last executing test programs: 10.303997767s ago: executing program 4 (id=961): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000015640)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00') socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) readv(r2, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/85, 0x55}], 0x1) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback, 0x1}}}, 0x139) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) socket(0x3, 0x80000, 0x78) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/19, @ANYRES32=r5, @ANYBLOB="0000101e000000001c3538800b0001005c4000000000000000000000000a00000000bb42"], 0x3c}, 0x1, 0x0, 0x0, 0x2c004870}, 0x0) 8.276137424s ago: executing program 0 (id=967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) memfd_create(0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec"}) 7.492315659s ago: executing program 0 (id=969): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) 7.3618209s ago: executing program 0 (id=971): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_id}, 0x20) 7.096228062s ago: executing program 0 (id=973): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') inotify_init() openat$binderfs(0xffffffffffffff9c, &(0x7f0000003b80)='./binderfs/binder0\x00', 0x0, 0x0) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_open_procfs(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 6.860125442s ago: executing program 0 (id=975): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd612) 5.637387723s ago: executing program 4 (id=978): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001140)=""/4096, &(0x7f00000002c0)=0x1000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000740)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x0, 0x0}) pwrite64(r1, &(0x7f0000000e80), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_clone(0x52800000, &(0x7f00000005c0)="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", 0xfd, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000780)="160fa434119a7f50ebabe2e0b45bb10d90c83e91331748cadc4e521777d8445fca650ed370b8453952cc20ee09e51dd87c0bd6e85f28b3d905c3a7b2684c620cb550aaa9dcc0c91f804ffe7c758836e60bb6424cea1f257cc218c3a62ff5dfdac337d32a0176ac0b68b4420badc17ef93952edd42e586ac4176dc3afb814daa08c5083e4dbc895e5abca9915b9a6a497da7fb65d9133e02d063dd322ec228eb17f639ec24bd0b03226273f0ad19377e72c189010c47d537bf16ecaa1667691d9ed13fd46870f3bd9f6267d9fb4e66fd769bfeb961a9cbb130de1181a3adfd43d223572adf5d5772c4ad4") syz_clone3(&(0x7f0000000880)={0x22208a00, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000240), {0x2a}, &(0x7f0000002140)=""/4096, 0x1000, &(0x7f0000000300)=""/27, &(0x7f0000000480)=[r3, r4, r5], 0x3}, 0x58) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.504334944s ago: executing program 1 (id=979): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB], 0x0) r1 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r1, 0x0, 0x0, 0x400001) fcntl$addseals(r1, 0x409, 0x3) ftruncate(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0xfde4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="060000000000000071100a00000000000f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 4.524246795s ago: executing program 4 (id=980): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 4.432669193s ago: executing program 4 (id=981): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) 4.378800387s ago: executing program 2 (id=982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380), 0x4) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) 4.248769439s ago: executing program 4 (id=983): creat(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}}]}}, 0xf) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000440)="5ff17db605ade75363a0530733408850aaf311cbe0", 0x7ffff000}, {&(0x7f0000000600)="8882d1dc72424e1fd8dd4b9a691db9a3f2d539b0ed59d1d1b67695f356653c71087b5fe7c96758a0f47f379517352fe067a0c327617260dcd520", 0x3a}, {&(0x7f0000002c40)='E', 0x1}], 0x3}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[], 0x148}}, 0x0) r3 = accept4$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x800) accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 4.094346901s ago: executing program 2 (id=984): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f00000004c0)={[{@uni_xlate}, {@shortname_lower}, {@utf8no}, {@utf8}, {@fat=@uid}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@shortname_mixed}, {@rodir}, {@shortname_mixed}, {@rodir}]}, 0xfe, 0x267, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r2, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in6={0xa, 0x4e23, 0x7fff, @loopback, 0xad5}}}, 0x118) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x50) 3.872126319s ago: executing program 2 (id=985): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000740)={0x0, 0x0, 0x26, "a1c1183e520da16ee8522568fa4c377d92b26346ad036a597d30f50e0e44c2da4068e5ab40dd"}, 0x0, 0x0, 0x0, 0x0}) 3.699268854s ago: executing program 3 (id=986): syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0xa0363159, 0x0, @stepwise}) 3.580924054s ago: executing program 0 (id=987): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x0, &(0x7f0000000000)={[{@pqnoenforce}, {@noquota}, {@nouuid}, {@usrquota}, {@uquota}, {@prjquota}, {@noikeep}]}, 0x1, 0x985b, &(0x7f000001c900)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x0, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0xfc}}}, 0x7) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000e000000000000000000000000000000090000000000000000000000090200000000001eea479150f266dfaf2474c1d90e370c6774f416ef83febf5d018fca6567421322373464b89cedcb5e0e902ee28089bb1971"], 0x0, 0x42}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000180)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)="19", 0x1}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.484160672s ago: executing program 3 (id=988): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000015640)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/wireless\x00') socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) readv(r2, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/85, 0x55}], 0x1) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback, 0x1}}}, 0x139) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) socket(0x3, 0x80000, 0x78) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/19, @ANYRES32=r5, @ANYBLOB="0000101e000000001c3538800b0001005c4000000000000000000000000a00000000bb42"], 0x3c}, 0x1, 0x0, 0x0, 0x2c004870}, 0x0) 3.162159438s ago: executing program 1 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, &(0x7f00000002c0)='sockfs\x00', 0x2009008, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mknod(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@dyn}, {@flock_openafs}, {@flock_openafs}, {}]}) mount$afs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x208020, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r3, 0x0, 0x2000011a) 1.56921473s ago: executing program 4 (id=990): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b240201064dbd81"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00030200000080e60000"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/33, 0x21}}], 0x1, 0x12141, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x3, 0xa, {0xffffffffffffffff}, {}, 0x1, 0x8000}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x4, 0x5, 0x10000, 0x1}, 0x3, 0x0, 0x8, r6, 0x1, 0xffffffff, 'syz0\x00', &(0x7f0000000100)=['-\x00'], 0x2}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040a947b0ab5c7ac6858ae00000004030000"], 0x0, 0x0}, 0x0) 1.535520343s ago: executing program 2 (id=991): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 1.400248074s ago: executing program 2 (id=992): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x541, &(0x7f00000024c0)="$eJzs3c9vHFcdAPDvju21m7h1Aj1ABSRAIaAou/GmjapeaC4gVFVCIA6IQ2rsjWW86zXedVUbS7h/Axy4wp/AAYkDUk8cuHFE4oCQygEpgAWKkUBaNLNjd2Ovm028P8D7+UijeW+eZ77vJZ55M2/X8wKYWNcjYj8iihHxdkQs5NsL+RJvdJb05x4d7C0fHuwtF6Ld/tbfCll5ui269kldzo85FxHf/FrE9wqn4zZ3dteXarXqVp4vt+qb5ebO7q21+tJqdbW6UancXbx7+7U7r1bO2cLLx6lr9V88/Oram9/+9a8+/cHv9r/8w7Ra83lZdzsGqdP0meM4qemIeHMYwcZgKl8Xx1wPnk0SER+LiM9l5/9CTGW/nQDARdZuL0R7oTsPAFx0STYGVkhK+VjAfCRJqdQZNXsxLiW1RrN180Fje2OlM1Z2JWaSB2u16u2rs3/4QXbHMFNI84tZWVae5Ssn8nci4mpE/GT2uSxfWm7UVsZ32wMAE+3yif7/n7Od/r8PPT7VAwD+b8yNuwIAwMjp/wFg8uj/AWDy9NH/5x/27w+9LgDAaDzF838yzHoAAKNj/B8AJo/+HwAmyjfeeitd2of5+69X3tnZXm+8c2ul2lwv1beXS8uNrc3SaqOxmr2zp/6k49Uajc3FV2L73XKr2myVmzu79+uN7Y3W/ey93verMyNpFQDwUa5ee//3hYjYf/25bImuuRz01XCx+T4PTC4v8YPJZbYvmFz9P+P/dqj1AMan53PAXM/k4376FEF8zwj+p9z4ZP/j/+Z4hovF+D9Mrqln2mt24PUARs/4P0yudrtwcs7/4nERAHAhneM7/u0fDeomBBirJ30PeCCf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAFMx8R349CUsrnAp+PJCmVIp6PiCsxU3iwVqvejogX4lpEzMym+cVxVxoAOKfkL4V8/q8bCy/PnywtFv6VTfZfTHv/fNvWYrr978fbZ4+mD6t8uN855hUEAAbs3aVWa6uSr7se5B8d7C0fLaOsz8N78Z98KuLlw4O9bOmUTMd0tp7L7iUu/aOQ5ztzkb4UEVMDiL//XkR8olf7C9nYyJV85tPu+JHHfn6k8ZPH4idZWWed3nx9fAB1gUnz/r2IeKPX+ZfE9Wzd+/yfy65Q5/fwXudgR9e+w4O94lH8o+vfVI/46Tl/vd8Yr/zm66c2thc6Ze9FvDT9WPzj689R/MIZ8V/uM/4fP/WZH3/ljLL2zyJuRO/43bHKrfpmubmze2utvrRaXa1uVCp3F+/efu3Oq5VyNkZdPhqpPu2vr9984ay6pe2/dEb8uZ7tLx7v+4U+2//zf7/93c9+RPwvfb5X/CRe7Bm/I+0Tv9hn/KVLvzxz+u40/soZ7X/S///NPuN/8OfdlT5/FAAYgebO7vpSrVbdOlcifQodxHFOJdIqDvSAPRLFrsr/KYYb66kSM8P6Vx16Yvr4XnGwR/5OesQRNycZeCvOlXg0qljjvS4Bw/fhST/umgAAAAAAAAAAAAAAAGfp+++BknyHZ/hzojE3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvsvwEAAP//nvLDEA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.276619655s ago: executing program 3 (id=993): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90) 1.173797603s ago: executing program 3 (id=994): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb8f568438917ebd0699be96bd1485f6aaa8486e00000000e301f2e09aebda6eeb1c61f96b6d3f91c0f8c1ffbb85cfdd5b8b437a3720ba4cdfb681516c3a240207b6bbdfb37747cc7411886fdba55bcbfa68226644556e8117f9f9fc5be3b7095b2ab7c19b0c6fada03a7f9b9172f0cc960ee263e82e3232edea82b9736d65309e0ad2922ecbb7cde9ce78555fabb941d114e83b37255d6b43b2927696e4f4cf3b23086021fe4e33d049de5318ef3803ceacddc02734c96a9765486a9bf8d65791b000000000000000000000000000000000000000009d97cea3f950d55b265e480ff02c27bda4848c64ca7dcbcd060b9c0dea483c6069d2cdc473cfacc9052cc2c9e3ee037042fd329173c5e7c9ef8800a51332df5a08602a72a553035711cb9159757303a5e7d389786df44441dc82a9d32c56db8a8b3578cd0faabfa23fb46e22b45a464e35315d8c2dd3fae8b530cf8eb0d8dcb682772bed766be5208e61eab965c6c9a217a4e13f0085626c0408f381205251c18a8f6a44"], 0x60}], 0x1, 0x8001) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380), 0x4) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) 1.096922609s ago: executing program 3 (id=995): r0 = socket$phonet(0x23, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r2, 0x3, 0x6, @random="90c823088622"}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x3, 0x6, @remote}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.011969026s ago: executing program 2 (id=996): r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) ioperm(0x0, 0x0, 0x20000000000101) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x108}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfffffffd, 0x4}, 0x0, 0x0, 0x9, 0x8, 0x0, 0x100000001, 0x67, 0x6}}, @zcopy_cookie={0x18}], 0x70}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f00000001c0), &(0x7f0000000100)=0x4) 894.613116ms ago: executing program 3 (id=997): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) write$sysctl(r0, &(0x7f00000000c0)='6\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xd612) 805.553393ms ago: executing program 1 (id=998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000000500050002000000050004000000000014000780080008400000106d080006400000000011000300686173683a6970"], 0x60}}, 0x0) 656.509686ms ago: executing program 1 (id=999): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002840)={&(0x7f00000000c0)='kmem_cache_free\x00', r3}, 0x16) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={0x6}, 0x20) umount2(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x2909020, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000000303010100000000000066c602000008080003400000000908000340000000070800034000000c010c000200000000000000030800034000000000"], 0x4c}}, 0x20000800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500001af8ff00000000bfa100000000000007010000f8ffffffb70200"/61, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x2e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r5}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/19, 0x13}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 392.717258ms ago: executing program 1 (id=1000): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x200000, 0x4) 0s ago: executing program 1 (id=1001): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x1a, &(0x7f0000000100)=ANY=[@ANYBLOB="75737271756f74612c67727071756f7461000000000000000072642c69d21ee11f1ae375b03d757466382c6e6f71696f74612c67727071756f74612c6572726f72733d636f6e74696e75652c00"], 0x5, 0x6092, &(0x7f000000c680)="$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") chdir(&(0x7f0000004340)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): T5405] BTRFS info (device loop4): allowing degraded mounts [ 184.382792][ T5405] BTRFS info (device loop4): enabling disk space caching [ 184.399237][ T5405] BTRFS info (device loop4): disk space caching is enabled [ 184.485848][ T5456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.532422][ T5459] loop2: detected capacity change from 0 to 64 [ 184.638980][ T3558] Bluetooth: hci5: unexpected cc 0x2027 length: 2 > 1 [ 184.698809][ T5459] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount. [ 184.751093][ T5459] MINIX-fs: bad superblock or unable to read bitmaps [ 184.814489][ T5405] BTRFS info (device loop4): rebuilding free space tree [ 185.004678][ T3630] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 185.416716][ T5405] BTRFS info (device loop4): disabling free space tree [ 185.641768][ T5405] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 185.752298][ T5405] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.913388][ T5489] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.938931][ T4323] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 186.006257][ T5429] loop3: detected capacity change from 0 to 32768 [ 186.177519][ T3558] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 186.177606][ T3558] Bluetooth: hci5: Injecting HCI hardware error event [ 186.179329][ T3558] Bluetooth: hci5: hardware error 0x00 [ 186.285647][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 186.366419][ T5502] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.375139][ T5502] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.034170][ T3566] Bluetooth: hci1: unexpected cc 0x2027 length: 2 > 1 [ 187.242074][ T5520] loop4: detected capacity change from 0 to 32768 [ 187.263722][ T5520] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.372 (5520) [ 187.285990][ T5520] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 187.296367][ T5520] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 187.305174][ T5520] BTRFS info (device loop4): using free space tree [ 187.392715][ T5493] loop0: detected capacity change from 0 to 32768 [ 187.414078][ T5493] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.365 (5493) [ 187.593358][ T5493] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.640397][ T5493] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 187.725781][ T5493] BTRFS info (device loop0): setting nodatacow, compression disabled [ 187.778721][ T5493] BTRFS info (device loop0): enabling auto defrag [ 187.804701][ T5520] BTRFS info (device loop4): enabling ssd optimizations [ 187.882479][ T5493] BTRFS info (device loop0): max_inline at 0 [ 187.945028][ T5493] BTRFS info (device loop0): using free space tree [ 187.989153][ T4323] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 188.038639][ T5555] loop3: detected capacity change from 0 to 64 [ 188.279592][ T5555] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount. [ 188.309238][ T5565] netlink: 596 bytes leftover after parsing attributes in process `syz.1.377'. [ 188.337773][ T3558] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 188.453974][ T5555] MINIX-fs: bad superblock or unable to read bitmaps [ 188.831252][ T152] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 188.859455][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 188.877188][ T3807] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.387518][ T152] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.417947][ T152] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.699839][ T152] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.744344][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.794933][ T152] usb 3-1: SerialNumber: syz [ 190.057958][ T5575] loop1: detected capacity change from 0 to 32768 [ 190.092455][ T5575] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.377 (5575) [ 190.105981][ T5593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.383'. [ 190.143549][ T152] usb 3-1: 0:2 : does not exist [ 190.175872][ T5575] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 190.229116][ T5575] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 190.280023][ T5575] BTRFS info (device loop1): force zlib compression, level 3 [ 190.298780][ T5575] BTRFS info (device loop1): force clearing of disk cache [ 190.305955][ T5575] BTRFS info (device loop1): setting nodatasum [ 190.322109][ T5596] loop4: detected capacity change from 0 to 164 [ 190.331933][ T5575] BTRFS info (device loop1): allowing degraded mounts [ 190.347879][ T5575] BTRFS info (device loop1): enabling disk space caching [ 190.354959][ T5575] BTRFS info (device loop1): disk space caching is enabled [ 190.429756][ T3558] Bluetooth: hci1: unexpected cc 0x2027 length: 2 > 1 [ 190.604709][ T5607] kvm: emulating exchange as write [ 190.772460][ T5575] BTRFS info (device loop1): rebuilding free space tree [ 190.841694][ T5575] BTRFS info (device loop1): disabling free space tree [ 190.871300][ T5575] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.947647][ T5575] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 191.069241][ T3558] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 191.079125][ T3558] Bluetooth: hci1: Injecting HCI hardware error event [ 191.090312][ T3558] Bluetooth: hci1: hardware error 0x00 [ 191.821344][ T5641] loop4: detected capacity change from 0 to 64 [ 191.887453][ T3905] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 191.917175][ T152] usb 3-1: USB disconnect, device number 6 [ 191.923577][ T5641] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount. [ 191.954775][ T5641] MINIX-fs: bad superblock or unable to read bitmaps [ 192.103757][ T5646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 192.170577][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.179392][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.328623][ T5393] udevd[5393]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.557440][ T3647] udevd[3647]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [5639] terminated by signal 33 (Unknown signal 33) [ 193.542360][ T3558] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 193.763769][ T5675] netlink: 596 bytes leftover after parsing attributes in process `syz.0.403'. [ 194.127800][ T935] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 194.218776][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.233439][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.577774][ T935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.608776][ T935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.738099][ T935] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 194.757975][ T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 194.806472][ T935] usb 4-1: SerialNumber: syz [ 195.126052][ T935] usb 4-1: 0:2 : does not exist [ 195.309559][ T5675] loop0: detected capacity change from 0 to 32768 [ 195.336927][ T5675] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.403 (5675) [ 195.463471][ T5675] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 195.495068][ T5675] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 195.515182][ T5675] BTRFS info (device loop0): force zlib compression, level 3 [ 195.533214][ T5675] BTRFS info (device loop0): force clearing of disk cache [ 195.549966][ T5675] BTRFS info (device loop0): setting nodatasum [ 195.566526][ T5675] BTRFS info (device loop0): allowing degraded mounts [ 195.585239][ T5675] BTRFS info (device loop0): enabling disk space caching [ 195.623564][ T5675] BTRFS info (device loop0): disk space caching is enabled [ 195.698052][ T935] usb 4-1: USB disconnect, device number 3 [ 195.844998][ T5675] BTRFS info (device loop0): rebuilding free space tree [ 195.964675][ T5675] BTRFS info (device loop0): disabling free space tree [ 195.999705][ T5675] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 196.050527][ T5675] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 196.855722][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.070861][ T3807] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 199.322213][ T5750] loop2: detected capacity change from 0 to 32768 [ 199.405980][ T5750] XFS (loop2): Mounting V5 Filesystem [ 199.599172][ T5768] loop3: detected capacity change from 0 to 32768 [ 199.722507][ T5750] XFS (loop2): Ending clean mount [ 200.715311][ T5772] loop0: detected capacity change from 0 to 32768 [ 200.920411][ T4048] XFS (loop2): Unmounting Filesystem [ 200.974060][ T5794] netlink: 596 bytes leftover after parsing attributes in process `syz.3.430'. [ 201.078371][ T5796] loop1: detected capacity change from 0 to 256 [ 201.083865][ T3597] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 201.205078][ T5796] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 201.812846][ T5794] loop3: detected capacity change from 0 to 32768 [ 201.833103][ T5794] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.430 (5794) [ 201.871308][ T5794] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 201.911355][ T5794] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 201.938294][ T5794] BTRFS info (device loop3): force zlib compression, level 3 [ 201.955997][ T5794] BTRFS info (device loop3): force clearing of disk cache [ 201.963853][ T3597] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.984245][ T5794] BTRFS info (device loop3): setting nodatasum [ 201.994369][ T3597] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.014640][ T5794] BTRFS info (device loop3): allowing degraded mounts [ 202.039663][ T5794] BTRFS info (device loop3): enabling disk space caching [ 202.046771][ T5794] BTRFS info (device loop3): disk space caching is enabled [ 202.117585][ T3597] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.130466][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.147956][ T3597] usb 5-1: SerialNumber: syz [ 202.241395][ T5794] BTRFS info (device loop3): rebuilding free space tree [ 202.264384][ T5794] BTRFS info (device loop3): disabling free space tree [ 202.275832][ T5794] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.292209][ T5794] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 202.373498][ T4253] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 202.414205][ T3597] usb 5-1: 0:2 : does not exist [ 202.996428][ T3597] usb 5-1: USB disconnect, device number 8 [ 203.071642][ T5393] udevd[5393]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.317409][ T3631] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 203.827565][ T3631] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.956474][ T5854] overlayfs: missing 'lowerdir' [ 203.972623][ T5839] loop3: detected capacity change from 0 to 32768 [ 204.027555][ T3631] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.041570][ T3631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.080764][ T3631] usb 2-1: Product: syz [ 204.084994][ T3631] usb 2-1: Manufacturer: syz [ 204.123878][ T3631] usb 2-1: SerialNumber: syz [ 204.143263][ T5839] XFS (loop3): Mounting V5 Filesystem [ 204.276570][ T5839] XFS (loop3): Ending clean mount [ 204.324213][ T5839] XFS (loop3): Quotacheck needed: Please wait. [ 204.407156][ T5839] XFS (loop3): Quotacheck: Done. [ 205.063853][ T4253] XFS (loop3): Unmounting Filesystem [ 205.117039][ T5844] loop0: detected capacity change from 0 to 32768 [ 205.224890][ T5844] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.441 (5844) [ 205.317409][ T5844] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.332780][ T5871] netlink: 596 bytes leftover after parsing attributes in process `syz.4.448'. [ 205.342031][ T5844] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 205.373174][ T5844] BTRFS info (device loop0): setting nodatacow, compression disabled [ 205.394152][ T5844] BTRFS info (device loop0): enabling auto defrag [ 205.406938][ T5844] BTRFS info (device loop0): max_inline at 0 [ 205.427153][ T5844] BTRFS info (device loop0): using free space tree [ 205.701223][ T3631] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 205.708555][ T3631] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 205.716163][ T3631] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 206.478658][ T3631] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 206.511904][ T3631] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 206.529012][ T3807] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.538445][ T3631] usb 2-1: USB disconnect, device number 4 [ 206.548366][ T3631] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 206.962199][ T5871] loop4: detected capacity change from 0 to 32768 [ 207.013199][ T5871] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.448 (5871) [ 207.064150][ T5871] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 207.095744][ T5871] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 207.118671][ T5871] BTRFS info (device loop4): force zlib compression, level 3 [ 207.146399][ T5871] BTRFS info (device loop4): force clearing of disk cache [ 207.162751][ T5871] BTRFS info (device loop4): setting nodatasum [ 207.182949][ T5871] BTRFS info (device loop4): allowing degraded mounts [ 207.201001][ T5871] BTRFS info (device loop4): enabling disk space caching [ 207.233007][ T5871] BTRFS info (device loop4): disk space caching is enabled [ 207.460024][ T5871] BTRFS info (device loop4): rebuilding free space tree [ 207.485160][ T5871] BTRFS info (device loop4): disabling free space tree [ 207.547488][ T5871] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 207.608748][ T5871] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 207.683484][ T5932] overlayfs: missing 'lowerdir' [ 207.855040][ T4323] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 208.074793][ T3019] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 209.407729][ T3019] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.487724][ T3019] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.577645][ T3019] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 209.599535][ T3019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.655398][ T3019] usb 3-1: SerialNumber: syz [ 209.913388][ T5939] loop3: detected capacity change from 0 to 32768 [ 209.941641][ T3019] usb 3-1: 0:2 : does not exist [ 209.977451][ T4430] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 210.051301][ T5939] XFS (loop3): Mounting V5 Filesystem [ 210.189414][ T5939] XFS (loop3): Ending clean mount [ 210.215823][ T5939] XFS (loop3): Quotacheck needed: Please wait. [ 210.282085][ T5953] loop4: detected capacity change from 0 to 32768 [ 210.307379][ T5939] XFS (loop3): Quotacheck: Done. [ 210.332789][ T5953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.460 (5953) [ 210.375747][ T5953] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.393245][ T4430] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 210.405271][ T5953] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 210.423228][ T4430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.427751][ T5953] BTRFS info (device loop4): setting nodatacow, compression disabled [ 210.453355][ T5953] BTRFS info (device loop4): enabling auto defrag [ 210.467485][ T5953] BTRFS info (device loop4): max_inline at 0 [ 210.474294][ T4430] usb 2-1: config 0 descriptor?? [ 210.487369][ T5953] BTRFS info (device loop4): using free space tree [ 210.508182][ T4253] XFS (loop3): Unmounting Filesystem [ 210.685047][ T3019] usb 3-1: USB disconnect, device number 7 [ 210.911003][ T3646] udevd[3646]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.936619][ T4323] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.993093][ T4430] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 211.007419][ T4430] gs_usb: probe of 2-1:0.0 failed with error -121 [ 211.398367][ T5996] netlink: 596 bytes leftover after parsing attributes in process `syz.4.470'. [ 211.527380][ T3696] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 211.972477][ T3696] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.788968][ T4430] usb 2-1: USB disconnect, device number 5 [ 212.877622][ T3696] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.037574][ T3696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.094297][ T3696] usb 3-1: Product: syz [ 213.099027][ T3696] usb 3-1: Manufacturer: syz [ 213.103720][ T3696] usb 3-1: SerialNumber: syz [ 213.391766][ T5996] loop4: detected capacity change from 0 to 32768 [ 213.421734][ T5996] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.470 (5996) [ 213.554602][ T5996] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 213.679752][ T6018] loop1: detected capacity change from 0 to 64 [ 213.686168][ T5996] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 213.714109][ T5996] BTRFS info (device loop4): force zlib compression, level 3 [ 213.723627][ T5996] BTRFS info (device loop4): force clearing of disk cache [ 213.737968][ T5996] BTRFS info (device loop4): setting nodatasum [ 213.756017][ T5996] BTRFS info (device loop4): allowing degraded mounts [ 213.765074][ T5996] BTRFS info (device loop4): enabling disk space caching [ 213.776019][ T5996] BTRFS info (device loop4): disk space caching is enabled [ 213.819613][ T6018] hfs: request for non-existent node 16777216 in B*Tree [ 213.837715][ T6018] hfs: request for non-existent node 16777216 in B*Tree [ 213.901395][ T6026] loop3: detected capacity change from 0 to 256 [ 214.029424][ T5996] BTRFS info (device loop4): rebuilding free space tree [ 214.058538][ T5996] BTRFS info (device loop4): disabling free space tree [ 214.107137][ T5996] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 214.167565][ T5996] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.452302][ T6050] nbd0: detected capacity change from 0 to 8388607 [ 214.468344][ T3696] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 214.474906][ T3696] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 214.494771][ T3696] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 214.526854][ T4323] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 214.563909][ T6053] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 214.687486][ T3696] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 214.733023][ T3696] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 214.760302][ T3696] usb 3-1: USB disconnect, device number 8 [ 214.780137][ T3696] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 214.943349][ T3558] block nbd0: Receive control failed (result -104) [ 215.684295][ T6068] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.639370][ T6060] loop4: detected capacity change from 0 to 32768 [ 217.656774][ T6060] XFS: noikeep mount option is deprecated. [ 217.707336][ T6060] XFS (loop4): Mounting V5 Filesystem [ 217.834449][ T6060] XFS (loop4): Ending clean mount [ 217.889446][ T6060] XFS (loop4): Quotacheck needed: Please wait. [ 217.984991][ T6060] XFS (loop4): Quotacheck: Done. [ 218.013676][ T4323] XFS (loop4): Unmounting Filesystem [ 218.122594][ T6111] netlink: 596 bytes leftover after parsing attributes in process `syz.3.491'. [ 218.444238][ T6097] loop2: detected capacity change from 0 to 32768 [ 218.497539][ T6097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.489 (6097) [ 218.546020][ T6097] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.587502][ T6097] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 218.596361][ T6097] BTRFS info (device loop2): setting nodatacow, compression disabled [ 218.647319][ T6097] BTRFS info (device loop2): enabling auto defrag [ 218.653857][ T6097] BTRFS info (device loop2): max_inline at 0 [ 218.687886][ T6097] BTRFS info (device loop2): using free space tree [ 218.782046][ T6108] loop1: detected capacity change from 0 to 32768 [ 218.954888][ T6108] XFS (loop1): Mounting V5 Filesystem [ 219.075486][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 219.122298][ T6108] XFS (loop1): Ending clean mount [ 219.128391][ T4048] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.159238][ T6108] XFS (loop1): Quotacheck needed: Please wait. [ 219.342581][ T6108] XFS (loop1): Quotacheck: Done. [ 219.348756][ T6111] loop3: detected capacity change from 0 to 32768 [ 219.419162][ T6111] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.491 (6111) [ 219.525297][ T3905] XFS (loop1): Unmounting Filesystem [ 219.544683][ T6111] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 219.564972][ T6111] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 219.602576][ T6111] BTRFS info (device