last executing test programs: 6.992017252s ago: executing program 0 (id=386): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0400000000008000080000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) sendfile(r7, r7, 0x0, 0xa) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 4.945648035s ago: executing program 1 (id=388): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xfffffffffffffe4e, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 4.524576503s ago: executing program 1 (id=391): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a42b72"], 0x0) 3.85406861s ago: executing program 2 (id=398): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5ef, &(0x7f0000000600)="$eJzs3c9vVFUbAOD3TqelpXxfCzEqLmQSYyBRWlrANMYFbA1p8EfcuLHSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhQleGhKhhaeKYmd5bOu2dlg5tL3KfJxl67zlz55zL9O0598w5dwIorVrjn0rE3oiYSSIGkoWlvGqkmbXF593966NTjUcS9fprfySRpGnZ85P0Z396cG9E/PhDEnu6Vpc7O3/53MT09NSldH947vzM8Oz85YNnz0+cmTozdWH0hdGxahwdGznU0XldyUk7ce3d9wc+GX/zm6/+Tka+/WU8iWPxcvrE5eexWWpRa/6fJKuz+sc2u7CCdKW/J8vf4qRaYIXYkOz9646IJ2IguuLemzcQH79SaOWALVVPIupASSXiH0oq6wdk1/Yrr4MrhfRKgO1w5/jiAMDq+K8ujg1Gb3NsYOfdJJYP6yQR0dnIXKtdEXHr5vi10zfHr8UWjcMB+RauRsSTefGfNON/MHpjsBn/lZb4b/QLTqY/G+mvdlj+yqFi8Q/bZzH+e9eM/2gT/28ti/+3Oyy/dm/znb6W+O/r9JQAAAAAAACgtG4cj4jn8z7/ryzN/4mc+T/9EXFsE8qvrdhf/fl/5fYmFAPkuHM84qXc+b+VbPbvYFe69b/mfIDu5PTZ6alDEfH/iDgQ3Tsa+yNrlHHw0z1ftsurpfP/skej/FvpXMC0HrerO1qPmZyYm3jQ8wYi7lyNeCp3/m+y1P4nOe1/4+/BzH2WsefZ6yfb5a0f/8BWqX8dsT+3/b9314qk3f05jh45OjZyaLjZHxjOegWrPf3hZ9+1K7/T+HeLCXhwjfZ/59rxP5gsv1/P7MbLODxfrbfL67T/35O83rzlTE+a9sHE3NylkYie5ERXI7UlfXTjdYZHURYPWbw04v/AM2uP/+X1//siYmHFayd/tq4pzjz+T/9v7eqj/w/FacT/5Iba/41vjF4f/D57sWMrboZ3f+3/kWZbfyBNMf4Hi77I4qmnNT0nHKt5WdtdXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FFQiYlcklaGl7UplaCiiPyIei52V6Yuzc8+dvvjehclGXvP7/yvZN/0OLO4n2ff/Dy7bH12xfzgidkfE5119zf2hUxenJ4s+eQAAAAAAAAAAAAAAAAAAAHhI9K9e//9rf5r3e1fBlQO2XrXoCgCFyYn/n4qoB7D9tP9QXuIfykv8Q3mJfygv8Q/lJf6hvMQ/lJf4BwAAAACAR8rufTd+TiJi4cW+5qOhJ83rLrRmwFarFF0BoDBu8QPlZeoPlJdrfCBZJ7+37UHrHbmWmVMPcDAAAAAAAAAAAAAAlM7+vdb/Q1lZ/w/lZf0/lFe2/n9fwfUAtp9rfCDWWcmfu/5/3aMAAAAAAAAAAAAAgM00O3/53MT09NQlG28UWnolIjbjdWobeXK9Xr/S+C14WN6C//hGNhX+YanPio1srd/9HVXc3yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDVvwEAAP//BJwjLw==") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setreuid(0xee01, 0xffffffffffffffff) getresuid(0x0, &(0x7f0000000400), &(0x7f0000000440)) setreuid(0xee00, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x7b}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x3}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000002c0)='./file1\x00', 0x101c08a, &(0x7f0000002280)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"], 0x1, 0x2e8, &(0x7f0000000640)="$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") r5 = fanotify_init(0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r5, 0x101, 0x4000086e, r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r7, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000180)={0x0, 0x7f}, &(0x7f00000003c0)) 2.616634822s ago: executing program 4 (id=400): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x7}, {0x0, 0xc9}}}}, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x180da5f60c08e663, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100007, 0x20104, 0x0, 0x1}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x7f, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = landlock_create_ruleset(&(0x7f0000000a40)={0x20}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000a80), 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='D', 0x1}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc000800054001000000140004"], 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) 2.142445731s ago: executing program 1 (id=401): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152}}) 2.13182814s ago: executing program 2 (id=402): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000003780)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_aead={0x4c, 0x12, {{'rfc7539(cts-cbc-aes-ce,cbcmac(cipher_null))\x00'}}}]}, 0x184}}, 0x0) 1.918552195s ago: executing program 1 (id=405): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x53}) 1.819808768s ago: executing program 0 (id=406): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x2, 0x0, 0x3, '\x00', '\x00', '\x00', "97e31800", ["fdffffffffffff01004fff60", "84c9ffff00", "0007f5ff08ff000000ff00", "3bf100000000000000c48400"]}) 1.718376727s ago: executing program 3 (id=407): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004"], 0x48}}, 0x0) 1.680934467s ago: executing program 4 (id=408): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000001801000020646c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.669665188s ago: executing program 2 (id=409): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="11acbd", 0x3}}, 0x0) 1.614248958s ago: executing program 1 (id=410): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x0, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 1.60718696s ago: executing program 0 (id=411): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x100c008, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=koi8-r,iocharset=cp737,check=strict,quiet,shortname=mixed,rodir,utf8=0,shortname=mixed,shortname=win95,shortname=winnt,shortname=lower,shortname=win95,shortname=win95,nonumtail=0,iocharset=iso8859-4,shortname=lower,flask=00000000000000000000005,\x00', @ANYRES8], 0x6, 0x374, &(0x7f0000000c80)="$eJzs3U+IG1UYAPAvO9lkW6i7N1EQojdBl7Y3vdhStlDMRSX45yAGu1VJ1sIuLu4eul0PikfBo568KejBg3gUQRFvHrxaQariQXsrWHwyM5kku0m32+Iqi78f7OTle++b9yYzJLOT5OWFU9E7PxsXrl27GnNztaifOnMqrtdiIbKoXI5JjSkxAOBwuJ5S/JFK+0ypHfCQAIADVrz+v3SsvDOTL974aq/2yas/ABx6g///j+zVZm5aMD8PuHhgwwIADtDE9f8HdlQ3ir96dbc+9qkAAOCweurZ5x4/3Y54stWai1h5a72z3olHR/WnL8Qr0Y/lOB7zcSOiPFHIF7ViefZce+l4q9Xaip8XolO9hxARnfJM4XRW5DfjRMzHwiB/cLaRUsrOftpeOtEqRMTlraL/WKmtd2bj6KD/H47G8ujEo1pJcRNxrr10sjVYQWelyt+K2B5dt8jHvxjz8d2LcTH6cT7y3OoTjO2lSydarTOpvSN/vdMs2pWmXgEBAAAAAAAAAAAAAAAAAAAAAIA7ttgaWhjOf5Py22LCnWxxcUp9MT9OmT+YH2i7nB8oNVOk9PvrD3fezmLH/EC75+dZN5EgAAAAAAAAAAAAAAAAAAAADK1tNKLb7y+vrm1s9sYLW6trGzMRkUde/ebjL4/EZJtbFOplF82IYRetQbebvW7KqsYpi5hMz/LOq8iHnw1HPN6mOdyKqcNo3ryq3z92/0/vjSL3ZdWa/xq1yWL6BmZjw3hs15pX7iqHVESy23zETo5HmpO9X0kpjUXeHE+/9PzkCqMWUb/9HbfZm4mbt0l54eurL99TPfrdL1LpwYfmn77y7ge/9rr9vOco9mBjde1G6nVrVePbGUa+C0bHRi3KQm38SKjvlb69M9LNvv/tmXvf+XZ/vafxyGv58byrTVZuzie70xtlIR/mrqojo/TZwUb0l2enHPy3KtzBPr37/c8/SunHX/bdxcjMxNNG7Z959gEAAAAAAAAAAAAAAAAAAMaNfVd8YPBl39m9sh554uBHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ntHv/29s9qrf/N++HIPIsGofhT+3pmQ1l1fXIhr/8VYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/93cAAAD//1WdWhA=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) 1.552824057s ago: executing program 3 (id=412): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000020000000047c0000040000001400018006001000800a0000080003"], 0x2c}}, 0x0) 1.46730448s ago: executing program 4 (id=413): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020039000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 1.466695727s ago: executing program 1 (id=414): syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0x73, 0x9f, 0x20, 0x4a4, 0x14, 0xc957, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x3, 0x4, 0xce, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x40, 0xa4, 0x8, 0x8}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x3, 0xfc, 0x1, [@generic={0x7, 0x5, "910e3a85ea"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x7, 0x1}}]}}]}}]}}, 0x0) 1.361068037s ago: executing program 0 (id=415): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb}, 0x24}}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000240)={0x0, 0x1, 0x8d1, '\x00', &(0x7f0000000200)=0xc1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, &(0x7f0000000040)=""/72, 0x48, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000380)={0x1, 0x0, {0x40, 0x0, 0x6, 0x6}}) close(r0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000003c0)={0x4, {0x200, 0x2, 0x6, 0x80}, {0x400, 0x5, 0x7, 0x101}, {0x3, 0x6}}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x20) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000001040)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x48, &(0x7f0000000000), 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.360531662s ago: executing program 2 (id=416): syz_mount_image$hpfs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000009e80), 0x1, 0x9dc3, &(0x7f0000009ec0)="$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") 1.346870997s ago: executing program 3 (id=417): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001200), 0x40a01, 0x0) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000280)="a6", 0x1}], 0x1, 0x10001, 0x0) 1.323621957s ago: executing program 4 (id=418): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x7}, {0x0, 0xc9}}}}, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x180da5f60c08e663, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100007, 0x20104, 0x0, 0x1}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x7f, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = landlock_create_ruleset(&(0x7f0000000a40)={0x20}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f0000000a80), 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='D', 0x1}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc000800054001000000140004"], 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) 1.190347047s ago: executing program 3 (id=419): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0xe}]}}}]}, 0x3c}}, 0x0) 944.209327ms ago: executing program 3 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x3c}}, 0x0) 931.641925ms ago: executing program 2 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x38}}, 0x0) 222.371534ms ago: executing program 4 (id=422): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000000000000000000005d5e5793000000000000000010000000000000001001000002"], 0x38}, 0x0) 211.547095ms ago: executing program 0 (id=423): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e003020028000b05d25a806f8c6394f90a24fc600d00090003000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 173.731827ms ago: executing program 2 (id=424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572000c000980080001400017"], 0xa0}}, 0x0) 118.42555ms ago: executing program 3 (id=425): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) 96.764499ms ago: executing program 0 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003"], 0x48}}, 0x0) 0s ago: executing program 4 (id=427): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b78, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a001a00070282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): led [ 149.425909][ T5408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.538271][ T6032] loop4: detected capacity change from 0 to 4096 [ 149.561877][ T6032] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 150.566711][ T6037] loop1: detected capacity change from 0 to 128 [ 150.607760][ T5228] Bluetooth: hci4: command tx timeout [ 151.239466][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.291984][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.332477][ T52] bond0 (unregistering): Released all slaves [ 151.416256][ T6046] loop1: detected capacity change from 0 to 128 [ 151.432139][ T6048] loop4: detected capacity change from 0 to 764 [ 151.530691][ T6050] Symlink component flag not implemented [ 151.545391][ T6050] Symlink component flag not implemented (129) [ 152.051381][ T6043] mkiss: ax0: crc mode is auto. [ 152.051513][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 152.129651][ T6046] VFS: could not find a valid V7 on loop1. [ 152.511058][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 152.599476][ T6061] loop4: detected capacity change from 0 to 1024 [ 152.616904][ T6061] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.676329][ T5228] Bluetooth: hci4: command tx timeout [ 152.758568][ T6061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.102952][ T6072] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.116: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 153.275862][ T6075] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.116: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 153.806067][ T5552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.037950][ T6084] netlink: 'syz.1.117': attribute type 11 has an invalid length. [ 154.138850][ T52] hsr_slave_0: left promiscuous mode [ 154.174837][ T52] hsr_slave_1: left promiscuous mode [ 154.354877][ T6092] loop4: detected capacity change from 0 to 1024 [ 154.367977][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.390588][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.599208][ T6096] loop2: detected capacity change from 0 to 8 [ 154.719076][ T6096] SQUASHFS error: Failed to read block 0x1ec: -5 [ 154.725728][ T6096] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 154.775885][ T5228] Bluetooth: hci4: command tx timeout [ 155.148118][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.159064][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.166456][ T6092] hfsplus: unable to load nls mapping "c1250" [ 155.173459][ T6092] hfsplus: unable to parse mount options [ 155.263069][ T52] veth1_macvtap: left promiscuous mode [ 155.273676][ T6056] loop3: detected capacity change from 0 to 32768 [ 155.285843][ T52] veth0_macvtap: left promiscuous mode [ 155.291501][ T52] veth1_vlan: left promiscuous mode [ 155.298175][ T52] veth0_vlan: left promiscuous mode [ 155.427442][ T6098] futex_wake_op: syz.4.118 tries to shift op by -1; fix this program [ 155.970335][ T6104] loop4: detected capacity change from 0 to 16 [ 156.007086][ T6104] erofs: (device loop4): mounted with root inode @ nid 36. [ 156.075845][ T6105] capability: warning: `syz.4.118' uses 32-bit capabilities (legacy support in use) [ 156.093134][ T5228] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 156.109546][ T6104] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 156.126091][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 156.126108][ T29] audit: type=1800 audit(1723797041.353:74): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.118" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 156.208401][ T6104] syz.4.118 (6104) used greatest stack depth: 18744 bytes left [ 156.371314][ T52] team0 (unregistering): Port device team_slave_1 removed [ 156.459943][ T52] team0 (unregistering): Port device team_slave_0 removed [ 156.898621][ T6107] loop4: detected capacity change from 0 to 65536 [ 156.933355][ T6107] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 156.993326][ T6107] XFS (loop4): Ending clean mount [ 157.003688][ T6107] XFS (loop4): Quotacheck needed: Please wait. [ 157.050009][ T6107] XFS (loop4): Quotacheck: Done. [ 158.532920][ T5552] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 158.693291][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.745472][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.774942][ T5994] bridge_slave_0: entered allmulticast mode [ 158.784925][ T5994] bridge_slave_0: entered promiscuous mode [ 158.818767][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.853255][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.899759][ T5994] bridge_slave_1: entered allmulticast mode [ 158.944665][ T5994] bridge_slave_1: entered promiscuous mode [ 