last executing test programs: 1m9.921657166s ago: executing program 0 (id=73): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000440)={&(0x7f0000000080)=[{0x2, 0x1000, 0x2, &(0x7f0000000140)="89c3"}], 0x1}) 1m7.736328406s ago: executing program 0 (id=83): socket$kcm(0xf, 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 1m7.223094997s ago: executing program 0 (id=87): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x884) 1m6.983085845s ago: executing program 0 (id=90): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x8010, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x1, 0x14e0, &(0x7f0000002a80)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 1m6.418795269s ago: executing program 0 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 1m5.523047809s ago: executing program 0 (id=106): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x10044, &(0x7f0000006b40)=ANY=[@ANYBLOB="63726561746f723dde6256b12c636f6465706167653d6d6163677265656b2c696f636861727365743d63703836362c756d61736b3d30303030303030303030303030303030303030303030352c00e4cf2d3a91a80628ea6b1bc6025a3322673c9a6ca7e1bfc0fbffeba166ebdb"], 0x4, 0x2e3, &(0x7f0000006bc0)="$eJzs3c1OE10cx/HfmbZQXsIzD/DkMW4kKIluiKgL46bGdOvelVFpSYgNRsBE3YjGpfECdO0teBFuNN6Arlx5AezGnNPTYdpOpxRph8L3k7SeOT0v//HMdM4ZAiMAZ9ad6o9P13/Zl5EKKki6JQWSylJR0n/6v/xsa3dzt1GvZTVUcDXsy6hZ03SVWd+qp1W19VwNL7RbRc0m8zAcURTd/pl3EMidO/tTBNKkPw/d5+URxzUse9KFvGMYteQAm33t67nmcgwHAHAC+Ot/4C8Tsy7LKAikFX/ZP1XX//28AzheNxpdWVFmhcT1383uImPH9x/30cF6zy3h7OdBa5V4mGBKHdsTah5ZbRNM029V6WIJpjY2i1pdf61aoDeqeIlii+691jx0W/pEu6yPh9mP/q2VdHe6uTduRtmpFdLGZqM+aRMp8S8M1uPfM1/MN3PfhPqgWjz/K0bGDpMbqbBjpIKSjf9q7xZnXC1bSn7ZX6lUgrYi/7pOzvsevD57WU5fkSTbbN0g2Isj6IhzKrnh+p5X+22F7D5atRY6arn/kzDe6lFrsa1WwR8Jq+tPGpm3UoZjzf9r3pt7Zlm/9VnVxPw/sPGtKHFmdn3VL52Lk8aV9EdGc38m0rstupJh15Xj4HRZiiPwJo+2g2fdYHfL3umRbmpu58XLx4VGo75tEw9TEk9nt43PKb2VUssMP1FQRhntHeRE1qsoOmzL0TCDv3KsDdrvjzjHnj5phe1ZFucEox6mgRM6GWEMmqh+VdYBOT6JKFKvIRja9xROkB3TGnSfMZVzQBg1O+8yzfWfm8n7WZ1b+9m3MGOenr3IVFuLa/EKrn0qOO/epwdawc2k/HSxu8drPdaMbs118bJ0KZFplNlj6OM8JUxV3/WA+/8AAAAAAAAAAAAAAAAAAADjZhS/aZD3PgIAAAAAAAAAAAAAAAAAAAAAMO6O9PzftL8R757/G/L8X2CM/AkAAP//9vh3Wg==") syz_io_uring_setup(0x3f0, &(0x7f00000003c0)={0x0, 0x7aba, 0x10100, 0x10000003, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000440)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x43b5fc1a6955b277, 0x0, @fd, 0x1ffa, 0x0, 0x4, 0x0, 0x1}) 1m4.772544637s ago: executing program 32 (id=106): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x10044, &(0x7f0000006b40)=ANY=[@ANYBLOB="63726561746f723dde6256b12c636f6465706167653d6d6163677265656b2c696f636861727365743d63703836362c756d61736b3d30303030303030303030303030303030303030303030352c00e4cf2d3a91a80628ea6b1bc6025a3322673c9a6ca7e1bfc0fbffeba166ebdb"], 0x4, 0x2e3, &(0x7f0000006bc0)="$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") syz_io_uring_setup(0x3f0, &(0x7f00000003c0)={0x0, 0x7aba, 0x10100, 0x10000003, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000440)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x43b5fc1a6955b277, 0x0, @fd, 0x1ffa, 0x0, 0x4, 0x0, 0x1}) 40.147061488s ago: executing program 4 (id=238): setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) syz_clone(0x40010000, 0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000000d80)) fcntl$getown(0xffffffffffffffff, 0x9) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002080)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40, 0x2}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2ce8}) 39.87091034s ago: executing program 4 (id=243): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1d, 0x2, 0x6) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$inet6(0xa, 0x80002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) 38.946795902s ago: executing program 4 (id=250): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 38.811587463s ago: executing program 4 (id=251): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x8010, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x1, 0x14e0, &(0x7f0000002a80)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x48, &(0x7f0000000540)=[&(0x7f0000000280)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x200}]) 38.160234924s ago: executing program 4 (id=254): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x207, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/51, 0x33}, 0x1}], 0x1, 0x4020, 0x0) 37.772203724s ago: executing program 4 (id=257): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10000, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 37.30964942s ago: executing program 33 (id=257): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10000, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 33.174206543s ago: executing program 1 (id=297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) 32.902487414s ago: executing program 1 (id=299): unshare(0x400) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_int(r0, 0x1, 0x4a, 0x0, &(0x7f0000000080)) 32.629623025s ago: executing program 1 (id=302): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) 32.239062536s ago: executing program 1 (id=304): io_uring_setup(0x1ddd, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 32.114090415s ago: executing program 1 (id=305): syz_io_uring_setup(0xf02, &(0x7f0000000180)={0x0, 0x0, 0x4}, 0x0, 0x0) 31.92127498s ago: executing program 1 (id=306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, 0x0) 31.309926708s ago: executing program 34 (id=306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, 0x0) 6.883098364s ago: executing program 3 (id=442): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close_range(r0, r1, 0x0) 6.509113463s ago: executing program 3 (id=443): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_oob_ext_data={{0x10}, {0x10, "a8bebc332ed2d7549a215cfcb132608e", "2ff98e5e9e2fc47651e3be978b25eb56", "fed2786f2e3df25d7759179d3b9f13b2", "9c77b289a50ec6ab260bf16dbff3dcc4"}}}}, 0x47) 6.229573445s ago: executing program 3 (id=446): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 4.946769935s ago: executing program 3 (id=452): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x20, 0xa, 0x5, {0x5, 0xf, "00f44f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) 3.043164663s ago: executing program 2 (id=471): r0 = socket(0x11, 0x80a, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 3.042952973s ago: executing program 3 (id=472): r0 = socket(0xa, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000440)) 2.986858208s ago: executing program 2 (id=473): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.942311721s ago: executing program 3 (id=474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x10}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xffe0}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.685011749s ago: executing program 5 (id=480): syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) listen(0xffffffffffffffff, 0x6f6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140001800500020001010000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1.439701758s ago: executing program 5 (id=482): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1.347073866s ago: executing program 5 (id=484): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, 0x0, 0x0) 1.251305903s ago: executing program 5 (id=485): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2edb, 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x2, 0x0, 0x98, &(0x7f0000000040)={0x7f, 0x2, 0x10}}) 1.111056854s ago: executing program 5 (id=487): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000006d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003200)=""/43, 0x2b}, 0xb11}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.047150669s ago: executing program 6 (id=488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x40, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x81, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc8, 0x1}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x80000000000, 0xf801, 0x7000, [0x0, 0x0, 0x1]}) 958.684576ms ago: executing program 5 (id=489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5f, 0xfc, 0x70, 0x20, 0x711, 0x210, 0xfdd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x2, 0xbe, 0x44, 0x8f, 0xff, [], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0xf, 0x5, [@generic={0x7, 0x5, "bdf74e3781"}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x40, 0xe, 0x4b, 0x2}}]}}]}}]}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000e40)=0x60, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x2000000, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 839.173585ms ago: executing program 6 (id=490): unshare(0x2a060400) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x5, 0x0, 0x0) 838.996355ms ago: executing program 2 (id=491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2b, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x8}]}, 0x1c}}, 0x0) 771.61373ms ago: executing program 6 (id=492): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000440)={0xcf50, 0x2924, 0xffff, 0x9e02, 0x11}) 743.152392ms ago: executing program 2 (id=493): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 611.005773ms ago: executing program 6 (id=494): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xfd, 0xc4d, &(0x7f0000001b40)="$eJzs3V1sXGdaB/DnnWMndsqyU9qmXbpIsxSxaZoE56OtUVrkbIy1K0VtVMcLNyCP40kY1R67trNKK1gFCbgBQVCRVsAFuUHigovcIKEVQhE3iwRIEajSIpAItI1WQoBXsLBiJYzOzDv22BvXbr6cNL/fbvKfc+Y9M++Z9jlzpprnTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV/46RNDh9NOzwIAuJ9eG39j6Kj3fwB4pJzx+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK2lKOKtSPHe2HKabC93DJxqti5cnBgdu/VmgylSVKJojy//DBw+cvTYiy+9PNzNj97+bvtMvD5+5kTt5Nzs/EJjcbExXZtoNc/OTTe2/Qh3uv1G+9svQG32zQvT584t1o4cOrru7ovVm7sf21s9Pvzsgee7YydGx8bGe8b09d/2s3+fdPceik+QXVHEFyPFNw5+K9UjohJ3XgtbHDvutcHoK+uvvRMTo2PtHZlp1ltL5Z2pkkf1RVR7Nhrp1sh9qMU7MhJxqfznVE54f7l74/P1hfrUTKN2ur6w1FxqzrVSpTPbcn+qUYnhFDEfEcvFTk+eB01/FPFqpLj5veU0FRFFtw5eeG38jaGjm2/Ydx8nucnTV4uI6/EQ1Cw8oHZHEb8dKd6dHIqzua7aZfNBxOfLfCXirTKvpbicl1N5gBiO+Lb3E3io9UURfxMp5tJymu7Wfvu88tSXa19qnZvrGds9r3zoPx/cT85NeIANRBFT7TP+5XT7/7ELAAAAAAAAAAAAALg/ivh6pLg6uy/NR29PabN1vnamPjXT+VZw97v/tbzVysrKSjV1spZzKOdIztM5J3PO57yU83LOKzmv5ryW83rOGzmXc0YlP3/OWs6hnCM5T+eczDmf81LOyzmvdLLb0bhyLa+/nvNGzuWcoe8JAAAAAAAAAAAAAAAAAACAu2wwiviNSPHvv/+V9u9KR/t36T99fPjkqU/1/mb8M1s8Tjn2UER8Pbb3m7y78m+Np0r5v7u/X8DWBqKIr+bf//vlnZ4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQKhEEb8SKb72neUUKSJGIiajkzeKnZ4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDanYp4NVL87O+OrK7ri4jU/n/HvvKvYzFS5HyizFdi5HA7KyMnyhyIOLQD8wdu3+Lb77xZn5lpLLjhhhturN7Y6SMTAAAAAAAAAAAAAAAAADzCUhF/Hyl+8veWUzUiLlZv7n5sb/X48LMHni+iaF8EIPWOf338zInaybnZ+YXG4mJjujbRap6dm25s9+kGTjVbFy5OjI7dk53Z0uA9nv/gwMm5+bcXmud/YemW9+8ZODG1uLRQP3vru2Mw+iKGetfsb094YnSsPemZZr3V3jRVNplgX0RtuzvDI29PKuJ/I8V7B78Zj+d1+fof/Z2lter/w19cW/rhvvW5+q9j+/jx6ePDJ/c8t53babsT3d8uvLIQxsZ7VvflWf5Qz7pqnte2HxseUWX9vxApfv6PitStoVz/P9BZKlbH/s9X12rq+IZctUP1/0TPuuP5qNXfFzGwNDvf/3TEwOLb7xxsztbPN843WseOvPzS8LGXXzz2Uv+uiIFzzZnG0Nqtbb92AAAAAAAAAAAAAAAAAHCv9KcivhApfunv/nK1bzz3/32qs7TW/9fb/7tvw+P0Xjdgs9u37PXboq+vV/mcKRXxVKR49s+eac83xR4973Cb9qQivlvW0/QX0+fyulz/ubP/1vV/aUOu2qH+38d71l3Kx4n/iBSP/8Ez8bme48TG7t5y3F9Eiqkf+WweF7vKcd3H6/REdxqDy7FfiRTvn14/tts3/cTa2MPb3S3YSWX9z0aKf/itv40fzevWX//j1vW/Z0Ou2qH6f7J3nyJi8e133qzPzDQWFrf9UsAjp6z/X48Uf/0n34zn8rqPuv5P9zo/+55bn4PdQTtU/0/1rKvmef3Yx3wtAAAAAAAAAAAA4GGxJxXxT5Hiz//0QDqY123n+7/TG3LVDn3/7+meddPrvv97725s+0UGAIAHRH8q4icixR9Pf5C6vbGb9v++stb/M7rxxL19Tv+D7T7/j3Wu/zH6/8vnTKmI/8t9vUNb9PX+eKT4tZ86kMelveW4ke50238PvDbXOnhiZmbubH2pPjXTqI3P1882ym33R4p//bfP5m0r7T7fbn90pzd4rSf4dyLFz33YHdvpCe72Uj65NvZwOfZgpPju++vHdvuunlobe6Qc+5uRYuy/bz1279rYo+XYf4wU//lurTt2Tzm2+3nu6bWxh87OzXzfRzYAAAAAAAAAAAAAAAAAAAB2Xn8qIkWKaz9zZbU3fv31v7rXAVh//a+N7tXv/1fvzm4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEMhRRH/FSneG1tON4pyuWPgVLN14eLE6NitNxtMkaISRXt8+Wfg8JGjx1586eXhbn709nfbZ+L18TMnaifnZucXGouLjenaRKt5dm66se1HuL3ti03v2d9+AWqzb16YPndusXbk0NF1d1+s3tz92N7q8eFnDzzfHTsxOjY23jOmr3/bs99SunsPxSfIrijiryLFNw5+K/1zEVGJ266FVVscO+61wegr66+9ExOjY+0dmWnWW0vlnamSR/VFVHs2GunWyH2oxTsyEnEpIirlhPeXuzc+X1+oT800aqfrC0vNpeZcK1U6sy33pxqVGE4R8xGxvPnRikdUfxRxLVLc/N5y+pei84bWroMXXht/Y+jo5hv23cdJbvL01SLiejwENQsPqN1RxJOR4t3JoXi/6NRVu2w+iPh8ma9EvFXmtRSX83IqDxDDEd/2fgIPtb4o4nSkmEvL6YMi1377vPLUl2tfap2b6xnbPa986D8f3E/OTXiADUQRH7bP+JfTh97PAQAAAAAAAAAAAOABV8SrkeLq7L7U7g9d7Sltts7XztSnZjpf6+9+97+Wt1pZWVmppk7Wcg7lHMl5Oudkzvmcl3Jeznkl59Wc13Jez3mjnbvbjYnlclTy8+es5RzKOZLzdM7JnPM5L+W8nPNKzqs5r+W8nvNGzuWcH9H1DwAAAAAAAAAAAAAAAAAAd6QSRfxqpPjad5bTStH5fdnJ6OSN9X2uu3ZqjsC98f8BAAD//3zgG/w=") r0 = open(0x0, 0x60840, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 425.410027ms ago: executing program 2 (id=495): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000040)) 165.178138ms ago: executing program 6 (id=496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x8) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fc1300fffbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="0315000004000000140012800b0001006970766c616e0000040002800800", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 95.194493ms ago: executing program 2 (id=497): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030302c0000000000000000501cb5d7c12e5184d12ef849f01234cc0632d887ab83b9a499f253a549724d60457bb58a75adb74f3af03ad3ce885b137f28e47a314f31f232c3a9f530c68d8ba34bf01945e243cbc23403afab131b58d3a2aa64136e0a7c462f6b7050c665746acc89d02bf21ece3866519a7826f4e18fda118954b3c6e9738bfb06d6c52c8d07"], 0x1, 0x489, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x6d0e) 0s ago: executing program 6 (id=498): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffff678, @private1, 0xfffffffb}, @in={0x2, 0x4e23, @empty}], 0x2c) kernel console output (not intermixed with test programs): nted on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.405097][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.430327][ T5766] team0: Port device team_slave_1 added [ 82.436789][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.444232][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.471032][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.505110][ T5767] team0: Port device team_slave_0 added [ 82.543776][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.550859][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.577201][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.606616][ T5767] team0: Port device team_slave_1 added [ 82.627401][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.634455][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.660900][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.704358][ T51] Bluetooth: hci1: command tx timeout [ 