last executing test programs: 54.471944089s ago: executing program 2 (id=971): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xfffffffd}) r0 = syz_io_uring_setup(0x4b5, &(0x7f00000004c0)={0x0, 0x80086e1, 0x2, 0x8, 0x1}, &(0x7f0000010080), &(0x7f0000000000)) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)=""/43, 0x2b}], 0x1) 54.224723163s ago: executing program 2 (id=973): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="270e24fa32500000010004"], 0x14}, 0x1, 0x40030000000000}, 0x0) 53.984254147s ago: executing program 2 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 53.683553872s ago: executing program 2 (id=979): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1026864, &(0x7f00000000c0)=ANY=[@ANYBLOB='max=-']) read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) 53.283342928s ago: executing program 2 (id=983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100dc3ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x1059a, &(0x7f0000010640)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 52.655597128s ago: executing program 2 (id=987): rt_sigtimedwait(&(0x7f0000000100)={[0x8000000000000001]}, 0x0, 0x0, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 52.116605487s ago: executing program 32 (id=987): rt_sigtimedwait(&(0x7f0000000100)={[0x8000000000000001]}, 0x0, 0x0, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 11.126600912s ago: executing program 0 (id=1177): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x779a, 0x3) 10.811413957s ago: executing program 0 (id=1179): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x1008002, &(0x7f0000000a80)=ANY=[], 0xff, 0x251, &(0x7f0000000280)="$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") socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0xd4, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 10.412331643s ago: executing program 0 (id=1181): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0xb000) 9.644860456s ago: executing program 0 (id=1186): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3c1uG0UcAPD/bj6bliaVOPBxiQCJSIikSVugEkhEXDjQEz1wJIrdEtVpUGIkWkV8CMQNJBAPAAfgETjCgXeAM3CAShHKgZSb0dq7jhvbaZPadZX8ftLIMztrz6zHs15PZicBHFvTEfFqRAxFxNmImMy3p3mIjxoh229ne3P5v+3N5SRqtTf/SSLJtxWvleSPJ/MXmEkj0k+TeLJDuRs3bl5bqlTK63l6rrr67tzGjZvPr6wuXS1fLV9feOHc+QsXXrq48GLPjnVrNfn8me/f+PPLz0pf/fr3T1NZfU/lea3H0SvTMd18T/a62OvCBmy8JZ4MD7AiAADsK82v/Yfr1/+TMRS7F2+T8cUvA60cAAAA0BO1WvEIAAAAHF2J3/4AAABwxBXzAHa2N5eLMMDpCDxgW4sRMdVo/9t5aOQMN+/pHYkYGe9T+dMR8fr4pYUsRJ/uwwYAAAA4zn5ebCz81z7+l8ZjLfudiIiJYm2/Hprek24f/0lv9bhIWmwtRrwcEbfbxv/SYpepoTz1SH2ocCS5slIpn42I0xExEyNjWXp+nzI+eOraD93yWsf/vvnjrfms/Oxxd4/01vDYnc8pLVWX7ueY2bX1ccQTw53aP2mO/7auk3kYb6/svNItL2v/rL2L0N7+9FPt24hnO/b/3ZVLk/3XZ52rnw/m8rPCWHsZv5/67pNu5bf2/yxk5Rd/C6D/sv4/sX/719fJba7Xu3HwMn7899Jv3fLu3v6dz/+jyeV6BUfzbe8vVavr8xGjSWPLHdt9mpqK96N4v7L2n3m68/d/cf2X5N/9p1vWhz6I1z48c7lbnv4/WFn7lw7U/w8eeWfi8Zlu5d9b/z9fr0zxIq7/7u5eG2jQ9QQAAAAAAACgN9L63L4knW3G03R2tjHP99GYSCtrG9Xnrqy9d73UmAM4FSNpMf9zsmU+6HzjNvJmemFP+lxEnImIrydP1NOzy2uV0qAPHgAAAI6Jk11+/2f+OszNHgAAAMDDaWrQFQAAAAD6zu9/AAAAONLuZ13/Snm9+BdBh3y6iMjhIkP5B+9hqc/RiwzwpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/B8AAP//91C79Q==") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000006c0)='./bus\x00', 0x2302000, 0x0, 0x9, 0x0, &(0x7f00000002c0)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') unlink(&(0x7f0000000280)='./file1\x00') 8.788003149s ago: executing program 0 (id=1193): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="e6", 0xfdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 7.754538116s ago: executing program 0 (id=1201): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000f80)={0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x1000, 0x7, 0x8a3, 0x7, 0xfffffffe, 0x1, 0x6, 0x3}) 7.091278626s ago: executing program 33 (id=1201): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000f80)={0x1, 0x0, 0x0, 0x6, 0x5, 0x1, 0x1000, 0x7, 0x8a3, 0x7, 0xfffffffe, 0x1, 0x6, 0x3}) 6.721839252s ago: executing program 5 (id=1209): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550d, &(0x7f0000005dc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 5.316872285s ago: executing program 4 (id=1218): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7f, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private1, @in6=@private0, 0x4e24, 0x7fff, 0x4e24, 0xfff6, 0xa, 0x20, 0x20, 0x8}, {0x9, 0xe66, 0x31bf, 0x9, 0x9, 0xf0de, 0x3f9, 0x8}, {0x5, 0x7fffffff, 0x7, 0xa8}, 0x9, 0x6e6bc0, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3507, 0x2, 0x1, 0xd5, 0x800, 0x7fffffff, 0x3c}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4.97905044s ago: executing program 4 (id=1221): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 4.588651837s ago: executing program 4 (id=1224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000070000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.431504935s ago: executing program 5 (id=1227): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) 3.315930577s ago: executing program 4 (id=1229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c329d90491ceaebfd26d4eef23248000000fc58dbb8a19052343f", 0x32}, {&(0x7f0000000100)="051a00000e", 0x5}, {&(0x7f0000000240)="7a0e1d31be7e7f8945de0e", 0xb}], 0x3) 2.573286498s ago: executing program 1 (id=1231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) 1.970354898s ago: executing program 1 (id=1232): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 1.787001531s ago: executing program 5 (id=1234): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x6000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) 1.766824671s ago: executing program 3 (id=1235): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) 1.647452834s ago: executing program 4 (id=1236): r0 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x4008040, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x5, 0x0, 0xfffff038}, {0x20, 0xd3, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.517992565s ago: executing program 5 (id=1237): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1.327502658s ago: executing program 1 (id=1238): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) 1.313110319s ago: executing program 3 (id=1239): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) 1.23465782s ago: executing program 4 (id=1240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r1, 0x5, 0x70bd25, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x4}]]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) 1.141982561s ago: executing program 5 (id=1241): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6}]}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r0 = syz_io_uring_setup(0x156f, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0xfffffffd, 0x216}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 939.046495ms ago: executing program 1 (id=1242): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r2, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) 688.458399ms ago: executing program 3 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000040)) 664.898669ms ago: executing program 1 (id=1244): r0 = socket$inet6(0xa, 0x803, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, r2}, 0x14) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x4, @empty, 0x10}, 0x1c) 431.189563ms ago: executing program 3 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) 424.959173ms ago: executing program 1 (id=1246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) 206.620137ms ago: executing program 3 (id=1247): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000000c0)=0xfffffff8, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 126.403918ms ago: executing program 5 (id=1248): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8010, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x21, 0x9e8b, &(0x7f0000013f00)="$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") syz_open_dev$dri(0x0, 0x81, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) 0s ago: executing program 3 (id=1249): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) kernel console output (not intermixed with test programs): ilesystem will be case sensitive! [ 213.892952][ T6291] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 213.926244][ T6291] usb 5-1: USB disconnect, device number 13 [ 213.952298][ T5050] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.972373][ T6287] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 213.980203][ T6287] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 214.001292][ T6287] usb 2-1: cp210x converter now attached to ttyUSB0 [ 214.012544][ T4722] m920x_read = error: -19 [ 214.017053][ T4722] dvb-usb: error while querying for an remote control event. [ 214.030675][ T6287] usb 2-1: USB disconnect, device number 11 [ 214.040774][ T6287] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 214.056241][ T6287] cp210x 2-1:0.0: device disconnected [ 214.135146][ T4320] kaweth 3-1:0.0: Error setting receive filter [ 214.141471][ T4320] kaweth: probe of 3-1:0.0 failed with error -5 [ 214.185477][ T4320] usb 3-1: USB disconnect, device number 10 [ 214.195787][ T4722] m920x_read = error: -19 [ 214.200192][ T4722] dvb-usb: error while querying for an remote control event. [ 214.322541][ T4722] m920x_read = error: -19 [ 214.326950][ T4722] dvb-usb: error while querying for an remote control event. [ 214.397811][ T7273] loop3: detected capacity change from 0 to 32768 [ 214.427384][ T7273] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.947 (7273) [ 214.449172][ T7273] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 214.459794][ T4320] m920x_read = error: -19 [ 214.464354][ T4320] dvb-usb: error while querying for an remote control event. [ 214.494461][ T7273] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 214.509046][ T7273] BTRFS info (device loop3): turning on sync discard [ 214.527569][ T7273] BTRFS info (device loop3): doing ref verification [ 214.557116][ T7273] BTRFS info (device loop3): use zlib compression, level 3 [ 214.574887][ T7273] BTRFS info (device loop3): force clearing of disk cache [ 214.582095][ T7273] BTRFS info (device loop3): setting nodatacow, compression disabled [ 214.592324][ T4320] m920x_read = error: -19 [ 214.596719][ T4320] dvb-usb: error while querying for an remote control event. [ 214.662326][ T7273] BTRFS info (device loop3): doing ref verification [ 214.669258][ T7273] BTRFS info (device loop3): using free space tree [ 214.762498][ T4722] m920x_read = error: -19 [ 214.766911][ T4722] dvb-usb: error while querying for an remote control event. [ 214.931057][ T4730] m920x_read = error: -19 [ 214.935624][ T4730] dvb-usb: error while querying for an remote control event. [ 215.062337][ T4730] m920x_read = error: -19 [ 215.066774][ T4730] dvb-usb: error while querying for an remote control event. [ 215.076934][ T7273] BTRFS info (device loop3): enabling ssd optimizations [ 215.135556][ T7273] BTRFS info (device loop3): rebuilding free space tree [ 215.201382][ T7308] loop1: detected capacity change from 0 to 128 [ 215.212397][ T4730] m920x_read = error: -19 [ 215.216847][ T4730] dvb-usb: error while querying for an remote control event. [ 215.323722][ T26] audit: type=1800 audit(1750798138.742:45): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.956" name="file1" dev="loop1" ino=1048630 res=0 errno=0 [ 215.342140][ T7308] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 215.352993][ T4730] m920x_read = error: -19 [ 215.357709][ T4730] dvb-usb: error while querying for an remote control event. [ 215.359232][ T7308] FAT-fs (loop1): Filesystem has been set read-only [ 215.442361][ T6287] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 215.502340][ T4730] m920x_read = error: -19 [ 215.506764][ T4730] dvb-usb: error while querying for an remote control event. [ 215.593140][ T4261] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 215.642286][ T4730] m920x_read = error: -19 [ 215.644402][ T6287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.646719][ T4730] dvb-usb: error while querying for an remote control event. [ 215.725322][ T6287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.768175][ T6287] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 215.816265][ T6287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.848224][ T4365] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (4365) [ 215.861439][ T6287] usb 3-1: config 0 descriptor?? [ 215.879993][ T7275] loop4: detected capacity change from 0 to 40427 [ 216.008965][ T7275] F2FS-fs (loop4): Found nat_bits in checkpoint [ 216.248905][ T4301] m920x_read = error: -19 [ 216.253597][ T4301] dvb-usb: error while querying for an remote control event. [ 216.300139][ T7275] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 216.323050][ T6287] uclogic 0003:5543:0522.0018: No inputs registered, leaving [ 216.363882][ T4301] m920x_read = error: -19 [ 216.368306][ T4301] dvb-usb: error while querying for an remote control event. [ 216.376350][ T6287] uclogic 0003:5543:0522.0018: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 216.517759][ T127] m920x_read = error: -19 [ 216.522406][ T127] dvb-usb: error while querying for an remote control event. [ 216.564256][ T6291] usb 3-1: USB disconnect, device number 11 [ 216.595569][ T4252] syz-executor: attempt to access beyond end of device [ 216.595569][ T4252] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 216.632435][ T127] m920x_read = error: -19 [ 216.636855][ T127] dvb-usb: error while querying for an remote control event. [ 216.765704][ T7332] fido_id[7332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 216.802676][ T127] m920x_read = error: -19 [ 216.807096][ T127] dvb-usb: error while querying for an remote control event. [ 216.942345][ T127] m920x_read = error: -19 [ 216.946784][ T127] dvb-usb: error while querying for an remote control event. [ 217.092446][ T127] m920x_read = error: -19 [ 217.097253][ T127] dvb-usb: error while querying for an remote control event. [ 217.237404][ T127] m920x_read = error: -19 [ 217.241840][ T127] dvb-usb: error while querying for an remote control event. [ 217.275114][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.969'. [ 217.331905][ T6291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.349780][ T7323] loop0: detected capacity change from 0 to 32768 [ 217.351373][ T6291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.388557][ T7345] capability: warning: `syz.2.971' uses 32-bit capabilities (legacy support in use) [ 217.388581][ T127] m920x_read = error: -19 [ 217.406794][ T6287] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.430336][ T127] dvb-usb: error while querying for an remote control event. [ 217.498703][ T7323] syz.0.962: attempt to access beyond end of device [ 217.498703][ T7323] loop0: rw=2049, sector=2621800, nr_sectors = 8 limit=32768 [ 217.592448][ T127] m920x_read = error: -19 [ 217.596873][ T127] dvb-usb: error while querying for an remote control event. [ 217.652489][ T6291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.686480][ T108] blkno = 5002c, nblocks = 1 [ 217.691294][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 217.691294][ T108] [ 217.716998][ T7350] overlayfs: upper fs is r/o, try multi-lower layers mount [ 217.718660][ T108] ERROR: (device loop0): remounting filesystem as read-only [ 217.742640][ T127] m920x_read = error: -19 [ 217.747054][ T127] dvb-usb: error while querying for an remote control event. [ 217.758373][ T108] blkno = 5002c, nblocks = 1 [ 217.771799][ T108] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 217.771799][ T108] [ 217.787274][ T108] blkno = 5002d, nblocks = 1 [ 217.791944][ T108] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 217.791944][ T108] [ 217.820322][ T7354] loop3: detected capacity change from 0 to 512 [ 217.838915][ T7354] EXT4-fs (loop3): Test dummy encryption mode enabled [ 217.864570][ T7354] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 217.879590][ T7354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 217.884461][ T127] m920x_read = error: -19 [ 217.891933][ T127] dvb-usb: error while querying for an remote control event. [ 217.912515][ T7354] System zones: 1-12 [ 217.935591][ T7354] EXT4-fs (loop3): 1 truncate cleaned up [ 217.941404][ T7354] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.972529][ T6287] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.062515][ T127] m920x_read = error: -19 [ 218.067602][ T127] dvb-usb: error while querying for an remote control event. [ 218.113369][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 218.198618][ T4301] m920x_read = error: -19 [ 218.209750][ T4301] dvb-usb: error while querying for an remote control event. [ 218.227033][ T7367] loop2: detected capacity change from 0 to 8 [ 218.281462][ T7369] loop3: detected capacity change from 0 to 764 [ 218.327331][ T7369] rock: directory entry would overflow storage [ 218.373263][ T7369] rock: sig=0x4654, size=5, remaining=4 [ 218.392464][ T4301] m920x_read = error: -19 [ 218.402081][ T4301] dvb-usb: error while querying for an remote control event. [ 218.485220][ T4254] SQUASHFS error: Unable to read directory block [631:72] [ 218.535956][ T4254] SQUASHFS error: Unable to read inode 0xe3 [ 218.572510][ T4254] SQUASHFS error: Unable to read inode 0xe3 [ 218.572585][ T4301] m920x_read = error: -19 [ 218.632364][ T4301] dvb-usb: error while querying for an remote control event. [ 218.730597][ T7376] loop1: detected capacity change from 0 to 512 [ 218.754180][ T127] m920x_read = error: -19 [ 218.758632][ T127] dvb-usb: error while querying for an remote control event. [ 218.864430][ T7376] EXT4-fs (loop1): 1 orphan inode deleted [ 218.870257][ T7376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 218.883671][ T127] m920x_read = error: -19 [ 218.888086][ T127] dvb-usb: error while querying for an remote control event. [ 218.934044][ T4480] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 218.957182][ T4480] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:10: Failed to release dquot type 1 [ 219.000386][ T7376] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.042449][ T127] m920x_read = error: -19 [ 219.046902][ T127] dvb-usb: error while querying for an remote control event. [ 219.066987][ T7383] netlink: 32 bytes leftover after parsing attributes in process `syz.0.986'. [ 219.165013][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 219.172861][ T127] m920x_read = error: -19 [ 219.177284][ T127] dvb-usb: error while querying for an remote control event. [ 219.224038][ T4500] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 219.274000][ T4500] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:18: Failed to release dquot type 1 [ 219.297837][ T4517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.323260][ T127] m920x_read = error: -19 [ 219.327693][ T127] dvb-usb: error while querying for an remote control event. [ 219.418632][ T7373] loop4: detected capacity change from 0 to 32768 [ 219.450627][ T7373] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.982 (7373) [ 219.469470][ T4730] m920x_read = error: -19 [ 219.477392][ T4730] dvb-usb: error while querying for an remote control event. [ 219.531960][ T7373] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 219.568218][ T4517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.589456][ T7373] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 219.624211][ T7373] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 219.659307][ T4730] m920x_read = error: -19 [ 219.673365][ T7373] BTRFS info (device loop4): use zstd compression, level 3 [ 219.680658][ T7373] BTRFS info (device loop4): using free space tree [ 219.694568][ T4730] dvb-usb: error while querying for an remote control event. [ 219.802423][ T4730] m920x_read = error: -19 [ 219.803393][ T7394] loop3: detected capacity change from 0 to 64 [ 219.806907][ T4730] dvb-usb: error while querying for an remote control event. [ 219.825530][ T4517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.920254][ T7404] loop1: detected capacity change from 0 to 4096 [ 219.932452][ T127] m920x_read = error: -19 [ 219.937167][ T127] dvb-usb: error while querying for an remote control event. [ 219.977534][ T7373] BTRFS info (device loop4): enabling ssd optimizations [ 220.038450][ T7411] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.082531][ T127] m920x_read = error: -19 [ 220.086949][ T127] dvb-usb: error while querying for an remote control event. [ 220.122361][ T6287] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 220.137753][ T4517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.165933][ T26] audit: type=1800 audit(1750798143.582:46): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.992" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 220.242664][ T127] m920x_read = error: -19 [ 220.247092][ T127] dvb-usb: error while querying for an remote control event. [ 220.346552][ T6287] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.372476][ T6287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 220.383508][ T4261] hfs: node 4:3 still has 2 user(s)! [ 220.392371][ T127] m920x_read = error: -19 [ 220.396775][ T127] dvb-usb: error while querying for an remote control event. [ 220.412746][ T4252] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 220.462306][ T6287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 220.518471][ T6287] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 220.552455][ T127] m920x_read = error: -19 [ 220.560897][ T127] dvb-usb: error while querying for an remote control event. [ 220.602090][ T7414] loop1: detected capacity change from 0 to 256 [ 220.635292][ T6287] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 220.672505][ T6287] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 220.689942][ T7414] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 220.701284][ T6287] usb 1-1: Manufacturer: syz [ 220.706793][ T5051] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (5051) [ 220.710095][ T4301] m920x_read = error: -19 [ 220.763718][ T6287] usb 1-1: config 0 descriptor?? [ 220.775104][ T4301] dvb-usb: error while querying for an remote control event. [ 220.829444][ T4255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.841485][ T4255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.863445][ T4255] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.907261][ T4255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.922668][ T4301] m920x_read = error: -19 [ 220.927109][ T4301] dvb-usb: error while querying for an remote control event. [ 220.935116][ T4255] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.945463][ T4255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.072637][ T4301] m920x_read = error: -19 [ 221.077494][ T4301] dvb-usb: error while querying for an remote control event. [ 221.142388][ T6287] rc_core: IR keymap rc-hauppauge not found [ 221.148721][ T6287] Registered IR keymap rc-empty [ 221.167398][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.203108][ T4301] m920x_read = error: -19 [ 221.207756][ T4301] dvb-usb: error while querying for an remote control event. [ 221.212512][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.267615][ T6287] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 221.283029][ T6287] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18 [ 221.302723][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.332345][ T4301] m920x_read = error: -19 [ 221.332357][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.336751][ T4301] dvb-usb: error while querying for an remote control event. [ 221.402331][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.440378][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.452550][ T4301] m920x_read = error: -19 [ 221.457311][ T4301] dvb-usb: error while querying for an remote control event. [ 221.502469][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.542514][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.552349][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.602672][ T4730] m920x_read = error: -19 [ 221.607172][ T4730] dvb-usb: error while querying for an remote control event. [ 221.612901][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.652339][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.684387][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.754809][ T6287] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 221.762357][ T4730] m920x_read = error: -19 [ 221.766874][ T4730] dvb-usb: error while querying for an remote control event. [ 221.790140][ T6287] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 221.810236][ T6287] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 221.833069][ T6287] usb 1-1: USB disconnect, device number 13 [ 221.892407][ T4730] m920x_read = error: -19 [ 221.896960][ T4730] dvb-usb: error while querying for an remote control event. [ 222.052519][ T4730] m920x_read = error: -19 [ 222.056946][ T4730] dvb-usb: error while querying for an remote control event. [ 222.204023][ T4730] m920x_read = error: -19 [ 222.247229][ T4730] dvb-usb: error while querying for an remote control event. [ 222.422420][ T127] m920x_read = error: -19 [ 222.426915][ T127] dvb-usb: error while querying for an remote control event. [ 222.563458][ T4301] m920x_read = error: -19 [ 222.567891][ T4301] dvb-usb: error while querying for an remote control event. [ 222.702268][ T4730] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 222.732329][ T4301] m920x_read = error: -19 [ 222.740503][ T4301] dvb-usb: error while querying for an remote control event. [ 222.795753][ T7468] loop1: detected capacity change from 0 to 512 [ 222.867296][ T7468] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 222.882473][ T4301] m920x_read = error: -19 [ 222.888147][ T4301] dvb-usb: error while querying for an remote control event. [ 222.895683][ T4730] usb 4-1: Using ep0 maxpacket: 32 [ 222.903155][ T4730] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 222.905413][ T7418] chnl_net:caif_netlink_parms(): no params data found [ 222.922427][ T4730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.949760][ T26] audit: type=1800 audit(1750798146.362:47): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1004" name="file1" dev="loop1" ino=26 res=0 errno=0 [ 222.963589][ T4730] usb 4-1: config 0 descriptor?? [ 222.992437][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 223.010955][ T4730] gspca_main: sunplus-2.14.0 probing 041e:400b [ 223.033970][ T4301] m920x_read = error: -19 [ 223.039081][ T4301] dvb-usb: error while querying for an remote control event. [ 223.222373][ T4301] m920x_read = error: -19 [ 223.226980][ T4301] dvb-usb: error while querying for an remote control event. [ 223.342647][ T127] m920x_read = error: -19 [ 223.347915][ T127] dvb-usb: error while querying for an remote control event. [ 223.463547][ T127] m920x_read = error: -19 [ 223.468037][ T127] dvb-usb: error while querying for an remote control event. [ 223.622331][ T4301] m920x_read = error: -19 [ 223.626962][ T4301] dvb-usb: error while querying for an remote control event. [ 223.792802][ T4301] m920x_read = error: -19 [ 223.797333][ T4301] dvb-usb: error while querying for an remote control event. [ 223.808091][ T7471] loop4: detected capacity change from 0 to 32768 [ 223.826158][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.842352][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.856535][ T7471] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1005 (7471) [ 223.879560][ T7418] device bridge_slave_0 entered promiscuous mode [ 223.933108][ T4338] m920x_read = error: -19 [ 223.937578][ T4338] dvb-usb: error while querying for an remote control event. [ 223.946958][ T7471] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.957317][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.957386][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.959127][ T7418] device bridge_slave_1 entered promiscuous mode [ 224.024387][ T4730] gspca_sunplus: reg_w_riv err -71 [ 224.029744][ T4730] sunplus: probe of 4-1:0.0 failed with error -71 [ 224.050764][ T7471] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 224.072379][ T4730] usb 4-1: USB disconnect, device number 13 [ 224.101052][ T7471] BTRFS info (device loop4): using free space tree [ 224.113019][ T127] m920x_read = error: -19 [ 224.117404][ T127] dvb-usb: error while querying for an remote control event. [ 224.263508][ T127] m920x_read = error: -19 [ 224.268188][ T127] dvb-usb: error while querying for an remote control event. [ 224.389929][ T4730] m920x_read = error: -19 [ 224.394543][ T4730] dvb-usb: error while querying for an remote control event. [ 224.456414][ T7471] BTRFS info (device loop4): enabling ssd optimizations [ 224.495728][ T7508] loop0: detected capacity change from 0 to 8192 [ 224.515239][ T7508] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 224.529714][ T4301] m920x_read = error: -19 [ 224.542335][ T4301] dvb-usb: error while querying for an remote control event. [ 224.562384][ T7508] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 224.638731][ T7508] REISERFS (device loop0): using ordered data mode [ 224.652457][ T4301] m920x_read = error: -19 [ 224.656880][ T4301] dvb-usb: error while querying for an remote control event. [ 224.663562][ T7418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.706077][ T7508] reiserfs: using flush barriers [ 224.764966][ T7418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.782397][ T4301] m920x_read = error: -19 [ 224.786828][ T4301] dvb-usb: error while querying for an remote control event. [ 224.795500][ T7508] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.892677][ T4252] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.917887][ T7508] REISERFS (device loop0): checking transaction log (loop0) [ 224.942655][ T4301] m920x_read = error: -19 [ 224.947062][ T4301] dvb-usb: error while querying for an remote control event. [ 224.966862][ T4517] device hsr_slave_0 left promiscuous mode [ 225.072467][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 225.189223][ T4365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4365) [ 225.318392][ T7508] REISERFS (device loop0): Using tea hash to sort names [ 225.341170][ T7508] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 225.519188][ T4717] m920x_read = error: -19 [ 225.523979][ T4517] device hsr_slave_1 left promiscuous mode [ 225.533744][ T4717] dvb-usb: error while querying for an remote control event. [ 225.581715][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.609605][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.642299][ T127] m920x_read = error: -19 [ 225.646814][ T127] dvb-usb: error while querying for an remote control event. [ 225.658957][ T7535] input: syz0 as /devices/virtual/input/input19 [ 225.659067][ T4517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.695965][ T4517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.743284][ T4517] device bridge_slave_1 left promiscuous mode [ 225.768846][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.789273][ T127] m920x_read = error: -19 [ 225.794654][ T127] dvb-usb: error while querying for an remote control event. [ 225.853223][ T4517] device bridge_slave_0 left promiscuous mode [ 225.859577][ T4517] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.872555][ T4717] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 225.939943][ T127] m920x_read = error: -19 [ 225.944675][ T127] dvb-usb: error while querying for an remote control event. [ 226.036545][ T7541] loop4: detected capacity change from 0 to 764 [ 226.060476][ T4517] device veth1_macvtap left promiscuous mode [ 226.082665][ T4717] usb 2-1: Using ep0 maxpacket: 8 [ 226.088086][ T4517] device veth0_macvtap left promiscuous mode [ 226.088580][ T127] m920x_read = error: -19 [ 226.101051][ T4517] device veth1_vlan left promiscuous mode [ 226.108230][ T4517] device veth0_vlan left promiscuous mode [ 226.109868][ T4717] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 226.126184][ T127] dvb-usb: error while querying for an remote control event. [ 226.136693][ T4365] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.162296][ T4717] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 226.223478][ T4717] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.267968][ T4717] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.301612][ T4717] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.326989][ T4717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.344155][ T7547] loop4: detected capacity change from 