159.264529][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.354179][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.578544][ T5994] team0: Port device team_slave_0 added [ 159.612383][ T5994] team0: Port device team_slave_1 added [ 159.928089][ T6139] loop4: detected capacity change from 0 to 32768 [ 160.000616][ T6129] loop3: detected capacity change from 0 to 4096 [ 160.076338][ T6139] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.119169][ T6134] loop2: detected capacity change from 0 to 8192 [ 160.179549][ T6129] ntfs3: loop3: Failed to load $MFT (-22). [ 160.238658][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.299090][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.326039][ T6151] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.455553][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.502214][ T6139] XFS (loop4): Ending clean mount [ 160.513016][ T6139] XFS (loop4): Quotacheck needed: Please wait. [ 160.577569][ T6139] XFS (loop4): Quotacheck: Done. [ 160.623454][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.836129][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.561284][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.951046][ T5552] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.983534][ T6160] loop3: detected capacity change from 0 to 512 [ 163.014572][ T6160] EXT4-fs: Ignoring removed nobh option [ 163.162815][ T6160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.756405][ T6169] loop1: detected capacity change from 0 to 1024 [ 164.179781][ T5994] hsr_slave_0: entered promiscuous mode [ 164.196029][ T5994] hsr_slave_1: entered promiscuous mode [ 164.220234][ T5994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.231031][ T5994] Cannot create hsr debugfs directory [ 164.354851][ T5366] hfsplus: b-tree write err: -5, ino 4 [ 164.390825][ T6173] netlink: 'syz.4.127': attribute type 9 has an invalid length. [ 164.406975][ T6173] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.127'. [ 164.511449][ T6179] loop1: detected capacity change from 0 to 512 [ 164.552371][ T6179] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 164.565850][ T5263] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.603333][ T6179] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.131: iget: bad i_size value: -67835469387268086 [ 164.604886][ T6176] netlink: 'syz.4.127': attribute type 9 has an invalid length. [ 164.667575][ T6176] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.127'. [ 164.693095][ T6179] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.131: couldn't read orphan inode 15 (err -117) [ 164.774096][ T6179] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.796145][ T5263] usb 4-1: Using ep0 maxpacket: 16 [ 164.818451][ T5263] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 164.832262][ T6179] ext2 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.839206][ T5263] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 164.886895][ T5263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.917105][ T5263] usb 4-1: config 0 descriptor?? [ 165.188051][ T6160] sch_fq: defrate 0 ignored. [ 165.308562][ T5263] usbhid 4-1:0.0: can't add hid device: -71 [ 165.314611][ T5263] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 165.353655][ T5263] usb 4-1: USB disconnect, device number 3 [ 165.420334][ T6203] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.131: Directory hole found for htree leaf block 0 [ 166.706486][ T6214] loop2: detected capacity change from 0 to 8 [ 166.888462][ T6214] SQUASHFS error: Failed to read block 0x1ec: -5 [ 166.894922][ T6214] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 167.334853][ T5994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.366146][ T5222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.399944][ T5994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.436864][ T5994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.590309][ T5994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.637223][ T5408] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 168.012117][ T6231] sch_tbf: peakrate 3 is lower than or equals to rate 1143518112591568713 ! [ 168.727872][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 169.508292][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.244341][ T6267] loop3: detected capacity change from 0 to 164 [ 171.286333][ T6269] loop1: detected capacity change from 0 to 8192 [ 172.206606][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.275327][ T5272] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 172.426385][ T5994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.436950][ T5994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.582068][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.589273][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.611257][ T6267] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 172.635808][ T6308] loop1: detected capacity change from 0 to 256 [ 172.644658][ T6248] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 172.712813][ T6319] netlink: 'syz.4.142': attribute type 11 has an invalid length. [ 172.733650][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.740867][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.013035][ T6347] loop3: detected capacity change from 0 to 2048 [ 175.116172][ T6347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.128724][ T6347] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.565777][ T6357] loop4: detected capacity change from 0 to 8 [ 176.034727][ T6356] SQUASHFS error: Failed to read block 0x1ec: -5 [ 176.041552][ T6356] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 176.127377][ T5222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.165600][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.310585][ T5994] veth0_vlan: entered promiscuous mode [ 176.344184][ T5994] veth1_vlan: entered promiscuous mode [ 176.389910][ T5228] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 176.527707][ T5994] veth0_macvtap: entered promiscuous mode [ 176.535263][ T5272] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 176.569878][ T5994] veth1_macvtap: entered promiscuous mode [ 176.587776][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.623024][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.664241][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.800688][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.815187][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.706531][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.751136][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.804748][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.977718][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.065103][ T5272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.157761][ T5272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.194654][ T5272] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 179.230143][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.251534][ T5272] usb 2-1: SerialNumber: syz [ 179.295666][ T5272] usb 2-1: can't set config #1, error -71 [ 179.318229][ T5272] usb 2-1: USB disconnect, device number 2 [ 179.349946][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.415063][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.424924][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.462769][ T29] audit: type=1326 audit(1723797064.683:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ffab799b9 code=0x0 [ 179.495994][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.521737][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.541416][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.551497][ T29] audit: type=1326 audit(1723797064.763:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c715799b9 code=0x0 [ 179.591534][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.609183][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.671143][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.730597][ T5994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.763392][ T5994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.796465][ T5994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.801065][ T6389] loop3: detected capacity change from 0 to 1024 [ 179.822173][ T6389] EXT4-fs: Ignoring removed oldalloc option [ 179.824314][ T5994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.853518][ T6389] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 179.930603][ T6404] loop1: detected capacity change from 0 to 4096 [ 179.949548][ T6389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.995612][ T6404] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 180.142921][ T6404] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 180.202341][ T29] audit: type=1804 audit(1723797065.423:77): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.152" name="/newroot/53/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 180.226059][ T5366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.233880][ T5366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.257443][ T6404] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 180.555130][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 180.754655][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.226004][ T6430] input: syz0 as /devices/virtual/input/input7 [ 181.319595][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.434181][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 181.463930][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.500146][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 181.524114][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 181.538893][ T9] usb 4-1: Manufacturer: syz [ 181.565805][ T9] usb 4-1: config 0 descriptor?? [ 181.593156][ T9] igorplugusb 4-1:0.0: incorrect number of endpoints [ 182.001584][ T6447] syz.0.97[6447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.001682][ T6447] syz.0.97[6447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.074063][ T6447] syz.0.97[6447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.120662][ T6447] syz.0.97[6447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.138269][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 182.229404][ T6451] loop2: detected capacity change from 0 to 1024 [ 182.976651][ T5318] usb 4-1: USB disconnect, device number 4 [ 183.043715][ T6458] loop1: detected capacity change from 0 to 1024 [ 183.087939][ T6458] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.159985][ T6458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.258987][ T5222] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.702327][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.891994][ T6467] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.160: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 183.945315][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 183.954160][ T6466] bridge_slave_1: left allmulticast mode [ 183.983702][ T6458] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.160: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 184.000487][ T6466] bridge_slave_1: left promiscuous mode [ 184.044653][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.477202][ T6466] bridge_slave_0: left allmulticast mode [ 184.478078][ T5408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.482876][ T6466] bridge_slave_0: left promiscuous mode [ 184.525393][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.523050][ T29] audit: type=1326 audit(1723797070.113:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d603799b9 code=0x7ffc0000 [ 185.958462][ T29] audit: type=1326 audit(1723797070.123:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d603799b9 code=0x7ffc0000 [ 185.993040][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 186.031116][ T5271] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 186.087879][ T6493] loop1: detected capacity change from 0 to 8 [ 186.108317][ T6493] SQUASHFS error: Failed to read block 0x1ec: -5 [ 186.114717][ T6493] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 186.243086][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 186.294030][ T29] audit: type=1326 audit(1723797070.153:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d60378350 code=0x7ffc0000 [ 186.743683][ T6481] netlink: 'syz.2.164': attribute type 27 has an invalid length. [ 186.755177][ T29] audit: type=1326 audit(1723797070.223:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d603799b9 code=0x7ffc0000 [ 186.777968][ T29] audit: type=1326 audit(1723797070.223:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d603799b9 code=0x7ffc0000 [ 186.802142][ T29] audit: type=1326 audit(1723797070.273:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4d603799b9 code=0x7ffc0000 [ 186.825631][ T29] audit: type=1326 audit(1723797070.293:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d603799b9 code=0x7ffc0000 [ 186.865546][ T29] audit: type=1326 audit(1723797070.303:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d603799b9 code=0x7ffc0000 [ 186.866914][ T5271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.900726][ T29] audit: type=1326 audit(1723797070.323:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d603799b9 code=0x7ffc0000 [ 186.950325][ T9] usb 1-1: device descriptor read/all, error -71 [ 186.985445][ T29] audit: type=1326 audit(1723797070.333:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d603799b9 code=0x7ffc0000 [ 187.045477][ T5271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.105480][ T5271] usb 5-1: string descriptor 0 read error: -71 [ 187.111719][ T5271] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 187.131520][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 187.149068][ T5271] usb 5-1: can't set config #1, error -71 [ 187.156859][ T5271] usb 5-1: USB disconnect, device number 2 [ 187.394648][ T6519] netlink: 44 bytes leftover after parsing attributes in process `syz.0.167'. [ 189.238721][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.246776][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.387625][ T6530] loop4: detected capacity change from 0 to 256 [ 189.998173][ T6481] veth0_to_team: left allmulticast mode [ 190.092213][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.170526][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.667844][ T6481] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.685816][ T6481] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.694879][ T6481] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.717181][ T6481] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.900814][ T6481] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 191.247555][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 191.296747][ T6557] overlay: Unknown parameter '\' [ 191.303553][ T6561] loop3: detected capacity change from 0 to 512 [ 191.333625][ T6561] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 191.362101][ T6561] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 191.467922][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 191.467939][ T29] audit: type=1326 audit(1723797076.693:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6560 comm="syz.3.173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d603799b9 code=0x0 [ 191.542467][ T6571] loop1: detected capacity change from 0 to 1024 [ 191.556434][ T6571] EXT4-fs (loop1): inodes count not valid: 32 vs 12 [ 191.695171][ T6515] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 