82.718411][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.725576][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.752152][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.768428][ T5769] hsr_slave_0: entered promiscuous mode [ 82.775821][ T5769] hsr_slave_1: entered promiscuous mode [ 82.781730][ T5776] Bluetooth: hci2: command tx timeout [ 82.783347][ T51] Bluetooth: hci0: command tx timeout [ 82.792989][ T5776] Bluetooth: hci3: command tx timeout [ 82.828489][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.835780][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.862217][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.896508][ T5765] hsr_slave_0: entered promiscuous mode [ 82.903603][ T5765] hsr_slave_1: entered promiscuous mode [ 82.910723][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.918582][ T5765] Cannot create hsr debugfs directory [ 82.943840][ T5766] hsr_slave_0: entered promiscuous mode [ 82.950620][ T5766] hsr_slave_1: entered promiscuous mode [ 82.956857][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.964654][ T5766] Cannot create hsr debugfs directory [ 83.079227][ T5767] hsr_slave_0: entered promiscuous mode [ 83.086008][ T5767] hsr_slave_1: entered promiscuous mode [ 83.092964][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.101227][ T5767] Cannot create hsr debugfs directory [ 83.484890][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.498193][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.515816][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.526560][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.598387][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.620478][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.633143][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.646555][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.734229][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.751926][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.763878][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.779098][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.883342][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.912292][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.924649][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.935199][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.970605][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.023987][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.050947][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.058428][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.090335][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.097531][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.133391][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.156794][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.233975][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.266661][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.288947][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.307792][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.315030][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.325807][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.333099][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.345975][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.353170][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.383966][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.391185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.514325][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.585359][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.635397][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.642694][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.683665][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.691082][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.781000][ T51] Bluetooth: hci1: command tx timeout [ 84.823646][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.866104][ T51] Bluetooth: hci3: command tx timeout [ 84.866128][ T5776] Bluetooth: hci2: command tx timeout [ 84.866182][ T5776] Bluetooth: hci0: command tx timeout [ 84.962521][ T5769] veth0_vlan: entered promiscuous mode [ 85.006447][ T5769] veth1_vlan: entered promiscuous mode [ 85.144257][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.169192][ T5769] veth0_macvtap: entered promiscuous mode [ 85.216532][ T5769] veth1_macvtap: entered promiscuous mode [ 85.273427][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.287852][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.300621][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.311346][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.321068][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.330337][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.363327][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.396186][ T5766] veth0_vlan: entered promiscuous mode [ 85.442017][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.451837][ T5766] veth1_vlan: entered promiscuous mode [ 85.564607][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.595667][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.617216][ T5766] veth0_macvtap: entered promiscuous mode [ 85.628774][ T5765] veth0_vlan: entered promiscuous mode [ 85.657008][ T5766] veth1_macvtap: entered promiscuous mode [ 85.663051][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.673609][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.698615][ T5765] veth1_vlan: entered promiscuous mode [ 85.714189][ T5767] veth0_vlan: entered promiscuous mode [ 85.748610][ T5767] veth1_vlan: entered promiscuous mode [ 85.795872][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.809062][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.823955][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.852957][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.864775][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.885248][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.908342][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.924850][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.935743][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.946866][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.977572][ T5855] syz.1.2[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.001408][ T5767] veth0_macvtap: entered promiscuous mode [ 86.017105][ T5765] veth0_macvtap: entered promiscuous mode [ 86.045535][ T5767] veth1_macvtap: entered promiscuous mode [ 86.056565][ T5855] loop1: detected capacity change from 0 to 2048 [ 86.084558][ T5765] veth1_macvtap: entered promiscuous mode [ 86.124300][ T5855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.188205][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.205603][ T28] audit: type=1800 audit(1765719164.196:2): pid=5855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 86.233983][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.266564][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.270934][ T5860] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.295927][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.310008][ T5860] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 24 with error 28 [ 86.317920][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.329957][ T5860] EXT4-fs (loop1): This should not happen!! Data will be lost [ 86.329957][ T5860] [ 86.362296][ T5860] EXT4-fs (loop1): Total free blocks count 0 [ 86.371554][ T5860] EXT4-fs (loop1): Free/Dirty block details [ 86.377625][ T5860] EXT4-fs (loop1): free_blocks=2415919104 [ 86.382611][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.394525][ T5860] EXT4-fs (loop1): dirty_blocks=480 [ 86.402328][ T5860] EXT4-fs (loop1): Block reservation details [ 86.406820][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.408348][ T5860] EXT4-fs (loop1): i_reserved_data_blocks=30 [ 86.430435][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.444801][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.455372][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.467080][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.479978][ T1072] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 10 with error 28 [ 86.483043][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.506769][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.523960][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.534827][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.549099][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.563232][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.605337][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.614817][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.638878][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.654578][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.665170][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.676259][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.682864][ T5864] loop1: detected capacity change from 0 to 64 [ 86.686849][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.699849][ T5864] ======================================================= [ 86.699849][ T5864] WARNING: The mand mount option has been deprecated and [ 86.699849][ T5864] and is ignored by this kernel. Remove the mand [ 86.699849][ T5864] option from the mount to silence this warning. [ 86.699849][ T5864] ======================================================= [ 86.730093][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.758734][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.778139][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.789418][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.798339][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.809513][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.846640][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.855509][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.867524][ T5864] hfs: walked past end of dir [ 86.869459][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.881484][ T5776] Bluetooth: hci1: command tx timeout [ 86.892465][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.939898][ T5776] Bluetooth: hci0: command tx timeout [ 86.939926][ T5774] Bluetooth: hci3: command tx timeout [ 86.945356][ T5776] Bluetooth: hci2: command tx timeout [ 87.086151][ T644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.121007][ T644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.303958][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.333554][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.357013][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.390193][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.479144][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.511168][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.644967][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.670214][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.133874][ T5880] loop2: detected capacity change from 0 to 64 [ 88.641725][ T5890] loop2: detected capacity change from 0 to 4096 [ 88.776523][ T5899] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.940265][ T5776] Bluetooth: hci1: command tx timeout [ 89.020455][ T5776] Bluetooth: hci3: command tx timeout [ 89.021933][ T5774] Bluetooth: hci0: command tx timeout [ 89.026172][ T5776] Bluetooth: hci2: command tx timeout [ 89.052080][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.111357][ T5905] loop1: detected capacity change from 0 to 1024 [ 89.610261][ T5919] loop0: detected capacity change from 0 to 256 [ 89.856777][ T5920] warning: `syz.3.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.126460][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.259955][ T5920] bond0: (slave rose0): Enslaving as an active interface with an up link [ 90.272261][ T5930] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 90.318855][ T5940] loop1: detected capacity change from 0 to 64 [ 90.365945][ T5934] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 90.397888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 90.462491][ T5940] Trying to free block not in datazone [ 90.652335][ T5945] loop3: detected capacity change from 0 to 128 [ 90.718752][ T5945] capability: warning: `syz.3.31' uses deprecated v2 capabilities in a way that may be insecure [ 91.056653][ T5959] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 91.078775][ T5960] loop1: detected capacity change from 0 to 512 [ 91.114927][ T5770] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.340757][ T5770] usb 1-1: Using ep0 maxpacket: 16 [ 91.366046][ T5770] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 91.394103][ T5960] EXT4-fs (loop1): Test dummy encryption mode enabled [ 91.410497][ T5960] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.414137][ T5770] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 91.454842][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.463846][ T5960] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.479152][ T5770] usb 1-1: Product: syz [ 91.488709][ T5770] usb 1-1: Manufacturer: syz [ 91.488879][ T5960] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.37: bad orphan inode 131083 [ 91.509497][ T5770] usb 1-1: SerialNumber: syz [ 91.518702][ T5960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.575784][ T5770] usb 1-1: config 0 descriptor?? [ 91.612010][ T5853] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.675097][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.839466][ T5853] usb 4-1: Using ep0 maxpacket: 16 [ 91.851421][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.870397][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.886335][ T5853] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 91.897349][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.932144][ T5853] usb 4-1: config 0 descriptor?? [ 92.109448][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.152624][ T9] cfg80211: failed to load regulatory.db [ 92.294825][ T787] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 92.351052][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.356397][ T5853] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 92.367231][ T787] usb 3-1: Product: syz [ 92.379294][ T787] usb 3-1: Manufacturer: syz [ 92.397487][ T787] usb 3-1: SerialNumber: syz [ 92.428574][ T787] usb 3-1: config 0 descriptor?? [ 92.662276][ T787] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 92.767326][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.911188][ T6016] loop1: detected capacity change from 0 to 512 [ 92.932145][ T6016] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.983860][ T6016] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.000010][ T6016] EXT4-fs (loop1): 1 truncate cleaned up [ 93.007442][ T6016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.074466][ T787] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 93.094870][ T787] usb 3-1: USB disconnect, device number 2 [ 93.241302][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.030356][ T5770] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 94.066618][ T787] usb 4-1: USB disconnect, device number 2 [ 94.195201][ T6041] loop3: detected capacity change from 0 to 128 [ 94.250608][ T5770] usb 3-1: config 0 has an invalid interface number: 227 but max is 0 [ 94.258862][ T5770] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.274866][ T5770] usb 3-1: config 0 has no interface number 0 [ 94.288699][ T5770] usb 3-1: config 0 interface 227 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 94.321235][ T5770] usb 3-1: config 0 interface 227 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 94.335085][ T5770] usb 3-1: config 0 interface 227 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 94.347165][ T5770] usb 3-1: config 0 interface 227 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 94.398674][ T5770] usb 3-1: config 0 interface 227 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 94.413987][ T5770] usb 3-1: config 0 interface 227 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 94.425650][ T5770] usb 3-1: config 0 interface 227 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 94.451976][ T5770] usb 3-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=49.d0 [ 94.461666][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.479547][ T5770] usb 3-1: Product: syz [ 94.484691][ T5770] usb 3-1: Manufacturer: syz [ 94.500062][ T787] kernel write not supported for file /audio1 (pid: 787 comm: kworker/1:2) [ 94.504072][ T5770] usb 3-1: SerialNumber: syz [ 94.535348][ T5770] usb 3-1: config 0 descriptor?? [ 94.561172][ T6034] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 94.629027][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 94.737827][ T5852] usb 1-1: USB disconnect, device number 2 [ 94.803505][ T5770] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 94.896641][ T5770] usb 3-1: USB disconnect, device number 3 [ 95.104112][ T6059] process 'syz.0.61' launched '/dev/fd/3' with NULL argv: empty string added [ 95.638307][ T6076] loop0: detected capacity change from 0 to 1024 [ 95.730987][ T6076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.743275][ T5770] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.869276][ T6076] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.69: Allocating blocks 497-513 which overlap fs metadata [ 95.888817][ T6076] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.69: Allocating blocks 497-513 which overlap fs metadata [ 95.929467][ T5770] usb 4-1: Using ep0 maxpacket: 32 [ 95.942226][ T5770] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.957495][ T6076] EXT4-fs (loop0): pa ffff88807851f740: logic 48, phys. 177, len 21 [ 95.966115][ T6076] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 95.977990][ T5770] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 96.002431][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.014185][ T5770] usb 4-1: config 0 descriptor?? [ 96.052007][ T5770] dw2102: su3000_identify_state [ 96.059180][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.097293][ T5770] dvb-usb: found a 'TeVii S662' in warm state. [ 96.108947][ T5770] dw2102: su3000_power_ctrl: 1, initialized 0 [ 96.143049][ T5770] dvb-usb: bulk message failed: -22 (2/0) [ 96.189153][ T5770] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.226752][ T5770] dvbdev: DVB: registering new adapter (TeVii S662) [ 96.235663][ T6092] loop2: detected capacity change from 0 to 1024 [ 96.238889][ T6072] dvb-usb: bulk message failed: -22 (3/0) [ 96.251884][ T6072] dw2102: i2c transfer failed. [ 96.258507][ T6072] dvb-usb: bulk message failed: -22 (4/0) [ 96.265711][ T5770] usb 4-1: media controller created [ 96.271859][ T6092] EXT4-fs: inline encryption not supported [ 96.288911][ T6072] dw2102: i2c transfer failed. [ 96.298239][ T6092] EXT4-fs: Ignoring removed orlov option [ 96.301600][ T5770] dvb-usb: bulk message failed: -22 (6/0) [ 96.313815][ T5770] dw2102: i2c transfer failed. [ 96.325118][ T6092] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.349557][ T5770] dvb-usb: bulk message failed: -22 (6/0) [ 96.355368][ T5770] dw2102: i2c transfer failed. [ 96.377820][ T5770] dvb-usb: bulk message failed: -22 (6/0) [ 96.386316][ T6092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800c018, mo2=0002] [ 96.397172][ T5770] dw2102: i2c transfer failed. [ 96.419470][ T5770] dvb-usb: bulk message failed: -22 (6/0) [ 96.420582][ T6092] System zones: 0-1, 3-12 [ 96.427200][ T5770] dw2102: i2c transfer failed. [ 96.436276][ T5770] dvb-usb: bulk message failed: -22 (6/0) [ 96.446550][ T5770] dw2102: i2c transfer failed. [ 96.450032][ T787] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.453446][ T5770] dvb-usb: bulk message failed: -22 (6/0) [ 96.462597][ T6092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.487364][ T5770] dw2102: i2c transfer failed. [ 96.492392][ T5770] dvb-usb: MAC address: 02:02:02:02:02:02 [ 96.517353][ T5770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.570189][ T5770] dvb-usb: bulk message failed: -22 (3/0) [ 96.576006][ T5770] dw2102: command 0x0e transfer failed. [ 96.583318][ T28] audit: type=1800 audit(1765719174.566:3): pid=6092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.74" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 96.607045][ T5770] dvb-usb: bulk message failed: -22 (3/0) [ 96.614216][ T5770] dw2102: command 0x0e transfer failed. [ 96.674187][ T787] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.687471][ T787] usb 1-1: config 0 has no interface number 0 [ 96.698200][ T787] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 96.700990][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.716467][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.721099][ T6097] loop3: detected capacity change from 0 to 7 [ 96.745436][ T787] usb 1-1: config 0 descriptor?? [ 96.768473][ T6097] Dev loop3: unable to read RDB block 7 [ 96.778621][ T6097] loop3: unable to read partition table [ 96.791678][ T787] usb 1-1: selecting invalid altsetting 1 [ 96.799267][ T6097] loop3: partition table beyond EOD, truncated [ 96.806688][ T787] dvb_ttusb_budget: ttusb_init_controller: error [ 96.814314][ T787] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 96.868053][ T6097] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 96.939881][ T5770] dvb-usb: bulk message failed: -22 (3/0) [ 97.011465][ T5770] dw2102: command 0x0e transfer failed. [ 97.055492][ T5770] dvb-usb: bulk message failed: -22 (3/0) [ 97.108177][ T5770] dw2102: command 0x0e transfer failed. [ 97.159066][ T5770] dvb-usb: bulk message failed: -22 (1/0) [ 97.197359][ T6108] program syz.3.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.224992][ T5770] dw2102: command 0x51 transfer failed. [ 97.268445][ T5770] dvb-usb: bulk message failed: -22 (5/0) [ 97.310280][ T787] DVB: Unable to find symbol cx22700_attach() [ 97.323307][ T5770] dw2102: i2c probe for address 0x68 failed. [ 97.377954][ T5770] dvb-usb: bulk message failed: -22 (5/0) [ 97.416427][ T5770] dw2102: i2c probe for address 0x69 failed. [ 97.439396][ T5770] dvb-usb: bulk message failed: -22 (5/0) [ 97.459744][ T5770] dw2102: i2c probe for address 0x6a failed. [ 97.477822][ T787] DVB: Unable to find symbol tda10046_attach() [ 97.494502][ T6090] dvb-usb: bulk message failed: -22 (5/0) [ 97.501046][ T6090] dw2102: i2c transfer failed. [ 97.513394][ T5770] dw2102: probing for demodulator failed. Is the external power switched on? [ 97.527290][ T787] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 97.553816][ T5770] dvb-usb: no frontend was attached by 'TeVii S662' [ 97.565049][ T787] usb 1-1: USB disconnect, device number 3 [ 97.709719][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.740753][ T5770] rc_core: IR keymap rc-tt-1500 not found [ 97.746559][ T5770] Registered IR keymap rc-empty [ 97.772850][ T5770] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 97.793450][ T5770] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 97.817829][ T5770] dvb-usb: schedule remote query interval to 250 msecs. [ 97.833932][ T5770] dw2102: su3000_power_ctrl: 0, initialized 1 [ 97.840756][ T5770] dvb-usb: TeVii S662 successfully initialized and connected. [ 97.860563][ T5770] usb 4-1: USB disconnect, device number 3 [ 97.909167][ T6119] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.921273][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 97.929221][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.965059][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.988050][ T5770] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 98.086503][ T27] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 98.098556][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 98.116840][ T27] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 98.190529][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.228432][ T27] usb 3-1: Product: syz [ 98.239607][ T27] usb 3-1: Manufacturer: syz [ 98.261814][ T27] usb 3-1: SerialNumber: syz [ 98.294387][ T27] usb 3-1: config 0 descriptor?? [ 98.336153][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 98.438308][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 98.482791][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 98.505345][ T27] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 98.526883][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 98.581537][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 98.638515][ T9] usb 3-1: USB disconnect, device number 4 [ 98.657022][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.825803][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.87'. [ 98.966150][ T6143] loop0: detected capacity change from 0 to 256 [ 99.040829][ T6143] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 99.154463][ T28] audit: type=1800 audit(1765719177.146:4): pid=6143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.90" name="file1" dev="loop0" ino=1048594 res=0 errno=0 [ 99.362096][ T6143] loop0: detected capacity change from 256 to 0 [ 99.400840][ T6150] binder: 6149:6150 ioctl c0306201 2000000003c0 returned -14 [ 99.412088][ T6154] loop1: detected capacity change from 0 to 512 [ 99.435055][ T6154] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.462057][ T5765] syz-executor: attempt to access beyond end of device [ 99.462057][ T5765] loop0: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 99.479037][ T5765] syz-executor: attempt to access beyond end of device [ 99.479037][ T5765] loop0: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 99.513907][ T5765] syz-executor: attempt to access beyond end of device [ 99.513907][ T5765] loop0: rw=524288, sector=162, nr_sectors = 1 limit=0 [ 99.559764][ T5765] syz-executor: attempt to access beyond end of device [ 99.559764][ T5765] loop0: rw=524288, sector=163, nr_sectors = 1 limit=0 [ 99.571408][ T6158] tipc: Started in network mode [ 99.578810][ T6158] tipc: Node identity ac1414aa, cluster identity 4711 [ 99.586926][ T6154] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.94: iget: bad i_size value: 38620345925642 [ 99.591227][ T6158] tipc: Enabled bearer , priority 10 [ 99.627568][ T5765] syz-executor: attempt to access beyond end of device [ 99.627568][ T5765] loop0: rw=524288, sector=164, nr_sectors = 1 limit=0 [ 99.631216][ T6160] netlink: 64 bytes leftover after parsing attributes in process `syz.2.98'. [ 99.656460][ T6154] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.94: couldn't read orphan inode 15 (err -117) [ 99.677446][ T5765] syz-executor: attempt to access beyond end of device [ 99.677446][ T5765] loop0: rw=524288, sector=165, nr_sectors = 1 limit=0 [ 99.721635][ T6154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.739446][ T5765] syz-executor: attempt to access beyond end of device [ 99.739446][ T5765] loop0: rw=524288, sector=166, nr_sectors = 1 limit=0 [ 99.765239][ T5765] syz-executor: attempt to access beyond end of device [ 99.765239][ T5765] loop0: rw=524288, sector=167, nr_sectors = 1 limit=0 [ 99.798159][ T6154] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.94: bg 0: block 5: invalid block bitmap [ 99.817606][ T5765] syz-executor: attempt to access beyond end of device [ 99.817606][ T5765] loop0: rw=0, sector=160, nr_sectors = 1 limit=0 [ 99.853246][ T6154] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 99.860995][ T5765] syz-executor: attempt to access beyond end of device [ 99.860995][ T5765] loop0: rw=0, sector=161, nr_sectors = 1 limit=0 [ 99.941068][ T5765] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 100.027009][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.197921][ T6170] mmap: syz.1.102 (6170) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.199792][ T28] audit: type=1326 audit(1765719178.196:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923af8f749 code=0x7ffc0000 [ 100.287134][ T6173] input: syz0 as /devices/virtual/input/input6 [ 100.294691][ T28] audit: type=1326 audit(1765719178.206:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923af8f749 code=0x7ffc0000 [ 100.334802][ T28] audit: type=1326 audit(1765719178.206:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f923af8f749 code=0x7ffc0000 [ 100.380219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.419688][ T28] audit: type=1326 audit(1765719178.206:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923af8f749 code=0x7ffc0000 [ 100.445839][ T28] audit: type=1326 audit(1765719178.206:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923af8f749 code=0x7ffc0000 [ 100.477108][ T28] audit: type=1326 audit(1765719178.206:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f923af8f749 code=0x7ffc0000 [ 100.500183][ T28] audit: type=1326 audit(1765719178.226:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.1.