0 to 47 [ 226.344811][ T4365] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.370009][ T127] m920x_read = error: -19 [ 226.375804][ T127] dvb-usb: error while querying for an remote control event. [ 226.502438][ T127] m920x_read = error: -19 [ 226.506912][ T127] dvb-usb: error while querying for an remote control event. [ 226.564318][ T7547] MINIX-fs: deleted inode referenced: 9 [ 226.571464][ T7547] MINIX-fs: deleted inode referenced: 9 [ 226.582947][ T4717] usb 2-1: GET_CAPABILITIES returned 0 [ 226.588510][ T4717] usbtmc 2-1:16.0: can't read capabilities [ 226.604155][ T7547] MINIX-fs: deleted inode referenced: 9 [ 226.628722][ T7547] MINIX-fs: deleted inode referenced: 9 [ 226.661275][ T127] m920x_read = error: -19 [ 226.666582][ T127] dvb-usb: error while querying for an remote control event. [ 226.794046][ T127] m920x_read = error: -19 [ 226.798473][ T127] dvb-usb: error while querying for an remote control event. [ 226.824578][ T127] usb 2-1: USB disconnect, device number 12 [ 226.933042][ T4338] m920x_read = error: -19 [ 226.937561][ T4338] dvb-usb: error while querying for an remote control event. [ 227.087940][ T127] m920x_read = error: -19 [ 227.093462][ T127] dvb-usb: error while querying for an remote control event. [ 227.152468][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 227.212466][ T127] m920x_read = error: -19 [ 227.217007][ T127] dvb-usb: error while querying for an remote control event. [ 227.254562][ T7551] loop4: detected capacity change from 0 to 32768 [ 227.342965][ T127] m920x_read = error: -19 [ 227.347383][ T127] dvb-usb: error while querying for an remote control event. [ 227.348613][ T7551] XFS (loop4): Mounting V5 Filesystem [ 227.482447][ T4338] m920x_read = error: -19 [ 227.486864][ T4338] dvb-usb: error while querying for an remote control event. [ 227.501324][ T7561] loop1: detected capacity change from 0 to 256 [ 227.535844][ T7551] XFS (loop4): Ending clean mount [ 227.558367][ T7551] XFS (loop4): Quotacheck needed: Please wait. [ 227.612354][ T4338] m920x_read = error: -19 [ 227.616773][ T4338] dvb-usb: error while querying for an remote control event. [ 227.717433][ T7551] XFS (loop4): Quotacheck: Done. [ 227.742619][ T4338] m920x_read = error: -19 [ 227.747064][ T4338] dvb-usb: error while querying for an remote control event. [ 227.892478][ T4338] m920x_read = error: -19 [ 227.896906][ T4338] dvb-usb: error while querying for an remote control event. [ 227.933102][ T4252] XFS (loop4): Unmounting Filesystem [ 228.022339][ T4338] m920x_read = error: -19 [ 228.026836][ T4338] dvb-usb: error while querying for an remote control event. [ 228.132001][ T4517] team0 (unregistering): Port device team_slave_1 removed [ 228.142031][ T4338] m920x_read = error: -19 [ 228.150090][ T4338] dvb-usb: error while querying for an remote control event. [ 228.228942][ T4517] team0 (unregistering): Port device team_slave_0 removed [ 228.292477][ T4338] m920x_read = error: -19 [ 228.297051][ T4338] dvb-usb: error while querying for an remote control event. [ 228.325886][ T4517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.395095][ T4517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.422485][ T4338] m920x_read = error: -19 [ 228.427216][ T4338] dvb-usb: error while querying for an remote control event. [ 228.496557][ T7565] loop1: detected capacity change from 0 to 40427 [ 228.534861][ T7565] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 228.542354][ T4338] m920x_read = error: -19 [ 228.561275][ T4338] dvb-usb: error while querying for an remote control event. [ 228.569709][ T7565] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 228.596276][ T7565] F2FS-fs (loop1): invalid crc value [ 228.635942][ T7565] F2FS-fs (loop1): Found nat_bits in checkpoint [ 228.682404][ T4717] m920x_read = error: -19 [ 228.687011][ T4717] dvb-usb: error while querying for an remote control event. [ 228.741966][ T7565] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 228.773354][ T7565] F2FS-fs (loop1): Start checkpoint disabled! [ 228.832253][ T7565] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 228.839399][ T7565] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 228.847422][ T4717] m920x_read = error: -19 [ 228.851891][ T4717] dvb-usb: error while querying for an remote control event. [ 228.959834][ T7565] syz.1.1023: attempt to access beyond end of device [ 228.959834][ T7565] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 228.975482][ T4717] m920x_read = error: -19 [ 228.979902][ T4717] dvb-usb: error while querying for an remote control event. [ 229.099986][ T127] m920x_read = error: -19 [ 229.105235][ T127] dvb-usb: error while querying for an remote control event. [ 229.169729][ T4486] kworker/u4:12: attempt to access beyond end of device [ 229.169729][ T4486] loop1: rw=1, sector=77944, nr_sectors = 8 limit=40427 [ 229.195130][ T4486] kworker/u4:12: attempt to access beyond end of device [ 229.195130][ T4486] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 229.229759][ T127] m920x_read = error: -19 [ 229.232359][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 229.234478][ T127] dvb-usb: error while querying for an remote control event. [ 229.363711][ T127] m920x_read = error: -19 [ 229.368132][ T127] dvb-usb: error while querying for an remote control event. [ 229.522297][ T127] m920x_read = error: -19 [ 229.526738][ T127] dvb-usb: error while querying for an remote control event. [ 229.669830][ T4717] m920x_read = error: -19 [ 229.674379][ T4717] dvb-usb: error while querying for an remote control event. [ 229.783474][ T127] m920x_read = error: -19 [ 229.788068][ T127] dvb-usb: error while querying for an remote control event. [ 229.798662][ T4517] bond0 (unregistering): Released all slaves [ 229.916148][ T127] m920x_read = error: -19 [ 229.920574][ T127] dvb-usb: error while querying for an remote control event. [ 229.959498][ T7418] team0: Port device team_slave_0 added [ 230.009712][ T7574] loop1: detected capacity change from 0 to 32768 [ 230.042110][ T7566] device syzkaller1 entered promiscuous mode [ 230.052299][ T127] m920x_read = error: -19 [ 230.057005][ T127] dvb-usb: error while querying for an remote control event. [ 230.076004][ T7574] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 230.083379][ T7418] team0: Port device team_slave_1 added [ 230.202462][ T127] m920x_read = error: -19 [ 230.207135][ T127] dvb-usb: error while querying for an remote control event. [ 230.273782][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.346452][ T127] m920x_read = error: -19 [ 230.350866][ T127] dvb-usb: error while querying for an remote control event. [ 230.428789][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.466269][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.492730][ T127] m920x_read = error: -19 [ 230.497107][ T127] dvb-usb: error while querying for an remote control event. [ 230.531331][ T4365] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 230.552238][ T7418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.606727][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.622470][ T127] m920x_read = error: -19 [ 230.626979][ T127] dvb-usb: error while querying for an remote control event. [ 230.652308][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.711622][ T7593] loop0: detected capacity change from 0 to 1024 [ 230.802519][ T4338] m920x_read = error: -19 [ 230.806931][ T4338] dvb-usb: error while querying for an remote control event. [ 230.814689][ T7418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.851613][ T7595] loop3: detected capacity change from 0 to 512 [ 230.900321][ T7595] EXT4-fs: Ignoring removed oldalloc option [ 230.952527][ T4338] m920x_read = error: -19 [ 230.956994][ T4338] dvb-usb: error while querying for an remote control event. [ 230.996568][ T7595] EXT4-fs (loop3): 1 truncate cleaned up [ 231.006284][ T7595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 231.102498][ T4338] m920x_read = error: -19 [ 231.107513][ T4338] dvb-usb: error while querying for an remote control event. [ 231.125806][ T46] hfsplus: b-tree write err: -5, ino 4 [ 231.143538][ T26] audit: type=1800 audit(1750798154.562:48): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1033" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 231.237967][ T7418] device hsr_slave_0 entered promiscuous mode [ 231.244212][ T4338] m920x_read = error: -19 [ 231.244234][ T4338] dvb-usb: error while querying for an remote control event. [ 231.258975][ T7604] EXT4-fs (loop3): shut down requested (1) [ 231.352499][ T4338] m920x_read = error: -19 [ 231.356965][ T4338] dvb-usb: error while querying for an remote control event. [ 231.372762][ T7418] device hsr_slave_1 entered promiscuous mode [ 231.383220][ T7418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.390840][ T7418] Cannot create hsr debugfs directory [ 231.492387][ T127] m920x_read = error: -19 [ 231.496904][ T127] dvb-usb: error while querying for an remote control event. [ 231.514430][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 231.642421][ T127] m920x_read = error: -19 [ 231.647091][ T127] dvb-usb: error while querying for an remote control event. [ 231.802336][ T127] m920x_read = error: -19 [ 231.806784][ T127] dvb-usb: error while querying for an remote control event. [ 231.815841][ T7590] loop4: detected capacity change from 0 to 32768 [ 231.834973][ T7590] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1030 (7590) [ 231.952805][ T4722] m920x_read = error: -19 [ 231.957306][ T4722] dvb-usb: error while querying for an remote control event. [ 231.958241][ T7590] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 231.991539][ T7590] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 232.035914][ T7418] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.037856][ T7590] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 232.094354][ T4717] m920x_read = error: -19 [ 232.098914][ T4717] dvb-usb: error while querying for an remote control event. [ 232.125909][ T7590] BTRFS info (device loop4): use zstd compression, level 3 [ 232.138867][ T7418] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.158024][ T7590] BTRFS info (device loop4): using free space tree [ 232.168610][ T7418] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.193026][ T7418] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.222491][ T4722] m920x_read = error: -19 [ 232.227007][ T4722] dvb-usb: error while querying for an remote control event. [ 232.252299][ T5290] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 232.341546][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.352855][ T127] m920x_read = error: -19 [ 232.357463][ T127] dvb-usb: error while querying for an remote control event. [ 232.398012][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.412004][ T7606] loop1: detected capacity change from 0 to 32768 [ 232.441170][ T7590] BTRFS info (device loop4): enabling ssd optimizations [ 232.443950][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.448550][ T5290] usb 1-1: Using ep0 maxpacket: 16 [ 232.471897][ T7418] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.482897][ T4717] m920x_read = error: -19 [ 232.487457][ T4717] dvb-usb: error while querying for an remote control event. [ 232.504951][ T5290] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 232.513228][ T7606] XFS (loop1): Mounting V5 Filesystem [ 232.541803][ T5290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.592132][ T5290] usb 1-1: Product: syz [ 232.602325][ T5290] usb 1-1: Manufacturer: syz [ 232.606996][ T5290] usb 1-1: SerialNumber: syz [ 232.636773][ T4338] m920x_read = error: -19 [ 232.641190][ T4338] dvb-usb: error while querying for an remote control event. [ 232.673083][ T5290] usb 1-1: config 0 descriptor?? [ 232.703599][ T7606] XFS (loop1): Ending clean mount [ 232.747385][ T7606] XFS (loop1): Quotacheck needed: Please wait. [ 232.754686][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.781906][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.812840][ T4338] m920x_read = error: -19 [ 232.817288][ T4338] dvb-usb: error while querying for an remote control event. [ 232.872814][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.880027][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.892930][ T7606] XFS (loop1): Quotacheck: Done. [ 232.937132][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.982968][ T4338] m920x_read = error: -19 [ 232.987431][ T4338] dvb-usb: error while querying for an remote control event. [ 232.996956][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.006972][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.015751][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.018654][ T4252] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 233.022917][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.096729][ T5290] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 233.115425][ T4253] XFS (loop1): Unmounting Filesystem [ 233.121479][ T5290] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.161538][ T5290] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 233.180399][ T5290] usb 1-1: media controller created [ 233.235277][ T5290] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.321240][ T4338] m920x_read = error: -19 [ 233.328019][ T4338] dvb-usb: error while querying for an remote control event. [ 233.365538][ T5290] zl10353_read_register: readreg error (reg=127, ret==0) [ 233.365599][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.372814][ T5290] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 233.372831][ T5290] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 233.376764][ T5290] usb 1-1: USB disconnect, device number 14 [ 233.417763][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.450069][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.473122][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.491236][ T5290] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 233.510491][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.510512][ T4338] m920x_read = error: -19 [ 233.528606][ T4338] dvb-usb: error while querying for an remote control event. [ 233.557227][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.587752][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.642390][ T4338] m920x_read = error: -19 [ 233.655408][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.664650][ T4338] dvb-usb: error while querying for an remote control event. [ 233.666338][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.705297][ T7418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.733159][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.749661][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.773384][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.792604][ T5290] m920x_read = error: -19 [ 233.797028][ T5290] dvb-usb: error while querying for an remote control event. [ 233.932340][ T5290] m920x_read = error: -19 [ 233.936756][ T5290] dvb-usb: error while querying for an remote control event. [ 234.068047][ T7657] loop3: detected capacity change from 0 to 1024 [ 234.082569][ T5290] m920x_read = error: -19 [ 234.087050][ T5290] dvb-usb: error while querying for an remote control event. [ 234.190859][ T7657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.200509][ T7657] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.216423][ T5290] m920x_read = error: -19 [ 234.220922][ T5290] dvb-usb: error while querying for an remote control event. [ 234.268086][ T7657] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 234.312634][ T7657] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 234.343998][ T7657] EXT4-fs (loop3): This should not happen!! Data will be lost [ 234.343998][ T7657] [ 234.373793][ T7657] EXT4-fs (loop3): Total free blocks count 0 [ 234.379873][ T7657] EXT4-fs (loop3): Free/Dirty block details [ 234.401682][ T7657] EXT4-fs (loop3): free_blocks=4293918720 [ 234.407853][ T7657] EXT4-fs (loop3): dirty_blocks=16 [ 234.419670][ T7657] EXT4-fs (loop3): Block reservation details [ 234.427380][ T4338] m920x_read = error: -19 [ 234.431765][ T4338] dvb-usb: error while querying for an remote control event. [ 234.439519][ T7657] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 234.544651][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 