191.707652][ T6571] loop1: detected capacity change from 0 to 8192 [ 191.734015][ T6571] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.905108][ T6515] usb 3-1: Using ep0 maxpacket: 16 [ 191.932547][ T6515] usb 3-1: New USB device found, idVendor=0458, idProduct=700e, bcdDevice=b4.75 [ 191.963098][ T6515] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.994443][ T6515] usb 3-1: Product: syz [ 192.002603][ T6515] usb 3-1: Manufacturer: syz [ 192.017827][ T6515] usb 3-1: SerialNumber: syz [ 192.049832][ T6515] usb 3-1: config 0 descriptor?? [ 192.068396][ T6515] usb 3-1: Found UVC 0.00 device syz (0458:700e) [ 192.093584][ T6515] usb 3-1: No valid video chain found. [ 193.899614][ T8] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 193.961099][ T6568] loop4: detected capacity change from 0 to 40427 [ 193.992372][ T6568] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 194.011613][ T6568] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 194.064634][ T6568] F2FS-fs (loop4): invalid crc value [ 194.089060][ T6568] F2FS-fs (loop4): Found nat_bits in checkpoint [ 194.097980][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.125097][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.150390][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 194.173239][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 194.209933][ T8] usb 1-1: SerialNumber: syz [ 194.224710][ T6593] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 194.224710][ T6593] The task syz.3.180 (6593) triggered the difference, watch for misbehavior. [ 194.242566][ T6568] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 194.242836][ T6568] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 194.281243][ T8] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 194.296383][ T8] usb-storage 1-1:1.0: USB Mass Storage device detected [ 194.313342][ T8] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 194.323451][ T8] scsi host1: usb-storage 1-1:1.0 [ 194.354289][ T6596] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.181'. [ 194.369230][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375906][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.384679][ T6596] netlink: zone id is out of range [ 194.389988][ T6596] netlink: zone id is out of range [ 194.395759][ T6596] netlink: zone id is out of range [ 194.400986][ T6596] netlink: zone id is out of range [ 194.407310][ T6596] netlink: zone id is out of range [ 194.412502][ T6596] netlink: zone id is out of range [ 194.419411][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 194.423262][ T6596] netlink: zone id is out of range [ 194.433544][ T6596] netlink: zone id is out of range [ 194.454440][ T6596] netlink: zone id is out of range [ 194.467235][ T6596] netlink: zone id is out of range [ 194.630144][ T5552] F2FS-fs (loop4): access invalid blkaddr:2048 [ 194.642950][ T5552] CPU: 1 UID: 0 PID: 5552 Comm: syz-executor Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 194.653331][ T5552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 194.663406][ T5552] Call Trace: [ 194.666692][ T5552] [ 194.669628][ T5552] dump_stack_lvl+0x241/0x360 [ 194.674346][ T5552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.679586][ T5552] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 194.685506][ T5552] __f2fs_is_valid_blkaddr+0xe16/0x1460 [ 194.691071][ T5552] f2fs_map_blocks+0xd22/0x4950 [ 194.695974][ T5552] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 194.701294][ T5552] ? xa_load+0x2dd/0x350 [ 194.705580][ T5552] ? __pfx_xa_load+0x10/0x10 [ 194.710190][ T5552] ? folio_index+0xab/0x350 [ 194.714701][ T5552] f2fs_mpage_readpages+0xcae/0x2140 [ 194.720020][ T5552] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 194.725784][ T5552] ? __folio_batch_add_and_move+0x81a/0xf00 [ 194.731704][ T5552] ? __pfx_lock_release+0x10/0x10 [ 194.736740][ T5552] ? rcu_is_watching+0x15/0xb0 [ 194.741536][ T5552] ? f2fs_readahead+0x184/0x340 [ 194.746412][ T5552] read_pages+0x17e/0x840 [ 194.750774][ T5552] ? percpu_ref_put+0x19/0x180 [ 194.755578][ T5552] ? __pfx_read_pages+0x10/0x10 [ 194.760448][ T5552] ? filemap_add_folio+0x26d/0x650 [ 194.765575][ T5552] ? __pfx_filemap_add_folio+0x10/0x10 [ 194.771058][ T5552] page_cache_ra_unbounded+0x6ce/0x7f0 [ 194.776561][ T5552] f2fs_readdir+0x5bc/0xbf0 [ 194.781070][ T5552] ? __pfx___might_resched+0x10/0x10 [ 194.786398][ T5552] ? __pfx_f2fs_readdir+0x10/0x10 [ 194.791442][ T5552] ? trace_contention_end+0x3c/0x120 [ 194.796737][ T5552] ? iterate_dir+0x215/0x810 [ 194.801341][ T5552] ? fdget_pos+0x24e/0x310 [ 194.805783][ T5552] ? common_file_perm+0x1a6/0x210 [ 194.810820][ T5552] ? bpf_lsm_file_permission+0x9/0x10 [ 194.816212][ T5552] iterate_dir+0x57a/0x810 [ 194.820670][ T5552] __se_sys_getdents64+0x1d3/0x4a0 [ 194.825827][ T5552] ? __pfx___se_sys_getdents64+0x10/0x10 [ 194.831499][ T5552] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.837519][ T5552] ? __pfx_filldir64+0x10/0x10 [ 194.842347][ T5552] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.848720][ T5552] ? exc_page_fault+0x590/0x8c0 [ 194.853625][ T5552] ? do_syscall_64+0xb6/0x230 [ 194.858348][ T5552] do_syscall_64+0xf3/0x230 [ 194.862897][ T5552] ? clear_bhb_loop+0x35/0x90 [ 194.867616][ T5552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.873557][ T5552] RIP: 0033:0x7f0c715aba53 [ 194.878022][ T5552] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 44 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 194.897658][ T5552] RSP: 002b:00007fff1b71fd88 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 194.906105][ T5552] RAX: ffffffffffffffda RBX: 00005555921c9600 RCX: 00007f0c715aba53 [ 194.914081][ T5552] RDX: 0000000000008000 RSI: 00005555921c9600 RDI: 0000000000000005 [ 194.922058][ T5552] RBP: 00005555921c95d4 R08: 0000000000000000 R09: 0000000000000000 [ 194.930044][ T5552] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 194.938031][ T5552] R13: 0000000000000010 R14: 00005555921c95d0 R15: 00007fff1b722030 [ 194.946015][ T5552] [ 194.982552][ T5552] syz-executor: attempt to access beyond end of device [ 194.982552][ T5552] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 195.017127][ T6509] usb 1-1: USB disconnect, device number 4 [ 195.046078][ T5552] syz-executor: attempt to access beyond end of device [ 195.046078][ T5552] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 195.184743][ T46] usb 3-1: USB disconnect, device number 4 [ 195.258343][ T6613] loop1: detected capacity change from 0 to 8 [ 197.333126][ T6611] SQUASHFS error: Failed to read block 0x1ec: -5 [ 197.339655][ T6611] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 197.644562][ T6298] kworker/u8:21: attempt to access beyond end of device [ 197.644562][ T6298] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 197.663200][ T5228] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 198.815305][ T6298] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 198.839194][ T6298] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 198.884842][ T6298] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 198.897345][ T6298] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 201.431904][ T6637] netlink: 100 bytes leftover after parsing attributes in process `syz.2.191'. [ 201.721424][ T5366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.864896][ T6639] loop2: detected capacity change from 0 to 16 [ 201.891986][ T5366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.912158][ T6639] erofs: (device loop2): mounted with root inode @ nid 36. [ 203.030714][ T6646] loop1: detected capacity change from 0 to 1024 [ 203.219069][ T5366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.135777][ T5366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.216778][ T6651] netlink: 116 bytes leftover after parsing attributes in process `syz.0.194'. [ 204.271182][ T6651] tipc: Started in network mode [ 204.302094][ T6651] tipc: Node identity 061af02cbead, cluster identity 4711 [ 204.314654][ T6651] tipc: Enabled bearer , priority 0 [ 204.701039][ T5366] bridge_slave_1: left allmulticast mode [ 204.710765][ T5366] bridge_slave_1: left promiscuous mode [ 204.717525][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.767984][ T5366] bridge_slave_0: left allmulticast mode [ 204.773896][ T5366] bridge_slave_0: left promiscuous mode [ 204.787867][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.913100][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.923212][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.944598][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.955602][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.964118][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.974723][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.100214][ T29] audit: type=1326 audit(1723797090.313:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34f7d799b9 code=0x0 [ 205.368433][ T5331] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 205.426403][ T6506] tipc: Node number set to 3099062316 [ 205.605378][ T5331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.630970][ T5331] usb 1-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.666348][ T5331] usb 1-1: config 1 interface 0 has no altsetting 0 [ 205.701522][ T5331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.721123][ T5331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.731721][ T5331] usb 1-1: SerialNumber: syz [ 205.766173][ T5331] cdc_ether 1-1:1.0: skipping garbage [ 205.771607][ T5331] cdc_ether 1-1:1.0: skipping garbage [ 205.810856][ T5331] usb 1-1: bad CDC descriptors [ 205.811443][ T6675] loop2: detected capacity change from 0 to 2048 [ 205.901443][ T6675] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 205.975816][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.987345][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.999215][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.007882][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.017255][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.024861][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.209464][ T5366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.235462][ T5366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.253145][ T5366] bond0 (unregistering): Released all slaves [ 207.050034][ T54] Bluetooth: hci2: command tx timeout [ 207.197618][ T29] audit: type=1326 audit(1723797092.423:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffab799b9 code=0x7ffc0000 [ 207.369055][ T29] audit: type=1326 audit(1723797092.423:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffab799b9 code=0x7ffc0000 [ 207.395311][ T29] audit: type=1326 audit(1723797092.423:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ffab799b9 code=0x7ffc0000 [ 207.417986][ T6686] loop1: detected capacity change from 0 to 256 [ 207.510590][ T6689] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 208.116448][ T54] Bluetooth: hci0: command tx timeout [ 208.161255][ T29] audit: type=1326 audit(1723797092.423:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffab799b9 code=0x7ffc0000 [ 208.217289][ T6515] usb 1-1: USB disconnect, device number 5 [ 208.275627][ T29] audit: type=1326 audit(1723797092.423:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5ffab799b9 code=0x7ffc0000 [ 208.300129][ T29] audit: type=1326 audit(1723797092.423:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5ffab799f3 code=0x7ffc0000 [ 208.323238][ T29] audit: type=1326 audit(1723797092.623:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ffab7849f code=0x7ffc0000 [ 208.490079][ T29] audit: type=1326 audit(1723797092.623:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5ffab79a47 code=0x7ffc0000 [ 208.513017][ T29] audit: type=1326 audit(1723797092.623:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ffab78350 code=0x7ffc0000 [ 208.603613][ T6686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'. [ 209.151888][ T54] Bluetooth: hci2: command tx timeout [ 209.394839][ T6702] loop2: detected capacity change from 0 to 2048 [ 209.410810][ T6702] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.479623][ T5366] hsr_slave_0: left promiscuous mode [ 209.504774][ T5366] hsr_slave_1: left promiscuous mode [ 209.536651][ T5366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.544124][ T5366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.589878][ T5366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.597622][ T5366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.659493][ T5366] veth1_macvtap: left promiscuous mode [ 209.681253][ T5366] veth0_macvtap: left promiscuous mode [ 209.687683][ T5366] veth1_vlan: left promiscuous mode [ 209.694767][ T5366] veth0_vlan: left promiscuous mode [ 210.205098][ T5228] Bluetooth: hci0: command tx timeout [ 210.995466][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 211.545167][ T5228] Bluetooth: hci2: command tx timeout [ 211.815790][ T4619] Bluetooth: hci3: command 0x0406 tx timeout [ 212.225129][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 212.232276][ T8] usb 1-1: config index 0 descriptor too short (expected 24929, got 156) [ 212.251998][ T8] usb 1-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 212.272648][ T8] usb 1-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 212.283678][ T54] Bluetooth: hci0: command tx timeout [ 212.289850][ T8] usb 1-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 212.302021][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.311375][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.320268][ T8] usb 1-1: Product: syz [ 212.324642][ T8] usb 1-1: Manufacturer: syz [ 212.329540][ T8] usb 1-1: SerialNumber: syz [ 212.518785][ T8] usb 1-1: USB disconnect, device number 6 [ 213.603647][ T54] Bluetooth: hci2: command tx timeout [ 213.813388][ T5366] team0 (unregistering): Port device team_slave_1 removed [ 213.930027][ T5366] team0 (unregistering): Port device team_slave_0 removed [ 214.052675][ T6735] x_tables: unsorted entry at hook 3 [ 214.072608][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.212'. [ 214.356355][ T54] Bluetooth: hci0: command tx timeout [ 214.711630][ T6736] netlink: 'syz.0.212': attribute type 2 has an invalid length. [ 214.759562][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 215.015551][ T54] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 215.111075][ T6676] chnl_net:caif_netlink_parms(): no params data found [ 215.296860][ T54] Bluetooth: hci1: connection err: -111 [ 215.726914][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 216.308189][ T6669] chnl_net:caif_netlink_parms(): no params data found [ 216.387831][ T5228] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 216.469967][ T6750] loop1: detected capacity change from 0 to 2048 [ 216.527898][ T6750] loop1: p3 < > p4 < > [ 216.532091][ T6750] loop1: partition table partially beyond EOD, truncated [ 216.543451][ T6750] loop1: p3 start 4284289 is beyond EOD, truncated [ 216.879379][ T6772] syz.0.218[6772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.879480][ T6772] syz.0.218[6772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.976104][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.023747][ T6772] syz.0.218[6772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.037086][ T6676] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.125211][ T6676] bridge_slave_0: entered allmulticast mode [ 217.161316][ T6676] bridge_slave_0: entered promiscuous mode [ 217.196048][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.225366][ T6676] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.272140][ T6676] bridge_slave_1: entered allmulticast mode [ 217.293292][ T6676] bridge_slave_1: entered promiscuous mode [ 218.268714][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.282706][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.292760][ T6669] bridge_slave_0: entered allmulticast mode [ 218.303635][ T6669] bridge_slave_0: entered promiscuous mode [ 218.325351][ T6676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.400723][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 218.400743][ T29] audit: type=1800 audit(1723797103.623:137): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.221" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 218.432109][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.441345][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.459415][ T6669] bridge_slave_1: entered allmulticast mode [ 218.467769][ T6669] bridge_slave_1: entered promiscuous mode [ 218.507096][ T6797] fuse: Bad value for 'fd' [ 218.520675][ T6676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.648210][ T5366] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.700640][ T6799] loop2: detected capacity change from 0 to 256 [ 218.726866][ T6669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.954478][ T6669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.989156][ T5366] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.975695][ T6676] team0: Port device team_slave_0 added [ 220.000912][ T6676] team0: Port device team_slave_1 added [ 220.329017][ T5366] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.375583][ T6669] team0: Port device team_slave_0 added [ 220.386267][ T5228] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 220.491546][ T5366] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.557190][ T6669] team0: Port device team_slave_1 added [ 220.750959][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.803936][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.915254][ T6676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.940455][ T6676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.961652][ T6676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.996013][ T6676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.090374][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.103809][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.138160][ T6669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.163699][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.174722][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.209482][ T6669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.309695][ T6676] hsr_slave_0: entered promiscuous mode [ 221.355767][ T6676] hsr_slave_1: entered promiscuous mode [ 221.386161][ T6676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.412427][ T6676] Cannot create hsr debugfs directory [ 221.496104][ T6669] hsr_slave_0: entered promiscuous mode [ 221.524482][ T6669] hsr_slave_1: entered promiscuous mode [ 221.542617][ T6669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.567088][ T6669] Cannot create hsr debugfs directory [ 221.806481][ T5366] veth0: left allmulticast mode [ 221.834533][ T5366] veth0: left promiscuous mode [ 221.839660][ T5366] bridge0: port 3(veth0) entered disabled state [ 221.935462][ T5366] bridge_slave_1: left allmulticast mode [ 221.941300][ T5366] bridge_slave_1: left promiscuous mode [ 221.956584][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.987126][ T5366] bridge_slave_0: left allmulticast mode [ 221.992962][ T5366] bridge_slave_0: left promiscuous mode [ 222.015893][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.209716][ T6845] loop1: detected capacity change from 0 to 1024 [ 222.225316][ T6845] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 222.284461][ T6845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.755646][ T6856] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.228: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 222.971671][ T6860] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.228: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 223.187822][ T6865] 9pnet_fd: Insufficient options for proto=fd [ 223.258352][ T5408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.435521][ T5366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.448982][ T5366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.461364][ T5366] bond0 (unregistering): Released all slaves [ 223.615251][ T5331] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 223.898966][ T5331] usb 2-1: Using ep0 maxpacket: 32 [ 224.693595][ T6875] input: syz1 as /devices/virtual/input/input10 [ 224.863071][ T6875] xt_hashlimit: max too large, truncated to 1048576 [ 224.865935][ T5331] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.340025][ T6877] loop2: detected capacity change from 0 to 2048 [ 225.365547][ T5331] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.438240][ T5331] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 225.653555][ T5331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.697151][ T5331] hub 2-1:4.0: USB hub found [ 226.018308][ T5331] hub 2-1:4.0: 1 port detected [ 227.077042][ T5331] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 227.106435][ T5331] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 227.211370][ T5366] hsr_slave_0: left promiscuous mode [ 227.234161][ T5366] hsr_slave_1: left promiscuous mode [ 227.289754][ T5366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.298642][ T5366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.315426][ T5366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.325485][ T46] usb 2-1: USB disconnect, device number 3 [ 228.485186][ T5366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.582007][ T6891] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 229.425131][ T5366] veth1_macvtap: left promiscuous mode [ 229.430731][ T5366] veth0_macvtap: left promiscuous mode [ 229.437684][ T5366] veth1_vlan: left promiscuous mode [ 229.444417][ T5366] veth0_vlan: left promiscuous mode [ 229.626713][ T6515] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 229.821951][ T6515] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 229.864208][ T6515] usb 3-1: config 0 has no interface number 1 [ 229.887663][ T6515] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 229.900741][ T6515] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.970425][ T6515] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 230.005418][ T6515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.037079][ T6515] usb 3-1: SerialNumber: syz [ 230.086921][ T6515] usb 3-1: config 0 descriptor?? [ 230.138084][ T6515] usb 3-1: Found UVC 0.00 device (0002:0000) [ 230.178805][ T6515] usb 3-1: No valid video chain found. [ 230.367181][ T5331] usb 3-1: USB disconnect, device number 5 [ 230.642445][ T6903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.792329][ T5331] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 231.985268][ T5366] team0 (unregistering): Port device team_slave_1 removed [ 232.021788][ T5331] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 232.065774][ T5331] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 232.111355][ T5331] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 232.142670][ T5331] usb 3-1: config 0 interface 0 has no altsetting 0 [ 232.152609][ T5331] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 232.181675][ T5331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.190322][ T5331] usb 3-1: Product: syz [ 232.190733][ T5366] team0 (unregistering): Port device team_slave_0 removed [ 232.194557][ T5331] usb 3-1: Manufacturer: syz [ 232.238079][ T5331] usb 3-1: SerialNumber: syz [ 232.246755][ T5331] usb 3-1: config 0 descriptor?? [ 232.466418][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.497168][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.620282][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 232.638688][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.653736][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.661945][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.671338][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.679375][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.691472][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 232.700743][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.711782][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 232.731547][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.741168][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.749794][ T6909] syz.1.241: attempt to access beyond end of device [ 232.749794][ T6909] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 232.772743][ T6909] syz.1.241: attempt to access beyond end of device [ 232.772743][ T6909] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 232.795160][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.811532][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.822241][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 232.832398][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.838894][ T6909] syz.1.241: attempt to access beyond end of device [ 232.838894][ T6909] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 232.854521][ T6909] syz.1.241: attempt to access beyond end of device [ 232.854521][ T6909] loop1: rw=0, sector=18, nr_sectors = 2 limit=0 [ 232.854642][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.875825][ T6909] syz.1.241: attempt to access beyond end of device [ 232.875825][ T6909] loop1: rw=0, sector=30, nr_sectors = 2 limit=0 [ 232.884743][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.907813][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.915787][ T6909] syz.1.241: attempt to access beyond end of device [ 232.915787][ T6909] loop1: rw=0, sector=36, nr_sectors = 2 limit=0 [ 232.929048][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.929122][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.944922][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.953204][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.961381][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.969269][ T6909] VFS: unable to find oldfs superblock on device loop1 [ 232.977794][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.987833][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.002876][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.012310][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.021559][ T6504] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 233.066142][ T6504] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 233.200845][ T5331] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 233.216533][ T6913] loop1: detected capacity change from 0 to 1024 [ 233.224748][ T5331] usb 3-1: selecting invalid altsetting 0 [ 233.231774][ T6913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.258675][ T6913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.316565][ T5331] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 233.328800][ T5331] usb 3-1: USB disconnect, device number 6 [ 233.937955][ T5411] udevd[5411]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.058088][ T6913] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.242: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 234.266740][ T5408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.355228][ T29] audit: type=1326 audit(1723797119.563:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.0.243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f371f3799b9 code=0x0 [ 236.147680][ T6940] loop2: detected capacity change from 0 to 128 [ 236.415038][ T6940] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 237.505229][ T6676] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.570911][ T6676] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.613856][ T6949] loop1: detected capacity change from 0 to 512 [ 237.639015][ T6949] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 237.662594][ T6676] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.675792][ T6949] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.247: iget: bad i_size value: -67835469387268086 [ 237.696996][ T6949] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.247: couldn't read orphan inode 15 (err -117) [ 237.745575][ T6949] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.758085][ T6949] ext2 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.776011][ T6949] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.247: Directory hole found for htree leaf block 0 [ 239.482432][ T6961] 8021q: VLANs not supported on lo [ 239.574272][ T6949] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.247: Directory hole found for htree leaf block 0 [ 239.591928][ T6949] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.247: Directory hole found for htree leaf block 0 [ 239.693849][ T6676] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.846228][ T5408] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 240.333513][ T6979] loop1: detected capacity change from 0 to 2048 [ 240.366018][ T6979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.377761][ T6676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.410230][ T6974] EXT4-fs error (device loop1): ext4_ext_precache:627: inode #2: comm syz.1.251: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 240.502913][ T6669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.517876][ T6669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.530787][ T6974] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.251: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 240.550083][ T6669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.580629][ T6676] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.588524][ T6979] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.251: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 240.628384][ T6669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.672910][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.680060][ T6294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.705104][ T6974] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.251: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 240.737257][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.744356][ T5401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.147646][ T5408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.712710][ T6669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.879471][ T6998] loop1: detected capacity change from 0 to 164 [ 242.672056][ T6669] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.689573][ T6997] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 242.801999][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.809160][ T5401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.850816][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.858817][ T5401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.152738][ T6669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.200150][ T6669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.438803][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 243.478534][ T7006] loop2: detected capacity