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923af8f749 code=0x7ffc0000 [ 100.569474][ T787] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.696169][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.754685][ T27] tipc: Node number set to 2886997162 [ 100.813952][ T787] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.868724][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.893354][ T787] usb 4-1: Product: syz [ 100.897943][ T787] usb 4-1: Manufacturer: syz [ 100.913262][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.925042][ T787] usb 4-1: SerialNumber: syz [ 100.948616][ T787] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.085725][ T27] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.226955][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.317002][ T6171] random: crng reseeded on system resumption [ 101.462358][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.265295][ T9] usb 4-1: USB disconnect, device number 4 [ 102.318307][ T59] bond0: (slave ip6gretap1): Releasing backup interface [ 102.367958][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.379103][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.413661][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.423794][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.449971][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 102.460022][ T27] usb 4-1: Service connection timeout for: 256 [ 102.466254][ T27] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 102.475381][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.491450][ T27] ath9k_htc: Failed to initialize the device [ 102.498881][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 102.529668][ T5853] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.734667][ T5853] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.762185][ T5853] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 102.779527][ T5853] usb 3-1: config 1 has no interface number 1 [ 102.785801][ T5853] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 102.819544][ T5853] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.828682][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.862555][ T5853] usb 3-1: Product: syz [ 102.866809][ T5853] usb 3-1: Manufacturer: syz [ 102.874093][ T5853] usb 3-1: SerialNumber: syz [ 103.134061][ T6217] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.209934][ T5853] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 103.217854][ T5853] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 103.345094][ T5853] usb 3-1: USB disconnect, device number 5 [ 103.689831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.717773][ T6200] chnl_net:caif_netlink_parms(): no params data found [ 103.992253][ T6237] loop2: detected capacity change from 0 to 2048 [ 104.094205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.103189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.112246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 104.174316][ T6243] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.474064][ T6243] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 104.511645][ T6243] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 104.544920][ T5776] Bluetooth: hci1: command tx timeout [ 104.574135][ T6243] Remounting filesystem read-only [ 104.586964][ T644] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 104.613865][ T644] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 104.663927][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 104.709977][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 104.721693][ T59] hsr_slave_0: left promiscuous mode [ 104.741082][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 104.750668][ T59] hsr_slave_1: left promiscuous mode [ 104.769468][ T644] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 104.776296][ T644] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 104.784946][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.806710][ T644] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 104.808486][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.829452][ T644] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 104.836823][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 104.847777][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.862154][ T644] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 104.865862][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.879494][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 104.894925][ T59] bridge_slave_1: left allmulticast mode [ 104.907686][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 104.909408][ T59] bridge_slave_1: left promiscuous mode [ 104.924807][ T644] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 104.944749][ T644] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 104.951760][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.952237][ T644] NILFS (loop2): discard dirty page: offset=69632, ino=3 [ 104.967536][ T644] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 104.985506][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 104.994861][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.005187][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.014578][ T644] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 105.022099][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.023203][ T59] bridge_slave_0: left allmulticast mode [ 105.032055][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.046697][ T644] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 105.054408][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.059688][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.063895][ T644] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 105.078952][ T59] bridge_slave_0: left promiscuous mode [ 105.086104][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.095307][ T644] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 105.115574][ T6261] loop1: detected capacity change from 0 to 1024 [ 105.127229][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.129973][ T6261] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.140415][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.156331][ T59] veth1_macvtap: left promiscuous mode [ 105.169764][ T59] veth0_macvtap: left promiscuous mode [ 105.175580][ T644] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.187601][ T59] veth1_vlan: left promiscuous mode [ 105.196048][ T59] veth0_vlan: left promiscuous mode [ 105.200363][ T6261] ext4: Unknown parameter 'audit' [ 105.222531][ T5766] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 105.232737][ T5766] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 105.242288][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.255473][ T5781] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.262085][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.293595][ T27] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 105.303538][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 105.312992][ T5766] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.346209][ T27] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 105.379990][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 105.388158][ T27] usb 4-1: Product: syz [ 105.407299][ T27] usb 4-1: Manufacturer: syz [ 105.420004][ T27] usb 4-1: SerialNumber: syz [ 105.441287][ T27] usb 4-1: config 0 descriptor?? [ 105.560042][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.763096][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 105.773894][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.786757][ T23] usb 2-1: config 11 has an invalid interface number: 244 but max is 0 [ 105.804920][ T23] usb 2-1: config 11 has no interface number 0 [ 105.811397][ T23] usb 2-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.829425][ T23] usb 2-1: config 11 interface 244 altsetting 5 has an invalid endpoint with address 0x2C, skipping [ 105.841616][ T23] usb 2-1: config 11 interface 244 has no altsetting 0 [ 105.857889][ T23] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 105.872961][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.882318][ T23] usb 2-1: Product: syz [ 105.886769][ T23] usb 2-1: Manufacturer: syz [ 105.891765][ T23] usb 2-1: SerialNumber: syz [ 106.217867][ T59] team0 (unregistering): Port device team_slave_1 removed [ 106.273929][ T59] team0 (unregistering): Port device team_slave_0 removed [ 106.283268][ T27] usb 4-1: Firmware version (0.0) predates our first public release. [ 106.298671][ T27] usb 4-1: Please update to version 0.2 or newer [ 106.333235][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.383996][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.629483][ T5776] Bluetooth: hci1: command tx timeout [ 106.951989][ T59] bond0 (unregistering): Released all slaves [ 107.045639][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.053126][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.060767][ T6200] bridge_slave_0: entered allmulticast mode [ 107.068061][ T6200] bridge_slave_0: entered promiscuous mode [ 107.130226][ T23] peak_usb 2-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 107.147671][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.154976][ T23] peak_usb 2-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 107.163923][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.175762][ T6200] bridge_slave_1: entered allmulticast mode [ 107.185977][ T27] usb 4-1: USB disconnect, device number 5 [ 107.202130][ T6200] bridge_slave_1: entered promiscuous mode [ 107.441551][ T23] peak_usb: probe of 2-1:11.244 failed with error -71 [ 107.513084][ T23] usb 2-1: USB disconnect, device number 2 [ 107.680467][ T6200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.728914][ T6200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.918414][ T6200] team0: Port device team_slave_0 added [ 107.947191][ T6200] team0: Port device team_slave_1 added [ 108.048530][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.069522][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.112554][ T6200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.130290][ T5853] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.157246][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.166912][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.179727][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.197395][ T6200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.349306][ T6200] hsr_slave_0: entered promiscuous mode [ 108.355823][ T5853] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 108.365536][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.366507][ T6200] hsr_slave_1: entered promiscuous mode [ 108.374009][ T5853] usb 2-1: Product: syz [ 108.374028][ T5853] usb 2-1: Manufacturer: syz [ 108.374044][ T5853] usb 2-1: SerialNumber: syz [ 108.387980][ T6307] (null): rxe_set_mtu: Set mtu to 1024 [ 108.400473][ T6200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.402762][ T5853] usb 2-1: config 0 descriptor?? [ 108.417392][ T6200] Cannot create hsr debugfs directory [ 108.419441][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 108.427002][ T5853] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 108.445314][ T27] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 108.463174][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.471909][ T27] usb 4-1: Product: syz [ 108.476181][ T27] usb 4-1: Manufacturer: syz [ 108.480987][ T27] usb 4-1: SerialNumber: syz [ 108.495076][ T27] r8152-cfgselector 4-1: config 0 descriptor?? [ 108.699558][ T5776] Bluetooth: hci1: command tx timeout [ 108.754739][ T27] r8152-cfgselector 4-1: Needed 1 retries to read version [ 108.765811][ T27] r8152-cfgselector 4-1: Unknown version 0x0000 [ 108.800734][ T27] r8152-cfgselector 4-1: bad CDC descriptors [ 108.845666][ T5853] gspca_sunplus: reg_w_riv err -71 [ 108.865867][ T5853] sunplus: probe of 2-1:0.0 failed with error -71 [ 108.896434][ T5853] usb 2-1: USB disconnect, device number 3 [ 108.963080][ T6200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.984888][ T27] r8152-cfgselector 4-1: Unknown version 0x0000 [ 109.006992][ T6200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.019053][ T27] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 109.038546][ T6200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.074583][ T6307] infiniband syz1: set active [ 109.088685][ T6200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.104874][ T6307] infiniband syz1: added veth0_to_bond [ 109.238765][ T6307] RDS/IB: syz1: added [ 109.258630][ T6307] smc: adding ib device syz1 with port count 1 [ 109.284012][ T6307] smc: ib device syz1 port 1 has pnetid [ 109.358490][ T6200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.451729][ T6200] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.526680][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.533943][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.564096][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.571388][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.251697][ T6348] loop3: detected capacity change from 0 to 512 [ 110.263691][ T6348] EXT4-fs: Ignoring removed nobh option [ 110.279537][ T6348] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.331079][ T6200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.331519][ T6348] EXT4-fs (loop3): 1 truncate cleaned up [ 110.381648][ T6348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.645792][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.779617][ T5776] Bluetooth: hci1: command tx timeout [ 110.830828][ T6367] netlink: 32 bytes leftover after parsing attributes in process `syz.3.142'. [ 110.859894][ T5826] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.967956][ T6200] veth0_vlan: entered promiscuous mode [ 111.013825][ T6200] veth1_vlan: entered promiscuous mode [ 111.069426][ T5826] usb 2-1: Using ep0 maxpacket: 8 [ 111.078926][ T5826] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.106999][ T5826] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 111.138578][ T5826] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 111.160306][ T5826] usb 2-1: config 8 interface 0 has no altsetting 0 [ 111.161168][ T6200] veth0_macvtap: entered promiscuous mode [ 111.181574][ T5826] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 111.199432][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.207493][ T5826] usb 2-1: Product: syz [ 111.231223][ T6200] veth1_macvtap: entered promiscuous mode [ 111.254503][ T5826] usb 2-1: Manufacturer: syz [ 111.259185][ T5826] usb 2-1: SerialNumber: syz [ 111.328479][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.340638][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.350893][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.362732][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.372899][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.384547][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.397626][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.411619][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.423446][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.435460][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.446604][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.463626][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.478939][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.503626][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.521520][ T6200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.534447][ T6200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.543807][ T6200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.553258][ T6200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.578897][ T5826] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 111.619574][ T5826] usb 2-1: selecting invalid altsetting 0 [ 111.757412][ T5826] snd-usb-audio: probe of 2-1:8.0 failed with error -12 [ 111.804942][ T5826] usb 2-1: USB disconnect, device number 4 [ 111.871135][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.882609][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.925387][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.037021][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.067190][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.363769][ T6385] loop2: detected capacity change from 0 to 128 [ 112.461480][ T6385] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.548167][ T6385] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.636616][ T6393] syz.1.147 (6393) used greatest stack depth: 20944 bytes left [ 112.658959][ T6396] loop4: detected capacity change from 0 to 1024 [ 112.667019][ T6385] syz.2.146 (pid 6385) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 112.748281][ T6396] hfsplus: bad catalog entry type [ 112.835477][ T5766] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.853379][ T1087] hfsplus: b-tree write err: -5, ino 4 [ 113.042464][ T6407] netlink: 'syz.4.151': attribute type 13 has an invalid length. [ 113.142346][ T6407] gretap0: refused to change device tx_queue_len [ 113.170657][ T6407] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 113.299890][ T6416] capability: warning: `syz.1.153' uses 32-bit capabilities (legacy support in use) [ 113.741924][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.942998][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 113.967062][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.997786][ T6440] loop2: detected capacity change from 0 to 128 [ 114.011405][ T9] usb 5-1: config 0 descriptor?? [ 114.038967][ T9] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 114.244886][ T9] usb 5-1: USB disconnect, device number 2 [ 114.359892][ T5826] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.447649][ T6455] loop3: detected capacity change from 0 to 2048 [ 114.501083][ T6455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.566519][ T28] audit: type=1800 audit(1765719192.566:12): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.166" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 114.601035][ T5826] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 114.613979][ T5826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.653854][ T5826] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 114.669584][ T5853] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.675884][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.704002][ T5826] usb 2-1: Product: syz [ 114.722890][ T5826] usb 2-1: Manufacturer: syz [ 114.727577][ T5826] usb 2-1: SerialNumber: syz [ 114.745582][ T5826] usb 2-1: config 0 descriptor?? [ 114.767001][ T5826] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 114.780459][ T5826] ims_pcu: probe of 2-1:0.0 failed with error -22 [ 114.866324][ T5853] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 114.896523][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.929131][ T5853] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 114.944084][ T5853] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 114.960368][ T5853] usb 3-1: Manufacturer: syz [ 114.974115][ T5826] usb 2-1: USB disconnect, device number 5 [ 114.990710][ T5853] usb 3-1: config 0 descriptor?? [ 115.022051][ T6466] loop4: detected capacity change from 0 to 1024 [ 115.219447][ T5853] rc_core: IR keymap rc-hauppauge not found [ 115.241156][ T5853] Registered IR keymap rc-empty [ 115.265623][ T5853] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 115.306583][ T5853] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 115.320537][ T34] hfsplus: b-tree write err: -5, ino 4 [ 115.344563][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 115.352190][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 115.390240][ T5853] usb 3-1: USB disconnect, device number 6 [ 115.449802][ T6392] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.551270][ T34] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 115.595131][ T34] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.595131][ T34] [ 115.619466][ T34] EXT4-fs (loop3): Total free blocks count 0 [ 115.625531][ T34] EXT4-fs (loop3): Free/Dirty block details [ 115.644048][ T34] EXT4-fs (loop3): free_blocks=2415919104 [ 115.659574][ T34] EXT4-fs (loop3): dirty_blocks=2880 [ 115.670839][ T34] EXT4-fs (loop3): Block reservation details [ 115.677156][ T34] EXT4-fs (loop3): i_reserved_data_blocks=180 [ 115.695955][ T6477] Zero length message leads to an empty skb [ 115.769718][ T6479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.171'. [ 115.856415][ T34] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 820 with error 28 [ 115.961988][ T6485] Invalid ELF header magic: != ELF [ 116.077165][ T6490] loop4: detected capacity change from 0 to 512 [ 116.104588][ T6490] EXT4-fs: Ignoring removed orlov option [ 116.142128][ T6490] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.271996][ T6490] EXT4-fs (loop4): 1 orphan inode deleted [ 116.318924][ T6490] EXT4-fs (loop4): 1 truncate cleaned up [ 116.358521][ T6490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.479089][ T28] audit: type=1800 audit(1765719194.486:13): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.172" name="/newroot/63/bus" dev="tmpfs" ino=353 res=0 errno=0 [ 116.481432][ T6490] EXT4-fs error (device loop4): empty_inline_dir:1857: inode #12: block 7: comm syz.4.173: bad entry in directory: rec_len is too small for name_len - offset=4, inode=13, rec_len=16, size=60 fake=0 [ 116.637385][ T6490] EXT4-fs warning (device loop4): empty_inline_dir:1864: bad inline directory (dir #12) - inode 13, rec_len 16, name_len 53inline size 60 [ 116.769124][ T6200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.439464][ T5853] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.591293][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.183'. [ 117.642075][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.671503][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.735395][ T5853] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.765130][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.804990][ T5853] usb 2-1: config 0 descriptor?? [ 117.824045][ T5853] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 117.833347][ T6540] ªªªªªª: renamed from vlan0 (while UP) [ 117.922341][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 117.963081][ T6546] loop3: detected capacity change from 0 to 1024 [ 118.043195][ T6546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.110162][ T5853] usb 2-1: USB disconnect, device number 6 [ 118.313933][ T6520] netlink: 'syz.1.180': attribute type 4 has an invalid length. [ 118.365202][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.380698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 118.522269][ T6560] loop4: detected capacity change from 0 to 4096 [ 118.607648][ T6565] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.371748][ T6579] loop3: detected capacity change from 0 to 4096 [ 119.663903][ T6590] loop1: detected capacity change from 0 to 64 [ 120.058042][ T6601] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 120.096487][ T6601] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 120.349869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.362775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.372827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.388539][ T6609] loop4: detected capacity change from 0 to 4096 [ 120.569185][ T6609] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 120.865428][ T6200] ntfs3: loop4: ino=9, ntfs_sync_fs failed, -22. [ 121.515480][ T6630] loop2: detected capacity change from 0 to 64 [ 121.987443][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.214'. [ 122.699603][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.891622][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.891685][ T23] usb 5-1: New USB device found, idVendor=03da, idProduct=b320, bcdDevice=52.e7 [ 122.891710][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.897518][ T23] usb 5-1: config 0 descriptor?? [ 122.960543][ T23] usb 5-1: bad CDC descriptors [ 123.169662][ T23] usb 5-1: USB disconnect, device number 3 [ 123.409131][ T6661] loop1: detected capacity change from 0 to 4096 [ 123.479557][ T6666] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.651496][ T5868] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.839549][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.880706][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.899851][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.910839][ T5868] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 123.929690][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.935525][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.946963][ T5868] usb 3-1: Product: syz [ 123.951706][ T5868] usb 3-1: Manufacturer: syz [ 123.956367][ T5868] usb 3-1: SerialNumber: syz [ 124.020748][ T5868] usb 3-1: config 0 descriptor?? [ 124.044550][ T5868] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 124.073888][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 124.103370][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.120040][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.147847][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 124.167810][ T5868] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 124.193115][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.214766][ T5868] usb 3-1: media controller created [ 124.266694][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 124.292717][ T6682] loop4: detected capacity change from 0 to 32768 [ 124.309518][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.349178][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.358275][ T6682] (syz.4.232,6682,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 124.369508][ T9] usb 4-1: Product: syz [ 124.379105][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 124.384580][ T6682] (syz.4.232,6682,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 124.390242][ T9] usb 4-1: Manufacturer: syz [ 124.437286][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.448991][ T6682] JBD2: Ignoring recovery information on journal [ 124.476131][ T23] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 124.488149][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.502827][ T9] usb 4-1: SerialNumber: syz [ 124.506698][ T23] usb 2-1: config 0 descriptor?? [ 124.521823][ T6682] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 124.549115][ T9] usb 4-1: config 0 descriptor?? [ 124.551621][ T23] dw2102: su3000_identify_state [ 124.559477][ T23] dvb-usb: found a 'TeVii S662' in warm state. [ 124.571483][ T23] dw2102: su3000_power_ctrl: 1, initialized 0 [ 124.577638][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 124.587531][ T9] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 124.602683][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.627064][ T23] dvbdev: DVB: registering new adapter (TeVii S662) [ 124.628350][ T9] gspca_stv06xx: st6422 sensor detected [ 124.659506][ T23] usb 2-1: media controller created [ 124.669696][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 124.686674][ T23] dw2102: i2c transfer failed. [ 124.701566][ T5868] DVB: Unable to find symbol tda10046_attach() [ 124.702893][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 124.707778][ T5868] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 124.707795][ T5868] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 124.758117][ T23] dw2102: i2c transfer failed. [ 124.783450][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 124.797215][ T23] dw2102: i2c transfer failed. [ 124.809501][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 124.812569][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.824645][ T23] dw2102: i2c transfer failed. [ 124.824678][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 124.824697][ T23] dw2102: i2c transfer failed. [ 124.824720][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 124.824735][ T23] dw2102: i2c transfer failed. [ 124.824745][ T23] dvb-usb: MAC address: 02:02:02:02:02:02 [ 124.873363][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.891904][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.912236][ T5868] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 124.932077][ T9] STV06xx: probe of 4-1:0.0 failed with error -71 [ 124.951718][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 124.957532][ T23] dw2102: command 0x0e transfer failed. [ 124.963944][ T5868] usb 3-1: USB disconnect, device number 7 [ 124.981463][ T9] usb 4-1: USB disconnect, device number 7 [ 124.983145][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 125.006222][ T23] dw2102: command 0x0e transfer failed. [ 125.111538][ T6200] ocfs2: Unmounting device (7,4) on (node local) [ 125.329733][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 125.335563][ T23] dw2102: command 0x0e transfer failed. [ 125.377573][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 125.379866][ T6694] loop4: detected capacity change from 0 to 128 [ 125.393849][ T23] dw2102: command 0x0e transfer failed. [ 125.415339][ T6694] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 125.422582][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 125.455063][ T23] dw2102: command 0x51 transfer failed. [ 125.463922][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 125.487254][ T6694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.500068][ T23] dw2102: i2c probe for address 0x68 failed. [ 125.517930][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 125.544506][ T23] dw2102: i2c probe for address 0x69 failed. [ 125.572985][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 125.578803][ T23] dw2102: i2c probe for address 0x6a failed. [ 125.608414][ T23] dw2102: probing for demodulator failed. Is the external power switched on? [ 125.647089][ T23] dvb-usb: no frontend was attached by 'TeVii S662' [ 