234.557961][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 234.565769][ T5290] m920x_read = error: -19 [ 234.570138][ T5290] dvb-usb: error while querying for an remote control event. [ 234.600049][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.732361][ T5290] m920x_read = error: -19 [ 234.736782][ T5290] dvb-usb: error while querying for an remote control event. [ 234.770135][ T5290] kernel write not supported for file /sg0 (pid: 5290 comm: kworker/0:19) [ 234.778868][ T7682] loop1: detected capacity change from 0 to 164 [ 234.872385][ T5290] m920x_read = error: -19 [ 234.876811][ T5290] dvb-usb: error while querying for an remote control event. [ 235.047958][ T5290] m920x_read = error: -19 [ 235.074858][ T5290] dvb-usb: error while querying for an remote control event. [ 235.125187][ T7670] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 28 [ 235.221070][ T4338] m920x_read = error: -19 [ 235.254137][ T4338] dvb-usb: error while querying for an remote control event. [ 235.362402][ T4338] m920x_read = error: -19 [ 235.366816][ T4338] dvb-usb: error while querying for an remote control event. [ 235.506766][ T5290] m920x_read = error: -19 [ 235.511282][ T5290] dvb-usb: error while querying for an remote control event. [ 235.672347][ T5290] m920x_read = error: -19 [ 235.676882][ T5290] dvb-usb: error while querying for an remote control event. [ 235.812319][ T5290] m920x_read = error: -19 [ 235.816770][ T5290] dvb-usb: error while querying for an remote control event. [ 235.858974][ T7707] loop0: detected capacity change from 0 to 128 [ 235.958864][ T7707] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 235.981754][ T5290] m920x_read = error: -19 [ 236.007128][ T7707] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.022256][ T5290] dvb-usb: error while querying for an remote control event. [ 236.037451][ T7691] loop1: detected capacity change from 0 to 32768 [ 236.045788][ T7691] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1044 (7691) [ 236.074274][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 236.099309][ T7691] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 236.100300][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 236.126556][ T7691] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 236.142525][ T127] m920x_read = error: -19 [ 236.146937][ T127] dvb-usb: error while querying for an remote control event. [ 236.168560][ T7691] BTRFS info (device loop1): using free space tree [ 236.190294][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 236.243998][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 236.269542][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 236.292928][ T4717] m920x_read = error: -19 [ 236.297385][ T4717] dvb-usb: error while querying for an remote control event. [ 236.333350][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 236.349634][ T7691] BTRFS info (device loop1): enabling ssd optimizations [ 236.369966][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 236.401096][ T7418] device veth0_vlan entered promiscuous mode [ 236.432907][ T4717] m920x_read = error: -19 [ 236.437321][ T4717] dvb-usb: error while querying for an remote control event. [ 236.448292][ T7418] device veth1_vlan entered promiscuous mode [ 236.583862][ T4338] m920x_read = error: -19 [ 236.588372][ T4338] dvb-usb: error while querying for an remote control event. [ 236.712623][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 236.721027][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 236.733438][ T4338] m920x_read = error: -19 [ 236.737838][ T4338] dvb-usb: error while querying for an remote control event. [ 236.747184][ T4253] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 236.783647][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 236.817204][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 236.832128][ T7418] device veth0_macvtap entered promiscuous mode [ 236.893620][ T4338] m920x_read = error: -19 [ 236.898042][ T4338] dvb-usb: error while querying for an remote control event. [ 237.042339][ T4722] m920x_read = error: -19 [ 237.046827][ T4722] dvb-usb: error while querying for an remote control event. [ 237.182261][ T4722] m920x_read = error: -19 [ 237.186677][ T4722] dvb-usb: error while querying for an remote control event. [ 237.236382][ T7418] device veth1_macvtap entered promiscuous mode [ 237.322444][ T5290] m920x_read = error: -19 [ 237.326884][ T5290] dvb-usb: error while querying for an remote control event. [ 237.412240][ T4480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.474227][ T5290] m920x_read = error: -19 [ 237.478642][ T5290] dvb-usb: error while querying for an remote control event. [ 237.589208][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.612396][ T4722] m920x_read = error: -19 [ 237.616834][ T4722] dvb-usb: error while querying for an remote control event. [ 237.632271][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.662278][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.689779][ T7750] loop4: detected capacity change from 0 to 2048 [ 237.696290][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.715497][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.726781][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.736860][ T7750] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 237.748899][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.762156][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.762454][ T5290] m920x_read = error: -19 [ 237.789465][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.792229][ T5290] dvb-usb: error while querying for an remote control event. [ 237.806089][ T7756] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.812896][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.857046][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.925408][ T4422] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 237.962296][ T4722] m920x_read = error: -19 [ 237.966708][ T4722] dvb-usb: error while querying for an remote control event. [ 237.985358][ T4480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.008301][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.045493][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.059588][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.070530][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.088832][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.102612][ T5290] m920x_read = error: -19 [ 238.107003][ T5290] dvb-usb: error while querying for an remote control event. [ 238.117982][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.122704][ T4422] usb 4-1: Using ep0 maxpacket: 16 [ 238.136037][ T4422] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.143214][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.149567][ T4422] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.171597][ T7418] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.192567][ T7418] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.201349][ T7418] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.210264][ T4422] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.237568][ T4338] m920x_read = error: -19 [ 238.242236][ T4338] dvb-usb: error while querying for an remote control event. [ 238.242263][ T7418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.258573][ T4422] usb 4-1: config 1 interface 0 has no altsetting 0 [ 238.268286][ T4422] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 238.293191][ T4422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.301521][ T4422] usb 4-1: Product: syz [ 238.306207][ T4422] usb 4-1: Manufacturer: syz [ 238.310930][ T4422] usb 4-1: SerialNumber: syz [ 238.337966][ T4270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.359855][ T4722] m920x_read = error: -19 [ 238.366137][ T4722] dvb-usb: error while querying for an remote control event. [ 238.375523][ T4270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.387061][ T4270] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.397232][ T4270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.409147][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 238.416990][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.428074][ T4480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.492311][ T4717] m920x_read = error: -19 [ 238.496786][ T4717] dvb-usb: error while querying for an remote control event. [ 238.532991][ T4480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.580942][ T4422] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 238.613611][ T5290] m920x_read = error: -19 [ 238.618038][ T5290] dvb-usb: error while querying for an remote control event. [ 238.691510][ T4528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.712977][ T4528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.739972][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.753529][ T4722] m920x_read = error: -19 [ 238.762587][ T4722] dvb-usb: error while querying for an remote control event. [ 238.844082][ T4506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.902819][ T4717] m920x_read = error: -19 [ 238.908349][ T4717] dvb-usb: error while querying for an remote control event. [ 238.921777][ T7759] chnl_net:caif_netlink_parms(): no params data found [ 238.932764][ T4506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.023942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.067915][ T4717] m920x_read = error: -19 [ 239.072548][ T4717] dvb-usb: error while querying for an remote control event. [ 239.082689][ T4722] usb 4-1: USB disconnect, device number 14 [ 239.091993][ T4722] usblp0: removed [ 239.127535][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.158285][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.175623][ T7759] device bridge_slave_0 entered promiscuous mode [ 239.182643][ T127] m920x_read = error: -19 [ 239.188192][ T127] dvb-usb: error while querying for an remote control event. [ 239.271323][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.302046][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.313003][ T4722] m920x_read = error: -19 [ 239.317881][ T4722] dvb-usb: error while querying for an remote control event. [ 239.326860][ T7759] device bridge_slave_1 entered promiscuous mode [ 239.424245][ T7776] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 239.452398][ T127] m920x_read = error: -19 [ 239.456898][ T127] dvb-usb: error while querying for an remote control event. [ 239.565836][ T7759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.592392][ T4717] m920x_read = error: -19 [ 239.612328][ T4717] dvb-usb: error while querying for an remote control event. [ 239.661846][ T7759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.722318][ T127] m920x_read = error: -19 [ 239.727206][ T127] dvb-usb: error while querying for an remote control event. [ 239.855043][ T127] m920x_read = error: -19 [ 239.859482][ T127] dvb-usb: error while querying for an remote control event. [ 239.954781][ T7759] team0: Port device team_slave_0 added [ 239.981870][ T7759] team0: Port device team_slave_1 added [ 239.992294][ T5290] m920x_read = error: -19 [ 239.996816][ T5290] dvb-usb: error while querying for an remote control event. [ 240.112438][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.119546][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.152431][ T4717] m920x_read = error: -19 [ 240.157073][ T4717] dvb-usb: error while querying for an remote control event. [ 240.209252][ T7759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.252361][ T127] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 240.269963][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.279204][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.312616][ T4338] m920x_read = error: -19 [ 240.317161][ T4338] dvb-usb: error while querying for an remote control event. [ 240.369672][ T7759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.442558][ T4717] m920x_read = error: -19 [ 240.447489][ T4717] dvb-usb: error while querying for an remote control event. [ 240.462509][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 240.470937][ T127] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.501002][ T127] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.512644][ T4255] Bluetooth: hci4: command 0x0409 tx timeout [ 240.522595][ T127] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 240.571553][ T7759] device hsr_slave_0 entered promiscuous mode [ 240.601893][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.610602][ T7759] device hsr_slave_1 entered promiscuous mode [ 240.616542][ T7785] loop5: detected capacity change from 0 to 32768 [ 240.625679][ T7759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.638140][ T7759] Cannot create hsr debugfs directory [ 240.643730][ T127] usb 2-1: config 0 descriptor?? [ 240.650344][ T5290] m920x_read = error: -19 [ 240.662436][ T5290] dvb-usb: error while querying for an remote control event. [ 240.777648][ T7783] loop4: detected capacity change from 0 to 40427 [ 240.784361][ T5290] m920x_read = error: -19 [ 240.788770][ T5290] dvb-usb: error while querying for an remote control event. [ 240.809141][ T7783] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 240.816215][ T7785] XFS (loop5): Mounting V5 Filesystem [ 240.821788][ T7783] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 240.838487][ T7783] F2FS-fs (loop4): invalid crc value [ 240.857755][ T7783] F2FS-fs (loop4): Found nat_bits in checkpoint [ 240.912445][ T4338] m920x_read = error: -19 [ 240.916899][ T4338] dvb-usb: error while querying for an remote control event. [ 240.976444][ T7785] XFS (loop5): Ending clean mount [ 241.008052][ T7785] XFS (loop5): Quotacheck needed: Please wait. [ 241.085261][ T127] hid (null): unknown global tag 0xe [ 241.124089][ T7783] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 241.142428][ T7783] F2FS-fs (loop4): Start checkpoint disabled! [ 241.150811][ T127] cougar 0003:060B:500A.0019: usage count exceeds max: fixing up report descriptor [ 241.180810][ T127] cougar 0003:060B:500A.0019: unexpected long global item [ 241.192829][ T7783] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 241.197614][ T127] cougar 0003:060B:500A.0019: parse failed [ 241.202326][ T7783] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 241.209057][ T127] cougar: probe of 0003:060B:500A.0019 failed with error -22 [ 241.248902][ T127] m920x_read = error: -19 [ 241.253451][ T127] dvb-usb: error while querying for an remote control event. [ 241.272477][ T7785] XFS (loop5): Quotacheck: Done. [ 241.348978][ T7783] syz.4.1060: attempt to access beyond end of device [ 241.348978][ T7783] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 241.358183][ T4338] usb 2-1: USB disconnect, device number 13 [ 241.386116][ T127] m920x_read = error: -19 [ 241.412429][ T127] dvb-usb: error while querying for an remote control event. [ 241.468516][ T7418] XFS (loop5): Unmounting Filesystem [ 241.522918][ T5290] m920x_read = error: -19 [ 241.532029][ T5290] dvb-usb: error while querying for an remote control event. [ 241.672468][ T4722] m920x_read = error: -19 [ 241.677071][ T4722] dvb-usb: error while querying for an remote control event. [ 241.731687][ T46] kworker/u4:3: attempt to access beyond end of device [ 241.731687][ T46] loop4: rw=1, sector=77944, nr_sectors = 8 limit=40427 [ 241.761453][ T46] kworker/u4:3: attempt to access beyond end of device [ 241.761453][ T46] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 241.769182][ T7814] loop3: detected capacity change from 0 to 512 [ 241.802858][ T4338] m920x_read = error: -19 [ 241.807302][ T4338] dvb-usb: error while querying for an remote control event. [ 241.816551][ T7814] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.870977][ T7814] EXT4-fs (loop3): 1 truncate cleaned up [ 241.917917][ T7814] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 241.945251][ T4722] m920x_read = error: -19 [ 241.949664][ T4722] dvb-usb: error while querying for an remote control event. [ 241.995892][ T4480] device hsr_slave_0 left promiscuous mode [ 242.031184][ T4480] device hsr_slave_1 left promiscuous mode [ 242.050720][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.082675][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.092672][ T4722] m920x_read = error: -19 [ 242.097062][ T4722] dvb-usb: error while querying for an remote control event. [ 242.122990][ T4480] device bridge_slave_1 left promiscuous mode [ 242.140725][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.150295][ T4480] device bridge_slave_0 left promiscuous mode [ 242.166206][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.170083][ T7819] loop1: detected capacity change from 0 to 1024 [ 242.178556][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 242.233013][ T7819] EXT4-fs: Ignoring removed bh option [ 242.239840][ T5290] m920x_read = error: -19 [ 242.247826][ T5290] dvb-usb: error while querying for an remote control event. [ 242.373611][ T7819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.391884][ T5290] m920x_read = error: -19 [ 242.414674][ T5290] dvb-usb: error while querying for an remote control event. [ 242.461560][ T7819] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.1071: corrupted in-inode xattr [ 242.510845][ T4480] device veth1_macvtap left promiscuous mode [ 242.532579][ T5290] m920x_read = error: -19 [ 242.536994][ T5290] dvb-usb: error while querying for an remote control event. [ 242.562453][ T4480] device veth0_macvtap left promiscuous mode [ 242.568647][ T4480] device veth1_vlan left promiscuous mode [ 242.593844][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 242.637387][ T4480] device veth0_vlan left promiscuous mode [ 242.663995][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 242.712364][ T5290] m920x_read = error: -19 [ 242.716804][ T5290] dvb-usb: error while querying for an remote control event. [ 242.882565][ T5290] m920x_read = error: -19 [ 242.887083][ T5290] dvb-usb: error while querying for an remote control event. [ 243.038701][ T5290] m920x_read = error: -19 [ 243.043284][ T5290] dvb-usb: error while querying for an remote control event. [ 243.132555][ T4362] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 243.160947][ T7843] loop3: detected capacity change from 0 to 2048 [ 243.170634][ T5290] m920x_read = error: -19 [ 243.190786][ T5290] dvb-usb: error while querying for an remote control event. [ 243.234448][ T7843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 243.259952][ T7843] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 243.276174][ T7843] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 243.288654][ T7843] EXT4-fs (loop3): This should not happen!! Data will be lost [ 243.288654][ T7843] [ 243.298372][ T7843] EXT4-fs (loop3): Total free blocks count 0 [ 243.304457][ T7843] EXT4-fs (loop3): Free/Dirty block details [ 243.310818][ T7843] EXT4-fs (loop3): free_blocks=2415919504 [ 243.316876][ T7843] EXT4-fs (loop3): dirty_blocks=32 [ 243.322038][ T7843] EXT4-fs (loop3): Block reservation details [ 243.323943][ T4362] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.328106][ T7843] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 243.345984][ T4717] m920x_read = error: -19 [ 243.350381][ T4717] dvb-usb: error while querying for an remote control event. [ 243.402793][ T4362] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 243.438933][ T4362] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.475322][ T4362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.492420][ T4717] m920x_read = error: -19 [ 243.496942][ T4717] dvb-usb: error while querying for an remote control event. [ 243.503598][ T4486] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 243.542382][ T7837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.612369][ T5290] m920x_read = error: -19 [ 243.616793][ T5290] dvb-usb: error while querying for an remote control event. [ 243.802339][ T4338] m920x_read = error: -19 [ 243.806766][ T4338] dvb-usb: error while querying for an remote control event. [ 243.834976][ T4338] usb 2-1: USB disconnect, device number 14 [ 243.950386][ T5290] m920x_read = error: -19 [ 243.954989][ T5290] dvb-usb: error while querying for an remote control event. [ 244.088330][ T5290] m920x_read = error: -19 [ 244.092909][ T5290] dvb-usb: error while querying for an remote control event. [ 244.212310][ T4338] m920x_read = error: -19 [ 244.217109][ T4338] dvb-usb: error while querying for an remote control event. [ 244.332558][ T4338] m920x_read = error: -19 [ 244.333179][ T4480] team0 (unregistering): Port device team_slave_1 removed [ 244.337620][ T4338] dvb-usb: error while querying for an remote control event. [ 244.406725][ T4480] team0 (unregistering): Port device team_slave_0 removed [ 244.472380][ T4338] m920x_read = error: -19 [ 244.476804][ T4338] dvb-usb: error while querying for an remote control event. [ 244.485389][ T4480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.546438][ T4480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.606302][ T4338] m920x_read = error: -19 [ 244.610808][ T4338] dvb-usb: error while querying for an remote control event. [ 244.672474][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 244.727549][ T4338] m920x_read = error: -19 [ 244.731950][ T4338] dvb-usb: error while querying for an remote control event. [ 244.850735][ T4338] m920x_read = error: -19 [ 244.855365][ T4338] dvb-usb: error while querying for an remote control event. [ 244.975989][ T4338] m920x_read = error: -19 [ 244.980492][ T4338] dvb-usb: error while querying for an remote control event. [ 245.095737][ T4338] m920x_read = error: -19 [ 245.100196][ T4338] dvb-usb: error while querying for an remote control event. [ 245.215016][ T4338] m920x_read = error: -19 [ 245.219477][ T4338] dvb-usb: error while querying for an remote control event. [ 245.273758][ T4480] bond0 (unregistering): Released all slaves [ 245.332420][ T4338] m920x_read = error: -19 [ 245.337017][ T4338] dvb-usb: error while querying for an remote control event. [ 245.378632][ T7828] device bond0 entered promiscuous mode [ 245.385100][ T7828] device bond_slave_0 entered promiscuous mode [ 245.391452][ T7828] device bond_slave_1 entered promiscuous mode [ 245.453018][ T4722] m920x_read = error: -19 [ 245.457434][ T4722] dvb-usb: error while querying for an remote control event. [ 245.582563][ T4722] m920x_read = error: -19 [ 245.586994][ T4722] dvb-usb: error while querying for an remote control event. [ 245.702450][ T4722] m920x_read = error: -19 [ 245.706870][ T4722] dvb-usb: error while querying for an remote control event. [ 245.822411][ T4722] m920x_read = error: -19 [ 245.826829][ T4722] dvb-usb: error while querying for an remote control event. [ 245.942441][ T4722] m920x_read = error: -19 [ 245.946871][ T4722] dvb-usb: error while querying for an remote control event. [ 246.072385][ T4717] m920x_read = error: -19 [ 246.077300][ T4717] dvb-usb: error while querying for an remote control event. [ 246.098988][ T7759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.111063][ T7759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.121404][ T7759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.131688][ T7759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.202479][ T4717] m920x_read = error: -19 [ 246.206909][ T4717] dvb-usb: error while querying for an remote control event. [ 246.238671][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.261955][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.278190][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.297159][ T7759] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.311626][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.327005][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.338760][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.342325][ T4717] m920x_read = error: -19 [ 246.345970][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.350474][ T4717] dvb-usb: error while querying for an remote control event. [ 246.389095][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.398714][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.413818][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.428191][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.435400][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.449794][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.459031][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.485025][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.497454][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.502445][ T4717] m920x_read = error: -19 [ 246.510038][ T4717] dvb-usb: error while querying for an remote control event. [ 246.510867][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.529358][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.538359][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.547999][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.557274][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.567546][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.579007][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.592436][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.632556][ T4717] m920x_read = error: -19 [ 246.637035][ T4717] dvb-usb: error while querying for an remote control event. [ 246.755733][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 246.772567][ T4717] m920x_read = error: -19 [ 246.777102][ T4717] dvb-usb: error while querying for an remote control event. [ 246.914459][ T4717] m920x_read = error: -19 [ 246.918888][ T4717] dvb-usb: error while querying for an remote control event. [ 246.935297][ T7759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.950439][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.960981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.985973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.004130][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.027401][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.036634][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.048190][ T7759] device veth0_vlan entered promiscuous mode [ 247.054408][ T4717] m920x_read = error: -19 [ 247.055785][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.058859][ T4717] dvb-usb: error while querying for an remote control event. [ 247.067658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.088661][ T7759] device veth1_vlan entered promiscuous mode [ 247.141048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.155819][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.169551][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.180857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.199209][ T7759] device veth0_macvtap entered promiscuous mode [ 247.214407][ T7759] device veth1_macvtap entered promiscuous mode [ 247.226816][ T4717] m920x_read = error: -19 [ 247.231190][ T4717] dvb-usb: error while querying for an remote control event. [ 247.255221][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.266056][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.277156][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.293233][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.308879][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.322073][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.336512][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.348591][ T4338] m920x_read = error: -19 [ 247.352316][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.353120][ T4338] dvb-usb: error while querying for an remote control event. [ 247.374014][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.383376][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.392079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.401685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.410903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.425299][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.441590][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.458940][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.469543][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.482414][ T4338] m920x_read = error: -19 [ 247.485837][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.487564][ T4338] dvb-usb: error while querying for an remote control event. [ 247.500283][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.521662][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.530023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.544156][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.552836][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.573720][ T7759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.587949][ T7759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.597346][ T7759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.614046][ T7759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.632637][ T4338] m920x_read = error: -19 [ 247.637045][ T4338] dvb-usb: error while querying for an remote control event. [ 247.709749][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.728752][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.744258][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.752895][ T4717] m920x_read = error: -19 [ 247.757273][ T4717] dvb-usb: error while querying for an remote control event. [ 247.765861][ T4506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.783804][ T4506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.804439][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.882278][ T4717] m920x_read = error: -19 [ 247.886710][ T4717] dvb-usb: error while querying for an remote control event. [ 247.942163][ T7897] loop4: detected capacity change from 0 to 512 [ 247.973429][ T7897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.022362][ T4717] m920x_read = error: -19 [ 248.026778][ T4717] dvb-usb: error while querying for an remote control event. [ 248.086088][ T7897] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 248.112851][ T7897] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 248.194620][ T7897] EXT4-fs (loop4): 1 truncate cleaned up [ 248.200349][ T7897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 248.222526][ T4338] m920x_read = error: -19 [ 248.227558][ T4338] dvb-usb: error while querying for an remote control event. [ 248.361182][ T7897] EXT4-fs (loop4): shut down requested (1) [ 248.367490][ T4338] m920x_read = error: -19 [ 248.371900][ T4338] dvb-usb: error while querying for an remote control event. [ 248.466191][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 248.554671][ T7892] loop1: detected capacity change from 0 to 32768 [ 248.568026][ T4717] m920x_read = error: -19 [ 248.578087][ T4717] dvb-usb: error while querying for an remote control event. [ 248.641267][ T26] audit: type=1800 audit(1750798172.052:49): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1088" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 248.707579][ T4717] m920x_read = error: -19 [ 248.712013][ T4717] dvb-usb: error while querying for an remote control event. [ 248.730936][ T7916] device syzkaller1 entered promiscuous mode [ 248.871597][ T4717] m920x_read = error: -19 [ 248.891423][ T4717] dvb-usb: error while querying for an remote control event. [ 249.032563][ T4717] m920x_read = error: -19 [ 249.036989][ T4717] dvb-usb: error while querying for an remote control event. [ 249.162689][ T5290] m920x_read = error: -19 [ 249.167253][ T5290] dvb-usb: error while querying for an remote control event. [ 249.248809][ T7926] sctp: [Deprecated]: syz.4.1087 (pid 7926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.248809][ T7926] Use struct sctp_sack_info instead [ 249.302271][ T4338] m920x_read = error: -19 [ 249.306857][ T4338] dvb-usb: error while querying for an remote control event. [ 249.329381][ T7931] loop5: detected capacity change from 0 to 512 [ 249.360749][ T7931] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 249.430510][ T7931] EXT4-fs (loop5): 1 truncate cleaned up [ 249.442668][ T4338] m920x_read = error: -19 [ 249.448016][ T4338] dvb-usb: error while querying for an remote control event. [ 249.456310][ T7931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 249.592466][ T4338] m920x_read = error: -19 [ 249.596890][ T4338] dvb-usb: error while querying for an remote control event. [ 249.615220][ T7931] EXT4-fs error (device loop5): ext4_find_extent:900: inode #15: comm syz.5.1093: inode has invalid extent depth: 25964 [ 249.644848][ T7904] loop0: detected capacity change from 0 to 32768 [ 