop0): Directory bread(block 69) failed [ 245.945142][ T9428] FAT-fs (loop0): Directory bread(block 70) failed [ 245.957859][ T9405] loop4: detected capacity change from 0 to 32768 [ 245.965274][ T9428] FAT-fs (loop0): Directory bread(block 71) failed [ 245.985629][ T9428] FAT-fs (loop0): Directory bread(block 72) failed [ 245.995631][ T9405] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2125 (9405) [ 246.028489][ T9428] FAT-fs (loop0): Directory bread(block 73) failed [ 246.059297][ T9405] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 246.096709][ T9405] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 246.130597][ T9405] BTRFS info (device loop4): setting nodatacow, compression disabled [ 246.155191][ T9405] BTRFS info (device loop4): setting datasum, datacow enabled [ 246.178619][ T9405] BTRFS info (device loop4): disabling tree log [ 246.207847][ T9405] BTRFS info (device loop4): enabling ssd optimizations [ 246.256362][ T9405] BTRFS info (device loop4): using spread ssd allocation scheme [ 246.280480][ T9405] BTRFS info (device loop4): turning on sync discard [ 246.287266][ T9405] BTRFS info (device loop4): turning off barriers [ 246.321394][ T9405] BTRFS info (device loop4): setting nodatacow, compression disabled [ 246.347301][ T9405] BTRFS info (device loop4): allowing degraded mounts [ 246.370615][ T9405] BTRFS info (device loop4): enabling tree log [ 246.376869][ T9405] BTRFS info (device loop4): using free space tree [ 246.702882][ T9463] autofs4:pid:9463:autofs_fill_super: called with bogus options [ 246.929328][ T4275] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 247.233296][ T9446] loop1: detected capacity change from 0 to 32768 [ 247.290569][ T9446] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2144 (9446) [ 247.440072][ T9446] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 247.480780][ T9446] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 247.520842][ T9446] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 247.581091][ T9446] BTRFS info (device loop1): use zstd compression, level 3 [ 247.588412][ T9446] BTRFS info (device loop1): using free space tree [ 247.828524][ T9510] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2161'. [ 247.840704][ T9510] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2161'. [ 247.885738][ T9510] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2161'. [ 248.020593][ T9446] BTRFS info (device loop1): enabling ssd optimizations [ 248.220195][ T9537] loop5: detected capacity change from 0 to 16 [ 248.260159][ T4269] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 248.288752][ T9537] erofs: (device loop5): mounted with root inode @ nid 36. [ 248.356402][ T9537] syz.5.2168: attempt to access beyond end of device [ 248.356402][ T9537] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 248.406515][ T9532] loop2: detected capacity change from 0 to 4096 [ 248.452038][ T9537] syz.5.2168: attempt to access beyond end of device [ 248.452038][ T9537] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 248.597176][ T9537] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192] [ 248.616310][ T9544] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.660064][ T9532] syz.2.2166: attempt to access beyond end of device [ 248.660064][ T9532] loop2: rw=524288, sector=9007199254741152, nr_sectors = 8 limit=4096 [ 248.707695][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 248.707711][ T27] audit: type=1800 audit(2000000133.460:101): pid=9537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2168" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 248.740185][ T9543] loop0: detected capacity change from 0 to 2048 [ 248.764814][ T9532] syz.2.2166: attempt to access beyond end of device [ 248.764814][ T9532] loop2: rw=0, sector=9007199254741152, nr_sectors = 8 limit=4096 [ 248.843348][ T9543] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.913308][ T27] audit: type=1800 audit(2000000133.670:102): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2166" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 248.944434][ T7088] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (7088) [ 249.163192][ T27] audit: type=1326 audit(2000000133.920:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.1.