last executing test programs: 21.061649292s ago: executing program 3 (id=162): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) 20.917412753s ago: executing program 3 (id=164): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 20.640497424s ago: executing program 3 (id=168): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r0, &(0x7f00000000c0)) 19.223397623s ago: executing program 3 (id=175): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x570, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="3d46d80f7e2ba80c"}}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 18.078539379s ago: executing program 3 (id=178): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 17.312081103s ago: executing program 3 (id=182): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x5, 0x200, 0x8, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "d79186a4e022ac21"}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x40) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\a\x00'/13, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000001"], 0x20000408}}, 0x0) 16.841857716s ago: executing program 32 (id=182): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x5, 0x200, 0x8, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "d79186a4e022ac21"}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x40) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\a\x00'/13, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000001"], 0x20000408}}, 0x0) 5.241873321s ago: executing program 2 (id=247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4e, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x3a, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86, "29602ef98255dedb2947149c5a5c1a78addb344a0d34e836716197a6b7b8576f548e"}}}}}}}, 0x60) 4.759058683s ago: executing program 1 (id=250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x23, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x2, 0xfffffff4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 4.756824454s ago: executing program 2 (id=251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f0000000040)=[{r1, 0x8204}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 4.604024374s ago: executing program 1 (id=252): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x3, 0x5eb, &(0x7f0000000600)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 3.895730489s ago: executing program 1 (id=253): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) splice(r1, 0x0, r0, 0x0, 0xd9d7, 0x5) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x6305) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0xc002e38, 0x7ff, 0x7d, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50) 3.703964559s ago: executing program 2 (id=255): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0x0, 0xbb) 3.57082812s ago: executing program 1 (id=256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 3.321541082s ago: executing program 2 (id=257): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}], 0x1, 0x20040804) sendmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000200)="93", 0x1}], 0x1}}], 0x1, 0x4000080) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x4, 0x4) 2.933153034s ago: executing program 1 (id=260): syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.308047437s ago: executing program 2 (id=261): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4040, &(0x7f00000000c0)=ANY=[], 0x2, 0xc43, &(0x7f0000001200)="$eJzs3U9sHNd9B/DfGy3Fpd1WTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXdSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUlRMiOKEmV9Pjb1nZ19b/e9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8euHkqfSwWwEAPEiXxr568rTrPwA8Vi779z8AAAAAAAAAAAAAABx0KYp4KlLMX1pPE9XjjvrFdt+Nm+PDIztXG0hVzUNV+fKrfur0mbNfenHoXDcvtmfvUv9++2y8Pnb5QuOVuevzC9OLi9NTjfHZ9uTc1PSuX2Gv9bc7Xh2AxvU3bkxdvbrYOP3CmS1P3xz8sP/Jo4Pnh5478Wy37PjwyMjYZpF6b/naPTek404zPA5HEScixfPf/UlqRUQRez8W9Qc79tsNVJ04XnVifHik6shMuzW7VD452j0QRUSjp1Kze4x2Houo9T3QPtxZM2K5bH7Z4ONl98bmWwutKzPTjdHWwlJ7qT03O5o6rS3704gizqWIlYhY67/95fqiiFqk+PaR9XQlIg51j8MXq4nBd25HsY993IWynY2+iJXiERizA6w/ingtUvz0vWMxmc8z1bnmCxGvlfn9iHfKfDkilR+MsxEf7PA54tFUiyL+shz/8+tpqjofdM8rF7/W+Mrs1bmest3zSnl9eHv314fbzhQP6fowsC0fjAN+bqpHEa3qjL+e7v2bHQAAAAAAAAAAAAAAAADut4Eo4jOR4tX/+JNqXnFU89KPnB/6w8Ff7Z0z/sxHvE5Z9oWIWC52Nyf3cJ4YOJpGU3rIc4kfZ/Uo4k/z/L+3H3ZjAAAAAAAAAAAAAAAAAAAAHmtF/DhSvPT+sbQSvWuKt2evNS63rsx0VoXtrv3bXTN9Y2Njo5E62cw5kXM550rO1ZxrOaPI9XM2c07kXM65knM151rOOJTr52zmnMi5nHMl52rOtZxRy/VzNnNO5FzOuZJzNedazjgga/cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHycFFHEzyPFt76xniJFRDNiIjq52v+wWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlPpTEd+LFI0/at7aV4uIVP3fcaz842w0D5f5yWgOlflyNC/kbFVZa779ENrP3vSlIn4UKfrr794a8Dz+fZ1Htz4G8c43Nx99ttbJQ90nBz/sf/LokfNDI7/xzJ22004NOH6xPXvjZmN8eGRkrGd3Lb/7J3v2Deb3Le5P14mIxTffeqM1MzO9cO8b5UdgD9UfoY1Ue1x6uv8b/RFxAJpx942oHYhmPJy+8xgor/8fRIrfff8/uxf8zvW/Hr/SeXTrCh8/+7PN6/9L219ol9f/2vZ6+fpfXtN3uv4/1bPvpfzdSF8tor50fb7vaER98c23TrSvt65NX5uePXvy5JeHhr585mTf4Yj61fbMdM/WfTlcAAAAAAAAAAAAAAAAAA9OKuL3I0XrR+upERE3q/lag+eHnjvx7KE4VM232jJv+/Wxyxcar8xdn1+YXlycnmqMz7Yn56amd/t29Wq61/jwyL505iMN7HP7B+qvzM2/udC+9sdLOz7/RP3ClcWlhdbkzk/HQBQRzd49x6sGjw+PVI2eabdmq6qjO06m/+X1pSL+K1JMnm2kz+d9ef7/9hn+W+b/L29/oX2a//+Jnn3le6ZUxM8ixe/81TPx+aqdT8RtxyyX+7tIcfzc53K5OFyW67ahc1+BzszAsuz/RYp/+vnWst35kE9tlj216wP7iCjH/0ik+N5ffCd+M+/bev+Hncf/ie0vtE/j/3TPvie23K9gz10nj/+JSPHyU+/Gb+V9d7v/R/feG8dy4Vv359in8f9Uz77B/L6/fX+6DgAAAAAAAAAA8EjrS0X8faT4wUgtvZj37eb3/6a2v9A+/f7Xp3v2Td2f9Yo+cmPPBxUAAAAADoi+VMSPI8W1pXdvzaHeOv+7Z/7n723O/xxO256tfs73a9V9A+7nz/96Deb3ndh7twEAAAAAAAAAAAAAAAAAAOBASamIF/N66hPVfP6pO66nvhopXv2f53O5dLQs110HfrD6s35pbvbEhZmZucnWUuvKzHRjbL41OV3WfTpSrP/t53LdolpfvbvefGeN98212Bcixcg/dMt21mLvrk3+9GbZU2XZT0SK//7HrWW761h/arPs6bLs30SKr//LzmWPbpY9U5b9TqT44dcb3bJPlGW790f99GbZFybnin0YFQAAAAAAAAAAAAAAAAAAAB43famIP48U/3t95dZc/rz+f1/Pw8o73+xZ73+bm9U6/4PV+v+d7YGI6G539t/L+v/VfQWW7/SuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw8ZSiiLcixfyl9bTaXz7uqF9sz964OT48snO1gVTVPFSVL7/qp06fOfulF4fOdfPu9e+3z8TrY5cvNF6Zuz6/ML24OD3VGJ9tT85NTd+lzqEtj375+nd3vDoAjetv3Ji6enWxcfqFM1uevjn4Yf+TRwfPDz134tlu2fHhkZGxnjK1vnt+99ukO+w/HEX8daR4/rs/ST/ojyhi78fiIz47+22g6sTxqhPjwyNVR2bardml8snR7oEoIho9lZrdY/QAxmJPmhHLZfPLBh8vuzc231poXZmZboy2FpbaS+252dHUaW3Zn0YUcS5FrETEWv/tL9cXRbwRKb59ZD39a3/nL0V1HL54aeyrJ0/fuR3FPvZxF8p2NvoiVopHYMwOsP4o4p8jxU/fOxb/1h9Ri85XfCHitTK/H/FOdMY7lR+MsxEf7PA54tFUiyL+vxz/8+vpvf7yfNA9r1z8WuMrs1fnesp2zyuP/PXhQTrg56Z6FPHD6oy/nv7d32sAAAAAAAAAAAAAAACAA6SIX48UL71/LFXzg2/NKW7PXmtcbl2Z6Uzr6879686Z3tjY2GikTjZzTuRczrmSczXnWs4ocv2czTLrGxsT+fFyzpWcqznXcsahXD9nM+dEzuWcKzlXc67ljFqun7OZcyLncs6VnKs513LGAZm7BwAAAAAAAAAAAAAAAAAAfLwU1X8pvvWN9bTR31lfeiI6uWo90I+9XwQAAP//f7f2rw==") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0xc3ef0048, &(0x7f0000000500), 0xfe, 0x46d, &(0x7f0000000f00)="$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") syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.649414271s ago: executing program 2 (id=263): r0 = syz_usb_connect$lan78xx(0x0, 0xa1, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000600)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.152102944s ago: executing program 4 (id=265): mmap(&(0x7f0000e5b000/0x5000)=nil, 0x5000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mremap(&(0x7f0000a11000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffa000/0x3000)=nil) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) 1.086726954s ago: executing program 4 (id=266): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r1}}, 0x40) 1.086081904s ago: executing program 0 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 983.378055ms ago: executing program 4 (id=268): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 982.869524ms ago: executing program 0 (id=269): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x0, 0xfffe, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffff235b, 0x0, 0x10000000000, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x0, 0x6c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0xfc, 0xffdffffc, 0x1000000}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 876.431856ms ago: executing program 0 (id=270): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000880)=ANY=[], 0x2, 0x5ae, &(0x7f0000001540)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='.