loop3): force zlib compression, level 3 [ 219.630666][ T6111] BTRFS info (device loop3): force clearing of disk cache [ 219.640726][ T6111] BTRFS info (device loop3): setting nodatasum [ 219.684733][ T6111] BTRFS info (device loop3): allowing degraded mounts [ 219.694245][ T6111] BTRFS info (device loop3): enabling disk space caching [ 219.717796][ T6111] BTRFS info (device loop3): disk space caching is enabled [ 219.807059][ T6161] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 219.955984][ T6111] BTRFS info (device loop3): rebuilding free space tree [ 219.986861][ T6111] BTRFS info (device loop3): disabling free space tree [ 220.001821][ T6181] loop2: detected capacity change from 0 to 256 [ 220.002315][ T6111] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.037556][ T6111] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 220.214971][ T4253] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 220.335068][ T3566] Bluetooth: hci0: unexpected cc 0x2027 length: 2 > 1 [ 220.346819][ T3566] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 220.359469][ T3566] Bluetooth: hci0: unexpected event for opcode 0xe05e [ 221.676471][ T6197] loop4: detected capacity change from 0 to 32768 [ 221.695954][ T6197] XFS: noikeep mount option is deprecated. [ 221.768629][ T6197] XFS (loop4): Mounting V5 Filesystem [ 222.002342][ T6197] XFS (loop4): Ending clean mount [ 222.013538][ T6197] XFS (loop4): Quotacheck needed: Please wait. [ 222.055632][ T6197] XFS (loop4): Quotacheck: Done. [ 222.195322][ T6207] loop2: detected capacity change from 0 to 32768 [ 222.233054][ T6207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.504 (6207) [ 222.286053][ T6207] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.327788][ T6207] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 222.347766][ T6207] BTRFS info (device loop2): setting nodatacow, compression disabled [ 222.373893][ T6207] BTRFS info (device loop2): enabling auto defrag [ 222.387446][ T6207] BTRFS info (device loop2): max_inline at 0 [ 222.407662][ T6207] BTRFS info (device loop2): using free space tree [ 222.532244][ T4323] XFS (loop4): Unmounting Filesystem [ 222.879766][ T4048] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.200806][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 223.225674][ T6243] netlink: 596 bytes leftover after parsing attributes in process `syz.1.509'. [ 223.263417][ T6245] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 223.324088][ T6219] loop3: detected capacity change from 0 to 32768 [ 223.531741][ T6254] loop4: detected capacity change from 0 to 256 [ 223.715590][ T6219] XFS (loop3): Mounting V5 Filesystem [ 223.946409][ T6219] XFS (loop3): Ending clean mount [ 223.959736][ T6219] XFS (loop3): Quotacheck needed: Please wait. [ 224.031854][ T6219] XFS (loop3): Quotacheck: Done. [ 224.223699][ T4253] XFS (loop3): Unmounting Filesystem [ 224.427812][ T3558] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 224.436648][ T3558] Bluetooth: hci0: Injecting HCI hardware error event [ 224.445702][ T3558] Bluetooth: hci0: hardware error 0x00 [ 225.272629][ T6243] loop1: detected capacity change from 0 to 32768 [ 225.290456][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.302929][ T3563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.311865][ T3563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.348750][ T6243] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.509 (6243) [ 225.365069][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.376109][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.387687][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.427791][ T6243] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 225.483524][ T6243] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 225.527554][ T6243] BTRFS info (device loop1): force zlib compression, level 3 [ 225.557527][ T6243] BTRFS info (device loop1): force clearing of disk cache [ 225.564834][ T6243] BTRFS info (device loop1): setting nodatasum [ 225.632023][ T6243] BTRFS info (device loop1): allowing degraded mounts [ 225.676605][ T6243] BTRFS info (device loop1): enabling disk space caching [ 225.724434][ T6243] BTRFS info (device loop1): disk space caching is enabled [ 225.873104][ T6243] BTRFS info (device loop1): rebuilding free space tree [ 225.893519][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 225.914725][ T6243] BTRFS info (device loop1): disabling free space tree [ 225.921875][ T6243] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.932508][ T6243] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.115765][ T3905] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 226.409106][ T6275] loop4: detected capacity change from 0 to 32768 [ 226.464574][ T6275] XFS: noikeep mount option is deprecated. [ 226.534897][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.548075][ T6278] loop2: detected capacity change from 0 to 32768 [ 226.556107][ T6278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.518 (6278) [ 226.569125][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.577114][ T6273] device bridge_slave_0 entered promiscuous mode [ 226.583983][ T3558] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 226.606685][ T6278] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.622690][ T6275] XFS (loop4): Mounting V5 Filesystem [ 226.651406][ T6302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'. [ 226.670024][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.679019][ T6278] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 226.698859][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.706378][ T6278] BTRFS info (device loop2): setting nodatacow, compression disabled [ 226.753920][ T6273] device bridge_slave_1 entered promiscuous mode [ 226.754710][ T6278] BTRFS info (device loop2): enabling auto defrag [ 226.791661][ T6275] XFS (loop4): Ending clean mount [ 226.814277][ T6275] XFS (loop4): Quotacheck needed: Please wait. [ 226.826002][ T6278] BTRFS info (device loop2): max_inline at 0 [ 226.870055][ T6278] BTRFS info (device loop2): using free space tree [ 226.899369][ T6275] XFS (loop4): Quotacheck: Done. [ 226.913361][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.133407][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.361923][ T4048] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.383663][ T6273] team0: Port device team_slave_0 added [ 227.409282][ T6273] team0: Port device team_slave_1 added [ 227.457526][ T3558] Bluetooth: hci3: command tx timeout [ 227.521202][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.528994][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.555782][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.572625][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.580172][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.606955][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.959216][ T4323] XFS (loop4): Unmounting Filesystem [ 227.975130][ T6273] device hsr_slave_0 entered promiscuous mode [ 228.022004][ T6273] device hsr_slave_1 entered promiscuous mode [ 228.054275][ T6273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.103948][ T6273] Cannot create hsr debugfs directory [ 228.551745][ T6343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.630039][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 228.851658][ T6273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.399709][ T6273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.545078][ T3558] Bluetooth: hci3: command tx timeout [ 229.570681][ T6273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.996263][ T6273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.928027][ T3599] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.028555][ T6352] loop2: detected capacity change from 0 to 32768 [ 231.041842][ T6273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.107605][ T6352] XFS (loop2): Mounting V5 Filesystem [ 231.130001][ T6273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.141444][ T6273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.153398][ T6273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.228419][ T6352] XFS (loop2): Ending clean mount [ 231.248760][ T6352] XFS (loop2): Quotacheck needed: Please wait. [ 231.309250][ T3599] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.343369][ T6352] XFS (loop2): Quotacheck: Done. [ 231.349344][ T3599] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.431164][ T4048] XFS (loop2): Unmounting Filesystem [ 231.468258][ T3599] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 231.478713][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 231.487146][ T3599] usb 2-1: SerialNumber: syz [ 231.524749][ T6368] loop4: detected capacity change from 0 to 32768 [ 231.539552][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.577492][ T6368] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.529 (6368) [ 231.611775][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.618612][ T3558] Bluetooth: hci3: command tx timeout [ 231.638021][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.646731][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.668696][ T6368] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.705111][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.724764][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.737803][ T6368] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 231.758382][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.765698][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.767379][ T6368] BTRFS info (device loop4): setting nodatacow, compression disabled [ 231.782891][ T3599] usb 2-1: 0:2 : does not exist [ 231.827794][ T6368] BTRFS info (device loop4): enabling auto defrag [ 231.835001][ T6368] BTRFS info (device loop4): max_inline at 0 [ 231.847446][ T6368] BTRFS info (device loop4): using free space tree [ 231.851115][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.918295][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.929988][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.939370][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.946722][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.957107][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.979465][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.001033][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.010557][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.020045][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.031626][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.041897][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.076789][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.106100][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.137435][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.146264][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.167184][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.329311][ T6400] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 232.474010][ T6378] loop3: detected capacity change from 0 to 32768 [ 232.489462][ T4323] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.503009][ T41] usb 2-1: USB disconnect, device number 6 [ 232.510911][ T6378] XFS: noikeep mount option is deprecated. [ 232.869894][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.883887][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.911825][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.957159][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.967178][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.004162][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.014109][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.027199][ T6273] device veth0_vlan entered promiscuous mode [ 233.036123][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.076313][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.151316][ T6273] device veth1_vlan entered promiscuous mode [ 233.201155][ T6378] XFS (loop3): Mounting V5 Filesystem [ 233.306839][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 233.355886][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 233.419393][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.448987][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.474418][ T6273] device veth0_macvtap entered promiscuous mode [ 233.488243][ T6378] XFS (loop3): Ending clean mount [ 233.507969][ T6273] device veth1_macvtap entered promiscuous mode [ 233.519826][ T6378] XFS (loop3): Quotacheck needed: Please wait. [ 233.603123][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.656866][ T6378] XFS (loop3): Quotacheck: Done. [ 233.681839][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.697708][ T3558] Bluetooth: hci3: command tx timeout [ 233.710604][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.534'. [ 233.899679][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.887802][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.923491][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.952905][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.975747][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.990550][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.018801][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.043707][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.071940][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.109998][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 235.131627][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.191465][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 235.201127][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.283723][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.535'. [ 235.295040][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.334129][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.360968][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.550357][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.314165][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.380859][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.410887][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.447330][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.462398][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.491481][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.540474][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.549939][ T4253] XFS (loop3): Unmounting Filesystem [ 236.631704][ T6273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.666349][ T6273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.687459][ T6273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.696374][ T6273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.778746][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.816763][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.843486][ T6447] overlayfs: missing 'lowerdir' [ 237.053962][ T6449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.128448][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.136656][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.194760][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.301437][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.333366][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.366464][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.570548][ T6440] loop4: detected capacity change from 0 to 32768 [ 237.595035][ T3558] Bluetooth: hci3: unexpected cc 0x2027 length: 2 > 1 [ 237.899253][ T6440] XFS (loop4): Mounting V5 Filesystem [ 238.093938][ T6440] XFS (loop4): Ending clean mount [ 238.121785][ T6440] XFS (loop4): Quotacheck needed: Please wait. [ 238.211088][ T6440] XFS (loop4): Quotacheck: Done. [ 238.494063][ T4323] XFS (loop4): Unmounting Filesystem [ 238.616976][ T6451] loop1: detected capacity change from 0 to 32768 [ 238.637773][ T6451] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.543 (6451) [ 238.670732][ T6451] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.727641][ T6451] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 238.888873][ T6451] BTRFS info (device loop1): setting nodatacow, compression disabled [ 238.926333][ T6451] BTRFS info (device loop1): enabling auto defrag [ 238.970911][ T6451] BTRFS info (device loop1): max_inline at 0 [ 238.989681][ T6451] BTRFS info (device loop1): using free space tree [ 239.366896][ T6473] loop2: detected capacity change from 0 to 32768 [ 239.450219][ T6473] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.545 (6473) [ 239.584639][ T6473] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 239.647603][ T6473] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 239.656425][ T6473] BTRFS info (device loop2): using