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0e19e559 code=0x7ffc0000 [ 249.278425][ T9556] netlink: 'syz.2.2176': attribute type 10 has an invalid length. [ 249.286904][ T27] audit: type=1326 audit(2000000133.950:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.1.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0e19e559 code=0x7ffc0000 [ 249.310996][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.441411][ T27] audit: type=1326 audit(2000000133.950:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.1.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0e19e559 code=0x7ffc0000 [ 249.465474][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.499938][ T9558] loop4: detected capacity change from 0 to 1764 [ 249.554777][ T9556] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 249.581419][ T27] audit: type=1326 audit(2000000133.950:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.1.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f9e0e19e559 code=0x7ffc0000 [ 249.716102][ T27] audit: type=1326 audit(2000000133.950:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.1.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0e19e559 code=0x7ffc0000 [ 249.811613][ T27] audit: type=1326 audit(2000000133.950:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.1.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0e19e559 code=0x7ffc0000 [ 249.948808][ T27] audit: type=1326 audit(2000000133.950:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.1.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e0e19e559 code=0x7ffc0000 [ 250.015568][ T9579] [U] [ 250.019085][ T9579] [U] [ 250.021838][ T9579] [U] [ 250.024591][ T9579] [U] [ 250.066197][ T27] audit: type=1326 audit(2000000133.950:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9552 comm="syz.1.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9e0e19e559 code=0x7ffc0000 [ 250.094970][ T9579] [U] [ 250.097751][ T9579] [U] [ 250.100502][ T9579] [U] [ 250.103251][ T9579] [U] [ 250.158451][ T9579] [U] [ 250.161244][ T9579] [U] [ 250.163996][ T9579] [U] [ 250.257678][ T9576] [U] [ 250.563692][ T9597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2191'. [ 250.614012][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2193'. [ 250.768775][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 251.572145][ T9644] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2212'. [ 252.193760][ T9666] loop2: detected capacity change from 0 to 4096 [ 252.273485][ T9666] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 252.343962][ T9666] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 252.424593][ T9666] ntfs3: loop2: ino=5, "/" directory corrupted [ 252.669456][ T9680] loop5: detected capacity change from 0 to 8192 [ 252.751149][ T9680] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 252.848153][ T9680] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 252.924030][ T9680] REISERFS (device loop5): using journaled data mode [ 252.950516][ T9680] reiserfs: using flush barriers [ 253.003917][ T9680] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.033707][ T9659] loop1: detected capacity change from 0 to 32768 [ 253.051387][ T9680] REISERFS (device loop5): checking transaction log (loop5) [ 253.065482][ T9680] REISERFS (device loop5): Using tea hash to sort names [ 253.118950][ T9680] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 253.164879][ T9659] XFS (loop1): Mounting V5 Filesystem [ 253.184697][ T9680] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 253.283962][ T9659] XFS (loop1): Ending clean mount [ 253.293941][ T9708] loop4: detected capacity change from 0 to 764 [ 253.319752][ T9713] CIFS: Attempting to mount \\127.0.0.1\share [ 253.348225][ T9713] CIFS: VFS: Error connecting to socket. Aborting operation. [ 253.390158][ T9708] Symlink component flag not implemented [ 253.431335][ T9708] Symlink component flag not implemented (128) [ 253.489348][ T9713] CIFS: VFS: cifs_mount failed w/return code = -111 [ 253.589447][ T4269] XFS (loop1): Unmounting Filesystem [ 254.028248][ T9720] loop4: detected capacity change from 0 to 4096 [ 254.098917][ T9720] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 254.223672][ T9720] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 254.344820][ T9720] ntfs3: loop4: ino=5, "/" directory corrupted [ 254.656065][ T9745] loop2: detected capacity