change from 0 to 2048 [ 244.118388][ T7006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.282462][ T6676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.197599][ T6676] veth0_vlan: entered promiscuous mode [ 245.223632][ T5228] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 245.245615][ T6676] veth1_vlan: entered promiscuous mode [ 245.314053][ T6676] veth0_macvtap: entered promiscuous mode [ 245.333535][ T6676] veth1_macvtap: entered promiscuous mode [ 245.441258][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.490249][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.503515][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.520205][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.546397][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.558491][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.576809][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.618071][ T6676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.718280][ T6676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.747205][ T6676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.871302][ T6676] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.915209][ T6676] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.975331][ T6676] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.984092][ T6676] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.090689][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.172202][ T7044] loop2: detected capacity change from 0 to 1024 [ 246.241400][ T7044] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 246.347462][ T7044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.594690][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.236223][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.377352][ T6294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.424233][ T6294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.642241][ T5223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.851672][ T6669] veth0_vlan: entered promiscuous mode [ 248.864372][ T7068] netlink: 100 bytes leftover after parsing attributes in process `syz.3.202'. [ 249.936688][ T6669] veth1_vlan: entered promiscuous mode [ 250.276852][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 250.301462][ T7066] bridge_slave_1: left allmulticast mode [ 250.327296][ T7066] bridge_slave_1: left promiscuous mode [ 250.359335][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.046001][ T5331] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 251.176553][ T7092] vivid-007: kernel_thread() failed [ 251.443610][ T29] audit: type=1326 audit(1723797136.663:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f371f3799b9 code=0x0 [ 251.479648][ T7066] bridge_slave_0: left allmulticast mode [ 251.487945][ T7066] bridge_slave_0: left promiscuous mode [ 251.542122][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.607123][ T5331] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.669868][ T5331] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.728798][ T5331] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 251.758675][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 251.788377][ T5331] usb 4-1: SerialNumber: syz [ 251.794453][ T5228] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 251.813383][ T5331] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 251.832288][ T5331] usb-storage 4-1:1.0: USB Mass Storage device detected [ 251.857222][ T5331] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 251.883987][ T6669] veth0_macvtap: entered promiscuous mode [ 251.890654][ T5331] scsi host1: usb-storage 4-1:1.0 [ 251.973316][ T6669] veth1_macvtap: entered promiscuous mode [ 252.004222][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.016069][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.035964][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.069749][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.100783][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.103142][ T7119] loop3: detected capacity change from 0 to 512 [ 252.116581][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.132696][ T7120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.137986][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.172539][ T7119] EXT4-fs: Ignoring removed bh option [ 252.188783][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.209559][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.233883][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.252336][ T7119] EXT4-fs (loop3): orphan cleanup on readonly fs [ 252.266104][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.280619][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.291384][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.291860][ T7119] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 252.303412][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.333340][ T6669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.352781][ T6669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.418243][ T7119] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.266: invalid indirect mapped block 8 (level 2) [ 252.444455][ T6669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.471357][ T6669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.494896][ T7119] EXT4-fs (loop3): Remounting filesystem read-only [ 252.512304][ T7119] EXT4-fs (loop3): 1 truncate cleaned up [ 252.538080][ T7119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.589156][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.645709][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.714350][ T5366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.735732][ T5366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.901619][ T7120] loop2: detected capacity change from 0 to 32768 [ 253.938190][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 254.000118][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 254.106888][ T6676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.377812][ T5273] usb 4-1: USB disconnect, device number 5 [ 254.795757][ T5228] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 254.907695][ T7179] loop4: detected capacity change from 0 to 8 [ 255.483816][ T7180] loop3: detected capacity change from 0 to 512 [ 255.809644][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.821419][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.382200][ T7175] SQUASHFS error: Failed to read block 0x1ec: -5 [ 257.388660][ T7175] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 257.433265][ T7180] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 257.442531][ T7180] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 258.536599][ T7195] loop3: detected capacity change from 0 to 1024 [ 260.398989][ T6294] hfsplus: b-tree write err: -5, ino 4 [ 260.495743][ T5228] Bluetooth: hci4: unexpected cc 0x1407 length: 100 > 9 [ 260.504216][ T5228] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 260.588119][ T7196] net_ratelimit: 116 callbacks suppressed [ 260.588144][ T7196] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.685847][ T7200] mkiss: ax0: crc mode is auto. [ 260.752688][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.762555][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.776912][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.789474][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.803217][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 260.810891][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.906477][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 261.164646][ T7227] loop4: detected capacity change from 0 to 512 [ 261.300086][ T7227] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.288: bad orphan inode 17 [ 261.313238][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 261.359988][ T7227] ext4_test_bit(bit=16, block=4) = 1 [ 261.366601][ T7227] is_bad_inode(inode)=0 [ 261.391062][ T7227] NEXT_ORPHAN(inode)=0 [ 261.392735][ T7234] team0: entered promiscuous mode [ 261.404827][ T7227] max_ino=32 [ 261.412349][ T7227] i_nlink=1 [ 261.423782][ T7227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.473340][ T7234] team_slave_0: entered promiscuous mode [ 261.491863][ T7234] team_slave_1: entered promiscuous mode [ 261.532158][ T5401] bridge_slave_1: left allmulticast mode [ 261.551844][ T5401] bridge_slave_1: left promiscuous mode [ 261.565412][ T29] audit: type=1400 audit(1723797146.793:140): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A0A994F13051CA817FA97844BAA977532BDAD5A3D174B3B1A18F96A11DC04562D34DE812A8A50C8704F71C73A1FC74446E8CF9241B377C91B0B53F5534161F48AC6622327EB36968AF0475A7B4630BCD33388C7DCC896E8A18B2E4167D6E25801CA3608AFFEF1FD22809551 pid=7232 comm="syz.3.289" [ 261.571548][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.622831][ T5401] bridge_slave_0: left allmulticast mode [ 261.628870][ T5401] bridge_slave_0: left promiscuous mode [ 261.720069][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.023267][ T7249] input: syz1 as /devices/virtual/input/input11 [ 262.223383][ T7249] EXT4-fs error (device loop4): __ext4_iget:4982: inode #12: block 2: comm syz.4.288: invalid block [ 262.279255][ T7250] xt_hashlimit: max too large, truncated to 1048576 [ 262.328742][ T7250] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 13: comm syz.4.288: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 262.886799][ T6669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.916008][ T5228] Bluetooth: hci1: command tx timeout [ 264.517960][ T5228] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 264.527303][ T5228] Bluetooth: hci4: Injecting HCI hardware error event [ 264.536855][ T5228] Bluetooth: hci4: hardware error 0x00 [ 264.995201][ T54] Bluetooth: hci1: command tx timeout [ 265.413401][ T5401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.428824][ T5401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.442930][ T5401] bond0 (unregistering): Released all slaves [ 265.456747][ T7240] team_slave_0: entered allmulticast mode [ 265.482491][ T7240] team0: Port device team_slave_0 removed [ 265.577721][ T7233] team0: left promiscuous mode [ 265.719406][ T7293] loop4: detected capacity change from 0 to 1024 [ 265.895985][ T7233] team_slave_1: left promiscuous mode [ 266.557361][ T12] hfsplus: b-tree write err: -5, ino 4 [ 267.205458][ T5228] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 267.212253][ T54] Bluetooth: hci1: command tx timeout [ 268.177577][ T29] audit: type=1326 audit(1723797153.273:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c021799b9 code=0x7ffc0000 [ 268.926833][ T5273] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 268.984687][ T29] audit: type=1326 audit(1723797153.273:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c021799b9 code=0x7ffc0000 [ 269.007103][ T29] audit: type=1326 audit(1723797153.273:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c02178350 code=0x7ffc0000 [ 269.035359][ T29] audit: type=1326 audit(1723797153.273:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c021799b9 code=0x7ffc0000 [ 269.061130][ T29] audit: type=1326 audit(1723797153.273:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c021799b9 code=0x7ffc0000 [ 269.110682][ T29] audit: type=1326 audit(1723797153.273:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6c021799b9 code=0x7ffc0000 [ 269.163875][ T5401] hsr_slave_0: left promiscuous mode [ 269.175853][ T5401] hsr_slave_1: left promiscuous mode [ 269.175943][ T5273] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 269.193625][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.215171][ T5273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 269.226809][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.238075][ T54] Bluetooth: hci1: command tx timeout [ 269.243583][ T29] audit: type=1326 audit(1723797153.273:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c021799b9 code=0x7ffc0000 [ 269.487441][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 269.500527][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1289, setting to 1024 [ 270.216968][ T7320] loop3: detected capacity change from 0 to 512 [ 270.233266][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.244254][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.295405][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.351214][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.363631][ T29] audit: type=1326 audit(1723797153.273:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c021799b9 code=0x7ffc0000 [ 270.363665][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.397103][ T7320] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.300: bad orphan inode 17 [ 270.416418][ T7320] ext4_test_bit(bit=16, block=4) = 1 [ 270.430570][ T7320] is_bad_inode(inode)=0 [ 270.468322][ T7320] NEXT_ORPHAN(inode)=0 [ 270.472448][ T7320] max_ino=32 [ 270.477530][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 270.507890][ T7320] i_nlink=1 [ 270.512015][ T7320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.534895][ T29] audit: type=1326 audit(1723797153.273:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c021799b9 code=0x7ffc0000 [ 270.555159][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.596536][ T29] audit: type=1326 audit(1723797153.273:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.3.