\x00', 0x4000423) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/109, 0x6d) 874.920776ms ago: executing program 4 (id=271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) sync() 636.847857ms ago: executing program 0 (id=272): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="5300000007000046009d4063834609532bbcfc85b95499f41b36876d9b0127ecf6067ecd7e4d"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 569.982437ms ago: executing program 4 (id=273): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 425.241478ms ago: executing program 4 (id=274): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r0, 0xfff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x5c}, 0x8) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) 424.595198ms ago: executing program 0 (id=275): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fadvise64(r0, 0xe0ffff, 0x9, 0x3) 191.726069ms ago: executing program 0 (id=276): timer_create(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x4, 0x100, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=277): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1, r1}}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 64.397732][ T5768] cgroup: Unknown subsys name 'net' [ 64.535342][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.971868][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.693702][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.705837][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.722854][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.731493][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.739360][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.746745][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.778066][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.786778][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.794899][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.803852][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.817020][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.826035][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.826161][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.841847][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.841956][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.858390][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.870802][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.878485][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.902540][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.911086][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.918720][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.929400][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.939727][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.949721][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.342118][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 68.398318][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 68.433127][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 68.502731][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 68.538162][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.545473][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.553998][ T5781] bridge_slave_0: entered allmulticast mode [ 68.561620][ T5781] bridge_slave_0: entered promiscuous mode [ 68.591797][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.598932][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.606342][ T5781] bridge_slave_1: entered allmulticast mode [ 68.613537][ T5781] bridge_slave_1: entered promiscuous mode [ 68.695031][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.702466][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.709814][ T5778] bridge_slave_0: entered allmulticast mode [ 68.716901][ T5778] bridge_slave_0: entered promiscuous mode [ 68.747364][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.758468][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.768027][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.775222][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.783256][ T5778] bridge_slave_1: entered allmulticast mode [ 68.790059][ T5778] bridge_slave_1: entered promiscuous mode [ 68.796488][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.803789][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.811328][ T5784] bridge_slave_0: entered allmulticast mode [ 68.818103][ T5784] bridge_slave_0: entered promiscuous mode [ 68.857606][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.864866][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.873135][ T5784] bridge_slave_1: entered allmulticast mode [ 68.880444][ T5784] bridge_slave_1: entered promiscuous mode [ 68.887069][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.894427][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.902178][ T5788] bridge_slave_0: entered allmulticast mode [ 68.908811][ T5788] bridge_slave_0: entered promiscuous mode [ 68.943925][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.951339][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.958501][ T5788] bridge_slave_1: entered allmulticast mode [ 68.965769][ T5788] bridge_slave_1: entered promiscuous mode [ 68.976621][ T5781] team0: Port device team_slave_0 added [ 68.985841][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.017268][ T5781] team0: Port device team_slave_1 added [ 69.024998][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.048364][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.061731][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.110767][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.123506][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.143186][ T5778] team0: Port device team_slave_0 added [ 69.152212][ T5778] team0: Port device team_slave_1 added [ 69.177398][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.184490][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.210549][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.236355][ T5784] team0: Port device team_slave_0 added [ 69.255155][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.262179][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.288664][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.316807][ T5784] team0: Port device team_slave_1 added [ 69.325698][ T5788] team0: Port device team_slave_0 added [ 69.337810][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.344948][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.371000][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.383804][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.391587][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.418096][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.439679][ T5788] team0: Port device team_slave_1 added [ 69.488382][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.496066][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.522025][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.544950][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.552560][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.578608][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.600396][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.607361][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.633481][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.655504][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.662587][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.688628][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.715372][ T5781] hsr_slave_0: entered promiscuous mode [ 69.722202][ T5781] hsr_slave_1: entered promiscuous mode [ 69.739331][ T5778] hsr_slave_0: entered promiscuous mode [ 69.745514][ T5778] hsr_slave_1: entered promiscuous mode [ 69.752096][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.760663][ T5778] Cannot create hsr debugfs directory [ 69.800021][ T51] Bluetooth: hci0: command tx timeout [ 69.874827][ T5784] hsr_slave_0: entered promiscuous mode [ 69.882171][ T5784] hsr_slave_1: entered promiscuous mode [ 69.888351][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.896159][ T5784] Cannot create hsr debugfs directory [ 69.905974][ T5788] hsr_slave_0: entered promiscuous mode [ 69.912695][ T5788] hsr_slave_1: entered promiscuous mode [ 69.918830][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.926622][ T5788] Cannot create hsr debugfs directory [ 69.949225][ T51] Bluetooth: hci1: command tx timeout [ 69.949241][ T5782] Bluetooth: hci2: command tx timeout [ 70.029193][ T51] Bluetooth: hci3: command tx timeout [ 70.264683][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.275378][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.286053][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.297382][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.374867][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.385792][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.401965][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.414110][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.500937][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.520798][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.544163][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.554772][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.665443][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.683696][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.693637][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.704345][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.713699][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.769965][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.781554][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.805981][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.813434][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.833940][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.863762][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.870960][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.883000][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.890194][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.906335][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.913499][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.966452][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.994283][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.056572][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.115852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.123055][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.150907][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.158059][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.224243][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.305362][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.332051][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.394127][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.401303][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.456441][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.463669][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.527498][ T5781] veth0_vlan: entered promiscuous mode [ 71.555605][ T5781] veth1_vlan: entered promiscuous mode [ 71.617523][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.706346][ T5781] veth0_macvtap: entered promiscuous mode [ 71.718761][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.742332][ T5781] veth1_macvtap: entered promiscuous mode [ 71.767464][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.794177][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.809576][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.815483][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.856639][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.871104][ T51] Bluetooth: hci0: command tx timeout [ 71.890555][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.899629][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.908367][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.921960][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.967934][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.986141][ T5778] veth0_vlan: entered promiscuous mode [ 72.024967][ T5784] veth0_vlan: entered promiscuous mode [ 72.030689][ T51] Bluetooth: hci2: command tx timeout [ 72.039780][ T51] Bluetooth: hci1: command tx timeout [ 72.046226][ T5784] veth1_vlan: entered promiscuous mode [ 72.065497][ T5778] veth1_vlan: entered promiscuous mode [ 72.112235][ T51] Bluetooth: hci3: command tx timeout [ 72.161984][ T5778] veth0_macvtap: entered promiscuous mode [ 72.184569][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.194659][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.204259][ T5784] veth0_macvtap: entered promiscuous mode [ 72.228590][ T5778] veth1_macvtap: entered promiscuous mode [ 72.256443][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.259580][ T5788] veth0_vlan: entered promiscuous mode [ 72.270772][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.277841][ T5784] veth1_macvtap: entered promiscuous mode [ 72.305818][ T5788] veth1_vlan: entered promiscuous mode [ 72.328698][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.342075][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.354753][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.385567][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.398242][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.408667][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.419915][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.431548][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.442518][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.454141][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.465954][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.485778][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.497380][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.510616][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.521213][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.532617][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.557475][ T5788] veth0_macvtap: entered promiscuous mode [ 72.575658][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.582240][ T5867] syz.1.2[5867]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.586554][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.614190][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.616772][ T5867] loop1: detected capacity change from 0 to 512 [ 72.623414][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.644332][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.654190][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.663753][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.673433][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683364][ T5867] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #15: comm syz.1.2: corrupted in-inode xattr: invalid ea_ino [ 72.732799][ T5788] veth1_macvtap: entered promiscuous mode [ 72.751110][ T5867] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 72.767987][ T5867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.800647][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.816259][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.828730][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.845152][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.855606][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.868195][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.881145][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.894508][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.985486][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.004789][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.015301][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.031443][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.041428][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.052130][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.063708][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.089623][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.098417][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.107312][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.116400][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.164780][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.177333][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.187564][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.201486][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.261533][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.272712][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.299892][ T789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.317743][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.336995][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.368192][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.387431][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.478454][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.510477][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.511620][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 73.591979][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.623486][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.662255][ T789] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 73.699750][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.754633][ T789] usb 2-1: config 0 descriptor?? [ 73.959685][ T51] Bluetooth: hci0: command tx timeout [ 74.119361][ T51] Bluetooth: hci1: command tx timeout [ 74.119772][ T5782] Bluetooth: hci2: command tx timeout [ 74.199345][ T5782] Bluetooth: hci3: command tx timeout [ 74.297439][ T789] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 74.614679][ T5884] loop2: detected capacity change from 0 to 32768 [ 74.628328][ T5884] ======================================================= [ 74.628328][ T5884] WARNING: The mand mount option has been deprecated and [ 74.628328][ T5884] and is ignored by this kernel. Remove the mand [ 74.628328][ T5884] option from the mount to silence this warning. [ 74.628328][ T5884] ======================================================= [ 74.697500][ T5865] usb 2-1: USB disconnect, device number 2 [ 74.837657][ T5884] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.914918][ T5899] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.112530][ T5884] XFS (loop2): Ending clean mount [ 75.381008][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.939802][ T5916] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 76.030165][ T5782] Bluetooth: hci0: command tx timeout [ 76.172669][ T5920] loop3: detected capacity change from 0 to 1024 [ 76.174691][ T5908] loop0: detected capacity change from 0 to 32768 [ 76.191483][ T5920] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.204765][ T5782] Bluetooth: hci1: command tx timeout [ 76.210453][ T51] Bluetooth: hci2: command tx timeout [ 76.265981][ T5908] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 76.275625][ T51] Bluetooth: hci3: command tx timeout [ 76.398347][ T5931] warning: `syz.1.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.429335][ T5908] XFS (loop0): Ending clean mount [ 76.453049][ T5920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.498527][ T5908] XFS (loop0): Quotacheck needed: Please wait. [ 76.618524][ T5908] XFS (loop0): Quotacheck: Done. [ 76.698792][ T5920] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.898509][ T5942] loop2: detected capacity change from 0 to 8192 [ 76.901206][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.941921][ T5942] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 76.956389][ T5942] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 76.966166][ T5942] REISERFS (device loop2): using ordered data mode [ 76.969138][ T28] audit: type=1800 audit(1761759084.484:2): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12" name="bus" dev="loop0" ino=4431 res=0 errno=0 [ 76.973082][ T5942] reiserfs: using flush barriers [ 77.004785][ T5942] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.023677][ T5942] REISERFS (device loop2): checking transaction log (loop2) [ 77.210612][ T5778] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 77.218115][ T5942] REISERFS (device loop2): Using tea hash to sort names [ 77.255733][ T5942] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 78.029231][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.180823][ T5965] loop3: detected capacity change from 0 to 1024 [ 78.272709][ T5872] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 78.294079][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.325568][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.361559][ T5872] usb 1-1: config 0 descriptor?? [ 78.401953][ T5872] gspca_main: spca508-2.14.0 probing 8086:0110 [ 78.415414][ T5965] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 78.480612][ T5965] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28 [ 78.495627][ T5955] loop1: detected capacity change from 0 to 32768 [ 78.509082][ T5965] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.509082][ T5965] [ 78.518829][ T5955] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.29 (5955) [ 78.550042][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.562558][ T5955] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 78.563136][ T5965] EXT4-fs (loop3): Total free blocks count 0 [ 78.575111][ T5955] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 78.597896][ T5955] BTRFS info (device loop1): enabling auto defrag [ 78.604650][ T5955] BTRFS info (device loop1): use no compression [ 78.616164][ T5955] BTRFS info (device loop1): force clearing of disk cache [ 78.619808][ T5872] gspca_spca508: reg_read err -32 [ 78.623713][ T5955] BTRFS info (device loop1): max_inline at 4096 [ 78.635053][ T5955] BTRFS info (device loop1): disabling free space tree [ 78.641805][ T5872] gspca_spca508: reg_read err -32 [ 78.648828][ T5965] EXT4-fs (loop3): Free/Dirty block details [ 78.656187][ T5965] EXT4-fs (loop3): free_blocks=68451041280 [ 78.663031][ T5872] gspca_spca508: reg_read err -32 [ 78.665567][ T5965] EXT4-fs (loop3): dirty_blocks=32 [ 78.680951][ T5965] EXT4-fs (loop3): Block reservation details [ 78.687140][ T5965] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 78.727469][ T5955] BTRFS info (device loop1): enabling ssd optimizations [ 78.736534][ T5955] BTRFS info (device loop1): auto enabling async discard [ 78.751081][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 78.759583][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 78.769390][ T23] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 78.777860][ T23] usb 3-1: config 4 has no interface number 0 [ 78.795063][ T5955] BTRFS info (device loop1): rebuilding free space tree [ 78.802218][ T23] usb 3-1: config 4 interface 30 has no altsetting 0 [ 78.827079][ T23] usb 3-1: string descriptor 0 read error: -22 [ 78.857925][ T23] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 78.884207][ T5872] gspca_spca508: reg_read err -71 [ 78.894376][ T5872] gspca_spca508: reg write: error -71 [ 78.908857][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.909156][ T5872] spca508: probe of 1-1:0.0 failed with error -71 [ 78.960009][ T5955] BTRFS info (device loop1): disabling free space tree [ 78.972017][ T5872] usb 1-1: USB disconnect, device number 2 [ 78.981848][ T23] dw2102: su3000_identify_state [ 78.986739][ T23] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 78.995389][ T5955] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 79.029361][ T23] dw2102: su3000_power_ctrl: 1, initialized 0 [ 79.035766][ T5955] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 79.047866][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 79.056829][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 79.096188][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 79.130265][ T23] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 79.167951][ T23] usb 3-1: media controller created [ 79.199797][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 79.219250][ T23] dw2102: i2c transfer failed. [ 79.225923][ T5967] dvb-usb: bulk message failed: -22 (3/0) [ 79.243927][ T5967] dw2102: i2c transfer failed. [ 79.270411][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 79.287955][ T23] dw2102: i2c transfer failed. [ 79.296553][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 79.305677][ T23] dw2102: i2c transfer failed. [ 79.313159][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 79.329300][ T23] dw2102: i2c transfer failed. [ 79.339416][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 79.349360][ T23] dw2102: i2c transfer failed. [ 79.354178][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 79.379555][ T23] dw2102: i2c transfer failed. [ 79.394357][ T23] dvb-usb: MAC address: 02:02:02:02:02:02 [ 79.472276][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.561812][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 79.588618][ T23] dw2102: command 0x0e transfer failed. [ 79.603191][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 79.614508][ T23] dw2102: command 0x0e transfer failed. [ 79.780528][ T5781] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 79.958125][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 79.986682][ T23] dw2102: command 0x0e transfer failed. [ 80.017206][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 80.047771][ T23] dw2102: command 0x0e transfer failed. [ 80.062052][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 80.068412][ T5998] sock: sock_set_timeout: `syz.0.39' (pid 5998) tries to set negative timeout [ 80.084309][ T23] dw2102: command 0x51 transfer failed. [ 80.099219][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 80.129346][ T23] dw2102: i2c probe for address 0x68 failed. [ 80.135392][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 80.159538][ T23] dw2102: i2c probe for address 0x69 failed. [ 80.179063][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 80.186089][ T23] dw2102: i2c probe for address 0x6a failed. [ 80.211728][ T23] dw2102: probing for demodulator failed. Is the external power switched on? [ 80.252833][ T23] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 80.316993][ T6004] loop0: detected capacity change from 0 to 8 [ 80.370520][ T6004] SQUASHFS error: lzo decompression failed, data probably corrupt [ 80.378671][ T6004] SQUASHFS error: Failed to read block 0x144: -5 [ 80.439323][ T6004] SQUASHFS error: Unable to read metadata cache entry [142] [ 80.447079][ T6004] SQUASHFS error: Unable to read inode 0x11f [ 80.489647][ T23] rc_core: IR keymap rc-tt-1500 not found [ 80.495613][ T23] Registered IR keymap rc-empty [ 80.578824][ T23] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 80.617586][ T23] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5 [ 80.671887][ T23] dvb-usb: schedule remote query interval to 250 msecs. [ 80.702086][ T23] dw2102: su3000_power_ctrl: 0, initialized 1 [ 80.708213][ T23] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 80.788324][ T23] usb 3-1: USB disconnect, device number 2 [ 80.858289][ T6009] syzkaller1: entered promiscuous mode [ 80.905481][ T6009] syzkaller1: entered allmulticast mode [ 80.973521][ T23] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 81.523888][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.614881][ T6041] loop2: detected capacity change from 0 to 512 [ 81.636644][ T6041] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.671326][ T6041] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.693487][ T6041] EXT4-fs (loop2): 1 truncate cleaned up [ 81.703307][ T6041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.743316][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 81.788121][ T23] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 81.856549][ T23] usb 2-1: config 0 has no interface number 0 [ 81.894296][ T23] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 81.914112][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.918128][ T6046] loop3: detected capacity change from 0 to 64 [ 81.941321][ T23] usb 2-1: Product: syz [ 81.945540][ T23] usb 2-1: Manufacturer: syz [ 81.973056][ T23] usb 2-1: SerialNumber: syz [ 81.992302][ T23] usb 2-1: config 0 descriptor?? [ 82.002377][ T23] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 82.048847][ T9] cfg80211: failed to load regulatory.db [ 82.249679][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.590889][ T23] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 82.653631][ T23] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 82.840925][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 82.852879][ T23] usb 2-1: USB disconnect, device number 3 [ 82.882432][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 82.923185][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 82.944689][ T23] quatech2 2-1:0.51: device disconnected [ 83.299468][ T6062] loop2: detected capacity change from 0 to 32768 [ 83.333037][ T6062] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.449155][ T6062] XFS (loop2): Ending clean mount [ 83.498598][ T6062] XFS (loop2): Quotacheck needed: Please wait. [ 83.672091][ T6062] XFS (loop2): Quotacheck: Done. [ 83.913618][ T5784] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.574026][ T6088] loop1: detected capacity change from 0 to 256 [ 86.152154][ T6111] syzkaller1: entered promiscuous mode [ 86.163382][ T6111] syzkaller1: entered allmulticast mode [ 86.452621][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 87.070722][ T6135] loop1: detected capacity change from 0 to 47 [ 87.266663][ T6135] syz.1.89: attempt to access beyond end of device [ 87.266663][ T6135] loop1: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 87.293224][ T6135] Buffer I/O error on dev loop1, logical block 24, lost async page write [ 87.307066][ T6135] syz.1.89: attempt to access beyond end of device [ 87.307066][ T6135] loop1: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 87.324576][ T6135] Buffer I/O error on dev loop1, logical block 25, lost async page write [ 87.337523][ T6135] syz.1.89: attempt to access beyond end of device [ 87.337523][ T6135] loop1: rw=2049, sector=52, nr_sectors = 2 limit=47 [ 87.357577][ T6135] Buffer I/O error on dev loop1, logical block 26, lost async page write [ 87.442439][ T11] kworker/u4:0: attempt to access beyond end of device [ 87.442439][ T11] loop1: rw=1, sector=54, nr_sectors = 2 limit=47 [ 87.469518][ T11] Buffer I/O error on dev loop1, logical block 27, lost async page write [ 87.676539][ T6156] loop1: detected capacity change from 0 to 256 [ 87.736941][ T6156] FAT-fs (loop1): Directory bread(block 64) failed [ 87.756540][ T6156] FAT-fs (loop1): Directory bread(block 65) failed [ 87.776735][ T6156] FAT-fs (loop1): Directory bread(block 66) failed [ 87.789214][ T6156] FAT-fs (loop1): Directory bread(block 67) failed [ 87.803850][ T6156] FAT-fs (loop1): Directory bread(block 68) failed [ 87.810693][ T6156] FAT-fs (loop1): Directory bread(block 69) failed [ 87.817327][ T6156] FAT-fs (loop1): Directory bread(block 70) failed [ 87.830079][ T6156] FAT-fs (loop1): Directory bread(block 71) failed [ 87.845695][ T6156] FAT-fs (loop1): Directory bread(block 72) failed [ 87.871494][ T6156] FAT-fs (loop1): Directory bread(block 73) failed [ 88.512649][ T6171] loop1: detected capacity change from 0 to 2048 [ 88.554757][ T6171] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 88.594650][ T6171] NILFS (loop1): mounting unchecked fs [ 88.609376][ T6173] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.104'. [ 88.655940][ T6171] NILFS (loop1): recovery complete [ 88.666119][ T5771] udevd[5771]: incorrect nilfs2 checksum on /dev/loop1 [ 88.735984][ T6178] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.747737][ T5771] udevd[5771]: incorrect nilfs2 checksum on /dev/loop1 [ 88.935922][ T6182] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x3 [ 89.607733][ T6180] loop2: detected capacity change from 0 to 32768 [ 89.643997][ T6180] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.709132][ T5821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.819250][ T6180] XFS (loop2): Ending clean mount [ 89.899169][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 89.918244][ T5821] usb 4-1: config index 0 descriptor too short (expected 30768, got 18) [ 89.935010][ T5821] usb 4-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 89.966646][ T5821] usb 4-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 89.994219][ T5821] usb 4-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 90.044508][ T5821] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 90.064101][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.083997][ T5821] usb 4-1: Product: syz [ 90.104111][ T5821] usb 4-1: Manufacturer: syz [ 90.108768][ T5821] usb 4-1: SerialNumber: syz [ 90.135007][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.148068][ T23] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 90.174830][ T23] XFS (loop2): Unmount and run xfs_repair [ 90.189071][ T23] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 90.199582][ T23] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 90.229177][ T23] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 90.253323][ T23] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 90.282862][ T23] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 90.294342][ T23] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.308590][ T23] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.339170][ T23] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.352684][ T23] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.375129][ T23] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 90.413341][ T23] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 90.472108][ T23] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 90.613227][ T5872] usb 4-1: USB disconnect, device number 2 [ 90.973494][ T6237] loop1: detected capacity change from 0 to 128 [ 91.026119][ T6237] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 91.043915][ T6237] hpfs: filesystem error: improperly stopped [ 91.052188][ T6237] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 91.061424][ T6237] hpfs: You really don't want any checks? You are crazy... [ 91.076326][ T6237] hpfs: hpfs_map_sector(): read error [ 91.112615][ T6237] hpfs: code page support is disabled [ 91.122795][ T6237] hpfs: hpfs_map_4sectors(): unaligned read [ 91.130605][ T6237] hpfs: hpfs_map_4sectors(): unaligned read [ 91.136552][ T6237] hpfs: filesystem error: unable to find root dir [ 91.275090][ T6243] loop0: detected capacity change from 0 to 128 [ 91.319483][ T5872] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.557543][ T6243] EXT4-fs (loop0): Test dummy encryption mode enabled [ 91.581239][ T6243] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c118, mo2=0002] [ 91.600485][ T6243] System zones: 1-3, 19-19, 35-36 [ 91.627317][ T6243] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.662468][ T6248] loop1: detected capacity change from 0 to 32768 [ 91.673998][ T6248] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.134 (6248) [ 91.691415][ T6248] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.701803][ T6248] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 91.710609][ T6248] BTRFS info (device loop1): metadata ratio 1025 [ 91.716978][ T6248] BTRFS info (device loop1): enabling disk space caching [ 91.722654][ T6243] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.724075][ T6248] BTRFS info (device loop1): enabling ssd optimizations [ 91.741492][ T6248] BTRFS info (device loop1): force clearing of disk cache [ 91.748642][ T6248] BTRFS info (device loop1): turning off barriers [ 91.755586][ T6248] BTRFS info (device loop1): setting nodatacow, compression disabled [ 91.763788][ T6248] BTRFS info (device loop1): using spread ssd allocation scheme [ 91.771528][ T6248] BTRFS info (device loop1): disk space caching is enabled [ 91.811847][ T5872] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 91.832985][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.859880][ T5872] usb 3-1: config 0 descriptor?? [ 91.868016][ T5872] cp210x 3-1:0.0: cp210x converter detected [ 91.983509][ T6248] BTRFS info (device loop1): rebuilding free space tree [ 92.002199][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.003403][ T6248] BTRFS info (device loop1): disabling free space tree [ 92.018377][ T6248] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.028624][ T6248] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.205896][ T6248] BTRFS info (device loop1): scrub: started on devid 1 [ 92.219311][ T6248] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 92.280146][ T5872] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 92.304880][ T5872] usb 3-1: cp210x converter now attached to ttyUSB0 [ 92.390445][ T5781] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.510586][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.548318][ T5865] usb 3-1: USB disconnect, device number 3 [ 92.568655][ T6281] loop3: detected capacity change from 0 to 2048 [ 92.576613][ T5865] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 92.614972][ T5865] cp210x 3-1:0.0: device disconnected [ 92.632732][ T6281] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 92.662814][ T6281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.729103][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 92.746627][ T23] usb 1-1: config 0 has no interfaces? [ 92.771983][ T28] audit: type=1800 audit(1761759100.304:3): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.141" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 92.780008][ T23] usb 1-1: config 0 has no interfaces? [ 92.834654][ T23] usb 1-1: config 0 has no interfaces? [ 92.852851][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 92.870111][ T28] audit: type=1800 audit(1761759100.374:4): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.141" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 92.892583][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.901829][ T23] usb 1-1: Product: syz [ 92.906159][ T23] usb 1-1: Manufacturer: syz [ 92.915224][ T23] usb 1-1: SerialNumber: syz [ 92.937673][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 93.440898][ T5872] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.643447][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.685520][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.733602][ T5872] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 93.759553][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.788837][ T5872] usb 4-1: config 0 descriptor?? [ 93.971041][ T6298] loop2: detected capacity change from 0 to 164 [ 94.036906][ T6286] loop1: detected capacity change from 0 to 131072 [ 94.049732][ T23] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 94.056873][ T6298] Unable to read rock-ridge attributes [ 94.062552][ T6286] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 94.070987][ T6286] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.090371][ T23] usb 1-1: USB disconnect, device number 3 [ 94.095337][ T49] usb 1-1: config 0 descriptor?? [ 94.112385][ T6286] F2FS-fs (loop1): invalid crc value [ 94.119131][ T6298] ISOFS: unable to read i-node block [ 94.177271][ T6286] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.241224][ T6286] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.248522][ T6286] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 94.668721][ T5872] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 94.734774][ T5872] hid-led 0003:27B8:01ED.0002: ThingM blink(1) v1 initialized [ 94.788146][ T6315] loop0: detected capacity change from 0 to 2048 [ 94.815653][ T6315] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 94.843548][ T6315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.963647][ T5865] usb 4-1: USB disconnect, device number 3 [ 95.062623][ T6320] loop2: detected capacity change from 0 to 128 [ 95.375068][ T6324] loop2: detected capacity change from 0 to 1024 [ 95.528372][ T6324] hfsplus: request for non-existent node 33554434 in B*Tree [ 95.549121][ T5865] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 95.554692][ T6324] hfsplus: request for non-existent node 33554434 in B*Tree [ 95.591046][ T6324] hfsplus: request for non-existent node 33554434 in B*Tree [ 95.598388][ T6324] hfsplus: request for non-existent node 33554434 in B*Tree [ 95.622507][ T6327] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 95.648064][ T6327] macvlan1: entered allmulticast mode [ 95.691779][ T6327] veth1_vlan: entered allmulticast mode [ 95.713227][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 95.728237][ T6327] team0: Port device macvlan1 added [ 95.733651][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 95.752058][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.780191][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.807797][ T5865] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 95.828013][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.858074][ T5865] usb 1-1: config 0 descriptor?? [ 95.932700][ T6330] loop2: detected capacity change from 0 to 1764 [ 96.268323][ T6342] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.293373][ T5865] elan 0003:04F3:0755.0003: failed to start in urb: -90 [ 96.332094][ T5865] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 96.556223][ T5865] usb 1-1: USB disconnect, device number 4 [ 97.594085][ T6354] loop2: detected capacity change from 0 to 32768 [ 97.651073][ T6354] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.172 (6354) [ 97.729021][ C1] sched: RT throttling activated [ 97.779243][ T6354] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.829184][ T6354] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 97.879648][ T6354] BTRFS info (device loop2): using free space tree [ 98.107875][ T6385] loop3: detected capacity change from 0 to 1024 [ 98.139402][ T6354] BTRFS info (device loop2): enabling ssd optimizations [ 98.162120][ T6354] BTRFS info (device loop2): auto enabling async discard [ 98.237801][ T6385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.458771][ T6385] EXT4-fs (loop3): shut down requested (1) [ 98.515347][ T6385] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 98.619716][ T6385] overlayfs: failed to get uuid (/bus, err=-5); falling back to uuid=null. [ 98.882336][ T5784] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.954760][ T6357] loop1: detected capacity change from 0 to 262144 [ 98.965011][ T6357] F2FS-fs (loop1): invalid crc value [ 99.006614][ T6357] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.055886][ T6357] F2FS-fs (loop1): Start checkpoint disabled! [ 99.077452][ T6357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.120393][ T5771] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (5771) [ 99.508870][ T6249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.823859][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.023134][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.163016][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.290187][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.683471][ T6413] loop2: detected capacity change from 0 to 1024 [ 100.759109][ T6413] EXT4-fs: inline encryption not supported [ 100.789628][ T6413] EXT4-fs: Ignoring removed i_version option [ 100.823734][ T6413] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.938471][ T6413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.007277][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.019853][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.028370][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.044658][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.055590][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 101.078661][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.223147][ T6413] EXT4-fs error (device loop2): mb_free_blocks:1938: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 101.451127][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.018212][ T6456] loop1: detected capacity change from 0 to 1024 [ 102.414720][ T6419] chnl_net:caif_netlink_parms(): no params data found [ 102.734238][ T42] hsr_slave_0: left promiscuous mode [ 102.795873][ T42] hsr_slave_1: left promiscuous mode [ 102.806027][ T6463] loop0: detected capacity change from 0 to 32768 [ 102.817380][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.835258][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.858951][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.906537][ T6463] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.920501][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.945636][ T42] bridge_slave_1: left allmulticast mode [ 102.976211][ T42] bridge_slave_1: left promiscuous mode [ 102.985348][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.062758][ T42] bridge_slave_0: left allmulticast mode [ 103.068469][ T42] bridge_slave_0: left promiscuous mode [ 103.115495][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.151284][ T51] Bluetooth: hci3: command tx timeout [ 103.271707][ T6463] XFS (loop0): Ending clean mount [ 103.315847][ T6463] XFS (loop0): Quotacheck needed: Please wait. [ 103.409521][ T42] veth1_macvtap: left promiscuous mode [ 103.415623][ T42] veth0_macvtap: left promiscuous mode [ 103.438742][ T42] veth1_vlan: left allmulticast mode [ 103.444227][ T6463] XFS (loop0): Quotacheck: Done. [ 103.458826][ T42] veth1_vlan: left promiscuous mode [ 103.519522][ T42] veth0_vlan: left promiscuous mode [ 103.636394][ T28] audit: type=1800 audit(1761759111.164:5): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.194" name="file2" dev="loop0" ino=9287 res=0 errno=0 [ 103.826331][ T5778] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.923566][ T6510] loop2: detected capacity change from 0 to 128 [ 103.992840][ T6510] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 104.061684][ T28] audit: type=1800 audit(1761759111.584:6): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.203" name="file1" dev="loop2" ino=1048595 res=0 errno=0 [ 104.100805][ T6510] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 104.139183][ T6510] FAT-fs (loop2): Filesystem has been set read-only [ 104.146794][ T6510] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 104.564730][ T42] team0 (unregistering): Port device macvlan1 removed [ 104.642807][ T5872] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.839208][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 104.848821][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.865397][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.876400][ T5872] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 104.886807][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.901910][ T5872] usb 1-1: config 0 descriptor?? [ 104.918238][ T42] team0 (unregistering): Port device team_slave_1 removed [ 104.960212][ T42] team0 (unregistering): Port device team_slave_0 removed [ 105.007321][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.052414][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.232263][ T51] Bluetooth: hci3: command tx timeout [ 105.372519][ T5872] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 105.568016][ T42] bond0 (unregistering): Released all slaves [ 105.669484][ T8] usb 1-1: USB disconnect, device number 5 [ 105.782730][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.801297][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.808545][ T6419] bridge_slave_0: entered allmulticast mode [ 105.881845][ T6419] bridge_slave_0: entered promiscuous mode [ 105.912566][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.922817][ T6539] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 105.932687][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.957858][ T6419] bridge_slave_1: entered allmulticast mode [ 105.976599][ T6419] bridge_slave_1: entered promiscuous mode [ 106.105511][ T6419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.148530][ T6419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.314722][ T6419] team0: Port device team_slave_0 added [ 106.394629][ T6419] team0: Port device team_slave_1 added [ 106.487756][ T6549] loop0: detected capacity change from 0 to 4096 [ 106.507042][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.517885][ T6549] EXT4-fs (loop0): Test dummy encryption mode enabled [ 106.529090][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.568512][ T6419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.572916][ T6549] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 106.607686][ T6549] System zones: 0-5 [ 106.608568][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.639163][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.676943][ T6419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.725356][ T6549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.753557][ T6419] hsr_slave_0: entered promiscuous mode [ 106.760796][ T6419] hsr_slave_1: entered promiscuous mode [ 106.767180][ T6419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.781118][ T6419] Cannot create hsr debugfs directory [ 107.034917][ T6549] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 107.167046][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.278291][ T6419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.308536][ T6419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.316208][ T51] Bluetooth: hci3: command tx timeout [ 107.338350][ T6419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.363315][ T6419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.628809][ T6419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.712128][ T6419] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.755677][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.762887][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.854884][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.862220][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.938504][ T6602] loop3: detected capacity change from 0 to 7 [ 107.958932][ T6602] Dev loop3: unable to read RDB block 7 [ 107.964955][ T6602] loop3: unable to read partition table [ 107.976108][ T6602] loop3: partition table beyond EOD, truncated [ 107.999399][ T6602] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 108.014608][ T6598] loop1: detected capacity change from 0 to 4096 [ 108.026918][ T6419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.056567][ T6598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.091040][ T6598] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.119644][ T6598] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c098, mo2=0102] [ 108.136418][ T6598] System zones: 0-5 [ 108.202117][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.372111][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.577162][ T6623] loop2: detected capacity change from 0 to 256 [ 108.622143][ T6623] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 108.635041][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.653259][ T6620] process 'syz.1.231' launched './file0' with NULL argv: empty string added [ 108.753058][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.767386][ T6617] process '/newroot/73/file0' started with executable stack [ 108.836708][ T6623] exFAT-fs (loop2): error, invalid size(size(1) > aligned(9223372036854777344) [ 108.836708][ T6623] [ 108.858465][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 108.880545][ T6623] exFAT-fs (loop2): Filesystem has been set read-only [ 108.880550][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.916394][ T6631] exFAT-fs (loop2): error, invalid size(size(61) > aligned(9223372036854777344) [ 108.916394][ T6631] [ 108.927645][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.927694][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 108.927714][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.939749][ T8] usb 1-1: config 0 descriptor?? [ 108.975052][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 109.390338][ T51] Bluetooth: hci3: command tx timeout [ 109.449481][ T8] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 109.525200][ T6647] Illegal XDP return value 4291056544 on prog (id 36) dev N/A, expect packet loss! [ 109.628399][ T6419] veth0_vlan: entered promiscuous mode [ 109.675081][ T6419] veth1_vlan: entered promiscuous mode [ 109.777840][ T6419] veth0_macvtap: entered promiscuous mode [ 109.811446][ T6419] veth1_macvtap: entered promiscuous mode [ 109.857802][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.873016][ T8] usb 1-1: USB disconnect, device number 6 [ 109.879095][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.879150][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.928002][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.957967][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.970107][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.990757][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.032588][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.059042][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.059096][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.068873][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.068890][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.068899][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.068910][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.080412][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.150319][ T6419] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.160183][ T6419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.168914][ T6419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.178624][ T6419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.297433][ T6652] loop2: detected capacity change from 0 to 32768 [ 110.323756][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 110.332588][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.364696][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.382060][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 110.382116][ T6652] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.404008][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.425077][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 110.446347][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.474553][ T9] usb 2-1: Manufacturer: syz [ 110.490474][ T9] usb 2-1: config 0 descriptor?? [ 110.495832][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.611328][ T6652] XFS (loop2): Ending clean mount [ 110.629187][ T9] rc_core: IR keymap rc-hauppauge not found [ 110.635142][ T9] Registered IR keymap rc-empty [ 110.652422][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 110.652687][ T6652] XFS (loop2): Quotacheck needed: Please wait. [ 110.685131][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 110.746033][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 110.785912][ T6652] XFS (loop2): Quotacheck: Done. [ 111.014690][ T5865] usb 2-1: USB disconnect, device number 4 [ 111.077308][ T5784] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.132318][ T6686] loop4: detected capacity change from 0 to 256 [ 111.558835][ T6692] loop4: detected capacity change from 0 to 2048 [ 111.669579][ T6692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.857424][ T6692] EXT4-fs (loop4): shut down requested (2) [ 111.870654][ T6692] EXT4-fs warning (device loop4): empty_inline_dir:1864: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 111.912095][ T6419] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.374999][ T6688] loop0: detected capacity change from 0 to 32768 [ 112.505691][ T6688] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.610497][ T6736] loop1: detected capacity change from 0 to 1024 [ 112.627480][ T6736] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 112.649166][ T6688] XFS (loop0): Ending clean mount [ 112.655037][ T6736] EXT4-fs (loop1): group descriptors corrupted! [ 112.711109][ T6688] XFS (loop0): Quotacheck needed: Please wait. [ 112.851814][ T6688] XFS (loop0): Quotacheck: Done. [ 113.129712][ T5778] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.148030][ T6711] loop4: detected capacity change from 0 to 32768 [ 113.194454][ T6711] XFS: ikeep mount option is deprecated. [ 113.209803][ T6711] XFS: ikeep mount option is deprecated. [ 113.343581][ T6711] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.392564][ T6755] loop2: detected capacity change from 0 to 128 [ 113.732276][ T6711] XFS (loop4): Ending clean mount [ 113.740119][ T6711] XFS (loop4): Quotacheck needed: Please wait. [ 113.798255][ T6711] XFS (loop4): Quotacheck: Done. [ 114.003486][ T6419] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.854048][ T6797] loop2: detected capacity change from 0 to 2048 [ 114.905220][ T6797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.984603][ T6791] loop4: detected capacity change from 0 to 32768 [ 115.006642][ T6791] gfs2: fsid=__"_z#˱1 I3wʂX9: Trying to join cluster "lock_nolock", "__"_z#˱1 I3wʂX9" [ 115.021346][ T6791] gfs2: fsid=__"_z#˱1 I3wʂX9: Now mounting FS (format 1801)... [ 115.043672][ T6791] gfs2: fsid=__"_z#˱1 I3wʂX9.0: no journals! [ 115.611204][ T6811] loop4: detected capacity change from 0 to 1024 [ 115.719172][ T5821] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.754882][ T1117] hfsplus: b-tree write err: -5, ino 4 [ 115.916826][ T5821] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 115.938137][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.959200][ T5821] usb 3-1: Product: syz [ 115.969182][ T5821] usb 3-1: Manufacturer: syz [ 115.978292][ T5821] usb 3-1: SerialNumber: syz [ 116.146033][ T6828] loop0: detected capacity change from 0 to 164 [ 116.190458][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.197199][ T5782] Bluetooth: hci4: command 0x1003 tx timeout [ 116.246860][ T5821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 116.266763][ T5821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 116.380372][ T6830] 9pnet: p9_errstr2errno: server reported unknown error @cF S+T6m'~~M [ 116.446307][ T6832] loop4: detected capacity change from 0 to 256 [ 116.580868][ T6834] loop0: detected capacity change from 0 to 16 [ 116.602794][ T6834] erofs: (device loop0): mounted with root inode @ nid 36. [ 116.653308][ T6834] syz.0.275: attempt to access beyond end of device [ 116.653308][ T6834] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 116.676242][ T6834] syz.0.275: attempt to access beyond end of device [ 116.676242][ T6834] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 116.694466][ T5821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 116.702662][ T6834] syz.0.275: attempt to access beyond end of device [ 116.702662][ T6834] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 116.709461][ T5821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 116.731883][ T5821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 116.746742][ T5821] lan78xx: probe of 3-1:1.0 failed with error -71 [ 116.786391][ T5450] page:ffffea0000997bc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x265ef [ 116.797135][ T5450] memcg:ffff88802e19b902 [ 116.801524][ T5450] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 116.808656][ T5450] page_type: 0xfffffdff(table) [ 116.813505][ T5450] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 116.822151][ T5450] raw: 0000000000000000 ffff888076c0c240 00000001fffffdff ffff88802e19b902 [ 116.831186][ T5450] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled()) [ 