free space tree [ 239.929361][ T3905] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.116670][ T6525] overlayfs: failed to resolve './file0': -2 [ 240.257581][ T6473] BTRFS info (device loop2): enabling ssd optimizations [ 240.379551][ T6531] overlayfs: missing 'lowerdir' [ 240.475364][ T4048] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 240.485712][ T6535] loop0: detected capacity change from 0 to 256 [ 240.535484][ T6500] loop4: detected capacity change from 0 to 32768 [ 240.598266][ T6500] XFS: noikeep mount option is deprecated. [ 240.893601][ T6500] XFS (loop4): Mounting V5 Filesystem [ 240.955317][ T3558] Bluetooth: hci3: unexpected cc 0x2027 length: 2 > 1 [ 241.113281][ T6500] XFS (loop4): Ending clean mount [ 241.131545][ T6500] XFS (loop4): Quotacheck needed: Please wait. [ 241.257929][ T6500] XFS (loop4): Quotacheck: Done. [ 241.457371][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.554'. [ 241.617513][ T3558] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 241.626612][ T3558] Bluetooth: hci3: Injecting HCI hardware error event [ 241.635353][ T3559] Bluetooth: hci3: hardware error 0x00 [ 241.789559][ T4323] XFS (loop4): Unmounting Filesystem [ 242.567595][ T3019] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 242.857693][ T3019] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 243.517576][ T3019] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 243.541138][ T3019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.562811][ T6564] loop3: detected capacity change from 0 to 32768 [ 243.594579][ T6564] XFS (loop3): Mounting V5 Filesystem [ 243.697426][ T3559] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 243.769257][ T6564] XFS (loop3): Ending clean mount [ 243.792285][ T6564] XFS (loop3): Quotacheck needed: Please wait. [ 243.948102][ T6564] XFS (loop3): Quotacheck: Done. [ 244.061070][ T4253] XFS (loop3): Unmounting Filesystem [ 244.117429][ T3019] usb 2-1: string descriptor 0 read error: -71 [ 244.124302][ T3019] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 244.147297][ T3019] usb 2-1: No valid video chain found. [ 244.175207][ T3019] usb 2-1: USB disconnect, device number 7 [ 244.572105][ T6594] overlayfs: missing 'lowerdir' [ 244.666891][ T52] block nbd0: Possible stuck request ffff88801fef0000: control (read@0,4096B). Runtime 30 seconds [ 244.927125][ T6590] loop4: detected capacity change from 0 to 32768 [ 245.173730][ T6590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.564 (6590) [ 245.216199][ T6592] loop2: detected capacity change from 0 to 32768 [ 245.287941][ T6592] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.565 (6592) [ 245.544895][ T6590] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.646779][ T6590] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 245.672211][ T6590] BTRFS info (device loop4): setting nodatacow, compression disabled [ 246.147630][ T6590] BTRFS info (device loop4): enabling auto defrag [ 246.159852][ T6592] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 246.190224][ T6590] BTRFS info (device loop4): max_inline at 0 [ 246.227471][ T6592] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 246.253257][ T6590] BTRFS info (device loop4): using free space tree [ 246.297982][ T6592] BTRFS info (device loop2): using free space tree [ 246.534150][ T6592] BTRFS info (device loop2): enabling ssd optimizations [ 246.722214][ T4048] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 246.998930][ T4323] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 247.425844][ T6612] loop1: detected capacity change from 0 to 32768 [ 247.496932][ T6612] XFS: noikeep mount option is deprecated. [ 247.615603][ T6612] XFS (loop1): Mounting V5 Filesystem [ 247.642588][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 247.811797][ T6612] XFS (loop1): Ending clean mount [ 247.840240][ T6612] XFS (loop1): Quotacheck needed: Please wait. [ 247.930376][ T6612] XFS (loop1): Quotacheck: Done. [ 248.620488][ T6681] loop2: detected capacity change from 0 to 256 [ 248.662852][ T3905] XFS (loop1): Unmounting Filesystem [ 249.705804][ T6697] overlayfs: missing 'workdir' [ 250.138337][ T6680] loop4: detected capacity change from 0 to 32768 [ 250.208584][ T6680] XFS (loop4): Mounting V5 Filesystem [ 250.374319][ T6680] XFS (loop4): Ending clean mount [ 250.396570][ T6680] XFS (loop4): Quotacheck needed: Please wait. [ 250.492024][ T6698] loop2: detected capacity change from 0 to 32768 [ 250.515237][ T6680] XFS (loop4): Quotacheck: Done. [ 250.516678][ T6698] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.583 (6698) [ 250.645811][ T6698] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 250.686751][ T6698] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 250.728279][ T6698] BTRFS info (device loop2): using free space tree [ 250.813201][ T4323] XFS (loop4): Unmounting Filesystem [ 250.862257][ T6701] loop1: detected capacity change from 0 to 32768 [ 250.878581][ T6701] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.584 (6701) [ 250.910142][ T6701] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 250.972662][ T6701] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 250.985767][ T6698] BTRFS info (device loop2): enabling ssd optimizations [ 251.017442][ T6701] BTRFS info (device loop1): setting nodatacow, compression disabled [ 251.025601][ T6701] BTRFS info (device loop1): enabling auto defrag [ 251.081410][ T6701] BTRFS info (device loop1): max_inline at 0 [ 251.109444][ T6701] BTRFS info (device loop1): using free space tree [ 251.229390][ T4048] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 251.677605][ T3903] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 251.731855][ T3905] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 251.980777][ T3903] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 252.191469][ T6766] loop0: detected capacity change from 0 to 256 [ 252.795716][ T6775] overlayfs: missing 'workdir' [ 252.814701][ T3903] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 252.834610][ T3903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.213436][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.595'. [ 253.697704][ T3903] usb 4-1: string descriptor 0 read error: -71 [ 253.703951][ T3903] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 253.728732][ T3903] usb 4-1: No valid video chain found. [ 253.769955][ T3903] usb 4-1: USB disconnect, device number 4 [ 253.875755][ T6764] loop2: detected capacity change from 0 to 32768 [ 253.896389][ T6764] XFS: noikeep mount option is deprecated. [ 254.028236][ T6764] XFS (loop2): Mounting V5 Filesystem [ 254.200817][ T6764] XFS (loop2): Ending clean mount [ 254.215810][ T6764] XFS (loop2): Quotacheck needed: Please wait. [ 254.320082][ T6764] XFS (loop2): Quotacheck: Done. [ 254.878997][ T4048] XFS (loop2): Unmounting Filesystem [ 255.079108][ T6786] loop0: detected capacity change from 0 to 32768 [ 255.241878][ T6786] XFS (loop0): Mounting V5 Filesystem [ 255.359591][ T6799] loop1: detected capacity change from 0 to 32768 [ 255.369802][ T6786] XFS (loop0): Ending clean mount [ 255.386071][ T6786] XFS (loop0): Quotacheck needed: Please wait. [ 255.393996][ T6799] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.598 (6799) [ 255.432522][ T6799] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 255.467742][ T6799] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 255.476531][ T6799] BTRFS info (device loop1): using free space tree [ 255.516645][ T6786] XFS (loop0): Quotacheck: Done. [ 255.542397][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.548796][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.700008][ T6273] XFS (loop0): Unmounting Filesystem [ 255.942095][ T6799] BTRFS info (device loop1): enabling ssd optimizations [ 256.301798][ T3905] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 256.356884][ T6806] loop3: detected capacity change from 0 to 32768 [ 256.389004][ T6806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.600 (6806) [ 256.632204][ T6806] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.671185][ T6806] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 256.722040][ T6806] BTRFS info (device loop3): setting nodatacow, compression disabled [ 256.743335][ T6806] BTRFS info (device loop3): enabling auto defrag [ 256.797507][ T6806] BTRFS info (device loop3): max_inline at 0 [ 256.803582][ T6806] BTRFS info (device loop3): using free space tree [ 256.976422][ T3558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.987201][ T3558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.995906][ T3558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.004773][ T3558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.014040][ T3558] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 257.022519][ T3558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.056628][ T6856] loop0: detected capacity change from 0 to 256 [ 257.183034][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.380594][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.422073][ T4253] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.680395][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.823232][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.145936][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.613'. [ 258.166856][ T6852] chnl_net:caif_netlink_parms(): no params data found [ 258.628988][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.639748][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.669938][ T6852] device bridge_slave_0 entered promiscuous mode [ 258.737471][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.748676][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.786039][ T6852] device bridge_slave_1 entered promiscuous mode [ 259.008312][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.052710][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.138135][ T3558] Bluetooth: hci2: command tx timeout [ 259.301977][ T6852] team0: Port device team_slave_0 added [ 259.359190][ T6852] team0: Port device team_slave_1 added [ 259.604269][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.637992][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.730403][ T6891] loop3: detected capacity change from 0 to 32768 [ 259.751107][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.765377][ T6891] XFS: noikeep mount option is deprecated. [ 259.896924][ T11] device hsr_slave_0 left promiscuous mode [ 259.920275][ T6891] XFS (loop3): Mounting V5 Filesystem [ 259.954978][ T11] device hsr_slave_1 left promiscuous mode [ 259.978502][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.007439][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.025292][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.033676][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.046481][ T6891] XFS (loop3): Ending clean mount [ 260.047418][ T11] device bridge_slave_1 left promiscuous mode [ 260.053302][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.071346][ T11] device bridge_slave_0 left promiscuous mode [ 260.078968][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.103018][ T6891] XFS (loop3): Quotacheck needed: Please wait. [ 260.161289][ T11] device veth1_macvtap left promiscuous mode [ 260.176753][ T11] device veth0_macvtap left promiscuous mode [ 260.185056][ T11] device veth1_vlan left promiscuous mode [ 260.191156][ T11] device veth0_vlan left promiscuous mode [ 260.208113][ T6891] XFS (loop3): Quotacheck: Done. [ 261.041151][ T6927] Bluetooth: MGMT ver 1.22 [ 261.218165][ T3558] Bluetooth: hci2: command tx timeout [ 262.252286][ T6938] loop0: detected capacity change from 0 to 256 [ 262.295568][ T4253] XFS (loop3): Unmounting Filesystem [ 262.743464][ T11] team0 (unregistering): Port device team_slave_1 removed [ 262.857766][ T11] team0 (unregistering): Port device team_slave_0 removed [ 262.968880][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.058512][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.198760][ T6942] loop0: detected capacity change from 0 to 32768 [ 263.240590][ T6942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.620 (6942) [ 263.295077][ T6942] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.297725][ T3558] Bluetooth: hci2: command tx timeout [ 263.305539][ T6942] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 263.332036][ T6942] BTRFS info (device loop0): setting nodatacow, compression disabled [ 263.375335][ T6942] BTRFS info (device loop0): enabling auto defrag [ 263.386915][ T6942] BTRFS info (device loop0): max_inline at 0 [ 263.446923][ T6942] BTRFS info (device loop0): using free space tree [ 263.781543][ T6273] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.417177][ T11] bond0 (unregistering): Released all slaves [ 264.515001][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.530127][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.557196][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.751759][ T6852] device hsr_slave_0 entered promiscuous mode [ 264.788197][ T6852] device hsr_slave_1 entered promiscuous mode [ 264.828308][ T6852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.835932][ T6852] Cannot create hsr debugfs directory [ 265.378023][ T3558] Bluetooth: hci2: command tx timeout [ 266.057528][ T3019] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 266.308722][ T7002] loop1: detected capacity change from 0 to 256 [ 266.363174][ T6852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.414531][ T6852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.437460][ T3019] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.481930][ T3019] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.534993][ T6852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.564153][ T6852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.587781][ T3019] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.623588][ T3019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.650629][ T3019] usb 3-1: SerialNumber: syz [ 266.870002][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.927780][ T6852] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.955410][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.964808][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.009326][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.028029][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.036786][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.044590][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.127859][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.140340][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.172652][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.180911][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.226174][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.272080][ T6995] loop3: detected capacity change from 0 to 32768 [ 267.309285][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.328129][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.337967][ T6995] XFS: noikeep mount option is deprecated. [ 267.345181][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.365846][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.397861][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.406073][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.417467][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.426150][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.435241][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.444059][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.452947][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.466080][ T6852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.481620][ T6995] XFS (loop3): Mounting V5 Filesystem [ 267.509920][ T7020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.634'. [ 267.760218][ T3019] usb 3-1: 0:2 : does not exist [ 267.765156][ T3019] usb 3-1: unit 5 not found! [ 268.023783][ T3019] usb 3-1: USB disconnect, device number 9 [ 268.297685][ T6995] XFS (loop3): Ending clean mount [ 268.321774][ T6995] XFS (loop3): Quotacheck needed: Please wait. [ 268.415950][ T6995] XFS (loop3): Quotacheck: Done. [ 268.428332][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.083272][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.101968][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.214462][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.398762][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.426877][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.495572][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.511813][ T7068] loop1: detected capacity change from 0 to 256 [ 270.530564][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.555835][ T6852] device veth0_vlan entered promiscuous mode [ 270.595805][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.613509][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.663768][ T6852] device veth1_vlan entered promiscuous mode [ 270.784237][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.805911][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.846253][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.917095][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.964222][ T6852] device veth0_macvtap entered promiscuous mode [ 271.037171][ T6852] device veth1_macvtap entered promiscuous mode [ 271.156048][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.206639][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.242040][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.319037][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.361354][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.378616][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.404025][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.456368][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.468245][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.501391][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.547760][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.583649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.625124][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 271.658149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 271.731326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.764176][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.807476][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.844368][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.890463][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.918613][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.959055][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.969460][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.981214][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.999070][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.013786][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.039937][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.050023][ T4253] XFS (loop3): Unmounting Filesystem [ 272.074476][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 272.102239][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.119650][ T6852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.145965][ T6852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.158217][ T6852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.166952][ T6852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.454404][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.485632][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.566061][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.773283][ T3639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.812456][ T3639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.126914][ T3019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.508790][ T3558] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 273.578472][ T7113] loop2: detected capacity change from 0 to 256 [ 273.893639][ T7122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.652'. [ 274.768552][ T52] block nbd0: Possible stuck request ffff88801fef0000: control (read@0,4096B). Runtime 60 seconds [ 275.998617][ T7156] loop4: detected capacity change from 0 to 256 [ 276.517406][ T3019] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 276.634243][ T7136] loop1: detected capacity change from 0 to 32768 [ 276.668044][ T7136] XFS: noikeep mount option is deprecated. [ 276.795246][ T7136] XFS (loop1): Mounting V5 Filesystem [ 276.865858][ T7136] XFS (loop1): Ending clean mount [ 276.881856][ T7136] XFS (loop1): Quotacheck needed: Please wait. [ 276.927936][ T3019] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 276.935718][ T7136] XFS (loop1): Quotacheck: Done. [ 276.982252][ T3019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.057655][ T3019] usb 5-1: config 0 descriptor?? [ 277.159437][ T7160] loop0: detected capacity change from 0 to 32768 [ 277.252618][ T7160] XFS (loop0): Mounting V5 Filesystem [ 277.537621][ T3019] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 277.548742][ T7160] XFS (loop0): Ending clean mount [ 277.576552][ T7160] XFS (loop0): Quotacheck needed: Please wait. [ 277.787405][ T3019] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 277.796936][ T3019] gs_usb: probe of 5-1:0.0 failed with error -71 [ 277.837312][ T3019] usb 5-1: USB disconnect, device number 9 [ 277.887255][ T7160] XFS (loop0): Quotacheck: Done. [ 277.973236][ T6273] XFS (loop0): Unmounting Filesystem [ 278.366158][ T7216] loop3: detected capacity change from 0 to 256 [ 279.715407][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.675'. [ 279.857533][ T3559] Bluetooth: hci2: command 0x0406 tx timeout [ 279.974597][ T3905] XFS (loop1): Unmounting Filesystem [ 281.041775][ T7253] loop1: detected capacity change from 0 to 512 [ 281.084536][ T7253] EXT4-fs: Ignoring removed orlov option [ 281.091027][ T7252] device wg2 entered promiscuous mode [ 281.133916][ T7253] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 281.200641][ T7253] EXT4-fs (loop1): 1 truncate cleaned up [ 281.206525][ T7253] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 281.333393][ T7237] loop2: detected capacity change from 0 to 32768 [ 281.359355][ T7257] netlink: 596 bytes leftover after parsing attributes in process `syz.0.686'. [ 281.456463][ T7237] XFS (loop2): Mounting V5 Filesystem [ 281.627412][ T7237] XFS (loop2): Ending clean mount [ 281.653207][ T7237] XFS (loop2): Quotacheck needed: Please wait. [ 281.666115][ T3905] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /133/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 281.755646][ T3905] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 281.837889][ T7237] XFS (loop2): Quotacheck: Done. [ 281.844810][ T3905] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /133/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 281.938932][ T3905] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 281.991742][ T3905] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /133/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 282.069935][ T3905] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 282.127177][ T4048] XFS (loop2): Unmounting Filesystem [ 282.175562][ T3905] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /133/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 282.215881][ T3905] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 282.253110][ T3905] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /133/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 282.377167][ T3905] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 283.701041][ T3905] device syz_tun left promiscuous mode [ 283.703427][ T7261] loop4: detected capacity change from 0 to 40427 [ 283.789535][ T7261] F2FS-fs (loop4): invalid crc value [ 283.858370][ T7261] F2FS-fs (loop4): Found nat_bits in checkpoint [ 283.889189][ T3905] EXT4-fs (loop1): unmounting filesystem. [ 283.966242][ T7261] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 284.080154][ T7261] syz.4.688: attempt to access beyond end of device [ 284.080154][ T7261] loop4: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 284.189719][ T7261] syz.4.688: attempt to access beyond end of device [ 284.189719][ T7261] loop4: rw=2049, sector=53384, nr_sectors = 8 limit=40427 [ 284.253855][ T7261] syz.4.688: attempt to access beyond end of device [ 284.253855][ T7261] loop4: rw=2049, sector=53392, nr_sectors = 8 limit=40427 [ 284.274434][ T26] audit: type=1804 audit(1720261439.061:23): pid=7261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.688" name="/newroot/8/bus/file1" dev="loop4" ino=10 res=1 errno=0 [ 284.304146][ T7261] syz.4.688: attempt to access beyond end of device [ 284.304146][ T7261] loop4: rw=2049, sector=53400, nr_sectors = 112 limit=40427 [ 284.342931][ T7289] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 284.442052][ T6852] syz-executor: attempt to access beyond end of device [ 284.442052][ T6852] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.581714][ T7293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.697'. [ 284.733771][ T3558] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.745962][ T3558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.756137][ T3558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.765080][ T3558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.774724][ T3558] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.784063][ T3566] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.321332][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'. [ 285.437175][ T7294] chnl_net:caif_netlink_parms(): no params data found [ 285.747786][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.784956][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.824258][ T7294] device bridge_slave_0 entered promiscuous mode [ 285.862957][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.900714][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.934576][ T7294] device bridge_slave_1 entered promiscuous mode [ 286.068480][ T7294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.115107][ T7294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.261943][ T7294] team0: Port device team_slave_0 added [ 286.296131][ T7294] team0: Port device team_slave_1 added [ 286.363103][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.370508][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.401522][ T7303] loop4: detected capacity change from 0 to 32768 [ 286.409426][ T7294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.422723][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.430077][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.458905][ T7294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.480503][ T7303] XFS (loop4): Mounting V5 Filesystem [ 286.588886][ T7294] device hsr_slave_0 entered promiscuous mode [ 286.604620][ T7303] XFS (loop4): Ending clean mount [ 286.610453][ T7294] device hsr_slave_1 entered promiscuous mode [ 286.612551][ T7303] XFS (loop4): Quotacheck needed: Please wait. [ 286.626195][ T7294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.648799][ T7294] Cannot create hsr debugfs directory [ 286.685170][ T7303] XFS (loop4): Quotacheck: Done. [ 286.780210][ T6852] XFS (loop4): Unmounting Filesystem [ 286.827562][ T3559] Bluetooth: hci5: command tx timeout [ 287.675706][ T7294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.061418][ T7294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.181270][ T7338] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 288.303157][ T7294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.448993][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 288.472762][ T7294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.897343][ T3559] Bluetooth: hci5: command tx timeout [ 289.185926][ T7294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.254557][ T7294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 289.349130][ T7294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 289.380435][ T7294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.413610][ T7340] loop4: detected capacity change from 0 to 32768 [ 289.435904][ T7340] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.702 (7340) [ 289.546027][ T7340] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 289.627571][ T7340] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 289.686770][ T7340] BTRFS info (device loop4): force zlib compression, level 3 [ 289.740081][ T7340] BTRFS info (device loop4): force clearing of disk cache [ 289.777664][ T7340] BTRFS info (device loop4): setting nodatasum [ 289.797295][ T7340] BTRFS info (device loop4): allowing degraded mounts [ 289.804126][ T7340] BTRFS info (device loop4): enabling disk space caching [ 289.805009][ T7294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.856994][ T7340] BTRFS info (device loop4): disk space caching is enabled [ 289.883865][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.903422][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.929619][ T7294] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.980820][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.000779][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.034558][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.041831][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.068960][ T7340] BTRFS info (device loop4): rebuilding free space tree [ 290.075109][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.099112][ T7340] BTRFS info (device loop4): disabling free space tree [ 290.110735][ T7340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 290.125522][ T7340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 290.176739][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.259785][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.311821][ T4207] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.319046][ T4207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.420546][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 290.551336][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 290.585989][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.665492][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.720816][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.846095][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.879643][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.916995][ T7294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.934591][ T7294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.977551][ T3559] Bluetooth: hci5: command tx timeout [ 290.986192][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.111821][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.185281][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.219326][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.256963][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.325451][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.765628][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.786566][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.803396][ T7294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.842007][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.857160][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.885743][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 291.895311][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.912737][ T7294] device veth0_vlan entered promiscuous mode [ 291.926839][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.943414][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.958387][ T7294] device veth1_vlan entered promiscuous mode [ 292.008734][ T7294] device veth0_macvtap entered promiscuous mode [ 292.029741][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 292.042686][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 292.062099][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.072111][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.084480][ T7294] device veth1_macvtap entered promiscuous mode [ 292.103099][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 292.127396][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.139201][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.167965][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.181497][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.202120][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.225726][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.237432][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.257771][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.285576][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.309376][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.341739][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.390766][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.408581][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.421249][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 292.433533][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 292.447886][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.483749][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.531107][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.564961][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.584218][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.596453][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.608791][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.620186][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.657827][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.687373][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.729960][ T7294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.745537][ T7294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.759852][ T7294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.772882][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 292.786290][ T7400] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 292.802112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 292.831789][ T7294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.848413][ T7294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.864873][ T7294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.878650][ T7294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.068144][ T3559] Bluetooth: hci5: command tx timeout [ 293.089217][ T6852] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 293.149790][ T3644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.159379][ T3644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.240522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 293.295393][ T3698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.417724][ T3698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.437810][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.678454][ T7410] Bluetooth: hci3: unsupported parameter 28 [ 293.684454][ T7410] Bluetooth: hci3: unsupported parameter 28 [ 294.150681][ T5763] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 294.597976][ T5763] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 294.626921][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.659267][ T5763] usb 2-1: config 0 descriptor?? [ 294.867471][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 295.161365][ T7430] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 295.187916][ T5763] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 295.277557][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.298036][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.417482][ T5763] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 295.426241][ T7] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 295.446313][ T5763] gs_usb: probe of 2-1:0.0 failed with error -71 [ 295.453958][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 295.475997][ T7] usb 5-1: SerialNumber: syz [ 295.481257][ T5763] usb 2-1: USB disconnect, device number 8 [ 296.015193][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.732'. [ 296.120472][ T7] usb 5-1: 0:2 : does not exist [ 296.130480][ T7440] loop2: detected capacity change from 0 to 256 [ 296.153754][ T7] usb 5-1: USB disconnect, device number 10 [ 296.244536][ T7444] Bluetooth: hci3: unsupported parameter 28 [ 296.257026][ T7444] Bluetooth: hci3: unsupported parameter 28 [ 296.285805][ T7432] loop3: detected capacity change from 0 to 32768 [ 296.348801][ T7432] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.730 (7432) [ 296.416596][ T7432] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 296.431457][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.455481][ T7432] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 296.483191][ T7432] BTRFS info (device loop3): force zlib compression, level 3 [ 296.492531][ T7432] BTRFS info (device loop3): force clearing of disk cache [ 296.504055][ T7432] BTRFS info (device loop3): setting nodatasum [ 296.510311][ T7432] BTRFS info (device loop3): allowing degraded mounts [ 296.517355][ T7432] BTRFS info (device loop3): enabling disk space caching [ 296.524464][ T7432] BTRFS info (device loop3): disk space caching is enabled [ 296.553005][ T7432] BTRFS info (device loop3): rebuilding free space tree [ 296.579169][ T7432] BTRFS info (device loop3): disabling free space tree [ 296.590856][ T7432] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 296.600753][ T7432] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 296.994991][ T7474] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 297.056544][ T7476] fuse: Unknown parameter './file0' [ 297.887395][ T3601] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 297.988318][ T7449] loop1: detected capacity change from 0 to 32768 [ 298.102359][ T7449] XFS (loop1): Mounting V5 Filesystem [ 298.221969][ T7449] XFS (loop1): Ending clean mount [ 298.248324][ T3601] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 298.287780][ T3601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.331885][ T7449] XFS (loop1): Quotacheck needed: Please wait. [ 298.353562][ T3601] usb 5-1: config 0 descriptor?? [ 298.437575][ T7449] XFS (loop1): Quotacheck: Done. [ 298.568141][ T4253] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 298.626503][ T7294] XFS (loop1): Unmounting Filesystem [ 298.857440][ T3601] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 299.077618][ T3601] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 299.088224][ T3601] gs_usb: probe of 5-1:0.0 failed with error -121 [ 299.285074][ T3601] usb 5-1: USB disconnect, device number 11 [ 299.378530][ T7502] Bluetooth: hci3: unsupported parameter 28 [ 299.384507][ T7502] Bluetooth: hci3: unsupported parameter 28 [ 299.403251][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'. [ 299.576618][ T7507] loop1: detected capacity change from 0 to 256 [ 299.867405][ T5497] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 299.960436][ T7516] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 300.025509][ T7516] fuse: Unknown parameter './file0' [ 300.247644][ T5497] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.277245][ T5497] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.357789][ T5497] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 300.366988][ T5497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 300.387288][ T5497] usb 4-1: SerialNumber: syz [ 300.782233][ T7523] loop4: detected capacity change from 0 to 32768 [ 300.801027][ T7523] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.755 (7523) [ 300.850480][ T5497] usb 4-1: 0:2 : does not exist [ 300.892463][ T5497] usb 4-1: USB disconnect, device number 5 [ 300.947866][ T7523] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 300.979512][ T3647] udevd[3647]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.009969][ T7523] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 301.027534][ T7523] BTRFS info (device loop4): force zlib compression, level 3 [ 301.052976][ T7523] BTRFS info (device loop4): force clearing of disk cache [ 301.081819][ T7523] BTRFS info (device loop4): setting nodatasum [ 301.093789][ T7523] BTRFS info (device loop4): allowing degraded mounts [ 301.108153][ T7523] BTRFS info (device loop4): enabling disk space caching [ 301.142110][ T7523] BTRFS info (device loop4): disk space caching is enabled [ 301.266392][ T7527] loop2: detected capacity change from 0 to 32768 [ 301.357668][ T7523] BTRFS info (device loop4): rebuilding free space tree [ 301.378511][ T7527] XFS (loop2): Mounting V5 Filesystem [ 301.397069][ T7523] BTRFS info (device loop4): disabling free space tree [ 301.425190][ T7561] loop3: detected capacity change from 0 to 256 [ 301.434574][ T7523] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 301.444610][ T7523] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 301.516952][ T7527] XFS (loop2): Ending clean mount [ 301.524275][ T7527] XFS (loop2): Quotacheck needed: Please wait. [ 301.610199][ T7527] XFS (loop2): Quotacheck: Done. [ 301.812316][ T4048] XFS (loop2): Unmounting Filesystem [ 302.197504][ T3601] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 302.587853][ T3601] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 303.077684][ T3601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.113078][ T3601] usb 4-1: config 0 descriptor?? [ 303.618843][ T3601] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 304.457497][ T3601] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 304.474553][ T3601] gs_usb: probe of 4-1:0.0 failed with error -121 [ 304.684607][ T3601] usb 4-1: USB disconnect, device number 6 [ 304.712932][ T6852] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 304.941879][ T7140] block nbd0: Possible stuck request ffff88801fef0000: control (read@0,4096B). Runtime 90 seconds [ 305.127383][ T41] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 305.352361][ T7599] loop3: detected capacity change from 0 to 256 [ 305.488364][ T41] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.518571][ T41] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.638373][ T41] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 305.657405][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 305.666644][ T41] usb 3-1: SerialNumber: syz [ 305.789631][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 306.217779][ T14] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 306.309020][ T41] usb 3-1: 0:2 : does not exist [ 306.393647][ T41] usb 3-1: USB disconnect, device number 10 [ 306.845332][ T7603] loop4: detected capacity change from 0 to 32768 [ 307.002892][ T14] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 307.031026][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.057378][ T7603] XFS (loop4): Mounting V5 Filesystem [ 307.267616][ T5497] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 307.435481][ T7603] XFS (loop4): Ending clean mount [ 307.523067][ T7603] XFS (loop4): Quotacheck needed: Please wait. [ 307.748100][ T5497] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 307.769546][ T5497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.804083][ T5497] usb 3-1: config 0 descriptor?? [ 307.825683][ T7603] XFS (loop4): Quotacheck: Done. [ 307.924738][ T7616] loop0: detected capacity change from 0 to 32768 [ 307.947288][ T14] usb 2-1: string descriptor 0 read error: -71 [ 307.953811][ T14] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 307.953810][ T7616] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.780 (7616) [ 308.026858][ T14] usb 2-1: No valid video chain found. [ 308.058167][ T14] usb 2-1: USB disconnect, device number 9 [ 308.084218][ T7616] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 308.108006][ T7616] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 308.111677][ T6852] XFS (loop4): Unmounting Filesystem [ 308.131977][ T7616] BTRFS info (device loop0): force zlib compression, level 3 [ 308.140115][ T7616] BTRFS info (device loop0): force clearing of disk cache [ 308.156314][ T7616] BTRFS info (device loop0): setting nodatasum [ 308.201608][ T7616] BTRFS info (device loop0): allowing degraded mounts [ 308.209198][ T7616] BTRFS info (device loop0): enabling disk space caching [ 308.240538][ T7616] BTRFS info (device loop0): disk space caching is enabled [ 308.307421][ T5497] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 308.514815][ T7616] BTRFS info (device loop0): rebuilding free space tree [ 308.522451][ T5497] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 308.537525][ T5497] gs_usb: probe of 3-1:0.0 failed with error -121 [ 308.561192][ T7657] loop1: detected capacity change from 0 to 256 [ 308.578224][ T7616] BTRFS info (device loop0): disabling free space tree [ 308.593318][ T7616] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 308.633274][ T7616] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 308.725410][ T5763] usb 3-1: USB disconnect, device number 11 [ 310.413304][ T7683] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 312.637741][ T6273] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 313.137342][ T41] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 313.507600][ T41] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 313.527150][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.573925][ T41] usb 5-1: config 0 descriptor?? [ 313.676474][ T7715] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 314.068521][ T41] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 314.287687][ T41] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 314.300457][ T41] gs_usb: probe of 5-1:0.0 failed with error -121 [ 314.522529][ T41] usb 5-1: USB disconnect, device number 12 [ 315.117670][ T41] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 315.293533][ T7723] loop2: detected capacity change from 0 to 32768 [ 315.328201][ T7723] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.811 (7723) [ 315.381943][ T7723] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 315.436589][ T7723] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 315.469496][ T7723] BTRFS info (device loop2): force zlib compression, level 3 [ 315.481913][ T7723] BTRFS info (device loop2): force clearing of disk cache [ 315.498076][ T41] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.533849][ T41] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.544740][ T7723] BTRFS info (device loop2): setting nodatasum [ 315.551561][ T7723] BTRFS info (device loop2): allowing degraded mounts [ 315.562432][ T7723] BTRFS info (device loop2): enabling disk space caching [ 315.574828][ T7723] BTRFS info (device loop2): disk space caching is enabled [ 315.627699][ T41] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 315.644957][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 315.663667][ T41] usb 2-1: SerialNumber: syz [ 315.832891][ T7723] BTRFS info (device loop2): rebuilding free space tree [ 315.862755][ T7723] BTRFS info (device loop2): disabling free space tree [ 315.882852][ T7723] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 315.914209][ T7723] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 316.262833][ T7774] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 316.360439][ T41] usb 2-1: 0:2 : does not exist [ 316.422570][ T41] usb 2-1: USB disconnect, device number 10 [ 316.718234][ T7637] udevd[7637]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.988593][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.995162][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.108919][ T7767] loop4: detected capacity change from 0 to 32768 [ 318.186453][ T7767] XFS (loop4): Mounting V5 Filesystem [ 318.338095][ T7767] XFS (loop4): Ending clean mount [ 318.349725][ T7767] XFS (loop4): Quotacheck needed: Please wait. [ 318.373445][ T4048] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 318.416063][ T7767] XFS (loop4): Quotacheck: Done. [ 318.631568][ T6852] XFS (loop4): Unmounting Filesystem [ 319.227933][ T7809] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 319.376844][ T3558] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 320.463044][ T7833] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 321.146082][ T7841] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 321.155214][ T7832] loop2: detected capacity change from 0 to 32768 [ 321.171209][ T7830] loop4: detected capacity change from 0 to 32768 [ 321.225462][ T7830] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.839 (7830) [ 321.266324][ T7832] XFS (loop2): Mounting V5 Filesystem [ 321.291769][ T7830] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 321.347411][ T7830] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 321.427355][ T7830] BTRFS info (device loop4): force zlib compression, level 3 [ 321.442430][ T7830] BTRFS info (device loop4): force clearing of disk cache [ 321.467405][ T7832] XFS (loop2): Ending clean mount [ 321.498800][ T7832] XFS (loop2): Quotacheck needed: Please wait. [ 321.505145][ T7830] BTRFS info (device loop4): setting nodatasum [ 321.525399][ T7830] BTRFS info (device loop4): allowing degraded mounts [ 321.541878][ T7830] BTRFS info (device loop4): enabling disk space caching [ 321.616141][ T7832] XFS (loop2): Quotacheck: Done. [ 321.627596][ T7830] BTRFS info (device loop4): disk space caching is enabled [ 322.377863][ T7830] BTRFS info (device loop4): rebuilding free space tree [ 322.490561][ T7830] BTRFS info (device loop4): disabling free space tree [ 322.500207][ T7830] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 322.526268][ T4048] XFS (loop2): Unmounting Filesystem [ 322.549887][ T7830] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 323.817956][ T7891] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.437513][ T3597] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 324.615118][ T6852] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 324.847404][ T3597] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 324.881976][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.968214][ T3597] usb 2-1: config 0 descriptor?? [ 325.213167][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.859'. [ 325.245007][ T7915] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 325.267396][ T4207] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 325.457449][ T3597] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 325.563163][ T4207] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 325.612529][ T7911] loop2: detected capacity change from 0 to 32768 [ 325.683723][ T7911] XFS (loop2): Mounting V5 Filesystem [ 325.689370][ T3597] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 325.700098][ T3597] gs_usb: probe of 2-1:0.0 failed with error -121 [ 325.802034][ T7911] XFS (loop2): Ending clean mount [ 325.820335][ T7911] XFS (loop2): Quotacheck needed: Please wait. [ 325.888639][ T7930] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.903538][ T5326] usb 2-1: USB disconnect, device number 11 [ 325.926436][ T7911] XFS (loop2): Quotacheck: Done. [ 326.135716][ T4048] XFS (loop2): Unmounting Filesystem [ 326.217691][ T4207] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 326.242998][ T4207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.556635][ T7939] netlink: 596 bytes leftover after parsing attributes in process `syz.1.866'. [ 327.147399][ T4207] usb 4-1: string descriptor 0 read error: -71 [ 327.153797][ T4207] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 327.161312][ T4207] usb 4-1: No valid video chain found. [ 327.174128][ T4207] usb 4-1: USB disconnect, device number 7 [ 327.558548][ T7943] loop2: detected capacity change from 0 to 32768 [ 327.577488][ T7943] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.868 (7943) [ 327.611613][ T7943] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 327.642827][ T7943] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 327.659069][ T7943] BTRFS info (device loop2): using free space tree [ 327.850703][ T7970] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 327.905290][ T7943] BTRFS info (device loop2): enabling ssd optimizations [ 327.969174][ T7943] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 328.018463][ T7939] loop1: detected capacity change from 0 to 32768 [ 328.088013][ T7939] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.866 (7939) [ 328.119731][ T4048] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 328.152741][ T7939] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 328.254787][ T7939] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 328.397531][ T7939] BTRFS info (device loop1): force zlib compression, level 3 [ 328.437361][ T7939] BTRFS info (device loop1): force clearing of disk cache [ 328.475199][ T7939] BTRFS info (device loop1): setting nodatasum [ 328.515714][ T7939] BTRFS info (device loop1): allowing degraded mounts [ 328.537542][ T7939] BTRFS info (device loop1): enabling disk space caching [ 328.562493][ T7939] BTRFS info (device loop1): disk space caching is enabled [ 329.127121][ T7939] BTRFS info (device loop1): rebuilding free space tree [ 329.147852][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.873'. [ 329.199112][ T7939] BTRFS info (device loop1): disabling free space tree [ 329.216608][ T7939] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 329.249866][ T7939] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 329.477313][ T5323] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 329.857624][ T5323] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 329.897375][ T5323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.947225][ T5323] usb 5-1: config 0 descriptor?? [ 330.022613][ T7999] loop3: detected capacity change from 0 to 32768 [ 330.192050][ T7999] XFS (loop3): Mounting V5 Filesystem [ 330.372652][ T7999] XFS (loop3): Ending clean mount [ 330.398990][ T7999] XFS (loop3): Quotacheck needed: Please wait. [ 330.447565][ T5323] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 330.450460][ T7999] XFS (loop3): Quotacheck: Done. [ 330.605894][ T4253] XFS (loop3): Unmounting Filesystem [ 330.668489][ T5323] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 330.689471][ T5323] gs_usb: probe of 5-1:0.0 failed with error -121 [ 330.876348][ T5323] usb 5-1: USB disconnect, device number 13 [ 331.243771][ T7294] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 331.995934][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.887'. [ 332.109231][ T8034] loop0: detected capacity change from 0 to 32768 [ 332.158843][ T8034] XFS: noikeep mount option is deprecated. [ 332.327419][ T8034] XFS (loop0): Mounting V5 Filesystem [ 332.649517][ T8034] XFS (loop0): Ending clean mount [ 332.674726][ T8038] loop3: detected capacity change from 0 to 32768 [ 332.700620][ T8038] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.883 (8038) [ 332.712741][ T8034] XFS (loop0): Quotacheck needed: Please wait. [ 332.790245][ T8038] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 332.794178][ T8034] XFS (loop0): Quotacheck: Done. [ 332.821378][ T8038] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 332.853585][ T8038] BTRFS info (device loop3): using free space tree [ 333.341302][ T8038] BTRFS info (device loop3): enabling ssd optimizations [ 333.498608][ T8038] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 333.686352][ T4253] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 334.381802][ T8091] netlink: 596 bytes leftover after parsing attributes in process `syz.4.896'. [ 335.079020][ T6273] XFS (loop0): Unmounting Filesystem [ 335.100173][ T8082] loop2: detected capacity change from 0 to 40427 [ 335.121863][ T8082] F2FS-fs (loop2): invalid crc value [ 335.207947][ T8082] F2FS-fs (loop2): Found nat_bits in checkpoint [ 335.302426][ T3596] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 335.315971][ T8082] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 335.439626][ T8082] syz.2.891: attempt to access beyond end of device [ 335.439626][ T8082] loop2: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 335.473490][ T8082] syz.2.891: attempt to access beyond end of device [ 335.473490][ T8082] loop2: rw=2049, sector=53384, nr_sectors = 8 limit=40427 [ 335.509375][ T8094] loop4: detected capacity change from 0 to 32768 [ 335.547760][ T8082] syz.2.891: attempt to access beyond end of device [ 335.547760][ T8082] loop2: rw=2049, sector=53392, nr_sectors = 8 limit=40427 [ 335.565390][ T8094] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.896 (8094) [ 335.581807][ T8093] loop3: detected capacity change from 0 to 32768 [ 335.601047][ T7140] block nbd0: Possible stuck request ffff88801fef0000: control (read@0,4096B). Runtime 120 seconds [ 335.609516][ T8082] syz.2.891: attempt to access beyond end of device [ 335.609516][ T8082] loop2: rw=2049, sector=53400, nr_sectors = 112 limit=40427 [ 335.615221][ T26] audit: type=1804 audit(1720261490.391:24): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.891" name="/newroot/169/bus/file1" dev="loop2" ino=10 res=1 errno=0 [ 335.659605][ T3596] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 335.689818][ T8093] XFS (loop3): Mounting V5 Filesystem [ 335.717424][ T8094] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 335.755251][ T8094] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 335.788468][ T4048] syz-executor: attempt to access beyond end of device [ 335.788468][ T4048] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 335.807551][ T8094] BTRFS info (device loop4): force zlib compression, level 3 [ 335.819275][ T8094] BTRFS info (device loop4): force clearing of disk cache [ 335.854968][ T8094] BTRFS info (device loop4): setting nodatasum [ 335.907655][ T8094] BTRFS info (device loop4): allowing degraded mounts [ 335.914799][ T8094] BTRFS info (device loop4): enabling disk space caching [ 335.929305][ T8093] XFS (loop3): Ending clean mount [ 335.950123][ T8093] XFS (loop3): Quotacheck needed: Please wait. [ 335.967531][ T8094] BTRFS info (device loop4): disk space caching is enabled [ 336.044976][ T8093] XFS (loop3): Quotacheck: Done. [ 336.100067][ T8094] BTRFS info (device loop4): rebuilding free space tree [ 336.120977][ T8094] BTRFS info (device loop4): disabling free space tree [ 336.132109][ T8094] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 336.142667][ T8094] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 336.270155][ T4253] XFS (loop3): Unmounting Filesystem [ 336.397859][ T3596] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 336.407690][ T3596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.144998][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 337.207487][ T3596] usb 2-1: string descriptor 0 read error: -71 [ 337.219304][ T3596] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 337.267459][ T3596] usb 2-1: No valid video chain found. [ 337.307562][ T3596] usb 2-1: USB disconnect, device number 12 [ 337.853413][ T6852] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 339.969042][ T8162] loop4: detected capacity change from 0 to 32768 [ 340.008164][ T8162] XFS: noikeep mount option is deprecated. [ 340.109026][ T8162] XFS (loop4): Mounting V5 Filesystem [ 340.135544][ T8168] loop0: detected capacity change from 0 to 32768 [ 340.246812][ T8188] netlink: 596 bytes leftover after parsing attributes in process `syz.2.915'. [ 340.313889][ T8168] XFS (loop0): Mounting V5 Filesystem [ 340.400297][ T8162] XFS (loop4): Ending clean mount [ 340.425191][ T8162] XFS (loop4): Quotacheck needed: Please wait. [ 340.464426][ T8168] XFS (loop0): Ending clean mount [ 340.517908][ T8162] XFS (loop4): Quotacheck: Done. [ 340.533312][ T8168] XFS (loop0): Quotacheck needed: Please wait. [ 340.750596][ T8168] XFS (loop0): Quotacheck: Done. [ 341.088764][ T6273] XFS (loop0): Unmounting Filesystem [ 341.529632][ T8188] loop2: detected capacity change from 0 to 32768 [ 341.568950][ T8188] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.915 (8188) [ 341.651814][ T8188] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 341.698889][ T8188] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 341.747362][ T8188] BTRFS info (device loop2): force zlib compression, level 3 [ 341.783356][ T8188] BTRFS info (device loop2): force clearing of disk cache [ 341.799198][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.922'. [ 341.818412][ T8188] BTRFS info (device loop2): setting nodatasum [ 341.852119][ T8188] BTRFS info (device loop2): allowing degraded mounts [ 341.897330][ T8188] BTRFS info (device loop2): enabling disk space caching [ 341.927322][ T8188] BTRFS info (device loop2): disk space caching is enabled [ 342.201877][ T8188] BTRFS info (device loop2): rebuilding free space tree [ 342.252895][ T8188] BTRFS info (device loop2): disabling free space tree [ 342.327553][ T8188] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 342.381365][ T8188] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 344.402483][ T6852] XFS (loop4): Unmounting Filesystem [ 344.898875][ T4048] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 345.521840][ T8258] loop2: detected capacity change from 0 to 256 [ 345.586374][ T8258] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 345.611357][ T8251] loop1: detected capacity change from 0 to 32768 [ 345.783209][ T8251] XFS (loop1): Mounting V5 Filesystem [ 345.967376][ T8251] XFS (loop1): Ending clean mount [ 345.991939][ T8251] XFS (loop1): Quotacheck needed: Please wait. [ 346.240741][ T8256] loop3: detected capacity change from 0 to 32768 [ 346.350440][ T8251] XFS (loop1): Quotacheck: Done. [ 346.547007][ T7294] XFS (loop1): Unmounting Filesystem [ 346.578282][ T3558] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 347.326386][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'. [ 347.614006][ T8297] 9pnet_fd: Insufficient options for proto=fd [ 348.421276][ T8283] loop0: detected capacity change from 0 to 32768 [ 348.458023][ T8283] XFS: noikeep mount option is deprecated. [ 348.677303][ T8283] XFS (loop0): Mounting V5 Filesystem [ 348.780552][ T8283] XFS (loop0): Ending clean mount [ 348.831432][ T8283] XFS (loop0): Quotacheck needed: Please wait. [ 349.006662][ T8283] XFS (loop0): Quotacheck: Done. [ 349.899331][ T8310] loop4: detected capacity change from 0 to 32768 [ 350.035288][ T8310] XFS (loop4): Mounting V5 Filesystem [ 350.172579][ T8310] XFS (loop4): Ending clean mount [ 350.224010][ T8310] XFS (loop4): Quotacheck needed: Please wait. [ 350.398055][ T8310] XFS (loop4): Quotacheck: Done. [ 350.529392][ T6273] XFS (loop0): Unmounting Filesystem [ 350.532403][ T6852] XFS (loop4): Unmounting Filesystem [ 351.857592][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 352.629293][ T8373] lo speed is unknown, defaulting to 1000 [ 352.640299][ T8373] lo speed is unknown, defaulting to 1000 [ 352.648408][ T8373] lo speed is unknown, defaulting to 1000 [ 352.707886][ T14] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 352.724705][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.767496][ T8373] infiniband syz0: set active [ 352.773179][ T8373] infiniband syz0: added lo [ 352.799864][ T8373] infiniband syz0: Couldn't open port 1 [ 352.891779][ T8373] RDS/IB: syz0: added [ 352.896337][ T8373] smc: adding ib device syz0 with port count 1 [ 352.902855][ T8373] smc: ib device syz0 port 1 has pnetid [ 352.914859][ T8373] lo speed is unknown, defaulting to 1000 [ 352.955500][ T3690] lo speed is unknown, defaulting to 1000 [ 353.046060][ T8373] lo speed is unknown, defaulting to 1000 [ 353.139124][ T8373] lo speed is unknown, defaulting to 1000 [ 353.240037][ T8373] lo speed is unknown, defaulting to 1000 [ 353.323426][ T8373] lo speed is unknown, defaulting to 1000 [ 353.407053][ T8373] lo speed is unknown, defaulting to 1000 [ 353.490109][ T8373] lo speed is unknown, defaulting to 1000 [ 353.654558][ T3597] lo speed is unknown, defaulting to 1000 [ 353.689206][ T14] usb 4-1: config 0 descriptor?? [ 353.825565][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.961'. [ 354.167967][ T14] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 355.357510][ T14] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 355.407019][ T14] gs_usb: probe of 4-1:0.0 failed with error -121 [ 355.560441][ T14] usb 4-1: USB disconnect, device number 8 [ 356.683704][ T8390] loop2: detected capacity change from 0 to 32768 [ 356.726500][ T8390] XFS: noikeep mount option is deprecated. [ 356.861118][ T8390] XFS (loop2): Mounting V5 Filesystem [ 356.961085][ T8390] XFS (loop2): log mount failed [ 358.417443][ T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 358.448065][ T8439] loop2: detected capacity change from 0 to 1024 [ 358.472364][ T8439] EXT4-fs: Ignoring removed i_version option [ 358.499956][ T8439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 358.587381][ T8439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 358.746930][ T4048] EXT4-fs (loop2): unmounting filesystem. [ 358.777407][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.796500][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.863171][ T8414] loop0: detected capacity change from 0 to 40427 [ 358.887566][ T14] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 358.897838][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 358.923012][ T14] usb 2-1: SerialNumber: syz [ 358.935375][ T8414] F2FS-fs (loop0): invalid crc value [ 359.035527][ T8414] F2FS-fs (loop0): Found nat_bits in checkpoint [ 359.060049][ T8455] loop2: detected capacity change from 0 to 256 [ 359.224284][ T8414] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 359.301080][ T8414] syz.0.975: attempt to access beyond end of device [ 359.301080][ T8414] loop0: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 359.341851][ T8414] syz.0.975: attempt to access beyond end of device [ 359.341851][ T8414] loop0: rw=2049, sector=53384, nr_sectors = 8 limit=40427 [ 359.385166][ T26] audit: type=1804 audit(1720261514.171:25): pid=8414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.975" name="/newroot/93/bus/file1" dev="loop0" ino=10 res=1 errno=0 [ 359.420329][ T14] usb 2-1: 0:2 : does not exist [ 359.425717][ T14] usb 2-1: unit 5 not found! [ 359.435486][ T8414] syz.0.975: attempt to access beyond end of device [ 359.435486][ T8414] loop0: rw=2049, sector=53392, nr_sectors = 112 limit=40427 [ 359.478377][ T14] usb 2-1: USB disconnect, device number 13 [ 359.550468][ T6273] syz-executor: attempt to access beyond end of device [ 359.550468][ T6273] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 359.627321][ T4208] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 359.856658][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'. [ 359.997676][ T4208] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 360.010813][ T4208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.060355][ T4208] usb 3-1: config 0 descriptor?? [ 360.547475][ T4208] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 