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c021799b9 code=0x7ffc0000 [ 270.626204][ T5273] usb 2-1: string descriptor 0 read error: -71 [ 270.645365][ T5273] usb 2-1: New USB device found, idVendor=0f11, idProduct=1200, bcdDevice=35.3d [ 270.686482][ T7328] loop1: detected capacity change from 0 to 1024 [ 270.693292][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.747782][ T7328] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 270.781524][ T5273] usb 2-1: config 0 descriptor?? [ 270.793201][ T5273] usb 2-1: can't set config #0, error -71 [ 270.848131][ T5273] usb 2-1: USB disconnect, device number 4 [ 270.999111][ T7328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.084746][ T7333] input: syz1 as /devices/virtual/input/input12 [ 271.316658][ T7336] EXT4-fs error (device loop3): __ext4_iget:4982: inode #12: block 2: comm syz.3.300: invalid block [ 271.473424][ T7333] xt_hashlimit: max too large, truncated to 1048576 [ 272.004499][ T7333] EXT4-fs error (device loop3): ext4_find_dest_de:2067: inode #2: block 13: comm syz.3.300: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 272.309085][ T6676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.512244][ T7339] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.302: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 272.687274][ T7338] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.302: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 272.764036][ T7341] loop3: detected capacity change from 0 to 1024 [ 272.783854][ T7341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 272.870358][ T7341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.125458][ T5408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.297253][ T7348] loop1: detected capacity change from 0 to 8 [ 273.304108][ T7348] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾' [ 273.365593][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 273.671582][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 273.779580][ T8] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 273.791028][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.800020][ T8] usb 1-1: Product: syz [ 273.804725][ T8] usb 1-1: Manufacturer: syz [ 273.810181][ T8] usb 1-1: SerialNumber: syz [ 273.849054][ T8] usb 1-1: config 0 descriptor?? [ 273.883192][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 273.900048][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 273.926029][ T6676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.133633][ T5401] team0 (unregistering): Port device team_slave_1 removed [ 274.158339][ T7355] loop3: detected capacity change from 0 to 256 [ 274.260905][ T5401] team0 (unregistering): Port device team_slave_0 removed [ 274.337434][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 274.337458][ T29] audit: type=1800 audit(1723797159.553:174): pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.306" name="file2" dev="loop3" ino=1048639 res=0 errno=0 [ 274.448041][ T8] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 274.627896][ T8] usb 1-1: device descriptor read/64, error -71 [ 275.132386][ T8] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 275.160349][ T7214] chnl_net:caif_netlink_parms(): no params data found [ 275.471657][ T7360] loop1: detected capacity change from 0 to 1024 [ 275.495514][ T8] usb 1-1: device descriptor read/64, error -71 [ 275.775534][ T8] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 276.010436][ T8] usb 1-1: device descriptor read/8, error -71 [ 276.046259][ T6298] hfsplus: b-tree write err: -5, ino 4 [ 276.221112][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.428517][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.445872][ T7214] bridge_slave_0: entered allmulticast mode [ 276.628611][ T7214] bridge_slave_0: entered promiscuous mode [ 277.197365][ T8] usb 1-1: USB disconnect, device number 7 [ 278.371369][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.655042][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.662329][ T7214] bridge_slave_1: entered allmulticast mode [ 279.698872][ T7214] bridge_slave_1: entered promiscuous mode [ 279.959969][ T7214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.168542][ T7214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.548184][ T7388] loop3: detected capacity change from 0 to 1024 [ 281.082811][ T29] audit: type=1326 audit(1723797166.303:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.1.314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ffab799b9 code=0x0 [ 281.249206][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.260967][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.272674][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.281287][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.290232][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.298345][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.340850][ T6279] hfsplus: b-tree write err: -5, ino 4 [ 281.370421][ T7214] team0: Port device team_slave_0 added [ 281.481466][ T7214] team0: Port device team_slave_1 added [ 282.286343][ T7401] loop3: detected capacity change from 0 to 1024 [ 282.350552][ T7401] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 282.370699][ T7401] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 282.383935][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.392156][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.418126][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.425681][ T7401] jbd2_journal_init_inode: Cannot locate journal superblock [ 282.443214][ T7401] EXT4-fs (loop3): Could not load journal inode [ 282.447082][ T7214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.738872][ T7401] loop3: detected capacity change from 0 to 1024 [ 282.757708][ T7401] EXT4-fs (loop3): first meta block group too large: 7 (group descriptor block count 1) [ 282.791892][ T7418] loop1: detected capacity change from 0 to 1024 [ 282.889662][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.087236][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.323319][ T5228] Bluetooth: hci2: command tx timeout [ 283.436721][ T7214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.548936][ T12] hfsplus: b-tree write err: -5, ino 4 [ 284.020510][ T7401] loop3: detected capacity change from 0 to 1024 [ 284.687084][ T7401] syz.3.316: attempt to access beyond end of device [ 284.687084][ T7401] loop3: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 284.691414][ T7401] syz.3.316: attempt to access beyond end of device [ 284.691414][ T7401] loop3: rw=34817, sector=0, nr_sectors = 2109 limit=1024 [ 284.693269][ T7401] syz.3.316: attempt to access beyond end of device [ 284.693269][ T7401] loop3: rw=34817, sector=2109, nr_sectors = 451 limit=1024 [ 285.357881][ T5401] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.373206][ T5228] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 285.395351][ T5228] Bluetooth: hci2: command tx timeout [ 285.462612][ T7432] loop3: detected capacity change from 0 to 4096 [ 285.506151][ T7432] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 285.538317][ T7432] ntfs3: loop3: $Secure::$SDH is corrupted. [ 285.538408][ T7432] ntfs3: loop3: Failed to initialize $Secure (-22). [ 285.609684][ T7214] hsr_slave_0: entered promiscuous mode [ 285.655506][ T7214] hsr_slave_1: entered promiscuous mode [ 285.688015][ T7435] netlink: 'syz.1.323': attribute type 11 has an invalid length. [ 285.724684][ T7443] loop3: detected capacity change from 0 to 1024 [ 285.733690][ T7443] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 285.750880][ T7443] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 285.779019][ T5401] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.782278][ T7443] EXT4-fs (loop3): orphan cleanup on readonly fs [ 285.818507][ T7443] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5807: Corrupt filesystem [ 285.845426][ T7443] EXT4-fs error (device loop3): ext4_quota_write:7220: inode #3: comm syz.3.325: mark_inode_dirty error [ 285.869237][ T7443] Quota error (device loop3): write_blk: dquota write failed [ 285.881072][ T7443] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 285.910663][ T7443] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.325: Failed to acquire dquot type 0 [ 285.922551][ T7443] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5807: Corrupt filesystem [ 285.935160][ T6504] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 285.942058][ T7443] EXT4-fs error (device loop3): ext4_ext_truncate:4432: inode #15: comm syz.3.325: mark_inode_dirty error [ 285.959106][ T5401] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.979569][ T7443] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5807: Corrupt filesystem [ 286.043929][ T7443] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 286.061760][ T5228] Bluetooth: hci3: connection err: -111 [ 286.069941][ T7443] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5807: Corrupt filesystem [ 286.088806][ T7443] EXT4-fs error (device loop3): ext4_truncate:4238: inode #15: comm syz.3.325: mark_inode_dirty error [ 286.114030][ T7443] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 286.118838][ T6504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 286.134327][ T6504] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.146955][ T6504] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 286.152268][ T7443] EXT4-fs (loop3): 1 truncate cleaned up [ 286.156346][ T6504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 286.156375][ T6504] usb 1-1: SerialNumber: syz [ 286.179284][ T5401] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.184365][ T6504] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 286.210044][ T6504] usb-storage 1-1:1.0: USB Mass Storage device detected [ 286.222848][ T6504] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 286.238147][ T6504] scsi host1: usb-storage 1-1:1.0 [ 286.266204][ T7443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 286.382456][ T7392] chnl_net:caif_netlink_parms(): no params data found [ 286.426197][ T6676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.826122][ T6509] usb 1-1: USB disconnect, device number 8 [ 286.892129][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 286.904662][ T7473] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 286.912600][ T6504] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 287.026886][ T5401] bridge_slave_1: left allmulticast mode [ 287.032579][ T5401] bridge_slave_1: left promiscuous mode [ 287.044734][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.053773][ T5401] bridge_slave_0: left allmulticast mode [ 287.060208][ T5401] bridge_slave_0: left promiscuous mode [ 287.066150][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.095362][ T6504] usb 2-1: Using ep0 maxpacket: 32 [ 287.107165][ T6504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.122801][ T6504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 287.134302][ T6504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 287.145764][ T6504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 287.158850][ T6504] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 287.168389][ T6504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.176582][ T6504] usb 2-1: Product: syz [ 287.187958][ T6504] usb 2-1: Manufacturer: syz [ 287.194657][ T6504] usb 2-1: SerialNumber: syz [ 287.202358][ T6504] usb 2-1: config 0 descriptor?? [ 287.212069][ T6504] usb 2-1: no audio or video endpoints found [ 287.384821][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'. [ 287.441707][ T46] usb 2-1: USB disconnect, device number 5 [ 287.475977][ T5228] Bluetooth: hci2: command tx timeout [ 287.603575][ T7492] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 288.023241][ T5401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.061942][ T7500] loop3: detected capacity change from 0 to 8 [ 288.115722][ T7500] SQUASHFS error: Failed to read block 0x1ec: -5 [ 288.122183][ T7500] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 288.352781][ T5401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.629426][ T5401] bond0 (unregistering): Released all slaves [ 288.688990][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.705277][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.722372][ T7502] loop1: detected capacity change from 0 to 1024 [ 288.742407][ T7392] bridge_slave_0: entered allmulticast mode [ 288.751486][ T7392] bridge_slave_0: entered promiscuous mode [ 288.767731][ T7502] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 288.891972][ T7502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.245401][ T5312] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 289.280601][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.366464][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.422743][ T7392] bridge_slave_1: entered allmulticast mode [ 289.462372][ T5312] usb 1-1: config index 0 descriptor too short (expected 44, got 36) [ 289.472183][ T5312] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 289.480657][ T5312] usb 1-1: config 0 has no interface number 0 [ 289.482826][ T7392] bridge_slave_1: entered promiscuous mode [ 289.489162][ T5312] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.504748][ T5312] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.517544][ T5312] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 289.528119][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.563741][ T5312] usb 1-1: config 0 descriptor?? [ 289.570401][ T5228] Bluetooth: hci2: command tx timeout [ 289.647330][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 289.837523][ T5408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.910618][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.940535][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.970073][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 289.983018][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.000672][ T8] usb 4-1: SerialNumber: syz [ 290.029665][ T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 290.038958][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.058308][ T8] usb-storage 4-1:1.0: USB Mass Storage device detected [ 290.073536][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.087880][ T7516] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 290.100516][ T8] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 290.103754][ T5312] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 290.125233][ T8] scsi host1: usb-storage 4-1:1.0 [ 290.136193][ T7516] netlink: 'syz.1.341': attribute type 2 has an invalid length. [ 290.145346][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 290.166732][ T5312] uclogic 0003:5543:0781.0002: unknown main item tag 0x0 [ 290.176267][ T5312] uclogic 0003:5543:0781.0002: item fetching failed at offset 2/5 [ 290.184739][ T5312] uclogic 0003:5543:0781.0002: parse failed [ 290.204118][ T5401] hsr_slave_0: left promiscuous mode [ 290.204178][ T5312] uclogic 0003:5543:0781.0002: probe with driver uclogic failed with error -22 [ 290.225418][ T5401] hsr_slave_1: left promiscuous mode [ 290.265897][ T7510] loop3: detected capacity change from 0 to 512 [ 290.272868][ T7510] EXT4-fs: Ignoring removed bh option [ 290.289409][ T7510] EXT4-fs (loop3): orphan cleanup on readonly fs [ 290.298795][ T7510] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 290.307272][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.314726][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.336117][ T7510] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.339: invalid indirect mapped block 8 (level 2) [ 290.336714][ T5401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.361975][ T5401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.388036][ T5401] veth1_macvtap: left promiscuous mode [ 290.393708][ T5401] veth0_macvtap: left promiscuous mode [ 290.399191][ T7523] netlink: 'syz.1.342': attribute type 3 has an invalid length. [ 290.400387][ T5401] veth1_vlan: left promiscuous mode [ 290.411208][ T7510] EXT4-fs (loop3): Remounting filesystem read-only [ 290.412828][ T5401] veth0_vlan: left promiscuous mode [ 290.428074][ T7523] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.342'. [ 290.437780][ T7510] EXT4-fs (loop3): 1 truncate cleaned up [ 290.444439][ T7510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.466101][ T7506] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 290.474301][ T7506] netlink: 56 bytes leftover after parsing attributes in process `syz.0.336'. [ 291.027373][ T5401] team0 (unregistering): Port device team_slave_1 removed [ 291.080443][ T5401] team0 (unregistering): Port device team_slave_0 removed [ 291.595023][ C1] hrtimer: interrupt took 142259 ns [ 291.770379][ T7392] team0: Port device team_slave_0 added [ 291.802056][ T46] usb 1-1: USB disconnect, device number 9 [ 291.808269][ T7392] team0: Port device team_slave_1 added [ 291.977049][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.984079][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.064989][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.096313][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.103458][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.132107][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.289956][ T7537] netlink: 44 bytes leftover after parsing attributes in process `syz.1.344'. [ 292.327344][ T7392] hsr_slave_0: entered promiscuous mode [ 292.370894][ T7392] hsr_slave_1: entered