125.697928][ T5868] kernel write not supported for file /snd/seq (pid: 5868 comm: kworker/0:6) [ 125.847151][ T23] rc_core: IR keymap rc-tt-1500 not found [ 125.871843][ T23] Registered IR keymap rc-empty [ 125.887632][ T23] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 125.913488][ T23] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9 [ 125.941661][ T23] dvb-usb: schedule remote query interval to 250 msecs. [ 125.957541][ T23] dw2102: su3000_power_ctrl: 0, initialized 1 [ 125.980502][ T23] dvb-usb: TeVii S662 successfully initialized and connected. [ 126.046033][ T23] usb 2-1: USB disconnect, device number 7 [ 126.106696][ T6715] loop2: detected capacity change from 0 to 1024 [ 126.165699][ T6715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.198474][ T6715] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.211964][ T23] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 126.258428][ T6715] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 3: comm syz.2.242: lblock 3 mapped to illegal pblock 3 (length 3) [ 126.275754][ T6715] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 126.288512][ T6715] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.288512][ T6715] [ 126.321821][ T6715] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #15: block 3: comm syz.2.242: lblock 3 mapped to illegal pblock 3 (length 1) [ 126.353492][ T28] audit: type=1800 audit(1765719204.366:14): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.242" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 126.354781][ T6715] syz.2.242 (6715) used greatest stack depth: 20840 bytes left [ 126.435529][ T49] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 126.457494][ T49] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 126.479705][ T49] EXT4-fs (loop2): This should not happen!! Data will be lost [ 126.479705][ T49] [ 126.494911][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 126.660418][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.859587][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 126.867164][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.877913][ T23] usb 2-1: config 0 has no interface number 0 [ 126.886535][ T23] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 126.895907][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.904096][ T23] usb 2-1: Product: syz [ 126.908318][ T23] usb 2-1: Manufacturer: syz [ 126.913110][ T23] usb 2-1: SerialNumber: syz [ 126.920400][ T23] usb 2-1: config 0 descriptor?? [ 126.931211][ T23] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 126.942111][ T23] usb 2-1: selecting invalid altsetting 1 [ 126.949094][ T23] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 126.964177][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.975612][ T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 126.995589][ T5826] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.014002][ T23] usb 2-1: media controller created [ 127.054063][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.182764][ T6740] loop4: detected capacity change from 0 to 256 [ 127.206081][ T5826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.216815][ T5826] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 127.218084][ T6740] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 127.234838][ T5826] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.278156][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.299067][ T5826] usb 3-1: Product: syz [ 127.310746][ T5826] usb 3-1: Manufacturer: syz [ 127.324060][ T5826] usb 3-1: SerialNumber: syz [ 127.370420][ T6740] loop4: detected capacity change from 256 to 0 [ 127.381285][ T49] loop: Write error at byte offset 9223372036854845439, length 512. [ 127.388649][ T23] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 127.402877][ C0] I/O error, dev loop4, sector 136 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 127.412590][ C0] Buffer I/O error on dev loop4, logical block 136, lost sync page write [ 127.413941][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 127.432145][ T6741] bio_check_eod: 1 callbacks suppressed [ 127.432259][ T6741] syz.4.251: attempt to access beyond end of device [ 127.432259][ T6741] loop4: rw=2049, sector=136, nr_sectors = 1 limit=0 [ 127.455696][ T23] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 127.472907][ T6741] Buffer I/O error on dev loop4, logical block 136, lost sync page write [ 127.482306][ T6741] syz.4.251: attempt to access beyond end of device [ 127.482306][ T6741] loop4: rw=2049, sector=136, nr_sectors = 1 limit=0 [ 127.506329][ T6741] Buffer I/O error on dev loop4, logical block 136, lost sync page write [ 127.522964][ T6741] syz.4.251: attempt to access beyond end of device [ 127.522964][ T6741] loop4: rw=2049, sector=136, nr_sectors = 1 limit=0 [ 127.542058][ T6741] Buffer I/O error on dev loop4, logical block 136, lost sync page write [ 127.563707][ T23] usb 2-1: USB disconnect, device number 8 [ 127.570648][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.572623][ T6741] syz.4.251: attempt to access beyond end of device [ 127.572623][ T6741] loop4: rw=0, sector=160, nr_sectors = 1 limit=0 [ 127.594307][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.607569][ T6741] syz.4.251: attempt to access beyond end of device [ 127.607569][ T6741] loop4: rw=2049, sector=224, nr_sectors = 32 limit=0 [ 127.637018][ T5826] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 127.673683][ T5826] usb 3-1: USB disconnect, device number 8 [ 127.759124][ T6200] syz-executor: attempt to access beyond end of device [ 127.759124][ T6200] loop4: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 127.782725][ T6200] syz-executor: attempt to access beyond end of device [ 127.782725][ T6200] loop4: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 127.803483][ T6200] syz-executor: attempt to access beyond end of device [ 127.803483][ T6200] loop4: rw=524288, sector=162, nr_sectors = 1 limit=0 [ 127.817485][ T6200] syz-executor: attempt to access beyond end of device [ 127.817485][ T6200] loop4: rw=524288, sector=163, nr_sectors = 1 limit=0 [ 127.831782][ T6200] syz-executor: attempt to access beyond end of device [ 127.831782][ T6200] loop4: rw=524288, sector=164, nr_sectors = 1 limit=0 [ 127.892669][ T6200] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 128.264454][ T5826] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.494969][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 128.521852][ T5826] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 128.553950][ T5826] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 128.591323][ T5826] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.615787][ T5826] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.648357][ T5826] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 128.664089][ T5826] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.686483][ T5826] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.709557][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.935011][ T5826] usb 3-1: usb_control_msg returned -71 [ 128.947486][ T5826] usbtmc 3-1:16.0: can't read capabilities [ 128.987662][ T5826] usb 3-1: USB disconnect, device number 9 [ 129.387455][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.409999][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.419805][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.430531][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.446921][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.455197][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.700490][ T6806] loop3: detected capacity change from 0 to 164 [ 129.734917][ T6806] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 129.805099][ T6806] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 129.851578][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 129.870982][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.878486][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.888036][ T6806] rock: directory entry would overflow storage [ 129.906483][ T6806] rock: sig=0x4f50, size=4, remaining=3 [ 129.931867][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.937897][ T6806] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 129.970644][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.651073][ T6835] loop2: detected capacity change from 0 to 16 [ 130.764489][ T6835] erofs: (device loop2): mounted with root inode @ nid 36. [ 130.947497][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.955476][ T28] audit: type=1326 audit(1765719208.946:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f923af8f749 code=0x0 [ 131.038932][ T6793] chnl_net:caif_netlink_parms(): no params data found [ 131.169574][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 131.188705][ T27] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 131.202465][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.215942][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.229591][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.251008][ T27] usb 4-1: Product: syz [ 131.255251][ T27] usb 4-1: Manufacturer: syz [ 131.260177][ T27] usb 4-1: SerialNumber: syz [ 131.287875][ T6859] tipc: Can't bind to reserved service type 2 [ 131.302008][ T6859] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 131.413682][ T6793] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.432556][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.452413][ T6793] bridge_slave_0: entered allmulticast mode [ 131.470818][ T6793] bridge_slave_0: entered promiscuous mode [ 131.493051][ T6793] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.506342][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.520594][ T27] usb 4-1: 0:2 : does not exist [ 131.530813][ T6793] bridge_slave_1: entered allmulticast mode [ 131.552026][ T6793] bridge_slave_1: entered promiscuous mode [ 131.564976][ T27] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 131.590447][ T5776] Bluetooth: hci1: command tx timeout [ 131.609106][ T27] usb 4-1: USB disconnect, device number 8 [ 131.684756][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.753041][ T6793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.811800][ T6793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.858880][ T6869] TCP: TCP_TX_DELAY enabled [ 131.918942][ T6793] team0: Port device team_slave_0 added [ 131.975468][ T6793] team0: Port device team_slave_1 added [ 132.067683][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.099910][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.199414][ T6793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.231894][ T6793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.238937][ T6793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.288327][ T6884] netlink: 4580 bytes leftover after parsing attributes in process `syz.3.291'. [ 132.314197][ T6793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.568411][ T6793] hsr_slave_0: entered promiscuous mode [ 132.598949][ T6793] hsr_slave_1: entered promiscuous mode [ 132.610354][ T6793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.628220][ T6793] Cannot create hsr debugfs directory [ 132.669305][ T6900] loop2: detected capacity change from 0 to 1024 [ 132.707520][ T6900] EXT4-fs: Ignoring removed nobh option [ 132.737933][ T6900] EXT4-fs: Ignoring removed bh option [ 132.761361][ T6900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.831589][ T6900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.108193][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.131521][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.305177][ T6793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.338940][ T6793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.358320][ T6793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.372498][ T6917] input: syz0 as /devices/virtual/input/input11 [ 133.385699][ T6793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.659584][ T5776] Bluetooth: hci1: command tx timeout [ 133.708469][ T6793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.813482][ T6793] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.858229][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.865915][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.888861][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.896172][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.076130][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.258524][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.397555][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.592116][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.915024][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.977168][ T6962] syz_tun: entered allmulticast mode [ 135.753672][ T5776] Bluetooth: hci1: command tx timeout [ 135.777468][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.799013][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.810697][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.828473][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.838846][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 135.850517][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.602624][ T6793] veth0_vlan: entered promiscuous mode [ 136.839677][ T6793] veth1_vlan: entered promiscuous mode [ 137.164133][ T6793] veth0_macvtap: entered promiscuous mode [ 137.199091][ T6793] veth1_macvtap: entered promiscuous mode [ 137.285053][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.296468][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.307531][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.318667][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.337237][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.348601][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.366152][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.378066][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.394228][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.404976][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.415928][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.426744][ T6793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.437917][ T6793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.474749][ T6793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.512358][ T6793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.527153][ T6793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.552972][ T6793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.578477][ T6793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.828826][ T5776] Bluetooth: hci1: command tx timeout [ 137.899788][ T5776] Bluetooth: hci3: command tx