249.649849][ T7939] loop3: detected capacity change from 0 to 1024 [ 249.692711][ T7931] EXT4-fs (loop5): Remounting filesystem read-only [ 249.728815][ T7931] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size [ 249.742439][ T4338] m920x_read = error: -19 [ 249.746853][ T4338] dvb-usb: error while querying for an remote control event. [ 249.765357][ T7939] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 249.774765][ T7939] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.795991][ T7904] XFS (loop0): Mounting V5 Filesystem [ 249.862578][ T4338] m920x_read = error: -19 [ 249.867644][ T4338] dvb-usb: error while querying for an remote control event. [ 249.927078][ T7904] XFS (loop0): Ending clean mount [ 249.980497][ T7418] EXT4-fs (loop5): unmounting filesystem. [ 249.990377][ T7904] XFS (loop0): Quotacheck needed: Please wait. [ 250.033456][ T4717] m920x_read = error: -19 [ 250.038003][ T4717] dvb-usb: error while querying for an remote control event. [ 250.122795][ T7904] XFS (loop0): Quotacheck: Done. [ 250.163115][ T4717] m920x_read = error: -19 [ 250.167545][ T4717] dvb-usb: error while querying for an remote control event. [ 250.176975][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 250.302651][ T4717] m920x_read = error: -19 [ 250.307077][ T4717] dvb-usb: error while querying for an remote control event. [ 250.399510][ T7961] loop3: detected capacity change from 0 to 512 [ 250.416135][ T7759] XFS (loop0): Unmounting Filesystem [ 250.426774][ T7961] EXT4-fs: quotafile must be on filesystem root [ 250.444080][ T4717] m920x_read = error: -19 [ 250.448510][ T4717] dvb-usb: error while querying for an remote control event. [ 250.562394][ T4717] m920x_read = error: -19 [ 250.566846][ T4717] dvb-usb: error while querying for an remote control event. [ 250.699852][ T4717] m920x_read = error: -19 [ 250.717459][ T4717] dvb-usb: error while querying for an remote control event. [ 250.827050][ T7969] device syz_tun entered promiscuous mode [ 250.842840][ T5290] m920x_read = error: -19 [ 250.847267][ T5290] dvb-usb: error while querying for an remote control event. [ 250.894016][ T7969] device syz_tun left promiscuous mode [ 250.947030][ T7972] loop5: detected capacity change from 0 to 2048 [ 250.994325][ T7972] EXT4-fs: Ignoring removed i_version option [ 251.001632][ T127] m920x_read = error: -19 [ 251.006933][ T127] dvb-usb: error while querying for an remote control event. [ 251.066710][ T7972] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 251.142378][ T127] m920x_read = error: -19 [ 251.146923][ T127] dvb-usb: error while querying for an remote control event. [ 251.173734][ T7972] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.235917][ T7965] loop4: detected capacity change from 0 to 32768 [ 251.290960][ T127] m920x_read = error: -19 [ 251.296764][ T7972] EXT4-fs (loop5): shut down requested (2) [ 251.302638][ T127] dvb-usb: error while querying for an remote control event. [ 251.355120][ T7965] jfs_rename: dtInsert returned -EIO [ 251.422486][ T127] m920x_read = error: -19 [ 251.427450][ T127] dvb-usb: error while querying for an remote control event. [ 251.459193][ T7418] EXT4-fs (loop5): unmounting filesystem. [ 251.558993][ T7980] program syz.0.1109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.572390][ T127] m920x_read = error: -19 [ 251.576802][ T127] dvb-usb: error while querying for an remote control event. [ 251.659252][ T7959] loop1: detected capacity change from 0 to 32768 [ 251.742364][ T127] m920x_read = error: -19 [ 251.746764][ T127] dvb-usb: error while querying for an remote control event. [ 251.826268][ T7959] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 251.853690][ T7959] XFS (loop1): Mounting V5 Filesystem [ 251.912701][ T5290] m920x_read = error: -19 [ 251.917123][ T5290] dvb-usb: error while querying for an remote control event. [ 252.009955][ T7959] XFS (loop1): Ending clean mount [ 252.027499][ T7959] XFS (loop1): Quotacheck needed: Please wait. [ 252.082463][ T5290] m920x_read = error: -19 [ 252.093704][ T5290] dvb-usb: error while querying for an remote control event. [ 252.173639][ T8003] loop3: detected capacity change from 0 to 2048 [ 252.186422][ T7959] XFS (loop1): Quotacheck: Done. [ 252.222144][ T8003] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 252.226701][ T5290] m920x_read = error: -19 [ 252.245582][ T8003] NILFS (loop3): mounting unchecked fs [ 252.290404][ T5290] dvb-usb: error while querying for an remote control event. [ 252.339023][ T8003] NILFS (loop3): recovery complete [ 252.370709][ T8010] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.429116][ T26] audit: type=1800 audit(1750798175.842:50): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1114" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 252.452481][ T5290] m920x_read = error: -19 [ 252.457526][ T5290] dvb-usb: error while querying for an remote control event. [ 252.478150][ T8012] loop0: detected capacity change from 0 to 512 [ 252.485965][ T4253] XFS (loop1): Unmounting Filesystem [ 252.550619][ T8012] EXT4-fs: Ignoring removed oldalloc option [ 252.595895][ T8012] EXT4-fs (loop0): Test dummy encryption mode enabled [ 252.614808][ T5290] m920x_read = error: -19 [ 252.619277][ T5290] dvb-usb: error while querying for an remote control event. [ 252.662468][ T8012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 252.714551][ T8012] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 252.716487][ T8017] device vlan2 entered promiscuous mode [ 252.734659][ T8017] device team0 entered promiscuous mode [ 252.740255][ T8017] device team_slave_0 entered promiscuous mode [ 252.745497][ T8012] EXT4-fs (loop0): 1 truncate cleaned up [ 252.753210][ T8017] device team_slave_1 entered promiscuous mode [ 252.759473][ T8012] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.759851][ T8017] team0: Device vlan2 is already an upper device of the team interface [ 252.780337][ T5290] m920x_read = error: -19 [ 252.785148][ T5290] dvb-usb: error while querying for an remote control event. [ 252.886378][ T5290] m920x_read = error: -19 [ 252.890787][ T5290] dvb-usb: error while querying for an remote control event. [ 253.051307][ T5290] m920x_read = error: -19 [ 253.082296][ T5290] dvb-usb: error while querying for an remote control event. [ 253.111496][ T7759] EXT4-fs (loop0): unmounting filesystem. [ 253.146167][ T8023] loop5: detected capacity change from 0 to 1024 [ 253.204203][ T5290] m920x_read = error: -19 [ 253.216720][ T5290] dvb-usb: error while querying for an remote control event. [ 253.352336][ T8035] loop3: detected capacity change from 0 to 256 [ 253.352517][ T8023] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 253.359726][ T8035] exfat: Unknown parameter 'ioscard}K¼éÚT¸' [ 253.367578][ T8032] loop1: detected capacity change from 0 to 512 [ 253.373718][ T5290] m920x_read = error: -19 [ 253.384485][ T5290] dvb-usb: error while querying for an remote control event. [ 253.392662][ T8023] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.439008][ T8032] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.439441][ T8023] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1122: bg 0: block 393: padding at end of block bitmap is not set [ 253.468701][ T8023] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 117 [ 253.488426][ T8023] EXT4-fs (loop5): This should not happen!! Data will be lost [ 253.488426][ T8023] [ 253.500259][ T5290] m920x_read = error: -19 [ 253.512510][ T5290] dvb-usb: error while querying for an remote control event. [ 253.545328][ T8032] EXT4-fs (loop1): orphan cleanup on readonly fs [ 253.602382][ T8032] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.1119: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 253.645254][ T5290] m920x_read = error: -19 [ 253.649726][ T5290] dvb-usb: error while querying for an remote control event. [ 253.720190][ T7418] EXT4-fs (loop5): unmounting filesystem. [ 253.729665][ T8032] EXT4-fs error (device loop1): ext4_quota_enable:7025: comm syz.1.1119: Bad quota inode: 3, type: 0 [ 253.802695][ T8032] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 253.828035][ T127] m920x_read = error: -19 [ 253.839114][ T127] dvb-usb: error while querying for an remote control event. [ 253.888451][ T8032] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 253.917693][ T8032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 253.972716][ T5290] m920x_read = error: -19 [ 253.977129][ T5290] dvb-usb: error while querying for an remote control event. [ 254.048805][ T8051] loop3: detected capacity change from 0 to 2048 [ 254.090451][ T8051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.132269][ T127] m920x_read = error: -19 [ 254.136772][ T127] dvb-usb: error while querying for an remote control event. [ 254.166911][ T4253] EXT4-fs (loop1): unmounting filesystem. [ 254.196992][ T8057] affs: No valid root block on device nullb0 [ 254.272409][ T4270] Bluetooth: hci2: command 0x2016 tx timeout [ 254.303371][ T127] m920x_read = error: -19 [ 254.307792][ T127] dvb-usb: error while querying for an remote control event. [ 254.472626][ T127] m920x_read = error: -19 [ 254.477103][ T127] dvb-usb: error while querying for an remote control event. [ 254.575112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 254.613221][ T127] m920x_read = error: -19 [ 254.617704][ T127] dvb-usb: error while querying for an remote control event. [ 254.632535][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1137'. [ 254.787115][ T4722] m920x_read = error: -19 [ 254.791879][ T4722] dvb-usb: error while querying for an remote control event. [ 254.932392][ T127] m920x_read = error: -19 [ 254.936850][ T127] dvb-usb: error while querying for an remote control event. [ 255.092589][ T127] m920x_read = error: -19 [ 255.097011][ T127] dvb-usb: error while querying for an remote control event. [ 255.252303][ T127] m920x_read = error: -19 [ 255.256814][ T127] dvb-usb: error while querying for an remote control event. [ 255.305970][ T8049] loop5: detected capacity change from 0 to 32768 [ 255.368963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #218!!! [ 255.381837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #21a!!! [ 255.391571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #29a!!! [ 255.412308][ T127] m920x_read = error: -19 [ 255.416730][ T127] dvb-usb: error while querying for an remote control event. [ 255.507692][ T8049] XFS (loop5): Mounting V5 Filesystem [ 255.532619][ T4722] m920x_read = error: -19 [ 255.551897][ T4722] dvb-usb: error while querying for an remote control event. [ 255.654092][ T8049] XFS (loop5): Ending clean mount [ 255.722419][ T127] m920x_read = error: -19 [ 255.726892][ T127] dvb-usb: error while querying for an remote control event. [ 255.745554][ T8049] XFS (loop5): Quotacheck needed: Please wait. [ 255.762463][ T4722] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 255.876343][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882900][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.892332][ T5290] m920x_read = error: -19 [ 255.896810][ T5290] dvb-usb: error while querying for an remote control event. [ 255.969403][ T8049] XFS (loop5): Quotacheck: Done. [ 256.001996][ T4722] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 256.048749][ T4722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.079355][ T4338] m920x_read = error: -19 [ 256.085132][ T4338] dvb-usb: error while querying for an remote control event. [ 256.093741][ T4722] usb 1-1: config 0 descriptor?? [ 256.312778][ T4338] m920x_read = error: -19 [ 256.327843][ T4338] dvb-usb: error while querying for an remote control event. [ 256.474343][ T8104] loop3: detected capacity change from 0 to 4096 [ 256.488164][ T4338] m920x_read = error: -19 [ 256.500025][ T4338] dvb-usb: error while querying for an remote control event. [ 256.550184][ T4722] elan 0003:04F3:0755.001A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 256.582887][ T8104] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.647988][ T4722] m920x_read = error: -19 [ 256.652609][ T4722] dvb-usb: error while querying for an remote control event. [ 256.762394][ T5290] m920x_read = error: -19 [ 256.772257][ T5290] dvb-usb: error while querying for an remote control event. [ 256.903846][ T7418] XFS (loop5): Unmounting Filesystem [ 256.912632][ T4338] m920x_read = error: -19 [ 256.917163][ T4338] dvb-usb: error while querying for an remote control event. [ 257.098701][ T4722] m920x_read = error: -19 [ 257.103482][ T4722] dvb-usb: error while querying for an remote control event. [ 257.129863][ T8118] loop1: detected capacity change from 0 to 2048 [ 257.186997][ T8118] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 257.212288][ T4722] m920x_read = error: -19 [ 257.216832][ T4722] dvb-usb: error while querying for an remote control event. [ 257.234920][ T8118] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 257.272340][ T8118] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 257.280196][ T8118] UDF-fs: Scanning with blocksize 512 failed [ 257.307420][ T4362] usb 1-1: USB disconnect, device number 15 [ 257.323073][ T8118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.365923][ T4722] m920x_read = error: -19 [ 257.370356][ T4722] dvb-usb: error while querying for an remote control event. [ 257.388849][ T26] audit: type=1800 audit(1750798180.802:51): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1151" name="file1" dev="loop1" ino=838 res=0 errno=0 [ 257.492575][ T4722] m920x_read = error: -19 [ 257.503403][ T4722] dvb-usb: error while querying for an remote control event. [ 257.652373][ T4338] m920x_read = error: -19 [ 257.656803][ T4338] dvb-usb: error while querying for an remote control event. [ 257.741292][ T8138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1158'. [ 257.817936][ T4722] m920x_read = error: -19 [ 257.832265][ T4722] dvb-usb: error while querying for an remote control event. [ 257.836514][ T8136] loop4: detected capacity change from 0 to 4096 [ 257.877633][ T8136] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 257.975072][ T8136] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 257.992548][ T4722] m920x_read = error: -19 [ 257.997005][ T4722] dvb-usb: error while querying for an remote control event. [ 258.021732][ T8136] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 258.092561][ T8136] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 258.142427][ T4338] m920x_read = error: -19 [ 258.146856][ T4338] dvb-usb: error while querying for an remote control event. [ 258.194118][ T8136] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 258.282565][ T4722] m920x_read = error: -19 [ 258.287083][ T4722] dvb-usb: error while querying for an remote control event. [ 258.365836][ T8136] ntfs: volume version 3.1. [ 258.400097][ T8136] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 258.410190][ T4722] m920x_read = error: -19 [ 258.414997][ T4722] dvb-usb: error while querying for an remote control event. [ 258.456515][ T8136] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 258.563925][ T4722] m920x_read = error: -19 [ 258.568785][ T4722] dvb-usb: error while querying for an remote control event. [ 258.658575][ T8136] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp932. You might want to try to use the mount option nls=utf8. [ 258.702329][ T4722] m920x_read = error: -19 [ 258.706779][ T4722] dvb-usb: error while querying for an remote control event. [ 258.762331][ T8136] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 258.832373][ T4722] m920x_read = error: -19 [ 258.836860][ T4722] dvb-usb: error while querying for an remote control event. [ 258.960471][ T8164] capability: warning: `syz.5.1150' uses deprecated v2 capabilities in a way that may be insecure [ 258.982351][ T4722] m920x_read = error: -19 [ 258.986797][ T4722] dvb-usb: error while querying for an remote control event. [ 259.131810][ T5290] m920x_read = error: -19 [ 259.148417][ T5290] dvb-usb: error while querying for an remote control event. [ 259.292338][ T5290] m920x_read = error: -19 [ 259.296793][ T5290] dvb-usb: error while querying for an remote control event. [ 259.442308][ T4338] m920x_read = error: -19 [ 259.446813][ T4338] dvb-usb: error while querying for an remote control event. [ 