promiscuous mode [ 292.397690][ T7392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.406194][ T7392] Cannot create hsr debugfs directory [ 292.436021][ T7214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.466877][ T7214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.529612][ T6676] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.545599][ T7214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.588526][ T7214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.777111][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 293.015716][ T7519] usb 4-1: reset full-speed USB device number 6 using dummy_hcd [ 293.075654][ T7519] usb 4-1: device reset changed ep0 maxpacket size! [ 293.117807][ T6504] usb 4-1: USB disconnect, device number 6 [ 293.219409][ T5228] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 293.306935][ T7567] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 293.365491][ T6504] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 293.446175][ T7569] ieee802154 phy0 wpan0: encryption failed: -90 [ 293.451961][ T7214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.566240][ T6504] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.592652][ T7574] loop1: detected capacity change from 0 to 1024 [ 293.603410][ T6504] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 293.620172][ T7574] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 293.641356][ T7576] netlink: 'syz.0.354': attribute type 1 has an invalid length. [ 293.651935][ T6504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 10333, setting to 64 [ 293.658007][ T7576] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.354'. [ 293.679990][ T7576] netlink: 'syz.0.354': attribute type 1 has an invalid length. [ 293.682302][ T6504] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.716250][ T7574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.731854][ T6504] usb 4-1: New USB device found, idVendor=1199, idProduct=0024, bcdDevice=39.0f [ 293.741999][ T6504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.751006][ T6504] usb 4-1: Product: syz [ 293.756680][ T6504] usb 4-1: Manufacturer: syz [ 293.761316][ T6504] usb 4-1: SerialNumber: syz [ 293.778391][ T6504] usb 4-1: config 0 descriptor?? [ 293.784304][ T7549] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.794794][ T6504] sierra 4-1:0.0: Sierra USB modem converter detected [ 293.853188][ T7214] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.281951][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.289582][ T5401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.471410][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.478598][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.509993][ T6504] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 294.535616][ T7574] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.353: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 294.554587][ T7574] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.353: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 294.632181][ T6504] usb 4-1: USB disconnect, device number 7 [ 294.715208][ T6509] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 294.726776][ T6504] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 294.750247][ T5408] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.764835][ T6504] sierra 4-1:0.0: device disconnected [ 294.863684][ T7392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.899156][ T7392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.917557][ T6509] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.941241][ T6509] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.959339][ T6509] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 294.972145][ T7392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.984547][ T6509] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 295.004470][ T6509] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 295.023742][ T6509] usb 1-1: Manufacturer: syz [ 295.036350][ T7392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.056043][ T6509] usb 1-1: SerialNumber: syz [ 295.127531][ T7600] netlink: 'syz.3.357': attribute type 21 has an invalid length. [ 295.507865][ T7604] loop3: detected capacity change from 0 to 32768 [ 295.515545][ T5312] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 295.529675][ T6509] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 295.544834][ T6509] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input13 [ 295.567965][ T7604] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.583881][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 295.590913][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 295.597974][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 295.604987][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 295.611971][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 295.618962][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 295.625958][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 295.632961][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 295.639774][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 295.660279][ T7214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.696945][ T6509] usb 1-1: USB disconnect, device number 10 [ 295.700555][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.746860][ T5312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.760676][ T5312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 295.777801][ T5312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 295.787308][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.796809][ T5312] usb 2-1: SerialNumber: syz [ 295.809214][ T5312] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 295.819143][ T5312] usb-storage 2-1:1.0: USB Mass Storage device detected [ 295.832799][ T5312] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 295.843639][ T5312] scsi host1: usb-storage 2-1:1.0 [ 295.860679][ T7604] XFS (loop3): Ending clean mount [ 295.881291][ T7604] XFS (loop3): Quotacheck needed: Please wait. [ 295.942732][ T7392] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.001197][ T7604] XFS (loop3): Quotacheck: Done. [ 296.026632][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.033806][ T5401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.217111][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.224212][ T5401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.363305][ T7214] veth0_vlan: entered promiscuous mode [ 296.433401][ T7214] veth1_vlan: entered promiscuous mode [ 300.033035][ T7214] veth0_macvtap: entered promiscuous mode [ 300.054043][ T7214] veth1_macvtap: entered promiscuous mode [ 300.128874][ T5312] usb 2-1: USB disconnect, device number 6 [ 300.167036][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.189862][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.210022][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.221042][ T7642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.361'. [ 300.230918][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.243869][ T7642] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 300.255539][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.266644][ T7642] netlink: 'syz.0.361': attribute type 2 has an invalid length. [ 300.274362][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 300.284393][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.298001][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.373038][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.440999][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.493971][ T6676] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 300.505154][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.537902][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.555421][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.572382][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.584628][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.596907][ T7214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.612094][ T7214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.620938][ T7214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.630499][ T7214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.663326][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.796712][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.813447][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.879750][ T6279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.896799][ T6279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.936582][ T5312] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 301.167190][ T5312] usb 2-1: Using ep0 maxpacket: 8 [ 301.193794][ T5312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.392361][ T5312] usb 2-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=89.36 [ 301.402412][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.509895][ T5312] usb 2-1: Product: syz [ 301.514278][ T5312] usb 2-1: Manufacturer: syz [ 301.519173][ T5312] usb 2-1: SerialNumber: syz [ 301.581050][ T5312] usb 2-1: config 0 descriptor?? [ 301.604757][ T5312] usb-storage 2-1:0.0: USB Mass Storage device detected [ 301.861807][ T8] usb 2-1: USB disconnect, device number 7 [ 301.967877][ T7392] veth0_vlan: entered promiscuous mode [ 302.023154][ T7392] veth1_vlan: entered promiscuous mode [ 303.226790][ T7392] veth0_macvtap: entered promiscuous mode [ 303.355841][ T7392] veth1_macvtap: entered promiscuous mode [ 303.447243][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.498664][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.648715][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.665494][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.681504][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.772223][ T7688] loop2: detected capacity change from 0 to 8 [ 303.804352][ T7688] SQUASHFS error: Failed to read block 0x1ec: -5 [ 303.810851][ T7688] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 303.942201][ T7690] loop3: detected capacity change from 0 to 8 [ 304.147543][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.307150][ T7690] SQUASHFS error: Failed to read block 0x1ec: -5 [ 305.313669][ T7690] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 305.422479][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.289176][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.383927][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.430073][ T7696] loop1: detected capacity change from 0 to 512 [ 306.487388][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.565015][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.574893][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.599821][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.614975][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.641701][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.670192][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.709623][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.746393][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.789172][ T7392] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.840989][ T7392] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.876817][ T7392] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.925273][ T7392] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.155177][ T5312] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 307.276609][ T6288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.284629][ T6288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.362196][ T7718] netlink: 'syz.2.373': attribute type 1 has an invalid length. [ 307.375284][ T5312] usb 4-1: Using ep0 maxpacket: 8 [ 307.382381][ T5312] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 307.392820][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.406713][ T6284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.414577][ T6284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.470380][ T5312] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 307.480334][ T7718] netlink: 224 bytes leftover after parsing attributes in process `syz.2.373'. [ 307.522575][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 307.538987][ T5312] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 307.550691][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.592561][ T5312] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 307.653747][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 307.756986][ T5312] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 307.764577][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.949391][ T7727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.992071][ T5312] usb 4-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 308.033285][ T5312] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 308.092862][ T5312] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 308.119098][ T5312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.155211][ T5312] usb 4-1: Product: syz [ 308.159524][ T5312] usb 4-1: Manufacturer: syz [ 308.173430][ T5312] usb 4-1: SerialNumber: syz [ 308.226871][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 308.412609][ T5312] adutux 4-1:168.0: interrupt endpoints not found [ 308.436774][ T46] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 308.477725][ T5312] usb 4-1: USB disconnect, device number 8 [ 308.492588][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.533853][ T46] usb 5-1: config 0 has no interface number 0 [ 308.567455][ T46] usb 5-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 308.701372][ T46] usb 5-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 309.790267][ T46] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 311.478092][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.500233][ T46] usb 5-1: Product: syz [ 311.504452][ T46] usb 5-1: Manufacturer: syz [ 311.509481][ T46] usb 5-1: SerialNumber: syz [ 311.536633][ T46] usb 5-1: config 0 descriptor?? [ 311.625043][ T46] usb 5-1: can't set config #0, error -71 [ 311.652721][ T46] usb 5-1: USB disconnect, device number 3 [ 311.753660][ T7741] openvswitch: netlink: Port -2 exceeds max allowable 65535 [ 311.848756][ T7742] IPv6: sit1: Disabled Multicast RS [ 311.928593][ T7747] loop1: detected capacity change from 0 to 128 [ 312.007882][ T7751] netlink: 'syz.3.376': attribute type 11 has an invalid length. [ 312.025845][ T7747] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.059116][ T7754] netlink: 'syz.4.380': attribute type 10 has an invalid length. [ 312.091161][ T7758] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 312.114255][ T7747] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 313.064725][ T7768] loop2: detected capacity change from 0 to 8 [ 313.237059][ T5408] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.251819][ T7768] SQUASHFS error: Failed to read block 0x1ec: -5 [ 314.858660][ T29] audit: type=1326 audit(1723797200.073:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.4.