116.840243][ T5450] page_owner tracks the page as allocated [ 116.846984][ T5450] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x540dc0(GFP_USER|__GFP_COMP|__GFP_ZERO|__GFP_ACCOUNT), pid 5778, tgid 5778 (syz-executor), ts 116787496832, free_ts 116761269980 [ 116.866450][ T5450] post_alloc_hook+0x1cd/0x210 [ 116.871382][ T5450] get_page_from_freelist+0x195c/0x19f0 [ 116.876962][ T5450] __alloc_pages+0x1e3/0x460 [ 116.881643][ T5450] pte_alloc_one+0x89/0x540 [ 116.886172][ T5450] __pte_alloc+0x22/0x2a0 [ 116.890583][ T5450] copy_page_range+0x2d72/0x3600 [ 116.895551][ T5450] copy_mm+0x11a8/0x1ca0 [ 116.899884][ T5450] copy_process+0x16d3/0x3d70 [ 116.904582][ T5450] kernel_clone+0x21b/0x840 [ 116.909200][ T5450] __x64_sys_clone+0x18c/0x1e0 [ 116.913990][ T5450] do_syscall_64+0x55/0xb0 [ 116.918437][ T5450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.924389][ T5450] page last free stack trace: [ 116.929154][ T5450] free_unref_page_prepare+0x7ce/0x8e0 [ 116.934635][ T5450] free_unref_page_list+0xbe/0x860 [ 116.939815][ T5450] release_pages+0x1fa0/0x2220 [ 116.945203][ T5450] __folio_batch_release+0x71/0xe0 [ 116.950570][ T5450] truncate_inode_pages_range+0x358/0xf00 [ 116.956313][ T5450] evict+0x499/0x870 [ 116.960337][ T5450] erofs_put_super+0x7b/0x150 [ 116.965049][ T5450] generic_shutdown_super+0x134/0x2b0 [ 116.970490][ T5450] kill_block_super+0x44/0x90 [ 116.975184][ T5450] erofs_kill_sb+0x4c/0x140 [ 116.979758][ T5450] deactivate_locked_super+0x97/0x100 [ 116.985154][ T5450] cleanup_mnt+0x429/0x4c0 [ 116.989720][ T5450] task_work_run+0x1ce/0x250 [ 116.994330][ T5450] exit_to_user_mode_loop+0xe6/0x110 [ 116.999723][ T5450] exit_to_user_mode_prepare+0xf6/0x180 [ 117.005287][ T5450] syscall_exit_to_user_mode+0x1a/0x50 [ 117.010952][ T5450] ------------[ cut here ]------------ [ 117.016430][ T5450] WARNING: CPU: 1 PID: 5450 at include/linux/memcontrol.h:764 folio_lruvec_lock_irqsave+0x212/0x270 [ 117.027283][ T5450] Modules linked in: [ 117.031249][ T5450] CPU: 1 PID: 5450 Comm: dhcpcd Not tainted syzkaller #0 [ 117.038303][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.049097][ T5450] RIP: 0010:folio_lruvec_lock_irqsave+0x212/0x270 [ 117.055541][ T5450] Code: 4c 89 f7 e8 30 31 f9 ff 48 8b 04 24 49 89 06 e9 1c ff ff ff 48 89 df 48 c7 c6 60 ad b6 8a e8 d5 9a e1 ff c6 05 4c 79 51 0c 01 <0f> 0b e9 1b fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 9d fe [ 117.075711][ T5450] RSP: 0000:ffffc900037e7998 EFLAGS: 00010246 [ 117.081860][ T5450] RAX: a85287a38b274500 RBX: ffffea0000997bc0 RCX: a85287a38b274500 [ 117.089894][ T5450] RDX: 0000000000000004 RSI: ffffffff8aaacee0 RDI: ffffffff8afc6bc0 [ 117.097893][ T5450] RBP: ffffc900037e7a40 R08: ffffffff8e4a8b6f R09: 1ffffffff1c9516d [ 117.105947][ T5450] R10: dffffc0000000000 R11: fffffbfff1c9516e R12: ffff8880b8f36c28 [ 117.114019][ T5450] R13: dffffc0000000000 R14: ffff888023306000 R15: 0000000000000000 [ 117.122113][ T5450] FS: 00007f3654140740(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 117.131147][ T5450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.137760][ T5450] CR2: 00007ffc05bf7e8c CR3: 000000001ef56000 CR4: 00000000003506e0 [ 117.145832][ T5450] Call Trace: [ 117.149952][ T5450] [ 117.153108][ T5450] ? folio_memcg+0x127/0x480 [ 117.157735][ T5450] folio_batch_move_lru+0x2d8/0x6b0 [ 117.163017][ T5450] ? __mod_lruvec_page_state+0xa5/0x420 [ 117.168593][ T5450] ? folio_add_lru+0xd50/0xd50 [ 117.173433][ T5450] ? lru_add_drain_cpu+0x8c0/0x8c0 [ 117.178560][ T5450] ? __mod_lruvec_page_state+0xa5/0x420 [ 117.184207][ T5450] ? __mod_lruvec_page_state+0x23f/0x420 [ 117.189952][ T5450] ? folio_batch_add_and_move+0x9a/0x2b0 [ 117.195613][ T5450] ? folio_add_lru+0xd50/0xd50 [ 117.200495][ T5450] ? folio_add_lru+0x320/0xd50 [ 117.205281][ T5450] folio_add_lru+0x434/0xd50 [ 117.209946][ T5450] do_wp_page+0x1e4c/0x3630 [ 117.214498][ T5450] ? do_wp_page+0x16a7/0x3630 [ 117.219299][ T5450] ? folio_put+0xd0/0xd0 [ 117.223574][ T5450] ? do_raw_spin_lock+0x121/0x2c0 [ 117.228613][ T5450] ? __rwlock_init+0x150/0x150 [ 117.233714][ T5450] ? handle_mm_fault+0xd1/0x4920 [ 117.238689][ T5450] handle_mm_fault+0x12d4/0x4920 [ 117.243777][ T5450] ? handle_mm_fault+0xd1/0x4920 [ 117.248761][ T5450] ? lock_vma_under_rcu+0x526/0x650 [ 117.254725][ T5450] ? numa_migrate_prep+0x350/0x350 [ 117.260132][ T5450] ? close_fd_get_file+0x65/0x70 [ 117.265134][ T5450] ? do_user_addr_fault+0x1c3/0x12e0 [ 117.270560][ T5450] do_user_addr_fault+0xad0/0x12e0 [ 117.275706][ T5450] ? rcu_is_watching+0x15/0xb0 [ 117.280592][ T5450] exc_page_fault+0x67/0x110 [ 117.285209][ T5450] ? clear_bhb_loop+0x40/0x90 [ 117.289987][ T5450] asm_exc_page_fault+0x26/0x30 [ 117.294866][ T5450] RIP: 0033:0x55c5bb01287b [ 117.299341][ T5450] Code: 89 e1 48 89 ea 48 8d 3d c3 b7 04 00 e8 1e fd ff ff 8b 15 b8 d7 04 00 80 e6 08 0f 84 6f ff ff ff 4c 89 e1 48 89 ea 31 f6 89 df <89> 44 24 0c e8 cc 7b ff ff 8b 44 24 0c e9 53 ff ff ff 0f 1f 00 89 [ 117.319101][ T5450] RSP: 002b:00007ffc05bf7e80 EFLAGS: 00010246 [ 117.325204][ T5450] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007ffc05bf82c0 [ 117.333248][ T5450] RDX: 000055c5bb04b9df RSI: 0000000000000000 RDI: 0000000000000007 [ 117.341279][ T5450] RBP: 000055c5bb04b9df R08: 0000000000000000 R09: 0000000000000000 [ 117.349373][ T5450] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc05bf82c0 [ 117.358016][ T5450] R13: 00007ffc05c08570 R14: 00007ffc05c08590 R15: 00007ffc05c08530 [ 117.366258][ T5450] [ 117.369362][ T5450] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.376672][ T5450] CPU: 1 PID: 5450 Comm: dhcpcd Not tainted syzkaller #0 [ 117.383692][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.393754][ T5450] Call Trace: [ 117.397041][ T5450] [ 117.399987][ T5450] dump_stack_lvl+0x16c/0x230 [ 117.404674][ T5450] ? show_regs_print_info+0x20/0x20 [ 117.409864][ T5450] ? load_image+0x3b0/0x3b0 [ 117.414413][ T5450] panic+0x2c0/0x710 [ 117.418300][ T5450] ? bpf_jit_dump+0xd0/0xd0 [ 117.422796][ T5450] __warn+0x2e0/0x470 [ 117.426764][ T5450] ? folio_lruvec_lock_irqsave+0x212/0x270 [ 117.432570][ T5450] ? folio_lruvec_lock_irqsave+0x212/0x270 [ 117.438388][ T5450] report_bug+0x2be/0x4f0 [ 117.442732][ T5450] ? folio_lruvec_lock_irqsave+0x212/0x270 [ 117.448551][ T5450] ? folio_lruvec_lock_irqsave+0x212/0x270 [ 117.454368][ T5450] ? folio_lruvec_lock_irqsave+0x214/0x270 [ 117.460182][ T5450] handle_bug+0xcf/0x120 [ 117.464442][ T5450] exc_invalid_op+0x1a/0x50 [ 117.468962][ T5450] asm_exc_invalid_op+0x1a/0x20 [ 117.473835][ T5450] RIP: 0010:folio_lruvec_lock_irqsave+0x212/0x270 [ 117.480269][ T5450] Code: 4c 89 f7 e8 30 31 f9 ff 48 8b 04 24 49 89 06 e9 1c ff ff ff 48 89 df 48 c7 c6 60 ad b6 8a e8 d5 9a e1 ff c6 05 4c 79 51 0c 01 <0f> 0b e9 1b fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 9d fe [ 117.499897][ T5450] RSP: 0000:ffffc900037e7998 EFLAGS: 00010246 [ 117.505957][ T5450] RAX: a85287a38b274500 RBX: ffffea0000997bc0 RCX: a85287a38b274500 [ 117.513919][ T5450] RDX: 0000000000000004 RSI: ffffffff8aaacee0 RDI: ffffffff8afc6bc0 [ 117.521876][ T5450] RBP: ffffc900037e7a40 R08: ffffffff8e4a8b6f R09: 1ffffffff1c9516d [ 117.529836][ T5450] R10: dffffc0000000000 R11: fffffbfff1c9516e R12: ffff8880b8f36c28 [ 117.537794][ T5450] R13: dffffc0000000000 R14: ffff888023306000 R15: 0000000000000000 [ 117.545766][ T5450] ? folio_lruvec_lock_irqsave+0x20b/0x270 [ 117.551561][ T5450] ? folio_memcg+0x127/0x480 [ 117.556139][ T5450] folio_batch_move_lru+0x2d8/0x6b0 [ 117.561327][ T5450] ? __mod_lruvec_page_state+0xa5/0x420 [ 117.566868][ T5450] ? folio_add_lru+0xd50/0xd50 [ 117.571620][ T5450] ? lru_add_drain_cpu+0x8c0/0x8c0 [ 117.576715][ T5450] ? __mod_lruvec_page_state+0xa5/0x420 [ 117.582256][ T5450] ? __mod_lruvec_page_state+0x23f/0x420 [ 117.587877][ T5450] ? folio_batch_add_and_move+0x9a/0x2b0 [ 117.593493][ T5450] ? folio_add_lru+0xd50/0xd50 [ 117.598242][ T5450] ? folio_add_lru+0x320/0xd50 [ 117.602995][ T5450] folio_add_lru+0x434/0xd50 [ 117.607577][ T5450] do_wp_page+0x1e4c/0x3630 [ 117.612082][ T5450] ? do_wp_page+0x16a7/0x3630 [ 117.616750][ T5450] ? folio_put+0xd0/0xd0 [ 117.620983][ T5450] ? do_raw_spin_lock+0x121/0x2c0 [ 117.626005][ T5450] ? __rwlock_init+0x150/0x150 [ 117.630768][ T5450] ? handle_mm_fault+0xd1/0x4920 [ 117.635698][ T5450] handle_mm_fault+0x12d4/0x4920 [ 117.640632][ T5450] ? handle_mm_fault+0xd1/0x4920 [ 117.645569][ T5450] ? lock_vma_under_rcu+0x526/0x650 [ 117.650761][ T5450] ? numa_migrate_prep+0x350/0x350 [ 117.655868][ T5450] ? close_fd_get_file+0x65/0x70 [ 117.660798][ T5450] ? do_user_addr_fault+0x1c3/0x12e0 [ 117.666076][ T5450] do_user_addr_fault+0xad0/0x12e0 [ 117.671182][ T5450] ? rcu_is_watching+0x15/0xb0 [ 117.675938][ T5450] exc_page_fault+0x67/0x110 [ 117.680542][ T5450] ? clear_bhb_loop+0x40/0x90 [ 117.685211][ T5450] asm_exc_page_fault+0x26/0x30 [ 117.690053][ T5450] RIP: 0033:0x55c5bb01287b [ 117.694456][ T5450] Code: 89 e1 48 89 ea 48 8d 3d c3 b7 04 00 e8 1e fd ff ff 8b 15 b8 d7 04 00 80 e6 08 0f 84 6f ff ff ff 4c 89 e1 48 89 ea 31 f6 89 df <89> 44 24 0c e8 cc 7b ff ff 8b 44 24 0c e9 53 ff ff ff 0f 1f 00 89 [ 117.714047][ T5450] RSP: 002b:00007ffc05bf7e80 EFLAGS: 00010246 [ 117.720100][ T5450] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007ffc05bf82c0 [ 117.728056][ T5450] RDX: 000055c5bb04b9df RSI: 0000000000000000 RDI: 0000000000000007 [ 117.736015][ T5450] RBP: 000055c5bb04b9df R08: 0000000000000000 R09: 0000000000000000 [ 117.744236][ T5450] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc05bf82c0 [ 117.752193][ T5450] R13: 00007ffc05c08570 R14: 00007ffc05c08590 R15: 00007ffc05c08530 [ 117.760164][ T5450] [ 117.763392][ T5450] Kernel Offset: disabled [ 117.767701][ T5450] Rebooting in 86400 seconds..