timeout [ 138.065848][ T11] hsr_slave_0: left promiscuous mode [ 138.105571][ T11] hsr_slave_1: left promiscuous mode [ 138.121855][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.137592][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.146952][ T7041] loop3: detected capacity change from 0 to 512 [ 138.158673][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.168423][ T7041] EXT4-fs (loop3): Test dummy encryption mode enabled [ 138.170400][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.182408][ T7041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.201830][ T11] bridge_slave_1: left allmulticast mode [ 138.207836][ T11] bridge_slave_1: left promiscuous mode [ 138.207874][ T7041] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.327: bad orphan inode 131083 [ 138.219089][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.241986][ T11] bridge_slave_0: left allmulticast mode [ 138.247701][ T11] bridge_slave_0: left promiscuous mode [ 138.253954][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.263297][ T7041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.352583][ T11] veth1_macvtap: left promiscuous mode [ 138.358202][ T11] veth0_macvtap: left promiscuous mode [ 138.369582][ T11] veth1_vlan: left promiscuous mode [ 138.375106][ T11] veth0_vlan: left promiscuous mode [ 138.402833][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.614153][ T7049] loop2: detected capacity change from 0 to 256 [ 138.647394][ T7049] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 139.414815][ T11] team0 (unregistering): Port device team_slave_1 removed [ 139.497552][ T11] team0 (unregistering): Port device team_slave_0 removed [ 139.563046][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.653328][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.784558][ T7062] loop2: detected capacity change from 0 to 512 [ 139.795593][ T7062] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.821211][ T7062] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.867463][ T7062] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2249: inode #15: comm syz.2.334: corrupted in-inode xattr: e_name out of bounds [ 139.927957][ T7062] EXT4-fs (loop2): 1 orphan inode deleted [ 139.936416][ T7062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.984338][ T5776] Bluetooth: hci3: command tx timeout [ 140.306916][ T11] bond0 (unregistering): Released all slaves [ 140.501309][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.554839][ T6986] chnl_net:caif_netlink_parms(): no params data found [ 140.704961][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.739826][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.813284][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 140.830756][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'. [ 140.972343][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.044361][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.163678][ T6986] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.189550][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.219596][ T6986] bridge_slave_0: entered allmulticast mode [ 141.252920][ T6986] bridge_slave_0: entered promiscuous mode [ 141.281786][ T6986] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.288988][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.315404][ T6986] bridge_slave_1: entered allmulticast mode [ 141.352366][ T6986] bridge_slave_1: entered promiscuous mode [ 141.368342][ T7091] loop3: detected capacity change from 0 to 512 [ 141.451131][ T7091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.519132][ T6986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.562818][ T6986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.582323][ T7091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 141.608581][ T7091] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.616584][ T7096] loop5: detected capacity change from 0 to 1024 [ 141.723094][ T7091] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.340: Abort forced by user [ 141.755950][ T7091] EXT4-fs (loop3): Remounting filesystem read-only [ 141.784487][ T7091] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000. [ 141.794197][ T6986] team0: Port device team_slave_0 added [ 141.800095][ T7096] hfsplus: found bad thread record in catalog [ 141.854945][ T6986] team0: Port device team_slave_1 added [ 141.863814][ T49] hfsplus: b-tree write err: -5, ino 4 [ 141.872926][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 142.079440][ T5776] Bluetooth: hci3: command tx timeout [ 142.125805][ T7109] loop2: detected capacity change from 0 to 1024 [ 142.138499][ T7108] loop3: detected capacity change from 0 to 64 [ 142.149258][ T7109] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 142.201526][ T6986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.227051][ T6986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.255363][ T7109] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 142.307214][ T7109] EXT4-fs (loop2): invalid journal inode [ 142.346319][ T6986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.377950][ T6986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.392445][ T6986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.473306][ T6986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.658871][ T7118] loop5: detected capacity change from 0 to 2048 [ 142.670076][ T6986] hsr_slave_0: entered promiscuous mode [ 142.691721][ T6986] hsr_slave_1: entered promiscuous mode [ 142.741239][ T7118] Alternate GPT is invalid, using primary GPT. [ 142.748211][ T7118] loop5: p2 p3 p7 [ 143.100063][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.5.352'. [ 143.161652][ T5954] udevd[5954]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 143.447865][ T6986] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 143.501782][ T6986] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 143.535658][ T6986] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 143.567664][ T6986] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 143.585021][ T7136] loop5: detected capacity change from 0 to 4096 [ 143.613900][ T7136] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 143.712094][ T7136] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 143.966117][ T7159] loop3: detected capacity change from 0 to 1024 [ 143.968338][ T6986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.063087][ T7159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.130628][ T6986] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.140796][ T5776] Bluetooth: hci3: command tx timeout [ 144.208931][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.216148][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.327148][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.334407][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.553225][ T6986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.586847][ T7173] loop2: detected capacity change from 0 to 256 [ 144.650554][ T7173] exfat: Deprecated parameter 'namecase' [ 144.656389][ T7173] exfat: Deprecated parameter 'utf8' [ 144.703678][ T7176] batadv_slave_1: entered promiscuous mode [ 144.735687][ T7176] batadv_slave_1: left promiscuous mode [ 144.758800][ T7176] bio_check_eod: 7 callbacks suppressed [ 144.758817][ T7176] syz.5.366: attempt to access beyond end of device [ 144.758817][ T7176] loop5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 144.794834][ T7173] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 144.800777][ T7176] SQUASHFS error: Failed to read block 0x0: -5 [ 144.813859][ T7176] unable to read squashfs_super_block [ 145.128320][ T7186] netlink: 'syz.5.369': attribute type 1 has an invalid length. [ 145.154819][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.369'. [ 145.288553][ T6986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.758129][ T7210] loop3: detected capacity change from 0 to 256 [ 145.809518][ T5770] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.858824][ T28] audit: type=1800 audit(1765719223.866:16): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.373" name="file1" dev="loop3" ino=1048604 res=0 errno=0 [ 145.883512][ T7210] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 145.929504][ T7210] FAT-fs (loop3): Filesystem has been set read-only [ 146.024628][ T5770] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 146.052199][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.071949][ T5770] usb 3-1: Product: syz [ 146.079821][ T5770] usb 3-1: Manufacturer: syz [ 146.084487][ T5770] usb 3-1: SerialNumber: syz [ 146.104805][ T5770] usb 3-1: config 0 descriptor?? [ 146.205359][ T6986] veth0_vlan: entered promiscuous mode [ 146.275149][ T6986] veth1_vlan: entered promiscuous mode [ 146.376117][ T5770] cx82310_eth: probe of 3-1:0.0 failed with error -22 [ 146.382487][ T6986] veth0_macvtap: entered promiscuous mode [ 146.424925][ T6986] veth1_macvtap: entered promiscuous mode [ 146.425585][ T7222] loop5: detected capacity change from 0 to 4096 [ 146.499092][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.524758][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.535391][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.555909][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.566413][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.580627][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.590583][ T7222] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 146.607637][ T6986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.649945][ T7222] ntfs3: loop5: Failed to load $Extend (-22). [ 146.656127][ T7222] ntfs3: loop5: Failed to initialize $Extend. [ 146.688729][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.742143][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.753252][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.765772][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.776095][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.796324][ T28] audit: type=1800 audit(1765719224.786:17): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.376" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 146.846477][ T5770] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 146.862801][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.877799][ T5770] usb 3-1: USB disconnect, device number 10 [ 146.902643][ T6986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.990431][ T6986] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.024299][ T6986] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.048817][ T6986] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.085030][ T6986] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.239460][ T5826] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 147.302672][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.339382][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.440643][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 147.449477][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.476298][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.482768][ T5826] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 147.509776][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.538264][ T5826] usb 4-1: Product: syz [ 147.548716][ T5826] usb 4-1: Manufacturer: syz [ 147.560620][ T28] audit: type=1326 audit(1765719225.576:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb63f8f749 code=0x0 [ 147.589811][ T5826] usb 4-1: SerialNumber: syz [ 147.600919][ T5826] usb 4-1: config 0 descriptor?? [ 147.617038][ T5826] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 147.829045][ T5826] usb 4-1: USB disconnect, device number 9 [ 149.067843][ T7279] loop3: detected capacity change from 0 to 8192 [ 149.674364][ T7304] loop6: detected capacity change from 0 to 1024 [ 149.766725][ T7304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 149.822518][ T7304] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.007966][ T6986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 150.576959][ T7325] loop5: detected capacity change from 0 to 64 [ 150.699129][ T7329] loop3: detected capacity change from 0 to 512 [ 150.732602][ T7328] loop6: detected capacity change from 0 to 1024 [ 150.816286][ T7329] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.400: casefold flag without casefold feature [ 150.893623][ T7329] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.400: couldn't read orphan inode 15 (err -117) [ 150.978277][ T7329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.000781][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 151.069033][ T7337] loop6: detected capacity change from 0 to 512 [ 151.093818][ T7337] journal_path: Lookup failure for './bus' [ 151.122577][ T7337] EXT4-fs: error: could not find journal device path [ 151.179820][ T27] usb 6-1: device descriptor read/64, error -71 [ 151.297468][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.466886][ T27] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 151.538661][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 151.640399][ T27] usb 6-1: device descriptor read/64, error -71 [ 151.705477][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 151.766770][ T27] usb usb6-port1: attempt power cycle [ 151.820232][ T5770] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 151.979542][ T7359] loop2: detected capacity change from 0 to 1024 [ 152.002823][ T7359] EXT4-fs: inline encryption not supported [ 152.042677][ T7359] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.064911][ T5770] usb 7-1: Using ep0 maxpacket: 16 [ 152.092762][ T7359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.096361][ T5770] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 152.189482][ T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 152.213262][ T5770] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.230219][ T27] usb 6-1: device descriptor read/8, error -71 [ 152.276570][ T5770] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.318607][ T5770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.344563][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.367361][ T5770] usb 7-1: Product: syz [ 152.409479][ T5770] usb 7-1: Manufacturer: syz [ 152.414159][ T5770] usb 7-1: SerialNumber: syz [ 152.499447][ T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 152.580943][ T27] usb 6-1: device descriptor read/8, error -71 [ 152.655359][ T5770] usb 7-1: 0:2 : does not exist [ 152.676534][ T5770] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 152.729936][ T27] usb usb6-port1: unable to enumerate USB device [ 152.759734][ T5770] usb 7-1: USB disconnect, device number 2 [ 152.828865][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.216315][ T7384] loop3: detected capacity change from 0 to 4096 [ 153.248938][ T7384] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 153.327391][ T7390] loop6: detected capacity change from 0 to 256 [ 153.355189][ T7390] exfat: Deprecated parameter 'utf8' [ 153.389554][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 153.400261][ T7390] exfat: Deprecated parameter 'namecase' [ 153.406068][ T7390] exfat: Deprecated parameter 'utf8' [ 153.456787][ T7390] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 153.597441][ T28] audit: type=1800 audit(1765719231.606:19): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.412" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 153.628627][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.669674][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.712898][ T9] usb 3-1: config 0 descriptor?? [ 153.732897][ T9] cp210x 3-1:0.0: cp210x converter detected [ 153.832137][ T28] audit: type=1326 audit(1765719231.836:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.5.