360.767544][ T4208] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 360.789565][ T4208] gs_usb: probe of 3-1:0.0 failed with error -121 [ 360.971537][ T4208] usb 3-1: USB disconnect, device number 12 [ 361.574530][ T8472] loop0: detected capacity change from 0 to 32768 [ 361.594653][ T8472] XFS: noikeep mount option is deprecated. [ 361.697128][ T8486] loop2: detected capacity change from 0 to 512 [ 361.709117][ T8472] XFS (loop0): Mounting V5 Filesystem [ 361.795935][ T8486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 361.823861][ T8472] XFS (loop0): Ending clean mount [ 361.850775][ T8486] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038 (0x7fffffff) [ 361.877290][ T5497] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 361.890677][ T8472] XFS (loop0): Quotacheck needed: Please wait. [ 362.017788][ T8472] XFS (loop0): Quotacheck: Done. [ 362.070032][ T4048] EXT4-fs (loop2): unmounting filesystem. [ 362.117217][ T8498] device macsec0 entered promiscuous mode [ 362.187657][ T5497] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 363.053558][ T5497] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 363.068733][ T5497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.707693][ T27] INFO: task syz.0.478:6047 blocked for more than 143 seconds. [ 363.742538][ T27] Not tainted 6.1.97-syzkaller #0 [ 363.762990][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.803814][ T27] task:syz.0.478 state:D stack:26808 pid:6047 ppid:3807 flags:0x00004004 [ 363.853622][ T27] Call Trace: [ 363.872452][ T27] [ 363.889511][ T27] __schedule+0x142d/0x4550 [ 363.914610][ T27] ? __sched_text_start+0x8/0x8 [ 363.936057][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 363.958015][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 363.975870][ T27] schedule+0xbf/0x180 [ 363.989285][ T27] schedule_preempt_disabled+0xf/0x20 [ 364.007503][ T27] __mutex_lock+0x6b9/0xd80 [ 364.022275][ T27] ? __mutex_lock+0x53c/0xd80 [ 364.040543][ T27] ? blkdev_get_by_dev+0x148/0xa10 [ 364.060221][ T27] ? mutex_lock_nested+0x10/0x10 [ 364.080010][ T27] ? _atomic_dec_and_lock+0x96/0x130 [ 364.105682][ T27] ? iput+0x401/0x980 [ 364.123564][ T27] ? ilookup+0x1c8/0x200 [ 364.141754][ T27] ? disk_block_events+0xa1/0x110 [ 364.175424][ T27] ? blkdev_get_by_dev+0xe7/0xa10 [ 364.177002][ T8505] loop3: detected capacity change from 0 to 40427 [ 364.191996][ T27] blkdev_get_by_dev+0x148/0xa10 [ 364.209045][ T27] blkdev_open+0x12e/0x2e0 [ 364.229580][ T27] ? blkdev_mmap+0x1b0/0x1b0 [ 364.243221][ T27] do_dentry_open+0x7f9/0x10f0 [ 364.265949][ T27] path_openat+0x2644/0x2e60 [ 364.277252][ T8505] F2FS-fs (loop3): invalid crc value [ 364.295041][ T27] ? mark_lock+0x9a/0x340 [ 364.306392][ T27] ? do_filp_open+0x480/0x480 [ 364.313586][ T8505] F2FS-fs (loop3): Found nat_bits in checkpoint [ 364.326101][ T27] do_filp_open+0x230/0x480 [ 364.339723][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 364.354835][ T27] ? _raw_spin_unlock+0x24/0x40 [ 364.372769][ T27] ? alloc_fd+0x59c/0x640 [ 364.386424][ T27] do_sys_openat2+0x13b/0x500 [ 364.402953][ T27] ? do_sys_open+0x220/0x220 [ 364.417347][ T27] __x64_sys_openat+0x243/0x290 [ 364.422306][ T27] ? __ia32_sys_open+0x270/0x270 [ 364.448682][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 364.451202][ T8518] loop1: detected capacity change from 0 to 32768 [ 364.454736][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 364.454773][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 364.500569][ T8518] read_mapping_page failed! [ 364.505397][ T8505] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 364.517660][ T8518] ERROR: (device loop1): txCommit: [ 364.517660][ T8518] [ 364.544974][ T27] do_syscall_64+0x3b/0xb0 [ 364.547868][ T8505] syz.3.997: attempt to access beyond end of device [ 364.547868][ T8505] loop3: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 364.549911][ T27] ? clear_bhb_loop+0x45/0xa0 [ 364.577384][ T8518] ERROR: (device loop1): remounting filesystem as read-only [ 364.587060][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.603163][ T8505] syz.3.997: attempt to access beyond end of device [ 364.603163][ T8505] loop3: rw=2049, sector=53384, nr_sectors = 8 limit=40427 [ 364.617085][ T27] RIP: 0033:0x7ffa45174610 [ 364.627247][ T27] RSP: 002b:00007ffa44fddb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 364.636079][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffa45174610 [ 364.648290][ T26] audit: type=1804 audit(1720261519.441:26): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.997" name="/newroot/175/bus/file1" dev="loop3" ino=10 res=1 errno=0 [ 364.650744][ T8505] syz.3.997: attempt to access beyond end of device [ 364.650744][ T8505] loop3: rw=2049, sector=53392, nr_sectors = 112 limit=40427 [ 364.682218][ T27] RDX: 0000000000000000 RSI: 00007ffa44fddc20 RDI: 00000000ffffff9c [ 364.703236][ T27] RBP: 00007ffa44fddc20 R08: 0000000000000000 R09: 002364626e2f7665 [ 364.714660][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 364.730776][ T27] R13: 000000000000006e R14: 00007ffa45304038 R15: 00007ffc80b86f58 [ 364.742471][ T27] [ 364.745621][ T27] INFO: task syz.0.478:6050 blocked for more than 144 seconds. [ 364.770180][ T27] Not tainted 6.1.97-syzkaller #0 [ 364.776101][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.785455][ T5497] usb 5-1: string descriptor 0 read error: -71 [ 364.794293][ T27] task:syz.0.478 state:D stack:27352 pid:6050 ppid:3807 flags:0x00004004 [ 364.804231][ T5497] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 364.819664][ T5497] usb 5-1: No valid video chain found. [ 364.825390][ T27] Call Trace: [ 364.829404][ T27] [ 364.839880][ T5497] usb 5-1: USB disconnect, device number 14 [ 364.846001][ T27] __schedule+0x142d/0x4550 [ 364.852617][ T27] ? __sched_text_start+0x8/0x8 [ 364.863458][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 364.869595][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 364.875007][ T27] schedule+0xbf/0x180 [ 364.879590][ T27] schedule_preempt_disabled+0xf/0x20 [ 364.885965][ T27] __mutex_lock+0x6b9/0xd80 [ 364.897046][ T27] ? __mutex_lock+0x53c/0xd80 [ 364.907582][ T27] ? blkdev_put+0x100/0x750 [ 364.912427][ T27] ? mutex_lock_nested+0x10/0x10 [ 364.917963][ T27] ? __fsnotify_parent+0x50b/0x730 [ 364.923166][ T27] ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0 [ 364.932869][ T27] blkdev_put+0x100/0x750 [ 364.941564][ T27] ? task_work_run+0x1fc/0x300 [ 364.946400][ T27] blkdev_close+0x56/0x80 [ 364.950863][ T27] ? blkdev_open+0x2e0/0x2e0 [ 364.955654][ T27] __fput+0x3b7/0x890 [ 364.959905][ T27] task_work_run+0x246/0x300 [ 364.964552][ T27] ? task_work_cancel+0x2b0/0x2b0 [ 364.969876][ T27] ? blkdev_ioctl+0x3a9/0x760 [ 364.975645][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 364.981466][ T27] exit_to_user_mode_loop+0xde/0x100 [ 364.986979][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 364.992891][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 364.998584][ T27] do_syscall_64+0x47/0xb0 [ 365.003203][ T27] ? clear_bhb_loop+0x45/0xa0 [ 365.007999][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.014174][ T27] RIP: 0033:0x7ffa45175bd9 [ 365.018696][ T27] RSP: 002b:00007ffa44fbd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.027243][ T27] RAX: 0000000000000000 RBX: 00007ffa45304110 RCX: 00007ffa45175bd9 [ 365.035259][ T27] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 365.045648][ T27] RBP: 00007ffa451e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 365.053880][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.062181][ T27] R13: 000000000000006e R14: 00007ffa45304110 R15: 00007ffc80b86f58 [ 365.070342][ T27] [ 365.073619][ T27] [ 365.073619][ T27] Showing all locks held in the system: [ 365.088834][ T4253] syz-executor: attempt to access beyond end of device [ 365.088834][ T4253] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 365.092419][ T6273] XFS (loop0): Unmounting Filesystem [ 365.145411][ T27] 1 lock held by rcu_tasks_kthre/12: [ 365.161286][ T27] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 365.203788][ T27] 1 lock held by rcu_tasks_trace/13: [ 365.214841][ T27] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 365.238824][ T27] 1 lock held by khungtaskd/27: [ 365.248712][ T27] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 365.261053][ T27] 2 locks held by getty/3310: [ 365.265851][ T27] #0: ffff88807e818098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 365.284845][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 365.296357][ T27] 1 lock held by udevd/3654: [ 365.311086][ T27] #0: ffff88801fe5b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 365.359019][ T27] 2 locks held by kworker/0:14/3696: [ 365.364476][ T27] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 365.393611][ T27] #1: ffffc900046cfd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 365.420428][ T27] 3 locks held by kworker/1:9/3900: [ 365.425669][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 365.436285][ T27] #1: ffffc90004d47d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 365.448921][ T27] #2: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 365.460406][ T27] 1 lock held by syz-executor/4253: [ 365.465716][ T27] 1 lock held by syz.0.478/6047: [ 365.471177][ T27] #0: ffff88801fe5b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 365.481636][ T27] 1 lock held by syz.0.478/6050: [ 365.497964][ T27] #0: ffff88801fe5b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 365.516154][ T27] 1 lock held by syz-executor/6273: [ 365.521751][ T27] #0: ffff88801b6600e0 (&type->s_umount_key#65){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 365.544073][ T27] 2 locks held by dhcpcd/8527: [ 365.552749][ T27] #0: ffff88805a6bf410 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 365.580348][ T27] #1: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 365.592150][ T27] [ 365.606306][ T27] ============================================= [ 365.606306][ T27] [ 365.618091][ T7140] block nbd0: Possible stuck request ffff88801fef0000: control (read@0,4096B). Runtime 150 seconds [ 365.629695][ T27] NMI backtrace for cpu 1 [ 365.634094][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 365.641934][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 365.652003][ T27] Call Trace: [ 365.655316][ T27] [ 365.658264][ T27] dump_stack_lvl+0x1e3/0x2cb [ 365.663133][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 365.668613][ T27] ? panic+0x764/0x764 [ 365.672730][ T27] ? vprintk_emit+0x622/0x740 [ 365.678072][ T27] ? printk_sprint+0x490/0x490 [ 365.682967][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 365.689590][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 365.694710][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 365.703103][ T27] ? _printk+0xd1/0x111 [ 365.707995][ T27] ? panic+0x764/0x764 [ 365.713011][ T27] ? __wake_up_klogd+0xcc/0x100 [ 365.719108][ T27] ? panic+0x764/0x764 [ 365.723218][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 365.729325][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 365.735421][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 365.741440][ T27] watchdog+0xf88/0xfd0 [ 365.745659][ T27] ? watchdog+0x1f8/0xfd0 [ 365.750043][ T27] kthread+0x28d/0x320 [ 365.754146][ T27] ? hungtask_pm_notify+0x50/0x50 [ 365.759185][ T27] ? kthread_blkcg+0xd0/0xd0 [ 365.763788][ T27] ret_from_fork+0x1f/0x30 [ 365.768319][ T27] [ 365.773088][ T27] Sending NMI from CPU 1 to CPUs 0: [ 365.778719][ C0] NMI backtrace for cpu 0 [ 365.778732][ C0] CPU: 0 PID: 3644 Comm: kworker/u4:7 Not tainted 6.1.97-syzkaller #0 [ 365.778753][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 365.778765][ C0] Workqueue: phy18 ieee80211_iface_work [ 365.778794][ C0] RIP: 0010:unwind_next_frame+0x1f8/0x2220 [ 365.778819][ C0] Code: 44 39 f0 0f 86 26 19 00 00 44 89 f0 48 8d 1c 85 a4 34 86 8f 48 89 d8 48 c1 e8 03 0f b6 04 38 84 c0 0f 85 d0 1a 00 00 44 8b 23 <44> 89 f0 ff c0 48 8d 1c 85 a4 34 86 8f 48 89 d8 48 c1 e8 03 0f b6 [ 365.778836][ C0] RSP: 0018:ffffc9000436f5e0 EFLAGS: 00000046 [ 365.778851][ C0] RAX: 0000000000000000 RBX: ffffffff8faa5700 RCX: 000000000009c075 [ 365.778865][ C0] RDX: dffffc0000000000 RSI: ffffffff8a089755 RDI: dffffc0000000000 [ 365.778880][ C0] RBP: 1ffff9200086dede R08: 0000000000000001 R09: ffffc9000436f7b0 [ 365.778895][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000017f159 [ 365.778908][ C0] R13: ffffffff8a089754 R14: 0000000000090897 R15: 000000000009c075 [ 365.778922][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 365.778939][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.778962][ C0] CR2: 00005626c6de2680 CR3: 0000000013b20000 CR4: 00000000003506f0 [ 365.778979][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 365.778990][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 365.779003][ C0] Call Trace: [ 365.779008][ C0] [ 365.779015][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 365.779047][ C0] ? read_lock_is_recursive+0x10/0x10 [ 365.779078][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 365.779109][ C0] ? nmi_handle+0x25/0x440 [ 365.779147][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 365.779177][ C0] ? nmi_handle+0x12e/0x440 [ 365.779207][ C0] ? nmi_handle+0x25/0x440 [ 365.779236][ C0] ? unwind_next_frame+0x1f8/0x2220 [ 365.779257][ C0] ? default_do_nmi+0x62/0x150 [ 365.779277][ C0] ? exc_nmi+0xa8/0x100 [ 365.779295][ C0] ? end_repeat_nmi+0x16/0x31 [ 365.779325][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1b34/0x2dd0 [ 365.779353][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1b35/0x2dd0 [ 365.779376][ C0] ? unwind_next_frame+0x1f8/0x2220 [ 365.779397][ C0] ? unwind_next_frame+0x1f8/0x2220 [ 365.779420][ C0] ? unwind_next_frame+0x1f8/0x2220 [ 365.779441][ C0] [ 365.779446][ C0] [ 365.779459][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1b35/0x2dd0 [ 365.779485][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 365.779512][ C0] arch_stack_walk+0x10d/0x140 [ 365.779542][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1b35/0x2dd0 [ 365.779569][ C0] stack_trace_save+0x113/0x1c0 [ 365.779597][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 365.779632][ C0] metadata_update_state+0xea/0x290 [ 365.779661][ C0] kfence_guarded_free+0x1de/0x7f0 [ 365.779689][ C0] ieee80211_ibss_rx_queued_mgmt+0x1b35/0x2dd0 [ 365.779724][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xeba/0x2dd0 [ 365.779750][ C0] ? ieee80211_ibss_rx_no_sta+0x740/0x740 [ 365.779779][ C0] ? mark_lock+0x9a/0x340 [ 365.779810][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 365.779841][ C0] ? print_irqtrace_events+0x210/0x210 [ 365.779869][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 365.779892][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 365.779914][ C0] ? skb_dequeue+0x10f/0x140 [ 365.779937][ C0] ieee80211_iface_work+0x7aa/0xce0 [ 365.779972][ C0] ? process_one_work+0x7a9/0x11d0 [ 365.779995][ C0] process_one_work+0x8a9/0x11d0 [ 365.780026][ C0] ? worker_detach_from_pool+0x260/0x260 [ 365.780052][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 365.780075][ C0] ? kthread_data+0x4e/0xc0 [ 365.780104][ C0] ? wq_worker_running+0x97/0x190 [ 365.780136][ C0] worker_thread+0xa47/0x1200 [ 365.780165][ C0] ? _raw_spin_unlock+0x40/0x40 [ 365.780196][ C0] kthread+0x28d/0x320 [ 365.780212][ C0] ? worker_clr_flags+0x190/0x190 [ 365.780234][ C0] ? kthread_blkcg+0xd0/0xd0 [ 365.780252][ C0] ret_from_fork+0x1f/0x30 [ 365.780287][ C0] [ 365.785594][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 366.188396][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 366.196312][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 366.206395][ T27] Call Trace: [ 366.209700][ T27] [ 366.212638][ T27] dump_stack_lvl+0x1e3/0x2cb [ 366.217528][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 366.223104][ T27] ? panic+0x764/0x764 [ 366.227294][ T27] ? llist_add_batch+0x160/0x1d0 [ 366.232267][ T27] ? vscnprintf+0x59/0x80 [ 366.236670][ T27] panic+0x318/0x764 [ 366.240608][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 366.246816][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 366.252220][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 366.258407][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 366.264594][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 366.270782][ T27] watchdog+0xfc7/0xfd0 [ 366.274966][ T27] ? watchdog+0x1f8/0xfd0 [ 366.279318][ T27] kthread+0x28d/0x320 [ 366.283395][ T27] ? hungtask_pm_notify+0x50/0x50 [ 366.288434][ T27] ? kthread_blkcg+0xd0/0xd0 [ 366.293031][ T27] ret_from_fork+0x1f/0x30 [ 366.297476][ T27] [ 366.300972][ T27] Kernel Offset: disabled [ 366.305307][ T27] Rebooting in 86400 seconds..