259.553402][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'. [ 259.573046][ T4338] m920x_read = error: -19 [ 259.577473][ T4338] dvb-usb: error while querying for an remote control event. [ 259.722275][ T4338] m920x_read = error: -19 [ 259.726705][ T4338] dvb-usb: error while querying for an remote control event. [ 259.785628][ T8179] loop5: detected capacity change from 0 to 128 [ 259.828156][ T8179] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 259.869725][ T8179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.879049][ T4338] m920x_read = error: -19 [ 259.883625][ T4338] dvb-usb: error while querying for an remote control event. [ 260.022556][ T4338] m920x_read = error: -19 [ 260.028151][ T4338] dvb-usb: error while querying for an remote control event. [ 260.165562][ T5290] m920x_read = error: -19 [ 260.170168][ T5290] dvb-usb: error while querying for an remote control event. [ 260.233031][ T8159] loop3: detected capacity change from 0 to 40427 [ 260.287730][ T8159] F2FS-fs (loop3): invalid crc value [ 260.322540][ T5290] m920x_read = error: -19 [ 260.326960][ T5290] dvb-usb: error while querying for an remote control event. [ 260.381193][ T8159] F2FS-fs (loop3): Found nat_bits in checkpoint [ 260.391982][ T8191] loop5: detected capacity change from 0 to 2048 [ 260.456357][ T8191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.482281][ T5290] m920x_read = error: -19 [ 260.486865][ T5290] dvb-usb: error while querying for an remote control event. [ 260.619635][ T8159] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 260.632419][ T5290] m920x_read = error: -19 [ 260.636830][ T5290] dvb-usb: error while querying for an remote control event. [ 260.779432][ T8159] syz.3.1165: attempt to access beyond end of device [ 260.779432][ T8159] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 260.802472][ T5290] m920x_read = error: -19 [ 260.806985][ T5290] dvb-usb: error while querying for an remote control event. [ 260.849960][ T8174] loop4: detected capacity change from 0 to 32768 [ 260.890063][ T8174] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1166 (8174) [ 260.909796][ T8159] syz.3.1165: attempt to access beyond end of device [ 260.909796][ T8159] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 260.942273][ T5290] m920x_read = error: -19 [ 260.946694][ T5290] dvb-usb: error while querying for an remote control event. [ 260.968833][ T8174] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.028306][ T8174] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 261.048004][ T8174] BTRFS info (device loop4): metadata ratio 2 [ 261.072361][ T8174] BTRFS info (device loop4): allowing degraded mounts [ 261.108141][ T8174] BTRFS info (device loop4): force zlib compression, level 3 [ 261.116317][ T5290] m920x_read = error: -19 [ 261.120796][ T5290] dvb-usb: error while querying for an remote control event. [ 261.121406][ T4261] syz-executor: attempt to access beyond end of device [ 261.121406][ T4261] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 261.169012][ T8211] loop0: detected capacity change from 0 to 128 [ 261.189148][ T8174] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 261.242242][ T8174] BTRFS info (device loop4): use zstd compression, level 3 [ 261.286636][ T8174] BTRFS info (device loop4): force clearing of disk cache [ 261.294090][ T5290] m920x_read = error: -19 [ 261.298483][ T5290] dvb-usb: error while querying for an remote control event. [ 261.342337][ T8174] BTRFS info (device loop4): max_inline at 0 [ 261.348447][ T8174] BTRFS info (device loop4): using free space tree [ 261.442506][ T5290] m920x_read = error: -19 [ 261.446934][ T5290] dvb-usb: error while querying for an remote control event. [ 261.585119][ T8232] loop0: detected capacity change from 0 to 256 [ 261.597749][ T5290] m920x_read = error: -19 [ 261.602670][ T5290] dvb-usb: error while querying for an remote control event. [ 261.716238][ T8174] BTRFS info (device loop4): enabling ssd optimizations [ 261.723655][ T5290] m920x_read = error: -19 [ 261.728129][ T5290] dvb-usb: error while querying for an remote control event. [ 261.751203][ T8174] BTRFS info (device loop4): rebuilding free space tree [ 261.852470][ T5290] m920x_read = error: -19 [ 261.856902][ T5290] dvb-usb: error while querying for an remote control event. [ 262.083902][ T5290] m920x_read = error: -19 [ 262.088419][ T5290] dvb-usb: error while querying for an remote control event. [ 262.244750][ T4252] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.266507][ T5290] m920x_read = error: -19 [ 262.270941][ T5290] dvb-usb: error while querying for an remote control event. [ 262.301968][ T8250] loop0: detected capacity change from 0 to 512 [ 262.342870][ T8250] EXT4-fs: Ignoring removed i_version option [ 262.392284][ T5290] m920x_read = error: -19 [ 262.396793][ T5290] dvb-usb: error while querying for an remote control event. [ 262.449419][ T8250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 262.592284][ T4338] m920x_read = error: -19 [ 262.596719][ T4338] dvb-usb: error while querying for an remote control event. [ 262.734613][ T8250] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1186: corrupted in-inode xattr [ 262.752505][ T5290] m920x_read = error: -19 [ 262.757012][ T5290] dvb-usb: error while querying for an remote control event. [ 262.811287][ T8258] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.913263][ T5290] m920x_read = error: -19 [ 262.917693][ T5290] dvb-usb: error while querying for an remote control event. [ 263.052276][ T5290] m920x_read = error: -19 [ 263.056707][ T5290] dvb-usb: error while querying for an remote control event. [ 263.195361][ T7759] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz-executor: corrupted in-inode xattr [ 263.198308][ T8274] loop3: detected capacity change from 0 to 512 [ 263.223676][ T4338] m920x_read = error: -19 [ 263.228176][ T4338] dvb-usb: error while querying for an remote control event. [ 263.266885][ T7759] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz-executor: corrupted in-inode xattr [ 263.383738][ T8274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 263.393132][ T4338] m920x_read = error: -19 [ 263.397695][ T4338] dvb-usb: error while querying for an remote control event. [ 263.450812][ T8285] loop5: detected capacity change from 0 to 512 [ 263.452789][ T8274] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.565350][ T8285] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 263.619797][ T127] m920x_read = error: -19 [ 263.624330][ T127] dvb-usb: error while querying for an remote control event. [ 263.772466][ T4722] m920x_read = error: -19 [ 263.776887][ T4722] dvb-usb: error while querying for an remote control event. [ 263.798511][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 263.892659][ T127] m920x_read = error: -19 [ 263.897692][ T127] dvb-usb: error while querying for an remote control event. [ 263.917622][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 263.947933][ T7759] EXT4-fs (loop0): unmounting filesystem. [ 264.037386][ T127] m920x_read = error: -19 [ 264.041985][ T127] dvb-usb: error while querying for an remote control event. [ 264.124012][ T27] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.154847][ T27] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.182995][ T27] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 264.198843][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 264.203680][ T127] m920x_read = error: -19 [ 264.209973][ T27] usb 6-1: SerialNumber: syz [ 264.211910][ T127] dvb-usb: error while querying for an remote control event. [ 264.254733][ T4480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.328273][ T8278] loop1: detected capacity change from 0 to 32768 [ 264.354258][ T127] m920x_read = error: -19 [ 264.361207][ T127] dvb-usb: error while querying for an remote control event. [ 264.413012][ T8278] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 264.468317][ T27] usb 6-1: 0:2 : does not exist [ 264.494879][ T27] usb 6-1: USB disconnect, device number 2 [ 264.501054][ T4722] m920x_read = error: -19 [ 264.512282][ T4722] dvb-usb: error while querying for an remote control event. [ 264.536280][ T8278] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 264.538295][ T4480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.719427][ T4722] m920x_read = error: -19 [ 264.724168][ T4722] dvb-usb: error while querying for an remote control event. [ 264.732051][ T4365] udevd[4365]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.830707][ T4480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.882531][ T4722] m920x_read = error: -19 [ 264.886935][ T4722] dvb-usb: error while querying for an remote control event. [ 264.946034][ T4253] ocfs2: Unmounting device (7,1) on (node local) [ 265.012307][ T5290] m920x_read = error: -19 [ 265.016723][ T5290] dvb-usb: error while querying for an remote control event. [ 265.098830][ T4480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.156872][ T27] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 265.182287][ T5290] m920x_read = error: -19 [ 265.186792][ T5290] dvb-usb: error while querying for an remote control event. [ 265.256872][ T27] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.312367][ T4722] m920x_read = error: -19 [ 265.316798][ T4722] dvb-usb: error while querying for an remote control event. [ 265.512827][ T4722] m920x_read = error: -19 [ 265.517325][ T4722] dvb-usb: error while querying for an remote control event. [ 265.546418][ T8323] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.680718][ T127] m920x_read = error: -19 [ 265.690493][ T127] dvb-usb: error while querying for an remote control event. [ 265.812353][ T4338] m920x_read = error: -19 [ 265.816779][ T4338] dvb-usb: error while querying for an remote control event. [ 265.952430][ T4722] m920x_read = error: -19 [ 265.956872][ T4722] dvb-usb: error while querying for an remote control event. [ 265.976927][ T4255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.994856][ T4255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.006186][ T4255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.019611][ T4255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.027352][ T4255] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 266.037926][ T4255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.102388][ T4722] m920x_read = error: -19 [ 266.106824][ T4722] dvb-usb: error while querying for an remote control event. [ 266.272750][ T4338] m920x_read = error: -19 [ 266.277176][ T4338] dvb-usb: error while querying for an remote control event. [ 266.401227][ T4722] m920x_read = error: -19 [ 266.411585][ T4722] dvb-usb: error while querying for an remote control event. [ 266.498617][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.552288][ T4722] m920x_read = error: -19 [ 266.557534][ T4722] dvb-usb: error while querying for an remote control event. [ 266.608685][ T8348] O3ãc¤±: renamed from bridge_slave_0 [ 266.707831][ T4722] m920x_read = error: -19 [ 266.717667][ T4722] dvb-usb: error while querying for an remote control event. [ 266.859429][ T8318] loop5: detected capacity change from 0 to 40427 [ 266.892697][ T4338] m920x_read = error: -19 [ 266.897169][ T4338] dvb-usb: error while querying for an remote control event. [ 267.062416][ T4338] m920x_read = error: -19 [ 267.066842][ T4338] dvb-usb: error while querying for an remote control event. [ 267.085061][ T8318] F2FS-fs (loop5): Found nat_bits in checkpoint [ 267.202293][ T4338] m920x_read = error: -19 [ 267.206801][ T4338] dvb-usb: error while querying for an remote control event. [ 267.337437][ T4338] m920x_read = error: -19 [ 267.341864][ T4338] dvb-usb: error while querying for an remote control event. [ 267.361524][ T8318] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 267.417848][ T4523] kworker/u4:28: attempt to access beyond end of device [ 267.417848][ T4523] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 267.492439][ T4722] m920x_read = error: -19 [ 267.497047][ T4722] dvb-usb: error while querying for an remote control event. [ 267.610754][ T8318] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0 [ 267.640244][ T8318] CPU: 1 PID: 8318 Comm: syz.5.1209 Not tainted 6.1.141-syzkaller #0 [ 267.648409][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.658530][ T8318] Call Trace: [ 267.662106][ T8318] [ 267.665079][ T8318] dump_stack_lvl+0x168/0x22e [ 267.669828][ T8318] ? show_regs_print_info+0x12/0x12 [ 267.675087][ T8318] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 267.680968][ T8318] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 267.686412][ T8318] f2fs_map_blocks+0xd37/0x3840 [ 267.691367][ T8318] ? f2fs_do_map_lock+0x70/0x70 [ 267.696291][ T8318] ? xa_load+0x60/0x2e0 [ 267.700475][ T8318] ? page_index+0xe7/0x470 [ 267.704925][ T8318] f2fs_mpage_readpages+0xa58/0x27e0 [ 267.710250][ T8318] ? mark_lock+0x94/0x320 [ 267.714786][ T8318] ? dquot_release_reservation_block+0xa0/0xa0 [ 267.720955][ T8318] ? __mod_lruvec_page_state+0xa1/0x410 [ 267.726541][ T8318] ? f2fs_is_compress_backend_ready+0x97/0x120 [ 267.732730][ T8318] ? f2fs_readahead+0x180/0x380 [ 267.737621][ T8318] ? blk_start_plug+0x94/0x110 [ 267.742415][ T8318] read_pages+0x173/0x840 [ 267.746766][ T8318] ? folio_put+0xd0/0xd0 [ 267.751030][ T8318] ? folio_add_lru+0xd50/0xd50 [ 267.755828][ T8318] ? page_cache_ra_unbounded+0x770/0x770 [ 267.761485][ T8318] ? filemap_add_folio+0x188/0x3c0 [ 267.766618][ T8318] page_cache_ra_unbounded+0x690/0x770 [ 267.772112][ T8318] f2fs_readdir+0x468/0x990 [ 267.776666][ T8318] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 267.781884][ T8318] ? lockdep_hardirqs_on+0x94/0x140 [ 267.787102][ T8318] ? end_current_label_crit_section+0x14b/0x170 [ 267.793382][ T8318] ? preempt_count_add+0x8d/0x190 [ 267.798429][ T8318] ? down_read_killable+0x1cc/0x340 [ 267.803643][ T8318] ? fsnotify_perm+0x248/0x550 [ 267.808430][ T8318] iterate_dir+0x218/0x560 [ 267.812870][ T8318] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 267.818087][ T8318] __se_sys_getdents64+0xe5/0x260 [ 267.823227][ T8318] ? __x64_sys_getdents64+0x80/0x80 [ 267.828451][ T8318] ? filldir+0x700/0x700 [ 267.832737][ T8318] ? lockdep_hardirqs_on+0x94/0x140 [ 267.837969][ T8318] do_syscall_64+0x4c/0xa0 [ 267.842429][ T8318] ? clear_bhb_loop+0x60/0xb0 [ 267.847135][ T8318] ? clear_bhb_loop+0x60/0xb0 [ 267.851849][ T8318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.857789][ T8318] RIP: 0033:0x7fd4e578e929 [ 267.862335][ T8318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.882048][ T8318] RSP: 002b:00007fd4e6652038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 267.890514][ T8318] RAX: ffffffffffffffda RBX: 00007fd4e59b5fa0 RCX: 00007fd4e578e929 [ 267.899133][ T8318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 267.907124][ T8318] RBP: 00007fd4e5810b39 R08: 0000000000000000 R09: 0000000000000000 [ 267.915111][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.923101][ T8318] R13: 0000000000000000 R14: 00007fd4e59b5fa0 R15: 00007fff9a4828d8 [ 267.931104][ T8318] [ 267.934230][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.934270][ T4722] m920x_read = error: -19 [ 267.966779][ T4722] dvb-usb: error while querying for an remote control event. [ 268.002735][ T8318] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0 [ 268.024166][ T8318] CPU: 0 PID: 8318 Comm: syz.5.1209 Not tainted 6.1.141-syzkaller #0 [ 268.032326][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.042421][ T8318] Call Trace: [ 268.045734][ T8318] [ 268.048699][ T8318] dump_stack_lvl+0x168/0x22e [ 268.053430][ T8318] ? show_regs_print_info+0x12/0x12 [ 268.058680][ T8318] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 268.064544][ T8318] f2fs_is_valid_blkaddr+0xc3b/0x1250 [ 268.069971][ T8318] f2fs_get_read_data_page+0x3ed/0x610 [ 268.075504][ T8318] ? f2fs_get_block+0x130/0x130 [ 268.080420][ T8318] ? PageHeadHuge+0x8f/0x1c0 [ 268.085073][ T8318] f2fs_find_data_page+0x9b/0x3a0 [ 268.090157][ T8318] f2fs_readdir+0x47b/0x990 [ 268.094730][ T8318] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 268.099975][ T8318] ? lockdep_hardirqs_on+0x94/0x140 [ 268.105231][ T8318] ? end_current_label_crit_section+0x14b/0x170 [ 268.111525][ T8318] ? preempt_count_add+0x8d/0x190 [ 