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff372b799b9 code=0x0 [ 314.995776][ T7768] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 315.070684][ T7786] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 315.162298][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 315.193788][ T7786] loop4: detected capacity change from 0 to 256 [ 315.226296][ T7786] exfat: Unknown parameter '' [ 315.255956][ T7788] netlink: 'syz.1.388': attribute type 21 has an invalid length. [ 315.291125][ T7788] netlink: 156 bytes leftover after parsing attributes in process `syz.1.388'. [ 315.368190][ T46] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 315.466897][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.522138][ T46] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 315.557138][ T46] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 315.574821][ T46] usb 1-1: Manufacturer: syz [ 315.622982][ T46] usb 1-1: config 0 descriptor?? [ 315.664393][ T7796] netlink: 'syz.2.392': attribute type 10 has an invalid length. [ 315.705870][ T7796] team0: Device hsr_slave_0 failed to register rx_handler [ 315.795860][ T46] rc_core: IR keymap rc-hauppauge not found [ 315.801967][ T46] Registered IR keymap rc-empty [ 315.831341][ T46] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 315.876536][ T5275] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 315.887687][ T46] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 315.899003][ T7804] netlink: 80 bytes leftover after parsing attributes in process `syz.2.395'. [ 315.932351][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 315.984658][ T7804] netlink: 'syz.2.395': attribute type 1 has an invalid length. [ 316.379972][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 316.437387][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 316.437475][ T5275] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 316.437505][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.465769][ T7814] loop3: detected capacity change from 0 to 1024 [ 316.519177][ T5275] usb 2-1: config 0 descriptor?? [ 316.557723][ T7815] loop4: detected capacity change from 0 to 1024 [ 316.623230][ T7817] loop2: detected capacity change from 0 to 1024 [ 316.639772][ T7817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 316.669377][ T7817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.738598][ T5275] ath6kl: Failed to submit usb control message: -71 [ 316.746157][ T5275] ath6kl: unable to send the bmi data to the device: -71 [ 316.753536][ T5275] ath6kl: Unable to send get target info: -71 [ 316.763017][ T5275] ath6kl: Failed to init ath6kl core: -71 [ 316.770438][ T5275] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 316.866680][ T5275] usb 2-1: USB disconnect, device number 8 [ 317.239107][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.249974][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.363462][ T7821] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.398: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 317.399020][ T6288] hfsplus: b-tree write err: -5, ino 4 [ 317.453487][ T35] hfsplus: b-tree write err: -5, ino 4 [ 317.534389][ T7820] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.398: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 317.798949][ T6504] usb 1-1: USB disconnect, device number 11 [ 317.910636][ T7214] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.075977][ T7832] netlink: 'syz.4.400': attribute type 11 has an invalid length. [ 318.158621][ T7834] netlink: 'syz.3.404': attribute type 21 has an invalid length. [ 318.203689][ T7834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.404'. [ 318.319380][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 318.455318][ T7848] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.572692][ T7854] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 318.742626][ T7863] loop2: detected capacity change from 0 to 128 [ 318.916303][ T7863] hpfs: Bad magic ... probably not HPFS [ 318.958927][ T7871] netlink: 'syz.4.418': attribute type 11 has an invalid length. [ 319.679524][ T7880] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 319.796984][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 319.864676][ T7885] netlink: 'syz.0.423': attribute type 1 has an invalid length. [ 319.872679][ T7885] netlink: 113592 bytes leftover after parsing attributes in process `syz.0.423'. [ 319.882898][ T7885] netlink: 9 bytes leftover after parsing attributes in process `syz.0.423'. [ 319.963231][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 320.005056][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 320.026297][ T7893] ------------[ cut here ]------------ [ 320.032143][ T7893] WARNING: CPU: 0 PID: 7893 at include/linux/memcontrol.h:373 folio_memcg+0x111/0x220 [ 320.040013][ T46] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 320.042382][ T7893] Modules linked in: [ 320.054234][ T7893] CPU: 0 UID: 0 PID: 7893 Comm: syz.2.424 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 320.062910][ T46] usb 2-1: config 0 has no interface number 0 [ 320.065322][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 320.081901][ T7893] RIP: 0010:folio_memcg+0x111/0x220 [ 320.087747][ T7893] Code: 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 e2 2f f8 ff 48 8b 1b 48 89 d8 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 90 <0f> 0b 90 eb ce 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 55 ff ff ff [ 320.107599][ T7893] RSP: 0018:ffffc9000eefef40 EFLAGS: 00010246 [ 320.113753][ T7893] RAX: 0000000000000000 RBX: ffff88807beb5580 RCX: 0000000080000000 [ 320.117793][ T46] usb 2-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.121910][ T7893] RDX: 0000000000000000 RSI: ffffffff8c0adfc0 RDI: ffffffff8c60a8c0 [ 320.140720][ T7893] RBP: ffffea0001a68008 R08: ffffffff9018c5af R09: 1ffffffff20318b5 [ 320.148813][ T7893] R10: dffffc0000000000 R11: fffffbfff20318b6 R12: dffffc0000000000 [ 320.156950][ T7893] R13: 0000000001000108 R14: ffffea0001a68000 R15: ffffea0001a68030 [ 320.157068][ T46] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 320.165758][ T7893] FS: 00007fcc4b9ff6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 320.184952][ T7893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.191587][ T7893] CR2: 00007f6c022e52d8 CR3: 000000006e980000 CR4: 00000000003506f0 [ 320.199731][ T7893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.207818][ T7893] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.215896][ T7893] Call Trace: [ 320.219212][ T7893] [ 320.222184][ T7893] ? __warn+0x163/0x4e0 [ 320.223256][ T46] usb 2-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 320.226424][ T7893] ? folio_memcg+0x111/0x220 [ 320.226457][ T7893] ? report_bug+0x2b3/0x500 [ 320.226486][ T7893] ? folio_memcg+0x111/0x220 [ 320.226513][ T7893] ? handle_bug+0x60/0x90 [ 320.226547][ T7893] ? exc_invalid_op+0x1a/0x50 [ 320.226582][ T7893] ? asm_exc_invalid_op+0x1a/0x20 [ 320.226616][ T7893] ? folio_memcg+0x111/0x220 [ 320.226643][ T7893] split_page_memcg+0x58/0x3f0 [ 320.226675][ T7893] ? split_page+0x205/0x230 [ 320.226699][ T7893] __vmalloc_node_range_noprof+0xa63/0x1400 [ 320.226751][ T7893] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.273285][ T46] usb 2-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 320.277040][ T7893] ? rcu_is_watching+0x15/0xb0 [ 320.284640][ T46] usb 2-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 320.287009][ T7893] ? trace_kmalloc+0x1f/0xd0 [ 320.299253][ T7897] netlink: 6 bytes leftover after parsing attributes in process `syz.4.427'. [ 320.304618][ T7893] ? __kmalloc_node_noprof+0x247/0x440 [ 320.310167][ T46] usb 2-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.319502][ T7893] ? __kvmalloc_node_noprof+0x72/0x1b0 [ 320.319540][ T7893] __kvmalloc_node_noprof+0x142/0x1b0 [ 320.319568][ T7893] ? nf_tables_newset+0x1743/0x2ea0 [ 320.325007][ T7897] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.427'. [ 320.332946][ T7893] nf_tables_newset+0x1743/0x2ea0 [ 320.341575][ T46] usb 2-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 320.351472][ T7893] ? __pfx_nf_tables_newset+0x10/0x10 [ 320.351542][ T7893] ? __nla_parse+0x40/0x60 [ 320.351579][ T7893] nfnetlink_rcv+0x14dc/0x2ad0 [ 320.358952][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.362778][ T7893] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 320.382865][ T46] usb 2-1: Product: syz [ 320.383201][ T7893] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.404468][ T46] usb 2-1: Manufacturer: syz [ 320.407416][ T7893] ? skb_clone+0x240/0x390 [ 320.407452][ T7893] ? __pfx_lock_release+0x10/0x10 [ 320.407502][ T7893] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.407538][ T7893] netlink_unicast+0x7f6/0x990 [ 320.407575][ T7893] ? __pfx_netlink_unicast+0x10/0x10 [ 320.437341][ T46] usb 2-1: SerialNumber: syz [ 320.439470][ T7893] ? __virt_addr_valid+0x183/0x530 [ 320.460334][ T46] usb 2-1: config 0 descriptor?? [ 320.464496][ T7893] ? __check_object_size+0x49c/0x900 [ 320.464542][ T7893] ? bpf_lsm_netlink_send+0x9/0x10 [ 320.477700][ T7858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 320.481097][ T7893] netlink_sendmsg+0x8e4/0xcb0 [ 320.487857][ T7858] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 320.494036][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.504437][ T46] ipaq 2-1:0.19: PocketPC PDA converter detected [ 320.506019][ T7893] ? __import_iovec+0x536/0x820 [ 320.506062][ T7893] ? aa_sock_msg_perm+0x91/0x160 [ 320.506098][ T7893] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 320.506134][ T7893] ? security_socket_sendmsg+0x87/0xb0 [ 320.514130][ T46] usb 2-1: active config #0 != 1 ?? [ 320.517810][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.517851][ T7893] __sock_sendmsg+0x221/0x270 [ 320.517886][ T7893] ____sys_sendmsg+0x525/0x7d0 [ 320.517922][ T7893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.564756][ T7893] __sys_sendmsg+0x298/0x390 [ 320.569479][ T7893] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.575365][ T7893] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.581762][ T7893] ? do_syscall_64+0x100/0x230 [ 320.587293][ T7893] ? do_syscall_64+0xb6/0x230 [ 320.592034][ T7893] do_syscall_64+0xf3/0x230 [ 320.596719][ T7893] ? clear_bhb_loop+0x35/0x90 [ 320.601413][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.607411][ T7893] RIP: 0033:0x7fcc4bf799b9 [ 320.611860][ T7893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.631777][ T7893] RSP: 002b:00007fcc4b9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.640311][ T7893] RAX: ffffffffffffffda RBX: 00007fcc4c115f80 RCX: 00007fcc4bf799b9 [ 320.648481][ T7893] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 320.656562][ T7893] RBP: 00007fcc4bfe78d8 R08: 0000000000000000 R09: 0000000000000000 [ 320.664657][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.672711][ T7893] R13: 0000000000000000 R14: 00007fcc4c115f80 R15: 00007fffdb92c7a8 [ 320.682427][ T7893] [ 320.685595][ T7893] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 320.693005][ T7893] CPU: 0 UID: 0 PID: 7893 Comm: syz.2.424 Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 320.703092][ T7893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 320.713209][ T7893] Call Trace: [ 320.716522][ T7893] [ 320.719483][ T7893] dump_stack_lvl+0x241/0x360 [ 320.724206][ T7893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.729463][ T7893] ? __pfx__printk+0x10/0x10 [ 320.734101][ T7893] ? vscnprintf+0x5d/0x90 [ 320.738464][ T7893] panic+0x349/0x870 [ 320.742403][ T7893] ? __warn+0x172/0x4e0 [ 320.746600][ T7893] ? __pfx_panic+0x10/0x10 [ 320.751093][ T7893] __warn+0x346/0x4e0 [ 320.755113][ T7893] ? folio_memcg+0x111/0x220 [ 320.759751][ T7893] report_bug+0x2b3/0x500 [ 320.764124][ T7893] ? folio_memcg+0x111/0x220 [ 320.768755][ T7893] handle_bug+0x60/0x90 [ 320.772951][ T7893] exc_invalid_op+0x1a/0x50 [ 320.777499][ T7893] asm_exc_invalid_op+0x1a/0x20 [ 320.782379][ T7893] RIP: 0010:folio_memcg+0x111/0x220 [ 320.787629][ T7893] Code: 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 e2 2f f8 ff 48 8b 1b 48 89 d8 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 90 <0f> 0b 90 eb ce 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 55 ff ff ff [ 320.807267][ T7893] RSP: 0018:ffffc9000eefef40 EFLAGS: 00010246 [ 320.813355][ T7893] RAX: 0000000000000000 RBX: ffff88807beb5580 RCX: 0000000080000000 [ 320.821334][ T7893] RDX: 0000000000000000 RSI: ffffffff8c0adfc0 RDI: ffffffff8c60a8c0 [ 320.829666][ T7893] RBP: ffffea0001a68008 R08: ffffffff9018c5af R09: 1ffffffff20318b5 [ 320.837693][ T7893] R10: dffffc0000000000 R11: fffffbfff20318b6 R12: dffffc0000000000 [ 320.845681][ T7893] R13: 0000000001000108 R14: ffffea0001a68000 R15: ffffea0001a68030 [ 320.853700][ T7893] split_page_memcg+0x58/0x3f0 [ 320.858486][ T7893] ? split_page+0x205/0x230 [ 320.863023][ T7893] __vmalloc_node_range_noprof+0xa63/0x1400 [ 320.868963][ T7893] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.875388][ T7893] ? rcu_is_watching+0x15/0xb0 [ 320.880173][ T7893] ? trace_kmalloc+0x1f/0xd0 [ 320.884787][ T7893] ? __kmalloc_node_noprof+0x247/0x440 [ 320.890267][ T7893] ? __kvmalloc_node_noprof+0x72/0x1b0 [ 320.895741][ T7893] __kvmalloc_node_noprof+0x142/0x1b0 [ 320.901128][ T7893] ? nf_tables_newset+0x1743/0x2ea0 [ 320.906550][ T7893] nf_tables_newset+0x1743/0x2ea0 [ 320.911605][ T7893] ? __pfx_nf_tables_newset+0x10/0x10 [ 320.917007][ T7893] ? __nla_parse+0x40/0x60 [ 320.921440][ T7893] nfnetlink_rcv+0x14dc/0x2ad0 [ 320.926265][ T7893] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 320.931425][ T7893] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.936638][ T7893] ? skb_clone+0x240/0x390 [ 320.941063][ T7893] ? __pfx_lock_release+0x10/0x10 [ 320.946121][ T7893] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.951340][ T7893] netlink_unicast+0x7f6/0x990 [ 320.956141][ T7893] ? __pfx_netlink_unicast+0x10/0x10 [ 320.961434][ T7893] ? __virt_addr_valid+0x183/0x530 [ 320.966557][ T7893] ? __check_object_size+0x49c/0x900 [ 320.971857][ T7893] ? bpf_lsm_netlink_send+0x9/0x10 [ 320.976986][ T7893] netlink_sendmsg+0x8e4/0xcb0 [ 320.981776][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.987084][ T7893] ? __import_iovec+0x536/0x820 [ 320.991955][ T7893] ? aa_sock_msg_perm+0x91/0x160 [ 320.996914][ T7893] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 321.002218][ T7893] ? security_socket_sendmsg+0x87/0xb0 [ 321.007688][ T7893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.012985][ T7893] __sock_sendmsg+0x221/0x270 [ 321.017681][ T7893] ____sys_sendmsg+0x525/0x7d0 [ 321.022460][ T7893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.027765][ T7893] __sys_sendmsg+0x298/0x390 [ 321.032385][ T7893] ? __pfx___sys_sendmsg+0x10/0x10 [ 321.037561][ T7893] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.043920][ T7893] ? do_syscall_64+0x100/0x230 [ 321.048713][ T7893] ? do_syscall_64+0xb6/0x230 [ 321.053423][ T7893] do_syscall_64+0xf3/0x230 [ 321.057943][ T7893] ? clear_bhb_loop+0x35/0x90 [ 321.062635][ T7893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.068553][ T7893] RIP: 0033:0x7fcc4bf799b9 [ 321.072982][ T7893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.092597][ T7893] RSP: 002b:00007fcc4b9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.101038][ T7893] RAX: ffffffffffffffda RBX: 00007fcc4c115f80 RCX: 00007fcc4bf799b9 [ 321.109020][ T7893] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 321.116998][ T7893] RBP: 00007fcc4bfe78d8 R08: 0000000000000000 R09: 0000000000000000 [ 321.124982][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.132957][ T7893] R13: 0000000000000000 R14: 00007fcc4c115f80 R15: 00007fffdb92c7a8 [ 321.140966][ T7893] [ 321.144349][ T7893] Kernel Offset: disabled [ 321.148796][ T7893] Rebooting in 86400 seconds..