change from 0 to 512 [ 254.705699][ T9745] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.827467][ T9745] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 254.890694][ T9745] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2247: bg 0: block 248: padding at end of block bitmap is not set [ 254.961151][ T9745] Quota error (device loop2): write_blk: dquota write failed [ 254.999144][ T9745] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 255.042768][ T9745] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.2247: Failed to acquire dquot type 1 [ 255.100880][ T9745] EXT4-fs (loop2): 1 truncate cleaned up [ 255.106614][ T9745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 255.273018][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 255.613102][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.619514][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.646511][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2261'. [ 256.498417][ T9820] loop4: detected capacity change from 0 to 65 [ 256.534905][ T9820] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 256.569167][ T9823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2276'. [ 256.783298][ T9827] loop1: detected capacity change from 0 to 2048 [ 256.908992][ T9827] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 257.020742][ T9840] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 257.033090][ T9840] SET target dimension over the limit! [ 257.161849][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 257.321789][ T9848] loop0: detected capacity change from 0 to 2048 [ 257.379068][ T9848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 257.590936][ T9848] EXT4-fs error (device loop0): ext4_lookup:1852: inode #2: comm syz.0.2286: bad inode number: 12 [ 257.611763][ T9861] libceph: resolve 'v2' (ret=-3): failed [ 257.617487][ T9861] libceph: Failed to parse monitor IPs: -3 [ 257.633531][ T9848] EXT4-fs (loop0): Remounting filesystem read-only [ 257.838680][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 257.849454][ T9871] futex_wake_op: syz.2.2295 tries to shift op by 32; fix this program [ 258.151973][ T9884] tmpfs: Bad value for 'mpol' [ 258.193798][ T9888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'. [ 258.280586][ T6071] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 258.354632][ T9895] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 258.472783][ T6071] usb 6-1: unable to get BOS descriptor or descriptor too short [ 258.502304][ T6071] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 258.527027][ T6071] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 258.580538][ T6071] usb 6-1: config 1 interface 0 has no altsetting 0 [ 258.587252][ T6071] usb 6-1: config 1 interface 0 has no altsetting 1 [ 258.623099][ T6071] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 258.647449][ T6071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.683589][ T6071] usb 6-1: Product: syz [ 258.687839][ T6071] usb 6-1: Manufacturer: syz [ 258.730867][ T6071] usb 6-1: SerialNumber: syz [ 258.740025][ T9911] loop1: detected capacity change from 0 to 512 [ 258.806094][ T9911] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 258.866821][ T9911] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 258.970913][ T6071] smsusb:smsusb_probe: board id=8, interface number 0 [ 258.982115][ T6071] usb 6-1: selecting invalid altsetting 0 [ 259.019474][ T6071] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 259.049143][ T9918] loop0: detected capacity change from 0 to 1024 [ 259.055994][ T6071] smsusb: probe of 6-1:1.0 failed with error -22 [ 259.083849][ T6071] usb 6-1: USB disconnect, device number 3 [ 259.206250][ T9918] hfsplus: keylen 65060 too large [ 259.231490][ T9918] hfsplus: keylen 65060 too large [ 259.409609][ T9928] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 259.449062][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'. [ 259.764833][ T9946] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 259.945139][ T6071] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 260.041148][ T9961] netlink: 'syz.0.2332': attribute type 21 has an invalid length. [ 260.059421][ T9961] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2332'. [ 260.130514][ T6071] usb 6-1: Using ep0 maxpacket: 16 [ 260.137714][ T6071] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 260.168635][ T9963] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 260.193876][ T6071] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 260.224011][ T6071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.252773][ T6071] usb 6-1: Product: syz [ 260.262899][ T6071] usb 6-1: Manufacturer: syz [ 260.287883][ T6071] usb 6-1: SerialNumber: syz [ 260.318731][ T6071] r8152-cfgselector 6-1: config 0 descriptor?? [ 260.469161][ T9976] loop4: detected capacity change from 0 to 512 [ 260.505442][ T9976] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.557660][ T9976] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 260.619005][ T9976] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2337: bg 0: block 248: padding at end of block bitmap is not set [ 260.687531][ T9976] Quota error (device loop4): write_blk: dquota write failed [ 260.736350][ T9976] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 260.749833][ T6071] r8152-cfgselector 6-1: Unknown version 0x0000 [ 260.778804][ T9976] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.2337: Failed to acquire dquot type 1 [ 260.787742][ T6071] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 260.857527][ T9976] EXT4-fs (loop4): 1 truncate cleaned up [ 260.899227][ T9976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 261.056855][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 261.209826][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 261.221445][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 261.469429][T10010] loop1: detected capacity change from 0 to 128 [ 261.543081][T10010] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 261.579329][T10010] ext4 filesystem being mounted at /449/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.679326][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2354'. [ 261.782503][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 261.879648][T10025] loop0: detected capacity change from 0 to 512 [ 261.957359][T10025] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.987925][T10030] kAFS: unable to lookup cell ' [ 261.987925][T10030] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 261.987925][T10030] ' [ 262.048565][T10025] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 262.144715][T10025] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2355: bg 0: block 248: padding at end of block bitmap is not set [ 262.226917][T10025] Quota error (device loop0): write_blk: dquota write failed [ 262.290719][T10025] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 262.340649][T10025] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.2355: Failed to acquire dquot type 1 [ 262.390370][T10025] EXT4-fs (loop0): 1 truncate cleaned up [ 262.409621][T10025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 262.429694][ T7535] ------------[ cut here ]------------ [ 262.436028][ T7535] WARNING: CPU: 0 PID: 7535 at net/netfilter/nft_set_pipapo.c:2384 nft_pipapo_destroy+0x87d/0x8e0 [ 262.446981][ T7535] Modules linked in: [ 262.450977][ T7535] CPU: 0 PID: 7535 Comm: kworker/0:13 Not tainted syzkaller #0 [ 262.458570][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.468730][ T7535] Workqueue: events nf_tables_trans_destroy_work [ 262.475186][ T7535] RIP: 0010:nft_pipapo_destroy+0x87d/0x8e0 [ 262.481117][ T7535] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 ee be 46 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 63 62 f5 f8 <0f> 0b e9 e0 f7 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c ea f9 [ 262.500883][ T7535] RSP: 0018:ffffc9001bb8fa68 EFLAGS: 00010293 [ 262.507011][ T7535] RAX: ffffffff888ce41d RBX: ffff88801e76ecf0 RCX: ffff88802c459e00 [ 262.515111][ T7535] RDX: 0000000000000000 RSI: ffff88801e76ec00 RDI: ffff888079e71128 [ 262.523180][ T7535] RBP: ffffc9001bb8fc30 R08: ffff88802c459e00 R09: 0000000000000008 [ 262.531279][ T7535] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88801e76ecc0 [ 262.539329][ T7535] R13: dffffc0000000000 R14: ffff88801e76ed10 R15: dffffc0000000000 [ 262.547413][ T7535] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 262.556449][ T7535] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.563147][ T7535] CR2: 00007ff5e58924e8 CR3: 00000000739f3000 CR4: 00000000003506f0 [ 262.571213][ T7535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.579269][ T7535] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.587350][ T7535] Call Trace: [ 262.590819][ T7535] [ 262.593829][ T7535] ? __lock_acquire+0x7ea0/0x7ea0 [ 262.598919][ T7535] nft_set_destroy+0x489/0xa30 [ 262.603805][ T7535] ? do_raw_spin_unlock+0x11d/0x230 [ 262.609060][ T7535] nf_tables_trans_destroy_work+0xb81/0xdf0 [ 262.615085][ T7535] ? __lock_acquire+0x7ea0/0x7ea0 [ 262.620179][ T7535] ? nft_object_dump+0x1e0/0x1e0 [ 262.625214][ T7535] ? _raw_spin_unlock_irq+0x1f/0x40 [ 262.630532][ T7535] ? process_one_work+0x7b4/0x1160 [ 262.635707][ T7535] process_one_work+0x8ab/0x1160 [ 262.640748][ T7535] ? worker_detach_from_pool+0x240/0x240 [ 262.646477][ T7535] ? _raw_spin_lock_irq+0xb7/0xf0 [ 262.651591][ T7535] ? _raw_spin_lock_irqsave+0x100/0x100 [ 262.657199][ T7535] ? wq_worker_running+0x97/0x190 [ 262.662328][ T7535] worker_thread+0xaf5/0x12a0 [ 262.667090][ T7535] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 262.673091][ T7535] kthread+0x29d/0x330 [ 262.677242][ T7535] ? worker_clr_flags+0x1a0/0x1a0 [ 262.682360][ T7535] ? kthread_blkcg+0xd0/0xd0 [ 262.687009][ T7535] ret_from_fork+0x1f/0x30 [ 262.691619][ T7535] [ 262.694726][ T7535] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.702040][ T7535] CPU: 0 PID: 7535 Comm: kworker/0:13 Not tainted syzkaller #0 [ 262.709611][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.719717][ T7535] Workqueue: events nf_tables_trans_destroy_work [ 262.726088][ T7535] Call Trace: [ 262.729388][ T7535] [ 262.732346][ T7535] dump_stack_lvl+0x188/0x24e [ 262.737074][ T7535] ? memcpy+0x3c/0x60 [ 262.741091][ T7535] ? show_regs_print_info+0x12/0x12 [ 262.746323][ T7535] ? load_image+0x410/0x410 [ 262.750884][ T7535] panic+0x2d3/0x710 [ 262.754820][ T7535] ? bpf_jit_dump+0xd0/0xd0 [ 262.759359][ T7535] ? ret_from_fork+0x1f/0x30 [ 262.763987][ T7535] __warn+0x2f8/0x4f0 [ 262.768008][ T7535] ? nft_pipapo_destroy+0x87d/0x8e0 [ 262.773241][ T7535] ? nft_pipapo_destroy+0x87d/0x8e0 [ 262.778470][ T7535] report_bug+0x2ba/0x4f0 [ 262.782827][ T7535] ? nft_pipapo_destroy+0x87d/0x8e0 [ 262.788062][ T7535] handle_bug+0x3a/0x70 [ 262.792252][ T7535] exc_invalid_op+0x16/0x40 [ 262.796786][ T7535] asm_exc_invalid_op+0x16/0x20 [ 262.801663][ T7535] RIP: 0010:nft_pipapo_destroy+0x87d/0x8e0 [ 262.807501][ T7535] Code: 24 80 3c 18 00 74 08 4c 89 f7 e8 ee be 46 f9 49 c7 06 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 63 62 f5 f8 <0f> 0b e9 e0 f7 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c ea f9 [ 262.827155][ T7535] RSP: 0018:ffffc9001bb8fa68 EFLAGS: 00010293 [ 262.833250][ T7535] RAX: ffffffff888ce41d RBX: ffff88801e76ecf0 RCX: ffff88802c459e00 [ 262.841251][ T7535] RDX: 0000000000000000 RSI: ffff88801e76ec00 RDI: ffff888079e71128 [ 262.849269][ T7535] RBP: ffffc9001bb8fc30 R08: ffff88802c459e00 R09: 0000000000000008 [ 262.857292][ T7535] R10: 0000000000000018 R11: 0000000000000000 R12: ffff88801e76ecc0 [ 262.865289][ T7535] R13: dffffc0000000000 R14: ffff88801e76ed10 R15: dffffc0000000000 [ 262.873300][ T7535] ? nft_pipapo_destroy+0x87d/0x8e0 [ 262.878536][ T7535] ? nft_pipapo_destroy+0x87d/0x8e0 [ 262.883850][ T7535] ? __lock_acquire+0x7ea0/0x7ea0 [ 262.888910][ T7535] nft_set_destroy+0x489/0xa30 [ 262.893707][ T7535] ? do_raw_spin_unlock+0x11d/0x230 [ 262.898946][ T7535] nf_tables_trans_destroy_work+0xb81/0xdf0 [ 262.904871][ T7535] ? __lock_acquire+0x7ea0/0x7ea0 [ 262.909926][ T7535] ? nft_object_dump+0x1e0/0x1e0 [ 262.914900][ T7535] ? _raw_spin_unlock_irq+0x1f/0x40 [ 262.920136][ T7535] ? process_one_work+0x7b4/0x1160 [ 262.925284][ T7535] process_one_work+0x8ab/0x1160 [ 262.930273][ T7535] ? worker_detach_from_pool+0x240/0x240 [ 262.935971][ T7535] ? _raw_spin_lock_irq+0xb7/0xf0 [ 262.941027][ T7535] ? _raw_spin_lock_irqsave+0x100/0x100 [ 262.946634][ T7535] ? wq_worker_running+0x97/0x190 [ 262.951688][ T7535] worker_thread+0xaf5/0x12a0 [ 262.956401][ T7535] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 262.962337][ T7535] kthread+0x29d/0x330 [ 262.966575][ T7535] ? worker_clr_flags+0x1a0/0x1a0 [ 262.971663][ T7535] ? kthread_blkcg+0xd0/0xd0 [ 262.976287][ T7535] ret_from_fork+0x1f/0x30 [ 262.980754][ T7535] [ 262.984379][ T7535] Kernel Offset: disabled [ 262.988852][ T7535] Rebooting in 86400 seconds..