268.116595][ T8318] ? down_read_killable+0x1cc/0x340 [ 268.121855][ T8318] ? fsnotify_perm+0x248/0x550 [ 268.126674][ T8318] iterate_dir+0x218/0x560 [ 268.131147][ T8318] ? f2fs_fill_dentries+0xcb0/0xcb0 [ 268.136393][ T8318] __se_sys_getdents64+0xe5/0x260 [ 268.141474][ T8318] ? __x64_sys_getdents64+0x80/0x80 [ 268.146718][ T8318] ? filldir+0x700/0x700 [ 268.151017][ T8318] ? lockdep_hardirqs_on+0x94/0x140 [ 268.156259][ T8318] do_syscall_64+0x4c/0xa0 [ 268.160724][ T8318] ? clear_bhb_loop+0x60/0xb0 [ 268.165442][ T8318] ? clear_bhb_loop+0x60/0xb0 [ 268.170176][ T8318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.176127][ T8318] RIP: 0033:0x7fd4e578e929 [ 268.180579][ T8318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.200324][ T8318] RSP: 002b:00007fd4e6652038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 268.208786][ T8318] RAX: ffffffffffffffda RBX: 00007fd4e59b5fa0 RCX: 00007fd4e578e929 [ 268.216811][ T8318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 268.224857][ T8318] RBP: 00007fd4e5810b39 R08: 0000000000000000 R09: 0000000000000000 [ 268.232872][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.240910][ T8318] R13: 0000000000000000 R14: 00007fd4e59b5fa0 R15: 00007fff9a4828d8 [ 268.248947][ T8318] [ 268.252835][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 268.264020][ T4722] m920x_read = error: -19 [ 268.268426][ T4722] dvb-usb: error while querying for an remote control event. [ 268.341081][ T8370] loop1: detected capacity change from 0 to 32768 [ 268.356872][ T8331] chnl_net:caif_netlink_parms(): no params data found [ 268.407074][ T8370] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1223 (8370) [ 268.421047][ T127] m920x_read = error: -19 [ 268.440269][ T127] dvb-usb: error while querying for an remote control event. [ 268.495939][ T8370] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 268.575266][ T4338] m920x_read = error: -19 [ 268.579794][ T4338] dvb-usb: error while querying for an remote control event. [ 268.591100][ T8370] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 268.635207][ T8370] BTRFS info (device loop1): using free space tree [ 268.646577][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 268.722394][ T127] m920x_read = error: -19 [ 268.726817][ T127] dvb-usb: error while querying for an remote control event. [ 268.852282][ T127] m920x_read = error: -19 [ 268.856735][ T127] dvb-usb: error while querying for an remote control event. [ 268.944137][ T8370] BTRFS info (device loop1): enabling ssd optimizations [ 269.002399][ T4338] m920x_read = error: -19 [ 269.006902][ T4338] dvb-usb: error while querying for an remote control event. [ 269.142393][ T4338] m920x_read = error: -19 [ 269.147079][ T4338] dvb-usb: error while querying for an remote control event. [ 269.258356][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.279561][ T4253] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 269.290102][ T127] m920x_read = error: -19 [ 269.294636][ T127] dvb-usb: error while querying for an remote control event. [ 269.297165][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.328219][ T8331] device bridge_slave_0 entered promiscuous mode [ 269.654893][ T4727] m920x_read = error: -19 [ 269.659328][ T4727] dvb-usb: error while querying for an remote control event. [ 269.772693][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.779914][ T4727] m920x_read = error: -19 [ 269.785020][ T4727] dvb-usb: error while querying for an remote control event. [ 269.790221][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.829146][ T8331] device bridge_slave_1 entered promiscuous mode [ 269.912365][ T4727] m920x_read = error: -19 [ 269.916802][ T4727] dvb-usb: error while querying for an remote control event. [ 269.965170][ T8426] loop1: detected capacity change from 0 to 256 [ 270.061725][ T127] m920x_read = error: -19 [ 270.066247][ T127] dvb-usb: error while querying for an remote control event. [ 270.095344][ T8426] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 270.208334][ T4727] m920x_read = error: -19 [ 270.217540][ T4727] dvb-usb: error while querying for an remote control event. [ 270.255069][ T4480] device hsr_slave_0 left promiscuous mode [ 270.269620][ T4480] device hsr_slave_1 left promiscuous mode [ 270.281817][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 270.348278][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.362419][ T4727] m920x_read = error: -19 [ 270.366832][ T4727] dvb-usb: error while querying for an remote control event. [ 270.404514][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.423140][ T4480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.441139][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.454134][ T4480] device bridge_slave_1 left promiscuous mode [ 270.460811][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.532547][ T4338] m920x_read = error: -19 [ 270.536977][ T4338] dvb-usb: error while querying for an remote control event. [ 270.584485][ T4480] device bridge_slave_0 left promiscuous mode [ 270.592971][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.662385][ T4338] m920x_read = error: -19 [ 270.666897][ T4338] dvb-usb: error while querying for an remote control event. [ 270.706648][ T8444] loop3: detected capacity change from 0 to 164 [ 270.721867][ T4480] device veth1_macvtap left promiscuous mode [ 270.740339][ T4480] device veth0_macvtap left promiscuous mode [ 270.771093][ T4480] device veth1_vlan left promiscuous mode [ 270.779963][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 270.779978][ T26] audit: type=1326 audit(1750798194.192:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.5.1241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4e578e929 code=0x0 [ 270.808373][ T4338] m920x_read = error: -19 [ 270.815215][ T4338] dvb-usb: error while querying for an remote control event. [ 270.815361][ T8444] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 270.832387][ T4480] device veth0_vlan left promiscuous mode [ 270.942935][ T4338] m920x_read = error: -19 [ 270.947352][ T4338] dvb-usb: error while querying for an remote control event. [ 270.947613][ T8444] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 270.999858][ T8444] Symlink component flag not implemented [ 271.006610][ T8444] Symlink component flag not implemented [ 271.026471][ T8444] Symlink component flag not implemented (7) [ 271.039110][ T8444] Symlink component flag not implemented (116) [ 271.082277][ T4338] m920x_read = error: -19 [ 271.086794][ T4338] dvb-usb: error while querying for an remote control event. [ 271.212250][ T4338] m920x_read = error: -19 [ 271.216677][ T4338] dvb-usb: error while querying for an remote control event. [ 271.360404][ T4338] m920x_read = error: -19 [ 271.366081][ T4338] dvb-usb: error while querying for an remote control event. [ 271.493428][ T4338] m920x_read = error: -19 [ 271.497855][ T4338] dvb-usb: error while querying for an remote control event. [ 271.613591][ T4338] m920x_read = error: -19 [ 271.625964][ T4338] dvb-usb: error while querying for an remote control event. [ 271.753844][ T4338] m920x_read = error: -19 [ 271.758316][ T4338] dvb-usb: error while querying for an remote control event. [ 271.782113][ T8470] loop5: detected capacity change from 0 to 128 [ 271.882439][ T127] m920x_read = error: -19 [ 271.886879][ T127] dvb-usb: error while querying for an remote control event. [ 271.907616][ T8470] syz.5.1248: attempt to access beyond end of device [ 271.907616][ T8470] loop5: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 271.938247][ T8470] Buffer I/O error on dev loop5, logical block 3245768, async page read [ 271.963722][ T8470] ================================================================== [ 271.969059][ T8472] overlayfs: upper fs does not support file handles, falling back to index=off. [ 271.971844][ T8470] BUG: KASAN: use-after-free in sysv_new_inode+0x10d9/0x1270 [ 271.971879][ T8470] Read of size 2 at addr ffff888070e3e1ce by task syz.5.1248/8470 [ 271.971898][ T8470] [ 271.971905][ T8470] CPU: 0 PID: 8470 Comm: syz.5.1248 Not tainted 6.1.141-syzkaller #0 [ 271.971925][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.971938][ T8470] Call Trace: [ 271.971945][ T8470] [ 271.971953][ T8470] dump_stack_lvl+0x168/0x22e [ 272.028091][ T8470] ? __lock_acquire+0x7c50/0x7c50 [ 272.033178][ T8470] ? show_regs_print_info+0x12/0x12 [ 272.038401][ T8470] ? load_image+0x3b0/0x3b0 [ 272.042938][ T8470] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 272.048352][ T8470] ? __virt_addr_valid+0x188/0x540 [ 272.053487][ T8470] ? __virt_addr_valid+0x465/0x540 [ 272.058614][ T8470] ? sysv_new_inode+0x10d9/0x1270 [ 272.063651][ T8470] print_report+0xa8/0x220 [ 272.068110][ T8470] kasan_report+0x10b/0x140 [ 272.072659][ T8470] ? do_raw_spin_unlock+0x11d/0x230 [ 272.077880][ T8470] ? sysv_new_inode+0x10d9/0x1270 [ 272.082921][ T8470] sysv_new_inode+0x10d9/0x1270 [ 272.087805][ T8470] ? __d_add+0x4c0/0x810 [ 272.092150][ T8470] ? __lock_acquire+0x7c50/0x7c50 [ 272.097196][ T8470] ? sysv_free_inode+0x7e0/0x7e0 [ 272.102152][ T8470] ? _raw_spin_unlock+0x24/0x40 [ 272.107028][ T8470] ? __d_add+0x4ec/0x810 [ 272.111285][ T8470] ? sysv_inode_by_name+0xdd/0x140 [ 272.116416][ T8470] sysv_mknod+0x4a/0xd0 [ 272.120623][ T8470] ? sysv_lookup+0xe0/0xe0 [ 272.125056][ T8470] path_openat+0x1187/0x2e70 [ 272.129681][ T8470] ? do_filp_open+0x3c0/0x3c0 [ 272.134404][ T8470] do_filp_open+0x1c1/0x3c0 [ 272.138950][ T8470] ? vfs_tmpfile+0x480/0x480 [ 272.143579][ T8470] ? _raw_spin_unlock+0x24/0x40 [ 272.148451][ T8470] ? alloc_fd+0x58f/0x630 [ 272.152931][ T8470] do_sys_openat2+0x142/0x490 [ 272.157633][ T8470] ? do_sys_open+0xe0/0xe0 [ 272.162073][ T8470] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 272.168071][ T8470] ? lock_chain_count+0x20/0x20 [ 272.172959][ T8470] __x64_sys_openat+0x135/0x160 [ 272.177841][ T8470] do_syscall_64+0x4c/0xa0 [ 272.182279][ T8470] ? clear_bhb_loop+0x60/0xb0 [ 272.186973][ T8470] ? clear_bhb_loop+0x60/0xb0 [ 272.191658][ T8470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.197570][ T8470] RIP: 0033:0x7fd4e578e929 [ 272.201991][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.221623][ T8470] RSP: 002b:00007fd4e6652038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.230052][ T8470] RAX: ffffffffffffffda RBX: 00007fd4e59b5fa0 RCX: 00007fd4e578e929 [ 272.238035][ T8470] RDX: 0000000000143041 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 272.246105][ T8470] RBP: 00007fd4e5810b39 R08: 0000000000000000 R09: 0000000000000000 [ 272.254083][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.262061][ T8470] R13: 0000000000000000 R14: 00007fd4e59b5fa0 R15: 00007fff9a4828d8 [ 272.270049][ T8470] [ 272.273079][ T8470] [ 272.275410][ T8470] The buggy address belongs to the physical page: [ 272.281846][ T8470] page:ffffea0001c38f80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x70e3e [ 272.292006][ T8470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 272.299141][ T8470] raw: 00fff00000000000 ffffea0001498d08 ffffea0001d192c8 0000000000000000 [ 272.307736][ T8470] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 272.316323][ T8470] page dumped because: kasan: bad access detected [ 272.322749][ T8470] page_owner tracks the page as freed [ 272.328121][ T8470] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 4365, tgid 4365 (udevd), ts 271816175567, free_ts 271901351639 [ 272.346365][ T8470] post_alloc_hook+0x173/0x1a0 [ 272.351148][ T8470] get_page_from_freelist+0x1a26/0x1ac0 [ 272.356702][ T8470] __alloc_pages+0x1df/0x4e0 [ 272.361410][ T8470] __folio_alloc+0xe/0x30 [ 272.365749][ T8470] vma_alloc_folio+0x4a3/0x900 [ 272.370796][ T8470] handle_mm_fault+0x2242/0x3e70 [ 272.375746][ T8470] do_user_addr_fault+0x51f/0xb10 [ 272.380903][ T8470] exc_page_fault+0x60/0x100 [ 272.385498][ T8470] asm_exc_page_fault+0x22/0x30 [ 272.390357][ T8470] page last free stack trace: [ 272.395060][ T8470] free_unref_page_prepare+0x8b4/0x9a0 [ 272.400539][ T8470] free_unref_page_list+0xbb/0x8e0 [ 272.405668][ T8470] release_pages+0x1f92/0x2200 [ 272.410471][ T8470] tlb_flush_mmu+0xff/0x210 [ 272.414992][ T8470] tlb_finish_mmu+0xbd/0x1c0 [ 272.419590][ T8470] unmap_region+0x272/0x2c0 [ 272.424113][ T8470] do_mas_align_munmap+0xc57/0x1220 [ 272.429330][ T8470] do_mas_munmap+0x240/0x2b0 [ 272.433943][ T8470] __vm_munmap+0x18d/0x290 [ 272.438375][ T8470] __x64_sys_munmap+0x5c/0x70 [ 272.443066][ T8470] do_syscall_64+0x4c/0xa0 [ 272.447545][ T8470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.453493][ T8470] [ 272.455847][ T8470] Memory state around the buggy address: [ 272.461486][ T8470] ffff888070e3e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 272.469569][ T8470] ffff888070e3e100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 272.477639][ T8470] >ffff888070e3e180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 272.485709][ T8470] ^ [ 272.492128][ T8470] ffff888070e3e200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 272.500202][ T8470] ffff888070e3e280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 272.508291][ T8470] ================================================================== [ 272.517659][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 272.518020][ T4338] m920x_read = error: -19 [ 272.524045][ T8470] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 272.524058][ T8470] CPU: 1 PID: 8470 Comm: syz.5.1248 Not tainted 6.1.141-syzkaller #0 [ 272.524080][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.524094][ T8470] Call Trace: [ 272.524101][ T8470] [ 272.524110][ T8470] dump_stack_lvl+0x168/0x22e [ 272.524151][ T8470] ? memcpy+0x3c/0x60 [ 272.524177][ T8470] ? show_regs_print_info+0x12/0x12 [ 272.524208][ T8470] ? load_image+0x3b0/0x3b0 [ 272.524240][ T8470] panic+0x2c9/0x710 [ 272.524260][ T8470] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 272.524288][ T8470] ? bpf_jit_dump+0xd0/0xd0 [ 272.524312][ T8470] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 272.524347][ T8470] ? _raw_spin_unlock+0x40/0x40 [ 272.524404][ T8470] check_panic_on_warn+0x80/0xa0 [ 272.524443][ T8470] ? sysv_new_inode+0x10d9/0x1270 [ 272.524466][ T8470] end_report+0x66/0x110 [ 272.524502][ T8470] kasan_report+0x118/0x140 [ 272.524536][ T8470] ? do_raw_spin_unlock+0x11d/0x230 [ 272.524574][ T8470] ? sysv_new_inode+0x10d9/0x1270 [ 272.524602][ T8470] sysv_new_inode+0x10d9/0x1270 [ 272.524632][ T8470] ? __d_add+0x4c0/0x810 [ 272.524659][ T8470] ? __lock_acquire+0x7c50/0x7c50 [ 272.524692][ T8470] ? sysv_free_inode+0x7e0/0x7e0 [ 272.524721][ T8470] ? _raw_spin_unlock+0x24/0x40 [ 272.524753][ T8470] ? __d_add+0x4ec/0x810 [ 272.524778][ T8470] ? sysv_inode_by_name+0xdd/0x140 [ 272.524809][ T8470] sysv_mknod+0x4a/0xd0 [ 272.524835][ T8470] ? sysv_lookup+0xe0/0xe0 [ 272.524859][ T8470] path_openat+0x1187/0x2e70 [ 272.524903][ T8470] ? do_filp_open+0x3c0/0x3c0 [ 272.524939][ T8470] do_filp_open+0x1c1/0x3c0 [ 272.524966][ T8470] ? vfs_tmpfile+0x480/0x480 [ 272.525004][ T8470] ? _raw_spin_unlock+0x24/0x40 [ 272.525036][ T8470] ? alloc_fd+0x58f/0x630 [ 272.525075][ T8470] do_sys_openat2+0x142/0x490 [ 272.525114][ T8470] ? do_sys_open+0xe0/0xe0 [ 272.525147][ T8470] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 272.525180][ T8470] ? lock_chain_count+0x20/0x20 [ 272.525214][ T8470] __x64_sys_openat+0x135/0x160 [ 272.525251][ T8470] do_syscall_64+0x4c/0xa0 [ 272.525281][ T8470] ? clear_bhb_loop+0x60/0xb0 [ 272.525303][ T8470] ? clear_bhb_loop+0x60/0xb0 [ 272.525326][ T8470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.525363][ T8470] RIP: 0033:0x7fd4e578e929 [ 272.525384][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.525405][ T8470] RSP: 002b:00007fd4e6652038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.525475][ T8470] RAX: ffffffffffffffda RBX: 00007fd4e59b5fa0 RCX: 00007fd4e578e929 [ 272.525493][ T8470] RDX: 0000000000143041 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 272.525510][ T8470] RBP: 00007fd4e5810b39 R08: 0000000000000000 R09: 0000000000000000 [ 272.525526][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.525541][ T8470] R13: 0000000000000000 R14: 00007fd4e59b5fa0 R15: 00007fff9a4828d8 [ 272.525567][ T8470] [ 272.528644][ T8470] Kernel Offset: disabled [ 272.826434][ T8470] Rebooting in 86400 seconds..