last executing test programs: 25.879392182s ago: executing program 0 (id=1461): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000280)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="04000000800800000100001d00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000fc"], 0x80}}, 0x0) 24.471615269s ago: executing program 0 (id=1464): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x587, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22.0899746s ago: executing program 0 (id=1470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 20.726771013s ago: executing program 0 (id=1475): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@abort}, {@auto_da_alloc}]}, 0x1, 0x501, &(0x7f0000001ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x834421, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)) 18.393748296s ago: executing program 0 (id=1483): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.065382316s ago: executing program 0 (id=1486): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cb", "20e485600800000000000000ff7f000000000000f000620b1d04feb2506b6f8f", 0x0, 0x13}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0x1c) 11.307332882s ago: executing program 3 (id=1493): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@typedef, @ptr, @ptr, @restrict, @struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x2, 0xcc}]}]}}, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 10.4558922s ago: executing program 3 (id=1495): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlockall(0x0) 6.237352087s ago: executing program 3 (id=1502): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa3}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 6.154348985s ago: executing program 2 (id=1425): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 6.021208515s ago: executing program 1 (id=1503): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r0, 0x65, 0x0, 0x0, 0x20000000) 5.172292957s ago: executing program 3 (id=1504): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file1\x00', 0x2008054, &(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="ac7b4efdd021fbb1d8ee6b170048105967759c5affb8c9a311dd24fa1fec64c3a032d17a1e12f67c0871188469a7b76eb91f0780a9be55ba0927c1e8a8cb84156181c4a8f7d14bcc78240dd07a852a874996a38fb6980492dc69488c8b853e837a5dfa02670ac7445b12c5577d7553127077bacf4d511e7163a93892b8a6ef9777456cc642cb6abccee8121783945547a8b4a6d257cf9fc5043c781271c9f6179c145b15fa52", @ANYRES32=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x1, 0xf43, &(0x7f0000002d80)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, &(0x7f0000000080)={@desc={0x100000, 0x0, @desc2}}) 5.120722218s ago: executing program 1 (id=1505): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc5616e7bb254a48d}, @TCA_TBF_BURST={0x8, 0x6, 0x80000000}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xdf3b}, 0x0, 0x0, 0x269}}]}}]}, 0x6c}}, 0x0) 5.120415328s ago: executing program 4 (id=1506): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0e0000200200"}) 4.61911711s ago: executing program 2 (id=1507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r2, @ANYBLOB="080004000001"], 0x44}}, 0x0) 4.207140649s ago: executing program 4 (id=1508): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)={0x28, 0x4, 0x0, {0x1, 0xfffffffffffffffa}}, 0x28) 4.117538145s ago: executing program 1 (id=1509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000e40)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}]]}, 0x2c}}, 0x40000) 3.49963855s ago: executing program 2 (id=1510): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000980)={0x0, 0x989680}) close(r1) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 3.158145294s ago: executing program 1 (id=1511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) 3.073695991s ago: executing program 4 (id=1512): r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 2.5166297s ago: executing program 2 (id=1513): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) unshare(0x22020400) unshare(0x2c060000) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x11) 2.227535087s ago: executing program 1 (id=1514): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) unlink(&(0x7f0000000000)='./file0\x00') write$9p(r0, &(0x7f0000001400)="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", 0x600) 2.224255517s ago: executing program 4 (id=1515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1b00000018008103e00212ba0d81050423031000030f0600067c55", 0x1b}], 0x1}, 0x0) 1.998539044s ago: executing program 3 (id=1516): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.641299773s ago: executing program 2 (id=1517): r0 = socket$inet6(0xa, 0x3, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) 1.111542407s ago: executing program 4 (id=1518): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x1609, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2f9b, 0x0, 0x0, 0x0, 0x0) 968.747331ms ago: executing program 1 (id=1519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0) 477.047807ms ago: executing program 2 (id=1520): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 225.639302ms ago: executing program 4 (id=1521): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000200)="580000001500add427323b472545b45602117fffffff81000e220e1f7f00000192e809000000ff0000f03ac71016000000ffffffffffffffffffefee000000000000000002000000007a8c0f436fcc0d971982f11a0adab1", 0x58}], 0x1) 0s ago: executing program 3 (id=1522): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) kernel console output (not intermixed with test programs): ota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 537.935210][ T5196] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz-executor: Failed to acquire dquot type 0 [ 537.976639][ T7210] loop2: detected capacity change from 0 to 1024 [ 538.059666][ T7210] EXT4-fs: Ignoring removed orlov option [ 538.066227][ T7210] EXT4-fs: Ignoring removed bh option [ 538.245005][ T7210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.558681][ T7182] ntfs3: loop0: Failed to read $UpCase (-4). [ 538.780628][ T5196] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 538.886754][ T4289] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.049037][ T6934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.114051][ T4289] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.332213][ T4289] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.512777][ T4289] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.905044][ T4289] bridge_slave_1: left allmulticast mode [ 539.911488][ T4289] bridge_slave_1: left promiscuous mode [ 539.918888][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.974843][ T4289] bridge_slave_0: left allmulticast mode [ 539.981179][ T4289] bridge_slave_0: left promiscuous mode [ 539.988280][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.659988][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.718440][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.751921][ T4289] bond0 (unregistering): Released all slaves [ 541.390431][ T4289] hsr_slave_0: left promiscuous mode [ 541.426190][ T4289] hsr_slave_1: left promiscuous mode [ 541.456399][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.464344][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.539234][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.547278][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.656999][ T4289] veth1_macvtap: left promiscuous mode [ 541.662863][ T4289] veth0_macvtap: left promiscuous mode [ 541.669576][ T4289] veth1_vlan: left promiscuous mode [ 541.675235][ T4289] veth0_vlan: left promiscuous mode [ 541.860916][ T7236] loop4: detected capacity change from 0 to 512 [ 542.162322][ T7236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 542.176278][ T7236] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.598358][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 542.623748][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 542.642640][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 542.725539][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 542.768086][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 542.956413][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 542.997728][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 543.039770][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 543.324637][ T5187] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 543.344179][ T5187] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 543.357185][ T5187] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz-executor: Failed to acquire dquot type 0 [ 543.557227][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 544.007574][ T5187] bond0: (slave syz_tun): Releasing backup interface [ 544.271108][ T5187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 544.586320][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 545.048492][ T4569] Bluetooth: hci4: command tx timeout [ 545.152136][ T4289] bond0: (slave netdevsim3): Releasing backup interface [ 545.224334][ T4289] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.417455][ T4289] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.570578][ T4289] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.707101][ T4289] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.836944][ T7243] chnl_net:caif_netlink_parms(): no params data found [ 546.056620][ T4289] bridge_slave_1: left allmulticast mode [ 546.062626][ T4289] bridge_slave_1: left promiscuous mode [ 546.069810][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.120880][ T4289] bridge_slave_0: left allmulticast mode [ 546.127030][ T4289] bridge_slave_0: left promiscuous mode [ 546.133923][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.897840][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.957647][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.012132][ T4289] bond0 (unregistering): Released all slaves [ 547.127989][ T4569] Bluetooth: hci4: command tx timeout [ 547.695666][ T4289] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode [ 547.978050][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 547.992266][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 548.002182][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 548.017242][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 548.029775][ T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 548.043629][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 548.291593][ T4289] hsr_slave_0: left promiscuous mode [ 548.311754][ T4289] hsr_slave_1: left promiscuous mode [ 548.325223][ T7268] loop0: detected capacity change from 0 to 512 [ 548.328091][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.340618][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.372081][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.380491][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.418132][ T4289] veth1_macvtap: left promiscuous mode [ 548.424133][ T4289] veth0_macvtap: left promiscuous mode [ 548.430502][ T4289] veth1_vlan: left promiscuous mode [ 548.436345][ T4289] veth0_vlan: left promiscuous mode [ 548.878392][ T7268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 548.892016][ T7268] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.239399][ T4569] Bluetooth: hci4: command tx timeout [ 549.462324][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 549.543656][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 549.900565][ T6064] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 549.913525][ T6064] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 549.927046][ T6064] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz-executor: Failed to acquire dquot type 0 [ 550.175203][ T4569] Bluetooth: hci1: command tx timeout [ 550.740438][ T6064] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 550.827917][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.835826][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.844310][ T7243] bridge_slave_0: entered allmulticast mode [ 550.855306][ T7243] bridge_slave_0: entered promiscuous mode [ 551.069754][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.077843][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.085760][ T7243] bridge_slave_1: entered allmulticast mode [ 551.095752][ T7243] bridge_slave_1: entered promiscuous mode [ 551.320939][ T4569] Bluetooth: hci4: command tx timeout [ 551.607168][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.632661][ T4289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.701870][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.782856][ T4289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.001996][ T4289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.156487][ T7264] chnl_net:caif_netlink_parms(): no params data found [ 552.249020][ T4289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.264422][ T4569] Bluetooth: hci1: command tx timeout [ 552.282476][ T7243] team0: Port device team_slave_0 added [ 552.302063][ T7243] team0: Port device team_slave_1 added [ 552.489136][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.496753][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.523310][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.779646][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.780250][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 552.787006][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.794449][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 552.820024][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.032980][ T4289] bridge_slave_1: left allmulticast mode [ 553.040931][ T4289] bridge_slave_1: left promiscuous mode [ 553.047987][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.083218][ T4289] bridge_slave_0: left allmulticast mode [ 553.090037][ T4289] bridge_slave_0: left promiscuous mode [ 553.097154][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.683048][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.739042][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.788353][ T4289] bond0 (unregistering): Released all slaves [ 553.942139][ T7243] hsr_slave_0: entered promiscuous mode [ 553.995389][ T7243] hsr_slave_1: entered promiscuous mode [ 554.326294][ T4569] Bluetooth: hci1: command tx timeout [ 554.661159][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 554.677769][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 554.684101][ T7301] loop1: detected capacity change from 0 to 128 [ 554.728256][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 554.787002][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 554.854783][ T52] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 554.865438][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 554.911905][ T7304] netlink: 'syz.2.805': attribute type 2 has an invalid length. [ 554.920230][ T7304] netlink: 'syz.2.805': attribute type 8 has an invalid length. [ 554.928572][ T7304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.805'. [ 555.082861][ T4289] hsr_slave_0: left promiscuous mode [ 555.143939][ T4289] hsr_slave_1: left promiscuous mode [ 555.157474][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.165285][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.199273][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.208878][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.265183][ T4289] veth1_macvtap: left promiscuous mode [ 555.271680][ T4289] veth0_macvtap: left promiscuous mode [ 555.277913][ T4289] veth1_vlan: left promiscuous mode [ 555.283688][ T4289] veth0_vlan: left promiscuous mode [ 556.264151][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 556.374593][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 556.509816][ T52] Bluetooth: hci1: command tx timeout [ 557.016081][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.019963][ T52] Bluetooth: hci5: command tx timeout [ 557.024144][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.040517][ T7264] bridge_slave_0: entered allmulticast mode [ 557.061476][ T7264] bridge_slave_0: entered promiscuous mode [ 557.318741][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.326996][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.334947][ T7264] bridge_slave_1: entered allmulticast mode [ 557.345150][ T7264] bridge_slave_1: entered promiscuous mode [ 557.748512][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.774087][ T7319] netlink: 'syz.1.811': attribute type 10 has an invalid length. [ 557.790652][ T7319] syz_tun: entered promiscuous mode [ 557.826725][ T7319] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 557.889473][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.335685][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.537407][ T7264] team0: Port device team_slave_0 added [ 558.558813][ T7264] team0: Port device team_slave_1 added [ 559.053712][ T52] Bluetooth: hci5: command tx timeout [ 559.112286][ T7328] pim6reg: entered allmulticast mode [ 559.142646][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.151231][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.182389][ T7264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.196819][ T7329] pim6reg: left allmulticast mode [ 559.341564][ T7264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.348918][ T7264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.378550][ T7264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.522168][ T7331] loop1: detected capacity change from 0 to 64 [ 559.604257][ T7243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 559.636685][ T7331] syz.1.815: attempt to access beyond end of device [ 559.636685][ T7331] loop1: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 559.653399][ T7331] Buffer I/O error on dev loop1, logical block 4096, async page read [ 559.662127][ T7331] syz.1.815: attempt to access beyond end of device [ 559.662127][ T7331] loop1: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 559.675787][ T7331] Buffer I/O error on dev loop1, logical block 4096, async page read [ 559.806418][ T29] audit: type=1800 audit(1726005205.781:16): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.815" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 559.830347][ T7330] Trying to free block not in datazone [ 559.895670][ T7243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 560.059985][ T7264] hsr_slave_0: entered promiscuous mode [ 560.074102][ T7264] hsr_slave_1: entered promiscuous mode [ 560.103351][ T7264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.113073][ T7264] Cannot create hsr debugfs directory [ 560.139271][ T7243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 560.208846][ T7300] chnl_net:caif_netlink_parms(): no params data found [ 560.331600][ T7243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 561.126138][ T52] Bluetooth: hci5: command tx timeout [ 561.214403][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.222519][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.233811][ T7300] bridge_slave_0: entered allmulticast mode [ 561.244073][ T7300] bridge_slave_0: entered promiscuous mode [ 561.438844][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.447040][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.457037][ T7300] bridge_slave_1: entered allmulticast mode [ 561.467179][ T7300] bridge_slave_1: entered promiscuous mode [ 561.672335][ T7349] loop1: detected capacity change from 0 to 128 [ 561.774464][ T7347] netlink: 'syz.2.819': attribute type 2 has an invalid length. [ 561.825744][ T7300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.982429][ T7300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.360550][ T7300] team0: Port device team_slave_0 added [ 562.480272][ T7300] team0: Port device team_slave_1 added [ 562.660933][ T7353] overlay: Unknown parameter 'fsuuid' [ 562.829083][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.838296][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.865570][ T7300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.040022][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.047414][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.059719][ T7355] loop2: detected capacity change from 0 to 256 [ 563.073935][ T7300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.137121][ T7264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 563.223026][ T52] Bluetooth: hci5: command tx timeout [ 563.225126][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.240249][ T7264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 563.267334][ T7264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 563.295163][ T7355] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 563.357533][ T7264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 563.827673][ T7243] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.882470][ T7300] hsr_slave_0: entered promiscuous mode [ 563.901733][ T7300] hsr_slave_1: entered promiscuous mode [ 563.967453][ T7300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.975347][ T7300] Cannot create hsr debugfs directory [ 564.108512][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.116509][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.416422][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.424401][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.841563][ T7365] IPv6: NLM_F_CREATE should be specified when creating new route [ 564.851333][ T7365] netlink: 1 bytes leftover after parsing attributes in process `syz.1.827'. [ 565.993167][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.346199][ T7264] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.399392][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.407321][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.554843][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.562810][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.609305][ T7300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 566.753853][ T7300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 566.914620][ T7300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 567.071359][ T7300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 567.783987][ T7243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.813842][ T7243] veth0_vlan: entered promiscuous mode [ 568.907550][ T7300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.008101][ T7243] veth1_vlan: entered promiscuous mode [ 569.308107][ T7300] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.452796][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.460761][ T4490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.582635][ T7243] veth0_macvtap: entered promiscuous mode [ 569.609500][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.617467][ T4490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.725807][ T7243] veth1_macvtap: entered promiscuous mode [ 570.152388][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.170827][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.186772][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.197829][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.211131][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.222076][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.238962][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.359457][ T7300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.456249][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.469012][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.481433][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.492380][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.502953][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 570.514111][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.530821][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.620624][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.819642][ T7243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.834097][ T7243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.847170][ T7243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.860262][ T7243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.474412][ T7421] loop2: detected capacity change from 0 to 8 [ 572.914101][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.657088][ T7300] veth0_vlan: entered promiscuous mode [ 573.730141][ T7431] ax25_connect(): syz.2.844 uses autobind, please contact jreuter@yaina.de [ 573.864870][ T7300] veth1_vlan: entered promiscuous mode [ 574.254404][ T7264] veth0_vlan: entered promiscuous mode [ 574.406266][ T7300] veth0_macvtap: entered promiscuous mode [ 574.461154][ T7264] veth1_vlan: entered promiscuous mode [ 574.562682][ T7300] veth1_macvtap: entered promiscuous mode [ 574.876976][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.888834][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.899232][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.910199][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.920461][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.931452][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.941819][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.952779][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.978177][ T7300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.090040][ T7264] veth0_macvtap: entered promiscuous mode [ 575.172609][ T7264] veth1_macvtap: entered promiscuous mode [ 575.273437][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.290751][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.306223][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.317235][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.331543][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.342576][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.352808][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.366826][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.390834][ T7300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.620332][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.634323][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.644707][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.656543][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.666832][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.677732][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.691389][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.706091][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.716697][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.727649][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.744229][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.820667][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.836187][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.850887][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.867767][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.878932][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.897353][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.912401][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.923366][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.937753][ T7441] CUSE: unknown device info "" [ 575.937827][ T7441] CUSE: unknown device info "" [ 575.937890][ T7441] CUSE: zero length info key specified [ 575.957118][ T7264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.971012][ T7264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.987787][ T7264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.110232][ T7300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.123063][ T7300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.132820][ T7300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.142039][ T7300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.213977][ T7264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.223499][ T7264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.233618][ T7264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.247395][ T7264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.163227][ T7475] syz.1.854: attempt to access beyond end of device [ 579.163227][ T7475] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 579.185772][ T7475] syz.1.854: attempt to access beyond end of device [ 579.185772][ T7475] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 580.446434][ T3288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.454445][ T3288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.645130][ T7488] loop2: detected capacity change from 0 to 128 [ 580.811085][ T3288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.819804][ T3288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.399837][ T7505] loop1: detected capacity change from 0 to 256 [ 582.681687][ T7510] loop3: detected capacity change from 0 to 128 [ 582.867292][ T29] audit: type=1800 audit(1726005228.891:17): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.862" name="bus" dev="loop3" ino=1048641 res=0 errno=0 [ 582.891737][ T29] audit: type=1804 audit(1726005228.911:18): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.862" name="/newroot/1/file0/bus" dev="loop3" ino=1048641 res=1 errno=0 [ 583.602564][ T7519] loop1: detected capacity change from 0 to 8 [ 583.729930][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 583.807417][ T7524] netlink: 173 bytes leftover after parsing attributes in process `syz.2.864'. [ 585.335717][ T4561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.344058][ T4561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.468431][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.479855][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.690416][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.698883][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.904814][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.913234][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.403841][ T7550] loop1: detected capacity change from 0 to 128 [ 587.545523][ T7553] loop4: detected capacity change from 0 to 512 [ 587.652737][ T7553] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 587.661354][ T7553] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 587.801311][ T7553] System zones: 0-1, 15-15, 18-18, 34-34 [ 587.849256][ T7553] EXT4-fs (loop4): orphan cleanup on readonly fs [ 587.856328][ T7553] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 587.866330][ T7553] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 587.892395][ T7553] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 588.048301][ T7553] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.876: bg 0: block 40: padding at end of block bitmap is not set [ 588.134357][ T7553] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 588.168046][ T7553] EXT4-fs (loop4): 1 truncate cleaned up [ 588.176328][ T7553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 588.758377][ T7264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.272263][ T7564] netlink: 32 bytes leftover after parsing attributes in process `syz.0.880'. [ 590.253756][ T7573] loop1: detected capacity change from 0 to 128 [ 590.295800][ T7576] sch_fq: defrate 0 ignored. [ 590.378484][ T7573] syz.1.885: attempt to access beyond end of device [ 590.378484][ T7573] loop1: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 590.393118][ T7573] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write [ 590.403043][ T7573] syz.1.885: attempt to access beyond end of device [ 590.403043][ T7573] loop1: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 590.417345][ T7573] Buffer I/O error on dev loop1, logical block 8767744, lost async page write [ 590.426905][ T7573] syz.1.885: attempt to access beyond end of device [ 590.426905][ T7573] loop1: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 590.447945][ T7573] Buffer I/O error on dev loop1, logical block 13269809, lost async page write [ 590.459541][ T7573] syz.1.885: attempt to access beyond end of device [ 590.459541][ T7573] loop1: rw=2049, sector=1157, nr_sectors = 1 limit=128 [ 590.473755][ T7573] Buffer I/O error on dev loop1, logical block 1157, lost async page write [ 590.482872][ T7573] syz.1.885: attempt to access beyond end of device [ 590.482872][ T7573] loop1: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 590.500834][ T7573] Buffer I/O error on dev loop1, logical block 3211264, lost async page write [ 590.511016][ T7573] syz.1.885: attempt to access beyond end of device [ 590.511016][ T7573] loop1: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 590.525653][ T7573] Buffer I/O error on dev loop1, logical block 8768635, lost async page write [ 590.542139][ T7573] syz.1.885: attempt to access beyond end of device [ 590.542139][ T7573] loop1: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 590.558634][ T7573] Buffer I/O error on dev loop1, logical block 13466417, lost async page write [ 590.568220][ T7573] syz.1.885: attempt to access beyond end of device [ 590.568220][ T7573] loop1: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 590.582524][ T7573] Buffer I/O error on dev loop1, logical block 209285, lost async page write [ 591.123589][ T5190] sysv_free_block: trying to free block not in datazone [ 591.140514][ T5190] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 591.840753][ T7589] loop4: detected capacity change from 0 to 256 [ 591.883528][ T7591] loop3: detected capacity change from 0 to 64 [ 591.950914][ T7591] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 593.953782][ T7614] Bluetooth: MGMT ver 1.23 [ 596.571575][ T7637] loop2: detected capacity change from 0 to 64 [ 598.314424][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 598.355561][ T7660] vlan2: entered allmulticast mode [ 599.171819][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 599.470643][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 599.482418][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 599.497240][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 599.509706][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.561401][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.928'. [ 599.639144][ T7667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 599.739736][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.402682][ T10] usb 1-1: USB disconnect, device number 6 [ 600.837367][ T1583] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 601.054193][ T1583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.065060][ T7688] loop1: detected capacity change from 0 to 1024 [ 601.066041][ T1583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.087181][ T1583] usb 4-1: New USB device found, idVendor=05ac, idProduct=0062, bcdDevice= 0.00 [ 601.098506][ T1583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.169117][ T1583] usb 4-1: config 0 descriptor?? [ 601.193374][ T7688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.717555][ T1583] hid-generic 0003:05AC:0062.0004: unbalanced delimiter at end of report description [ 601.756849][ T1583] hid-generic 0003:05AC:0062.0004: probe with driver hid-generic failed with error -22 [ 601.911923][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.967156][ T1583] usb 4-1: USB disconnect, device number 5 [ 603.186607][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 603.391155][ T10] usb 3-1: device descriptor read/64, error -71 [ 603.716614][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 603.956932][ T10] usb 3-1: device descriptor read/64, error -71 [ 604.103368][ T10] usb usb3-port1: attempt power cycle [ 604.577221][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 604.672419][ T10] usb 3-1: device descriptor read/8, error -71 [ 604.961679][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 605.037850][ T10] usb 3-1: device descriptor read/8, error -71 [ 605.200625][ T10] usb usb3-port1: unable to enumerate USB device [ 606.023547][ T7741] loop1: detected capacity change from 0 to 1024 [ 606.078193][ T7741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 606.253815][ T7741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.256110][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'. [ 606.728661][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.875486][ T7767] loop1: detected capacity change from 0 to 512 [ 607.899210][ T7767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 607.987967][ T7767] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 608.052885][ T7767] System zones: 1-12 [ 608.136133][ T7767] EXT4-fs (loop1): 1 truncate cleaned up [ 608.144159][ T7767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.109479][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.302018][ T7780] loop0: detected capacity change from 0 to 164 [ 609.640582][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 609.734499][ T7780] netlink: 277 bytes leftover after parsing attributes in process `syz.0.972'. [ 609.747545][ T7780] netlink: 277 bytes leftover after parsing attributes in process `syz.0.972'. [ 611.124939][ T7792] loop4: detected capacity change from 0 to 128 [ 611.176773][ T7792] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 611.250553][ T7792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 611.352737][ T7795] loop3: detected capacity change from 0 to 1024 [ 611.788129][ T7795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.801404][ T7795] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.133052][ T7793] loop0: detected capacity change from 0 to 2048 [ 612.267717][ T7243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.353264][ T7793] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 612.684644][ T7793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 612.923757][ T7813] loop3: detected capacity change from 0 to 1024 [ 612.943244][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 612.952759][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.987'. [ 613.044776][ T7817] netlink: 'syz.4.988': attribute type 1 has an invalid length. [ 613.802471][ T7823] loop2: detected capacity change from 0 to 512 [ 613.805099][ T7813] EXT4-fs: Ignoring removed orlov option [ 613.839391][ T7813] EXT4-fs (loop3): Test dummy encryption mode enabled [ 613.863768][ T7813] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 613.900063][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 613.914108][ T7823] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a056c01c, mo2=0002] [ 613.960656][ T7823] System zones: 0-2, 18-18, 34-34 [ 614.036407][ T7830] tap0: tun_chr_ioctl cmd 1074025676 [ 614.042030][ T7830] tap0: owner set to 0 [ 614.046244][ T7823] EXT4-fs (loop2): orphan cleanup on readonly fs [ 614.063338][ T7823] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 614.082482][ T7823] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 614.148954][ T7813] 9p: Unknown access argument 18446744073709551615: -22 [ 614.228027][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 614.233228][ T7823] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.990: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 614.234688][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 614.326154][ T7823] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.990: couldn't read orphan inode 13 (err -117) [ 614.368621][ T7823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 614.530650][ T7823] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 614.542271][ T7823] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a056c01c, mo2=0002] [ 614.641505][ T7823] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 614.954405][ T6934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.206742][ T29] audit: type=1326 audit(1726005261.231:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.1.995" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x0 [ 615.990236][ T7841] loop0: detected capacity change from 0 to 2048 [ 616.093974][ T7856] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 616.335040][ T7841] NILFS (loop0): error -2 truncating bmap (ino=16) [ 616.392051][ T7856] NILFS (loop0): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 616.403147][ T7856] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16) [ 616.471622][ T7856] Remounting filesystem read-only [ 616.826952][ T7863] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 616.834657][ T7863] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 616.922750][ T7860] loop3: detected capacity change from 0 to 2048 [ 617.028834][ T7860] NILFS (loop3): invalid segment: Checksum error in segment payload [ 617.037989][ T7860] NILFS (loop3): trying rollback from an earlier position [ 617.155069][ T7860] NILFS (loop3): recovery complete [ 617.187881][ T7300] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 617.231210][ T7865] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 617.243602][ T7300] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 617.252664][ T7300] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 617.273404][ T7300] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 617.287366][ T7300] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 617.301380][ T7300] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 617.350691][ T7300] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 617.361377][ T7300] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 617.378949][ T7300] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 617.393905][ T7300] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 617.403448][ T7300] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 617.414571][ T7300] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 617.425342][ T7300] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 617.434761][ T7300] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 617.436904][ T7860] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 617.444021][ T7300] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 617.466324][ T7300] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 617.497438][ T7860] Remounting filesystem read-only [ 617.904197][ T7871] tun0: tun_chr_ioctl cmd 1074025677 [ 617.910375][ T7871] tun0: linktype set to 780 [ 618.527315][ T7873] tap0: tun_chr_ioctl cmd 1074025676 [ 618.532959][ T7873] tap0: owner set to 0 [ 619.553995][ T7892] loop3: detected capacity change from 0 to 64 [ 619.655004][ T7890] loop1: detected capacity change from 0 to 1024 [ 619.878539][ T7890] hfsplus: bad catalog entry type [ 620.161337][ T4490] hfsplus: b-tree write err: -5, ino 4 [ 620.963941][ T1606] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 621.177053][ T1606] usb 5-1: Using ep0 maxpacket: 16 [ 621.276349][ T1606] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 621.286027][ T1606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.294369][ T1606] usb 5-1: Product: syz [ 621.302062][ T1606] usb 5-1: Manufacturer: syz [ 621.307181][ T1606] usb 5-1: SerialNumber: syz [ 621.401826][ T1606] usb 5-1: config 0 descriptor?? [ 621.443548][ T1606] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 621.498222][ T7913] block nbd3: shutting down sockets [ 621.812735][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'. [ 621.822849][ T7916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'. [ 621.950585][ T1606] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 622.024459][ T1606] usb 5-1: USB disconnect, device number 7 [ 622.597212][ T5251] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 622.844670][ T5251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.859246][ T5251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.869872][ T5251] usb 3-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 622.880013][ T5251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.938371][ T5251] usb 3-1: config 0 descriptor?? [ 623.493369][ T5251] wacom 0003:056A:00D2.0005: unknown main item tag 0x0 [ 623.528636][ T5251] wacom 0003:056A:00D2.0005: Unknown device_type for 'HID 056a:00d2'. Assuming pen. [ 623.587004][ T5251] wacom 0003:056A:00D2.0005: hidraw0: USB HID v0.00 Device [HID 056a:00d2] on usb-dummy_hcd.2-1/input0 [ 623.605289][ T5251] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D2.0005/input/input9 [ 623.744581][ T5251] usb 3-1: USB disconnect, device number 9 [ 625.630606][ T7955] loop2: detected capacity change from 0 to 256 [ 625.706224][ T7950] loop3: detected capacity change from 0 to 2048 [ 625.791455][ T7950] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 625.820405][ T7960] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 625.822213][ T7955] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 625.848888][ T7955] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 625.972636][ T7950] NILFS (loop3): failed to count free inodes: err=-34 [ 625.980084][ T7950] Process accounting resumed [ 626.337199][ T7960] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 626.351619][ T7960] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 626.473164][ T7960] Remounting filesystem read-only [ 626.473545][ T4490] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 626.473682][ T4490] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 626.473808][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.473943][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.474075][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.474413][ T4490] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 626.474543][ T4490] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 626.474670][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.474801][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.474935][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.475116][ T4490] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 626.475238][ T4490] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 626.475363][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.475505][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.475639][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.494098][ T4490] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 626.494244][ T4490] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 626.494373][ T4490] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 626.494507][ T4490] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 626.494631][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.494784][ T4490] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 626.494916][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.495052][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.495188][ T4490] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 626.495315][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.495470][ T4490] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 626.495605][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.495742][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.499139][ T4490] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 626.499278][ T4490] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.526918][ T7243] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 626.528529][ T7243] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 626.528660][ T7243] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 626.528787][ T7243] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 626.528913][ T7243] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 626.529036][ T7243] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 626.531317][ T7243] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 626.531446][ T7243] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 626.531574][ T7243] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.531709][ T7243] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.531842][ T7243] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.532650][ T7243] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 626.532782][ T7243] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 626.532908][ T7243] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.533045][ T7243] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.533184][ T7243] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 626.632544][ T6934] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000006) [ 626.632672][ T6934] exFAT-fs (loop2): Filesystem has been set read-only [ 626.651405][ T6934] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000006) [ 627.238854][ T7970] loop3: detected capacity change from 0 to 512 [ 627.452435][ T7970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.452952][ T7970] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.576295][ T7970] EXT4-fs error (device loop3): __ext4_remount:6491: comm syz.3.1053: Abort forced by user [ 627.586278][ T7970] EXT4-fs (loop3): Remounting filesystem read-only [ 627.627634][ T7970] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 628.502070][ T7243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.844121][ T4289] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.097134][ T4289] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.330466][ T4289] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.612645][ T4289] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.980045][ T4289] bridge_slave_1: left allmulticast mode [ 629.980169][ T4289] bridge_slave_1: left promiscuous mode [ 629.981491][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.052157][ T4289] bridge_slave_0: left allmulticast mode [ 630.052288][ T4289] bridge_slave_0: left promiscuous mode [ 630.053409][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.432805][ T7986] syz.2.1063 (7986) used greatest stack depth: 2896 bytes left [ 630.911261][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.944412][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.980594][ T4289] bond0 (unregistering): Released all slaves [ 631.606320][ T4569] Bluetooth: hci3: command 0x0406 tx timeout [ 631.624089][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 631.624212][ T7992] netlink: 'syz.2.1066': attribute type 1 has an invalid length. [ 631.624297][ T7992] netlink: 'syz.2.1066': attribute type 2 has an invalid length. [ 631.637463][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 631.970444][ T4289] hsr_slave_0: left promiscuous mode [ 631.975457][ T4289] hsr_slave_1: left promiscuous mode [ 632.020421][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.020637][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.029460][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.029620][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.102496][ T4289] veth1_macvtap: left promiscuous mode [ 632.102668][ T4289] veth0_macvtap: left promiscuous mode [ 632.103005][ T4289] veth1_vlan: left promiscuous mode [ 632.103253][ T4289] veth0_vlan: left promiscuous mode [ 632.426610][ T4569] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 632.462552][ T4569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 632.476882][ T4569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 632.512485][ T4569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 632.593101][ T4569] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 632.597836][ T4569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 632.850688][ T7995] loop0: detected capacity change from 0 to 2048 [ 632.885465][ T7995] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 633.028397][ T7995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 633.631581][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 633.689154][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 634.735169][ T52] Bluetooth: hci4: command tx timeout [ 635.727323][ T7996] chnl_net:caif_netlink_parms(): no params data found [ 636.579114][ T8022] vxcan1: tx address claim with dest, not broadcast [ 636.806244][ T52] Bluetooth: hci4: command tx timeout [ 637.468729][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.476977][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.485160][ T7996] bridge_slave_0: entered allmulticast mode [ 637.495157][ T7996] bridge_slave_0: entered promiscuous mode [ 637.594149][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.602215][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.613502][ T7996] bridge_slave_1: entered allmulticast mode [ 637.623665][ T7996] bridge_slave_1: entered promiscuous mode [ 637.682793][ T4569] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 637.755518][ T4569] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 637.787911][ T4569] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 637.883311][ T4569] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 637.913840][ T7996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.963400][ T4569] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 637.982460][ T4569] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 638.132388][ T7996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.594445][ T7996] team0: Port device team_slave_0 added [ 638.659620][ T7996] team0: Port device team_slave_1 added [ 638.905347][ T52] Bluetooth: hci4: command tx timeout [ 638.993262][ T8037] netlink: 'syz.0.1082': attribute type 12 has an invalid length. [ 639.002318][ T8037] netlink: 'syz.0.1082': attribute type 29 has an invalid length. [ 639.014260][ T8037] netlink: 'syz.0.1082': attribute type 2 has an invalid length. [ 639.022850][ T8037] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1082'. [ 639.059434][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.070771][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.110227][ T7996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.218520][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.226316][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.253315][ T7996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.741982][ T7996] hsr_slave_0: entered promiscuous mode [ 639.878172][ T7996] hsr_slave_1: entered promiscuous mode [ 640.088638][ T52] Bluetooth: hci6: command tx timeout [ 640.886680][ T8031] chnl_net:caif_netlink_parms(): no params data found [ 640.973846][ T52] Bluetooth: hci4: command tx timeout [ 641.388121][ T5250] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 641.441110][ T7962] bond0: (slave syz_tun): Releasing backup interface [ 641.721241][ T5250] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 641.730924][ T5250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.761688][ T3099] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.900052][ T5250] usb 1-1: config 0 descriptor?? [ 641.938317][ T3099] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.958705][ T5250] cp210x 1-1:0.0: cp210x converter detected [ 642.089503][ T3099] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.170509][ T52] Bluetooth: hci6: command tx timeout [ 642.276891][ T3099] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.521403][ T5250] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 642.668489][ T5250] usb 1-1: cp210x converter now attached to ttyUSB0 [ 642.763554][ T10] usb 1-1: USB disconnect, device number 7 [ 642.813659][ T3099] bridge_slave_1: left allmulticast mode [ 642.821009][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 642.821744][ T3099] bridge_slave_1: left promiscuous mode [ 642.839704][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.887537][ T10] cp210x 1-1:0.0: device disconnected [ 642.957107][ T3099] bridge_slave_0: left allmulticast mode [ 642.967896][ T3099] bridge_slave_0: left promiscuous mode [ 642.975443][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.601816][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1092'. [ 643.827901][ T3099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.880734][ T3099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.951571][ T3099] bond0 (unregistering): Released all slaves [ 644.251181][ T52] Bluetooth: hci6: command tx timeout [ 644.633956][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.642138][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.656366][ T8031] bridge_slave_0: entered allmulticast mode [ 644.666331][ T8031] bridge_slave_0: entered promiscuous mode [ 645.040601][ T7996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 645.115170][ T8074] loop4: detected capacity change from 0 to 256 [ 645.172433][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.180776][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.191368][ T8031] bridge_slave_1: entered allmulticast mode [ 645.202996][ T8031] bridge_slave_1: entered promiscuous mode [ 645.240717][ T7996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 645.416184][ T3099] hsr_slave_0: left promiscuous mode [ 645.485251][ T3099] hsr_slave_1: left promiscuous mode [ 645.512530][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.520599][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.569371][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.577478][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.652508][ T3099] veth1_macvtap: left promiscuous mode [ 645.658577][ T3099] veth0_macvtap: left promiscuous mode [ 645.664551][ T3099] veth1_vlan: left promiscuous mode [ 645.670363][ T3099] veth0_vlan: left promiscuous mode [ 646.339710][ T52] Bluetooth: hci6: command tx timeout [ 646.378321][ T8078] loop4: detected capacity change from 0 to 164 [ 646.463302][ T8078] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 647.092109][ T3099] team0 (unregistering): Port device team_slave_1 removed [ 647.124287][ T3099] team0 (unregistering): Port device team_slave_0 removed [ 647.363928][ T8081] loop0: detected capacity change from 0 to 2048 [ 647.567426][ T8081] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 647.627742][ T7996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 647.949926][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.969737][ T7996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 648.190660][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.619213][ T8031] team0: Port device team_slave_0 added [ 648.690078][ T8031] team0: Port device team_slave_1 added [ 648.741072][ T8079] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 649.009935][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.019303][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.045828][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.052858][ T8031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.374417][ T8094] loop4: detected capacity change from 0 to 2048 [ 649.388461][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.395999][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.432141][ T8031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.686858][ T8094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.112747][ T8031] hsr_slave_0: entered promiscuous mode [ 650.163074][ T8031] hsr_slave_1: entered promiscuous mode [ 650.174828][ T8031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.183018][ T8031] Cannot create hsr debugfs directory [ 650.485083][ T7264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.769538][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.238044][ T7996] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.374941][ T4561] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.383135][ T4561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.527242][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.535192][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.398348][ T8031] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 652.508151][ T8031] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 652.578105][ T8031] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 652.697128][ T8031] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 654.004645][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.182977][ T8031] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.303014][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.311113][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.439490][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.447630][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.699328][ T7996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.922200][ T8133] loop4: detected capacity change from 0 to 1024 [ 654.967844][ T8133] EXT4-fs: Ignoring removed orlov option [ 654.973922][ T8133] ext4: Unknown parameter 'noacl' [ 655.166622][ T8135] overlayfs: failed to clone lowerpath [ 655.474757][ T7996] veth0_vlan: entered promiscuous mode [ 655.673503][ T7996] veth1_vlan: entered promiscuous mode [ 656.309170][ T7996] veth0_macvtap: entered promiscuous mode [ 656.428563][ T7996] veth1_macvtap: entered promiscuous mode [ 656.680662][ T8147] sctp: [Deprecated]: syz.2.1120 (pid 8147) Use of int in maxseg socket option. [ 656.680662][ T8147] Use struct sctp_assoc_value instead [ 656.734590][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.746236][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.758186][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.769760][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.780390][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.793816][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.804501][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.820834][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.840431][ T7996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.038048][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.050684][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.061319][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.072325][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.082821][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.095518][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.107352][ T7996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.120536][ T7996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.141823][ T7996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.388528][ T7996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.398571][ T7996] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.418851][ T7996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.430662][ T7996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.540920][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.198227][ T8031] veth0_vlan: entered promiscuous mode [ 658.269433][ T8150] loop2: detected capacity change from 0 to 2048 [ 658.387506][ T8150] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 658.405426][ T8031] veth1_vlan: entered promiscuous mode [ 658.467979][ T1583] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 658.507360][ T8150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 658.764175][ T1583] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 658.773117][ T1583] usb 1-1: config 0 has no interface number 0 [ 658.780719][ T1583] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 658.791011][ T1583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.870092][ T1583] usb 1-1: config 0 descriptor?? [ 658.935729][ T1583] ums-realtek 1-1:0.6: USB Mass Storage device detected [ 658.973434][ T8031] veth0_macvtap: entered promiscuous mode [ 659.092899][ T8031] veth1_macvtap: entered promiscuous mode [ 659.182735][ T8] usb 1-1: USB disconnect, device number 8 [ 659.396185][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.410491][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.421019][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.432416][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.446258][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.463851][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.478952][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.489968][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.500521][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.514720][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.531589][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.840973][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.856557][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.876391][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.892152][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.904155][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.915552][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.929215][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.940099][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.951171][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.973102][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.992170][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.301044][ T8031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.310427][ T8031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.319778][ T8031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.332135][ T8031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.695656][ T8187] loop2: detected capacity change from 0 to 4096 [ 663.802135][ T8187] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 663.878897][ T8187] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 664.017762][ T8202] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 664.059351][ T8200] loop0: detected capacity change from 0 to 512 [ 664.327483][ T8200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.341448][ T8200] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 665.313233][ T7300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.189952][ T4490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.198650][ T4490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.479630][ T4490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.489266][ T4490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.017581][ T29] audit: type=1326 audit(1726005313.061:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.4.1138" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x0 [ 667.545529][ T8230] loop2: detected capacity change from 0 to 1024 [ 667.580288][ T8230] EXT4-fs: Ignoring removed orlov option [ 667.586569][ T8230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 667.702830][ T8230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.910414][ T29] audit: type=1800 audit(1726005313.971:21): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1139" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 668.456947][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.471783][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.480881][ T6934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.720112][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.728677][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.327633][ T1606] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 670.607401][ T1606] usb 3-1: config index 0 descriptor too short (expected 65323, got 119) [ 670.624006][ T1606] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.640355][ T1606] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 670.652094][ T1606] usb 3-1: config 1 has no interface number 1 [ 670.659077][ T1606] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 670.676222][ T1606] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.796339][ T1606] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 670.806092][ T1606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.814704][ T1606] usb 3-1: Product: syz [ 670.829613][ T1606] usb 3-1: Manufacturer: syz [ 670.834532][ T1606] usb 3-1: SerialNumber: syz [ 670.843296][ T8262] netlink: 'syz.1.1151': attribute type 2 has an invalid length. [ 670.851859][ T8262] netlink: 'syz.1.1151': attribute type 8 has an invalid length. [ 670.860161][ T8262] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1151'. [ 671.417299][ T1606] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 671.497204][ T1606] usb 3-1: USB disconnect, device number 10 [ 672.013034][ T8272] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1154'. [ 672.023057][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1154'. [ 672.566292][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 674.011769][ T8297] loop1: detected capacity change from 0 to 512 [ 674.126855][ T8297] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 674.293140][ T8302] loop4: detected capacity change from 0 to 128 [ 674.368345][ T8297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.381877][ T8297] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 674.964592][ T8031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.489239][ T4490] kworker/u8:34: attempt to access beyond end of device [ 675.489239][ T4490] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 675.642412][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 675.649847][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 675.764057][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.505494][ T8335] loop3: detected capacity change from 0 to 64 [ 677.659854][ T8335] syz.3.1179: attempt to access beyond end of device [ 677.659854][ T8335] loop3: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 677.674146][ T8335] Buffer I/O error on dev loop3, logical block 4096, async page read [ 677.687847][ T8335] syz.3.1179: attempt to access beyond end of device [ 677.687847][ T8335] loop3: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 677.703062][ T8335] Buffer I/O error on dev loop3, logical block 4096, async page read [ 677.717460][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 677.754538][ T29] audit: type=1800 audit(1726005323.811:22): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1179" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 677.825334][ T8335] Trying to free block not in datazone [ 677.908231][ T8321] loop2: detected capacity change from 0 to 4096 [ 678.120064][ T8340] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 678.157150][ T8336] loop1: detected capacity change from 0 to 1764 [ 678.287366][ T8321] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 678.370607][ T8321] Remounting filesystem read-only [ 678.730342][ T6934] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 678.741404][ T6934] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 678.748730][ T6934] NILFS (loop2): discard dirty block: blocknr=14, size=4096 [ 678.828554][ T6934] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 678.835615][ T6934] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 678.843541][ T6934] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 678.851038][ T6934] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 678.859185][ T6934] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 678.867060][ T6934] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 679.196558][ T8348] loop4: detected capacity change from 0 to 128 [ 679.685155][ T8350] loop0: detected capacity change from 0 to 1024 [ 680.463916][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 681.316998][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 681.601184][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 681.611499][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.679713][ T10] usb 3-1: config 0 descriptor?? [ 681.853910][ T8372] IPv6: NLM_F_CREATE should be specified when creating new route [ 681.862784][ T8372] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1197'. [ 682.261328][ T10] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 682.578242][ T10] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 682.644132][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 682.855201][ T8377] loop3: detected capacity change from 0 to 1024 [ 683.131583][ T10] usb 3-1: USB disconnect, device number 11 [ 684.322446][ T8390] loop2: detected capacity change from 0 to 256 [ 684.505452][ T8390] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 684.855218][ T8397] overlayfs: missing 'workdir' [ 686.206425][ T5250] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 686.417102][ T5250] usb 3-1: Using ep0 maxpacket: 8 [ 686.472481][ T5250] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.491435][ T5250] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.512427][ T5250] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.528201][ T5250] usb 3-1: config 1 interface 0 has no altsetting 0 [ 686.603442][ T5250] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 686.613202][ T5250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.622568][ T5250] usb 3-1: Product: syz [ 686.633412][ T5250] usb 3-1: Manufacturer: syz [ 686.639682][ T5250] usb 3-1: SerialNumber: syz [ 686.971852][ T5250] usbhid 3-1:1.0: can't add hid device: -22 [ 686.979079][ T5250] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 687.011101][ T5250] usb 3-1: USB disconnect, device number 12 [ 687.617416][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 687.765254][ T8424] syz.0.1218: attempt to access beyond end of device [ 687.765254][ T8424] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 687.786886][ T8424] syz.0.1218: attempt to access beyond end of device [ 687.786886][ T8424] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 688.443960][ T8427] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 689.124102][ T4659] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 689.413865][ T4659] usb 1-1: not running at top speed; connect to a high speed hub [ 689.632062][ T4659] usb 1-1: New USB device found, idVendor=19d2, idProduct=0113, bcdDevice=7c.57 [ 689.645491][ T4659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.657327][ T4659] usb 1-1: Manufacturer: 먈ￎ伴燉껖꣔醶⮱웟⳸ퟖ꼒双拗몆挀介৐哖恵廒藝굕㣷颁ꯣ蜓珣穿箓⟆쐗寬軸䱦畧蕥迊౮砛骤뇱퓟봍ρ犍卽핌糆ꏮᏧ뢪뚳䠪䗈᪕⭂癩縻义侯淐歰ꬬ囀읁຀е䄀筓僱⻜娬ᳬ﹨㓐쩢ɿƧ⛷鈿 [ 689.700245][ T4659] usb 1-1: SerialNumber: ట雑뾥螏୬䁗Ⱆ사觳᱙碗얅팢鏐ڨḃ䎆⹤稺༻췼꼃ꞡ̲勇铆뭴谏ਏ쨄樌鑊薑帼㊩튮昜㴒⺭궹쪌 [ 689.785370][ T4659] usb 1-1: config 0 descriptor?? [ 690.041457][ T8] usb 1-1: USB disconnect, device number 9 [ 690.629826][ T8447] loop1: detected capacity change from 0 to 1024 [ 690.696208][ T8447] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 690.894013][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1231'. [ 690.908637][ T8447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.109631][ T8456] loop4: detected capacity change from 0 to 512 [ 691.227748][ T8456] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1232: corrupted in-inode xattr: invalid ea_ino [ 691.327053][ T8456] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1232: couldn't read orphan inode 15 (err -117) [ 691.407006][ T8456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.733269][ T8031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.884030][ T7264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.836231][ T29] audit: type=1326 audit(1726005340.911:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.1249" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f45579 code=0x0 [ 696.918227][ T8505] loop1: detected capacity change from 0 to 4096 [ 697.518328][ T8524] syz.3.1263 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 697.885490][ T8505] ntfs3: loop1: failed to convert "0080" to cp850 [ 697.969676][ T8505] ntfs3: loop1: failed to convert name for inode 1e. [ 699.076357][ T8535] loop0: detected capacity change from 0 to 1024 [ 700.229856][ T2988] hfsplus: b-tree write err: -5, ino 4 [ 700.728524][ T8552] loop3: detected capacity change from 0 to 512 [ 700.875313][ T8552] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 700.883767][ T8552] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 700.999659][ T8552] System zones: 0-1, 15-15, 18-18, 34-34 [ 701.016913][ T8552] EXT4-fs (loop3): orphan cleanup on readonly fs [ 701.027508][ T8552] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 701.038435][ T8552] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 701.053767][ T8552] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 701.178275][ T8552] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1278: bg 0: block 40: padding at end of block bitmap is not set [ 701.302326][ T8552] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 701.323017][ T8552] EXT4-fs (loop3): 1 truncate cleaned up [ 701.348361][ T8552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 701.526483][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1277'. [ 701.707480][ T8559] netlink: 173 bytes leftover after parsing attributes in process `syz.0.1277'. [ 701.894664][ T7996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.976588][ T8548] loop2: detected capacity change from 0 to 4096 [ 702.031516][ T8548] ntfs3: loop2: Primary boot: invalid bytes per MFT record 126976 (31). [ 702.086238][ T8548] ntfs3: loop2: try to read out of volume at offset 0x1ffe00 [ 702.410552][ T8561] netlink: 'syz.4.1280': attribute type 3 has an invalid length. [ 703.880429][ T8568] loop4: detected capacity change from 0 to 2048 [ 704.136259][ T8574] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 704.687158][ T8574] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 704.700770][ T8574] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 704.782928][ T8574] Remounting filesystem read-only [ 704.827316][ T7264] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 704.834355][ T7264] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 704.848422][ T7264] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 704.858089][ T7264] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 704.867450][ T7264] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 704.975362][ T7264] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 704.982796][ T7264] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 704.991030][ T7264] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 705.006605][ T7264] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 705.016560][ T7264] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 706.192990][ T8597] loop2: detected capacity change from 0 to 16 [ 706.458074][ T8599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1297'. [ 709.589422][ T1606] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 709.875707][ T1606] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 709.893827][ T1606] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 709.904359][ T1606] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 709.920472][ T1606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.998368][ T8632] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 710.067403][ T1606] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 710.509250][ T5251] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 710.540564][ T10] usb 2-1: USB disconnect, device number 5 [ 710.734043][ T5251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.745677][ T5251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.769392][ T5251] usb 3-1: New USB device found, idVendor=05ac, idProduct=0062, bcdDevice= 0.00 [ 710.787197][ T5251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.863065][ T5251] usb 3-1: config 0 descriptor?? [ 711.152196][ T8651] mmap: syz.3.1318 (8651) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 711.260387][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1319'. [ 711.344154][ T8653] ax25_connect(): syz.0.1317 uses autobind, please contact jreuter@yaina.de [ 711.422414][ T5251] hid-generic 0003:05AC:0062.0006: unbalanced delimiter at end of report description [ 711.511706][ T5251] hid-generic 0003:05AC:0062.0006: probe with driver hid-generic failed with error -22 [ 711.709601][ T10] usb 3-1: USB disconnect, device number 13 [ 712.872136][ T8662] vxcan1: tx address claim with dest, not broadcast [ 713.412670][ T8674] loop0: detected capacity change from 0 to 128 [ 713.618201][ T8674] CUSE: unknown device info "40tCwحVΉ`uH~ " [ 713.637341][ T8674] CUSE: unknown device info ")ʝiV~޵~wz3_ޓH4l?D5NVѢ~y3˿j-o.]" [ 713.651587][ T8674] CUSE: unknown device info "пM;W" [ 713.660905][ T8674] CUSE: unknown device info "@iSzz" [ 713.667134][ T8674] CUSE: DEVNAME unspecified [ 714.926775][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 715.136895][ T10] usb 5-1: device descriptor read/64, error -71 [ 715.430234][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 715.614157][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'. [ 715.636344][ T10] usb 5-1: device descriptor read/64, error -71 [ 715.775329][ T10] usb usb5-port1: attempt power cycle [ 716.231924][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 716.318646][ T10] usb 5-1: device descriptor read/8, error -71 [ 716.382722][ T8707] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 716.646365][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 716.699074][ T10] usb 5-1: device descriptor read/8, error -71 [ 716.829595][ T10] usb usb5-port1: unable to enumerate USB device [ 716.889204][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 718.416451][ T8727] loop2: detected capacity change from 0 to 128 [ 718.467512][ T8727] efs: Unknown parameter 'iocharset' [ 718.516223][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 718.781969][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 718.835401][ T8] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 718.847359][ T8] usb 5-1: config 0 has no interface number 0 [ 718.911059][ T8] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 718.920810][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.930267][ T8] usb 5-1: Product: syz [ 718.934935][ T8] usb 5-1: Manufacturer: syz [ 718.940030][ T8] usb 5-1: SerialNumber: syz [ 719.008503][ T8] usb 5-1: config 0 descriptor?? [ 719.025466][ T8] asix 5-1:0.251: probe with driver asix failed with error -22 [ 719.091688][ T8731] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 719.112172][ T8733] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1359'. [ 719.358054][ T8] usb 5-1: USB disconnect, device number 12 [ 719.848654][ T8740] netem: change failed [ 720.103934][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 720.820726][ T5251] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 720.856145][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 721.056756][ T5251] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.071031][ T5251] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 721.076378][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 721.080491][ T5251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.151465][ T8] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 721.152342][ T5251] usb 4-1: config 0 descriptor?? [ 721.162306][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 721.181079][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 721.190685][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.292277][ T8] usbtmc 5-1:16.0: bulk endpoints not found [ 721.386507][ T8757] loop2: detected capacity change from 0 to 512 [ 721.422332][ T8757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 721.454013][ T5251] usb 4-1: USB disconnect, device number 6 [ 721.475220][ T8757] EXT4-fs (loop2): 1 truncate cleaned up [ 721.484049][ T8757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.635461][ T8] usb 5-1: USB disconnect, device number 13 [ 722.030745][ T6934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.625291][ T29] audit: type=1326 audit(1726005368.661:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.0.1372" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x0 [ 723.029771][ T1606] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 723.269431][ T1606] usb 3-1: Using ep0 maxpacket: 8 [ 723.316709][ T1606] usb 3-1: config index 0 descriptor too short (expected 7382, got 27) [ 723.329190][ T1606] usb 3-1: config 195 has 1 interface, different from the descriptor's value: 23 [ 723.338900][ T1606] usb 3-1: config 195 interface 0 altsetting 6 endpoint 0xC has invalid wMaxPacketSize 0 [ 723.356526][ T1606] usb 3-1: config 195 interface 0 has no altsetting 0 [ 723.413447][ T1606] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 723.423684][ T1606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.435317][ T1606] usb 3-1: Product: syz [ 723.440144][ T1606] usb 3-1: Manufacturer: syz [ 723.445464][ T1606] usb 3-1: SerialNumber: syz [ 723.481709][ T1606] hub 3-1:195.0: bad descriptor, ignoring hub [ 723.491535][ T1606] hub 3-1:195.0: probe with driver hub failed with error -5 [ 723.507053][ T1606] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 723.543007][ T8779] tun0: tun_chr_ioctl cmd 1074025677 [ 723.549285][ T8779] tun0: linktype set to 780 [ 723.846572][ T1606] gspca_zc3xx: reg_w_i err -71 [ 724.489670][ T1606] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 724.496972][ T1606] gspca_zc3xx 3-1:195.0: probe with driver gspca_zc3xx failed with error -71 [ 724.639200][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 724.706618][ T8789] netlink: 'syz.1.1383': attribute type 2 has an invalid length. [ 724.776484][ T1606] usb 3-1: reset high-speed USB device number 14 using dummy_hcd [ 725.572812][ T8794] loop1: detected capacity change from 0 to 512 [ 725.726846][ T8794] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a056c01c, mo2=0002] [ 725.737135][ T8794] System zones: 0-2, 18-18, 34-34 [ 725.748869][ T8794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 725.785431][ T8794] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 725.801070][ T8794] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 725.809726][ T8] usb 3-1: USB disconnect, device number 14 [ 725.966072][ T8794] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.1385: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 726.036663][ T8794] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1385: couldn't read orphan inode 13 (err -117) [ 726.091011][ T8794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 726.340898][ T8794] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 726.435631][ T8794] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a056c01c, mo2=0002] [ 726.497755][ T8794] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 726.888954][ T8031] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.635699][ T8819] loop2: detected capacity change from 0 to 256 [ 727.721888][ T8819] msdos: Unknown parameter '0xffffffffffffffff' [ 727.812705][ T5251] kernel write not supported for file bpf-prog (pid: 5251 comm: kworker/1:5) [ 727.869285][ T8821] netlink: 'syz.3.1396': attribute type 1 has an invalid length. [ 728.713135][ T8831] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1400'. [ 729.238281][ T8837] loop4: detected capacity change from 0 to 128 [ 730.067034][ T8848] loop4: detected capacity change from 0 to 64 [ 730.398604][ T8850] IPVS: stopping master sync thread 8851 ... [ 730.830380][ T8853] loop2: detected capacity change from 0 to 1024 [ 731.012043][ T8853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.189762][ T8853] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 731.211787][ T8853] overlayfs: conflicting lowerdir path [ 731.724297][ T6934] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 731.803284][ T6934] EXT4-fs error (device loop2): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 11 [ 732.484974][ T5251] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 732.514119][ T6934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.618241][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.751355][ T5251] usb 5-1: Using ep0 maxpacket: 8 [ 732.821215][ T5251] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 732.835449][ T5251] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.905576][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.951833][ T5251] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 732.964488][ T5251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.980562][ T5251] usb 5-1: Product: syz [ 732.985026][ T5251] usb 5-1: Manufacturer: syz [ 732.995435][ T5251] usb 5-1: SerialNumber: syz [ 733.072183][ T8868] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 733.160885][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.371454][ T5251] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 733.400140][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.461058][ T5251] usb 5-1: USB disconnect, device number 14 [ 733.518398][ T8878] program syz.0.1423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 733.643976][ T8879] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 733.770005][ T13] bridge_slave_1: left allmulticast mode [ 733.779367][ T13] bridge_slave_1: left promiscuous mode [ 733.786622][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.819903][ C1] sd 0:0:1:0: [sda] tag#4464 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 733.826506][ T13] bridge_slave_0: left allmulticast mode [ 733.830941][ C1] sd 0:0:1:0: [sda] tag#4464 CDB: Read(6) 08 00 00 00 00 00 [ 733.836712][ T13] bridge_slave_0: left promiscuous mode [ 733.851590][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.687821][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.777750][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.830430][ T13] bond0 (unregistering): Released all slaves [ 735.595168][ T8884] loop4: detected capacity change from 0 to 512 [ 735.676909][ T8884] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 735.874177][ T13] hsr_slave_0: left promiscuous mode [ 735.896113][ T8884] EXT4-fs (loop4): 1 orphan inode deleted [ 735.902450][ T8884] EXT4-fs (loop4): 1 truncate cleaned up [ 735.913979][ T8884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.964735][ T13] hsr_slave_1: left promiscuous mode [ 736.042192][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.060439][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.094833][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.103021][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.193799][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 736.206188][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.219046][ T13] veth1_macvtap: left promiscuous mode [ 736.225063][ T13] veth0_macvtap: left promiscuous mode [ 736.231515][ T13] veth1_vlan: left promiscuous mode [ 736.237423][ T13] veth0_vlan: left promiscuous mode [ 736.310338][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 736.407233][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 736.425001][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 736.497677][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 736.890062][ T7264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.090019][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 737.097932][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 737.469071][ T13] team0 (unregistering): Port device team_slave_1 removed [ 737.561760][ T13] team0 (unregistering): Port device team_slave_0 removed [ 738.087029][ T8887] netlink: 'syz.0.1426': attribute type 3 has an invalid length. [ 738.576080][ T52] Bluetooth: hci2: command tx timeout [ 739.374924][ T8892] chnl_net:caif_netlink_parms(): no params data found [ 740.656358][ T52] Bluetooth: hci2: command tx timeout [ 740.965637][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.973829][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.982069][ T8892] bridge_slave_0: entered allmulticast mode [ 740.992047][ T8892] bridge_slave_0: entered promiscuous mode [ 741.061486][ T8928] loop3: detected capacity change from 0 to 128 [ 741.080510][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.089704][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.097949][ T8892] bridge_slave_1: entered allmulticast mode [ 741.107960][ T8892] bridge_slave_1: entered promiscuous mode [ 741.136908][ T8928] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 741.327801][ T8928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 741.329645][ T8911] loop0: detected capacity change from 0 to 4096 [ 741.381227][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.465234][ T8911] NILFS (loop0): invalid segment: Checksum error in segment payload [ 741.480630][ T8911] NILFS (loop0): trying rollback from an earlier position [ 741.502365][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.759463][ T8911] NILFS (loop0): recovery complete [ 741.804803][ T8933] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 741.858291][ T8892] team0: Port device team_slave_0 added [ 741.959740][ T8892] team0: Port device team_slave_1 added [ 741.981124][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1444'. [ 742.272653][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.280849][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.311528][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.484811][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.492337][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.522646][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.726812][ T52] Bluetooth: hci2: command tx timeout [ 743.043307][ T8892] hsr_slave_0: entered promiscuous mode [ 743.108106][ T8892] hsr_slave_1: entered promiscuous mode [ 743.163261][ T8892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.171598][ T8892] Cannot create hsr debugfs directory [ 743.874676][ T8950] capability: warning: `syz.3.1454' uses 32-bit capabilities (legacy support in use) [ 743.961913][ T8952] loop4: detected capacity change from 0 to 256 [ 744.270216][ T8954] loop0: detected capacity change from 0 to 512 [ 744.352334][ T8954] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 744.468777][ T8954] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1451: iget: bad i_size value: -67835469387268086 [ 744.541470][ T8954] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1451: couldn't read orphan inode 15 (err -117) [ 744.653555][ T8954] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.671469][ T8954] ext2 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.806300][ T52] Bluetooth: hci2: command tx timeout [ 744.830642][ T8962] loop4: detected capacity change from 0 to 64 [ 744.984180][ T8892] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 745.017303][ T8892] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 745.107618][ T8892] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 745.129071][ T1606] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 745.209858][ T8892] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 745.238419][ T8954] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.1451: Directory hole found for htree leaf block 0 [ 745.335608][ T1606] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 745.348444][ T1606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.389575][ T8954] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.1451: Directory hole found for htree leaf block 0 [ 745.429765][ T1606] usb 4-1: config 0 descriptor?? [ 745.503095][ T1606] cp210x 4-1:0.0: cp210x converter detected [ 745.553367][ T8967] loop4: detected capacity change from 0 to 8 [ 746.016953][ T1606] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 746.067150][ T1606] usb 4-1: cp210x converter now attached to ttyUSB0 [ 746.113601][ T7300] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 746.297128][ T1606] usb 4-1: USB disconnect, device number 7 [ 746.332414][ T1606] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 746.412010][ T1606] cp210x 4-1:0.0: device disconnected [ 746.827957][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.064155][ T8892] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.187525][ T3099] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.195365][ T3099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.314817][ T3099] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.322860][ T3099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.658368][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 747.778751][ T8977] netlink: 173 bytes leftover after parsing attributes in process `syz.4.1463'. [ 748.575578][ T8980] loop0: detected capacity change from 0 to 1024 [ 748.924038][ T8980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.937283][ T8980] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.793540][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.937387][ T8995] loop1: detected capacity change from 0 to 1024 [ 749.947239][ T7300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.004518][ T8995] EXT4-fs (loop1): first meta block group too large: 7 (group descriptor block count 1) [ 750.580609][ T8892] veth0_vlan: entered promiscuous mode [ 750.664658][ T9004] loop3: detected capacity change from 0 to 256 [ 750.725730][ T8892] veth1_vlan: entered promiscuous mode [ 750.776288][ T5252] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 750.933029][ T9006] loop1: detected capacity change from 0 to 1024 [ 751.037982][ T5252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.049828][ T5252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.060233][ T5252] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 751.069746][ T5252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.105288][ T8892] veth0_macvtap: entered promiscuous mode [ 751.122179][ T5252] usb 5-1: config 0 descriptor?? [ 751.252376][ T8892] veth1_macvtap: entered promiscuous mode [ 751.536458][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.540731][ T13] hfsplus: b-tree write err: -5, ino 4 [ 751.547618][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.547720][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.547824][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.547920][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.548021][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.548118][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.548216][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.548309][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.548412][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.554672][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.656271][ T5252] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 751.656492][ T5252] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 751.656711][ T5252] cm6533_jd 0003:0D8C:0022.0007: item fetching failed at offset 2/5 [ 751.693811][ T5252] cm6533_jd 0003:0D8C:0022.0007: parse failed [ 751.694366][ T5252] cm6533_jd 0003:0D8C:0022.0007: probe with driver cm6533_jd failed with error -22 [ 751.882437][ T9008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1476'. [ 751.942252][ T1583] usb 5-1: USB disconnect, device number 15 [ 752.079159][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.093296][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.103621][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.114517][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.135346][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.147967][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.159941][ T9010] loop0: detected capacity change from 0 to 512 [ 752.167815][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.178740][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.192101][ T8892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.202922][ T8892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.219225][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.298181][ T8892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.308119][ T8892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.320440][ T8892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.338240][ T8892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.644879][ T9010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.661740][ T9010] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.777399][ T9015] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set [ 752.989447][ T9010] EXT4-fs error (device loop0): __ext4_remount:6491: comm syz.0.1475: Abort forced by user [ 753.059892][ T9010] EXT4-fs (loop0): Remounting filesystem read-only [ 753.088030][ T9010] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 754.659061][ T7300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.687255][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.952086][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.161520][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.410094][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.851569][ T13] bridge_slave_1: left allmulticast mode [ 755.857876][ T13] bridge_slave_1: left promiscuous mode [ 755.864693][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.986812][ T13] bridge_slave_0: left allmulticast mode [ 755.992959][ T13] bridge_slave_0: left promiscuous mode [ 756.000025][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.836791][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.899112][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.973853][ T13] bond0 (unregistering): Released all slaves [ 757.976791][ T13] hsr_slave_0: left promiscuous mode [ 758.006988][ T13] hsr_slave_1: left promiscuous mode [ 758.039769][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.048019][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.139286][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.147331][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.236682][ T13] veth1_macvtap: left promiscuous mode [ 758.242634][ T13] veth0_macvtap: left promiscuous mode [ 758.248946][ T13] veth1_vlan: left promiscuous mode [ 758.254590][ T13] veth0_vlan: left promiscuous mode [ 759.030523][ T4569] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 759.118586][ T4569] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 759.128868][ T4569] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 759.200822][ T4569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 759.339564][ T13] team0 (unregistering): Port device team_slave_1 removed [ 759.436985][ T4569] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 759.455182][ T4569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 759.493074][ T13] team0 (unregistering): Port device team_slave_0 removed [ 759.607867][ T5192] Bluetooth: hci4: command 0x0406 tx timeout [ 759.987002][ T9049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1490'. [ 760.682409][ T9050] loop1: detected capacity change from 0 to 4096 [ 760.910879][ T9061] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 761.463564][ T9052] chnl_net:caif_netlink_parms(): no params data found [ 761.606052][ T4569] Bluetooth: hci3: command tx timeout [ 762.247404][ T9076] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 762.275438][ T9075] IPVS: stopping master sync thread 9076 ... [ 762.998193][ T9083] netlink: 'syz.1.1498': attribute type 1 has an invalid length. [ 763.006495][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1498'. [ 763.481945][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.500477][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.508774][ T9052] bridge_slave_0: entered allmulticast mode [ 763.521815][ T9052] bridge_slave_0: entered promiscuous mode [ 763.618093][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.626244][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.634351][ T9052] bridge_slave_1: entered allmulticast mode [ 763.647838][ T9052] bridge_slave_1: entered promiscuous mode [ 763.707089][ T52] Bluetooth: hci3: command tx timeout [ 764.144619][ T9052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.262384][ T1583] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 764.297169][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.305653][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.398837][ T9052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.618545][ T1583] usb 5-1: Using ep0 maxpacket: 16 [ 764.642025][ T1583] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 764.706558][ T9052] team0: Port device team_slave_0 added [ 764.743556][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 764.759022][ T1583] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 764.769637][ T1583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.779188][ T1583] usb 5-1: Product: syz [ 764.783755][ T1583] usb 5-1: Manufacturer: syz [ 764.790371][ T1583] usb 5-1: SerialNumber: syz [ 764.819749][ T9052] team0: Port device team_slave_1 added [ 764.942988][ T1583] usb 5-1: config 0 descriptor?? [ 765.000030][ T1583] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 765.010303][ T1583] usb 5-1: Detected FT232R [ 765.056289][ T3099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.064763][ T3099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.213849][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.222639][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.258801][ T9052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.356684][ T1583] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 765.471234][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.478947][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.508990][ T9052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.636923][ T1583] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 765.767375][ T4569] Bluetooth: hci3: command tx timeout [ 765.801974][ T5250] usb 5-1: USB disconnect, device number 16 [ 765.907629][ T5250] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 765.922083][ T5250] ftdi_sio 5-1:0.0: device disconnected [ 766.215175][ T9052] hsr_slave_0: entered promiscuous mode [ 766.310782][ T9052] hsr_slave_1: entered promiscuous mode [ 766.397206][ T9052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.405169][ T9052] Cannot create hsr debugfs directory [ 767.849344][ T4569] Bluetooth: hci3: command tx timeout [ 767.917103][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 767.945415][ T9107] ipvlan2: entered allmulticast mode [ 767.951367][ T9107] veth0_vlan: entered allmulticast mode [ 768.542659][ T9052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 768.632808][ T9101] loop3: detected capacity change from 0 to 4096 [ 768.678530][ T9052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 768.728555][ T9101] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 768.811754][ T9101] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 768.842117][ T9052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 768.928186][ T9052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 769.034782][ T9115] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 769.301490][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'. [ 770.137682][ T9126] loop1: detected capacity change from 0 to 128 [ 770.208519][ T9126] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 770.231250][ T9126] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 770.380417][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.641598][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.769213][ T3099] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.777181][ T3099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.907691][ T3099] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.915609][ T3099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.089170][ T8031] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 771.259025][ T9052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 772.301442][ T13] ===================================================== [ 772.309439][ T13] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0x539/0xb40 [ 772.320101][ T13] n_tty_receive_buf_closing+0x539/0xb40 [ 772.326966][ T13] n_tty_receive_buf_common+0x196b/0x2490 [ 772.333575][ T13] n_tty_receive_buf2+0x4c/0x60 [ 772.339449][ T13] tty_ldisc_receive_buf+0xd0/0x290 [ 772.345465][ T13] tty_port_default_receive_buf+0xdf/0x190 [ 772.352627][ T13] flush_to_ldisc+0x473/0xdb0 [ 772.358415][ T13] process_scheduled_works+0xae0/0x1c40 [ 772.365334][ T13] worker_thread+0xea7/0x14d0 [ 772.370984][ T13] kthread+0x3e2/0x540 [ 772.376098][ T13] ret_from_fork+0x6d/0x90 [ 772.381331][ T13] ret_from_fork_asm+0x1a/0x30 [ 772.387075][ T13] [ 772.390799][ T13] Uninit was created at: [ 772.396085][ T13] __kmalloc_noprof+0x661/0xf30 [ 772.411037][ T13] __tty_buffer_request_room+0x36e/0x6d0 [ 772.417734][ T13] __tty_insert_flip_string_flags+0x140/0x570 [ 772.425043][ T13] uart_insert_char+0x39e/0xa10 [ 772.430962][ T13] serial8250_read_char+0x1a7/0x5d0 [ 772.437482][ T13] serial8250_handle_irq+0x77a/0xb80 [ 772.443667][ T13] serial8250_default_handle_irq+0x120/0x2b0 [ 772.450779][ T13] serial8250_interrupt+0xc5/0x360 [ 772.456761][ T13] __handle_irq_event_percpu+0x118/0xca0 [ 772.462960][ T13] handle_irq_event+0xef/0x2c0 [ 772.468129][ T13] handle_edge_irq+0x340/0xfb0 [ 772.473163][ T13] __common_interrupt+0x97/0x1f0 [ 772.478567][ T13] common_interrupt+0x8f/0xa0 [ 772.483465][ T13] asm_common_interrupt+0x2b/0x40 [ 772.489070][ T13] [ 772.491551][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 772.507494][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 772.518913][ T13] Workqueue: events_unbound flush_to_ldisc [ 772.525194][ T13] ===================================================== [ 772.532936][ T13] Disabling lock debugging due to kernel taint [ 772.539361][ T13] Kernel panic - not syncing: kmsan.panic set ... [ 772.546015][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G B 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0 [ 772.558562][ T13] Tainted: [B]=BAD_PAGE [ 772.562889][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 772.573291][ T13] Workqueue: events_unbound flush_to_ldisc [ 772.579411][ T13] Call Trace: [ 772.582844][ T13] [ 772.586007][ T13] dump_stack_lvl+0x216/0x2d0 [ 772.590949][ T13] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 772.597215][ T13] dump_stack+0x1e/0x30 [ 772.601615][ T13] panic+0x4e2/0xcd0 [ 772.605814][ T13] ? kmsan_get_metadata+0xd1/0x1c0 [ 772.611223][ T13] kmsan_report+0x2c7/0x2d0 [ 772.616015][ T13] ? kmsan_get_metadata+0x13e/0x1c0 [ 772.621502][ T13] ? kmsan_get_metadata+0x13e/0x1c0 [ 772.627418][ T13] ? __msan_warning+0x95/0x120 [ 772.632516][ T13] ? n_tty_receive_buf_closing+0x539/0xb40 [ 772.638562][ T13] ? n_tty_receive_buf_common+0x196b/0x2490 [ 772.644706][ T13] ? n_tty_receive_buf2+0x4c/0x60 [ 772.650039][ T13] ? tty_ldisc_receive_buf+0xd0/0x290 [ 772.655866][ T13] ? tty_port_default_receive_buf+0xdf/0x190 [ 772.662111][ T13] ? flush_to_ldisc+0x473/0xdb0 [ 772.667393][ T13] ? process_scheduled_works+0xae0/0x1c40 [ 772.673463][ T13] ? worker_thread+0xea7/0x14d0 [ 772.678839][ T13] ? kthread+0x3e2/0x540 [ 772.683437][ T13] ? ret_from_fork+0x6d/0x90 [ 772.688244][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 772.693439][ T13] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 772.699551][ T13] ? is_last_task_frame+0x1d8/0x420 [ 772.705074][ T13] ? kmsan_get_metadata+0x13e/0x1c0 [ 772.710553][ T13] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 772.716647][ T13] ? kmsan_get_metadata+0x13e/0x1c0 [ 772.722285][ T13] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 772.728395][ T13] ? kmsan_get_metadata+0x13e/0x1c0 [ 772.733879][ T13] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 772.740060][ T13] ? kmsan_get_metadata+0x13e/0x1c0 [ 772.745539][ T13] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 772.751718][ T13] __msan_warning+0x95/0x120 [ 772.756569][ T13] n_tty_receive_buf_closing+0x539/0xb40 [ 772.762484][ T13] n_tty_receive_buf_common+0x196b/0x2490 [ 772.768510][ T13] n_tty_receive_buf2+0x4c/0x60 [ 772.773670][ T13] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 772.779447][ T13] tty_ldisc_receive_buf+0xd0/0x290 [ 772.785025][ T13] tty_port_default_receive_buf+0xdf/0x190 [ 772.791139][ T13] flush_to_ldisc+0x473/0xdb0 [ 772.796341][ T13] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 772.803057][ T13] ? __pfx_flush_to_ldisc+0x10/0x10 [ 772.808527][ T13] process_scheduled_works+0xae0/0x1c40 [ 772.814545][ T13] worker_thread+0xea7/0x14d0 [ 772.819501][ T13] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 772.825711][ T13] kthread+0x3e2/0x540 [ 772.830055][ T13] ? __pfx_worker_thread+0x10/0x10 [ 772.835537][ T13] ? __pfx_kthread+0x10/0x10 [ 772.840498][ T13] ret_from_fork+0x6d/0x90 [ 772.845140][ T13] ? __pfx_kthread+0x10/0x10 [ 772.850135][ T13] ret_from_fork_asm+0x1a/0x30 [ 772.855220][ T13] [ 772.858727][ T13] Kernel Offset: disabled [ 772.863358][ T13] Rebooting in 86400 seconds..