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb63f8f749 code=0x7ffc0000 [ 153.935566][ T28] audit: type=1326 audit(1765719231.846:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.5.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcb63f8f749 code=0x7ffc0000 [ 154.009544][ T28] audit: type=1326 audit(1765719231.846:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.5.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb63f8f749 code=0x7ffc0000 [ 154.061429][ T28] audit: type=1326 audit(1765719231.866:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.5.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcb63f8f749 code=0x7ffc0000 [ 154.128797][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 154.135034][ T28] audit: type=1326 audit(1765719231.866:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.5.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb63f8f749 code=0x7ffc0000 [ 154.157706][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 154.169690][ T28] audit: type=1326 audit(1765719231.866:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.5.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb63f8f749 code=0x7ffc0000 [ 154.279532][ T28] audit: type=1326 audit(1765719231.866:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.5.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb63f8f749 code=0x7ffc0000 [ 154.346523][ T9] usb 3-1: USB disconnect, device number 11 [ 154.359517][ T28] audit: type=1326 audit(1765719231.876:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.5.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcb63f8f749 code=0x7ffc0000 [ 154.379590][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 154.437185][ T28] audit: type=1326 audit(1765719231.876:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.5.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb63f8f749 code=0x7ffc0000 [ 154.447940][ T9] cp210x 3-1:0.0: device disconnected [ 155.093065][ T7422] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 155.168686][ T7425] loop2: detected capacity change from 0 to 256 [ 155.281170][ T7425] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 155.504043][ T7426] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 155.601085][ T7422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.616076][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 155.812862][ T1072] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 156.345031][ T7447] loop3: detected capacity change from 0 to 1024 [ 158.533233][ T7495] random: crng reseeded on system resumption [ 159.245910][ T7493] team0 (unregistering): Port device team_slave_0 removed [ 159.275234][ T7493] team0 (unregistering): Port device team_slave_1 removed [ 159.545387][ T7493] syz.5.437 (7493) used greatest stack depth: 20712 bytes left [ 159.629745][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 159.679693][ T7515] loop2: detected capacity change from 0 to 1024 [ 159.688604][ T7517] loop5: detected capacity change from 0 to 1024 [ 159.730613][ T7517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.839512][ T7517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.861381][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.919213][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.949769][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.964452][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.974300][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.981767][ T1072] hfsplus: b-tree write err: -5, ino 4 [ 159.989078][ T9] usb 7-1: config 0 descriptor?? [ 160.248409][ T6793] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.528424][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 160.546318][ T9] usbhid: probe of 7-1:0.0 failed with error -71 [ 160.578288][ T7525] loop2: detected capacity change from 0 to 8192 [ 160.590430][ T9] usb 7-1: USB disconnect, device number 3 [ 160.688771][ T7525] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff00) [ 160.710849][ T7525] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff00) [ 161.224551][ T7540] netlink: 'syz.5.454': attribute type 4 has an invalid length. [ 161.349830][ T23] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 161.552241][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 161.565926][ T23] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 161.592608][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.623627][ T23] usb 4-1: config 0 descriptor?? [ 161.629635][ T7536] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 161.679454][ T5868] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 161.869698][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 161.879704][ T5868] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 161.905352][ T5868] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.906405][ T7559] tun0: tun_chr_ioctl cmd 1074304026 [ 161.926225][ T5868] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.948888][ T5868] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.969131][ T5868] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.992203][ T5868] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.002170][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.073121][ T23] elan 0003:04F3:0755.0002: unknown main item tag 0x0 [ 162.100027][ T23] elan 0003:04F3:0755.0002: item fetching failed at offset 3/5 [ 162.108399][ T23] elan 0003:04F3:0755.0002: Hid Parse failed [ 162.130393][ T23] elan: probe of 0003:04F3:0755.0002 failed with error -22 [ 162.232512][ T5868] usb 7-1: usb_control_msg returned -32 [ 162.244420][ T5868] usbtmc 7-1:16.0: can't read capabilities [ 162.277759][ T9] usb 4-1: USB disconnect, device number 10 [ 162.308089][ T7567] loop2: detected capacity change from 0 to 4096 [ 162.354996][ T5779] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.379293][ T7569] loop5: detected capacity change from 0 to 512 [ 162.597566][ T7574] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned b6 [ 162.763370][ T7580] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.779561][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 162.799039][ T9] usb 7-1: USB disconnect, device number 4 [ 162.984326][ T23] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 162.998644][ T23] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 163.018873][ T23] usb 6-1: Product: syz [ 163.027997][ T23] usb 6-1: Manufacturer: syz [ 163.051451][ T23] usb 6-1: SerialNumber: syz [ 163.074992][ T23] usb 6-1: config 0 descriptor?? [ 163.098755][ T23] ch341 6-1:0.0: ch341-uart converter detected [ 163.304660][ T23] usb 6-1: failed to receive control message: -121 [ 163.311322][ T5853] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 163.311344][ T23] ch341-uart: probe of ttyUSB0 failed with error -121 [ 163.359544][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 163.405138][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.6.475'. [ 163.417569][ T7596] netlink: 'syz.6.475': attribute type 7 has an invalid length. [ 163.425880][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.475'. [ 163.519732][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 163.533525][ T5868] usb 6-1: USB disconnect, device number 6 [ 163.552128][ T5853] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 163.563565][ T5868] ch341 6-1:0.0: device disconnected [ 163.579901][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 163.589564][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.611757][ T5853] usb 3-1: Product: syz [ 163.617567][ T5853] usb 3-1: Manufacturer: syz [ 163.624943][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.636029][ T5853] usb 3-1: SerialNumber: syz [ 163.642776][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 163.654583][ T5853] usb 3-1: config 0 descriptor?? [ 163.660731][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 163.691805][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 163.717861][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 163.726713][ T9] usb 4-1: Product: syz [ 163.731360][ T9] usb 4-1: Manufacturer: syz [ 163.736039][ T9] usb 4-1: SerialNumber: syz [ 163.744892][ T9] usb 4-1: config 0 descriptor?? [ 163.756382][ T9] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 163.765509][ T9] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 163.773205][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 163.886188][ T5853] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 164.158308][ T7606] loop6: detected capacity change from 0 to 64 [ 164.207541][ T5954] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.504189][ T5853] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 164.532241][ T5853] usb 3-1: USB disconnect, device number 12 [ 165.239971][ T7644] loop2: detected capacity change from 0 to 1024 [ 165.254194][ T7644] EXT4-fs: Ignoring removed bh option [ 165.269548][ T23] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 165.295298][ T7644] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 165.337844][ T7644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.342423][ T7646] loop6: detected capacity change from 0 to 2048 [ 165.378923][ T7646] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 165.393912][ T7646] UDF-fs: Scanning with blocksize 512 failed [ 165.403470][ T7644] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.493: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 165.434882][ T7644] EXT4-fs (loop2): Remounting filesystem read-only [ 165.474236][ T23] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 165.483371][ T23] usb 6-1: config 0 has no interface number 0 [ 165.490057][ T23] usb 6-1: config 0 interface 139 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 165.501735][ T23] usb 6-1: config 0 interface 139 altsetting 0 has an invalid endpoint with address 0xBD, skipping [ 165.504570][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.512605][ T23] usb 6-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.523103][ T23] usb 6-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 165.546844][ T7646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.548190][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.566611][ T23] usb 6-1: Product: syz [ 165.570894][ T23] usb 6-1: Manufacturer: syz [ 165.602809][ T23] usb 6-1: SerialNumber: syz [ 165.621163][ T23] usb 6-1: config 0 descriptor?? [ 165.646136][ T7635] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 165.684757][ T7635] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 165.693861][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 165.693874][ T28] audit: type=1800 audit(1765719243.686:30): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.494" name="file1" dev="loop6" ino=818 res=0 errno=0 [ 165.852481][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.496'. [ 165.866079][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.496'. [ 165.876267][ T7658] loop2: detected capacity change from 0 to 128 [ 165.891282][ T7658] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 165.927186][ T7658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.937483][ T23] mct_u232 6-1:0.139: MCT U232 converter detected [ 165.953795][ T23] mct_u232 ttyUSB0: expected endpoint missing [ 165.986854][ T23] usb 6-1: USB disconnect, device number 7 [ 166.002189][ T28] audit: type=1800 audit(1765719244.006:31): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.497" name="file1" dev="loop2" ino=104 res=0 errno=0 [ 166.026919][ T7658] ------------[ cut here ]------------ [ 166.033420][ T7658] WARNING: CPU: 1 PID: 7658 at fs/udf/truncate.c:224 udf_truncate_extents+0xd46/0xeb0 [ 166.043565][ T7658] Modules linked in: [ 166.047605][ T7658] CPU: 1 PID: 7658 Comm: syz.2.497 Not tainted syzkaller #0 [ 166.055088][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.066539][ T7658] RIP: 0010:udf_truncate_extents+0xd46/0xeb0 [ 166.072908][ T7658] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2a 90 8d fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8 [ 166.092878][ T7658] RSP: 0018:ffffc900048cf9a0 EFLAGS: 00010287 [ 166.099003][ T7658] RAX: ffffffff82f80096 RBX: 1ffff1100b70c4d6 RCX: 0000000000080000 [ 166.107301][ T7658] RDX: ffffc9000d37c000 RSI: 00000000000028a9 RDI: 00000000000028aa [ 166.115394][ T7658] RBP: ffffc900048cfb68 R08: ffff888029285a00 R09: 0000000000000002 [ 166.123535][ T7658] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 166.131998][ T7658] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 166.140449][ T7658] FS: 00007f300ea9c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 166.149581][ T7658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.156211][ T7658] CR2: 00007fdaaa402cb0 CR3: 000000006bcad000 CR4: 00000000003506e0 [ 166.165142][ T7658] Call Trace: [ 166.168471][ T7658] [ 166.171734][ T7658] ? udf_discard_prealloc+0x570/0x570 [ 166.177172][ T7658] ? udf_write_failed+0x178/0x1b0 [ 166.182350][ T7658] ? __lock_acquire+0x7c80/0x7c80 [ 166.187421][ T7658] ? do_raw_spin_lock+0x121/0x2c0 [ 166.192596][ T7658] ? __rwlock_init+0xa0/0x150 [ 166.197327][ T7658] ? do_raw_spin_unlock+0x121/0x230 [ 166.202660][ T7658] udf_write_failed+0x180/0x1b0 [ 166.207581][ T7658] udf_direct_IO+0x1c3/0x200 [ 166.208614][ T5853] usb 4-1: USB disconnect, device number 11 [ 166.212307][ T7658] generic_file_direct_write+0x1d4/0x3e0 [ 166.212384][ T7658] __generic_file_write_iter+0x11b/0x230 [ 166.229859][ T7658] ? udf_file_write_iter+0x2b1/0x620 [ 166.235224][ T7658] udf_file_write_iter+0x2c0/0x620 [ 166.240782][ T7658] vfs_write+0x43b/0x940 [ 166.245090][ T7658] ? file_end_write+0x250/0x250 [ 166.250105][ T7658] ? __fget_files+0x44a/0x4d0 [ 166.254947][ T7658] ? __fdget+0x180/0x210 [ 166.259242][ T7658] ? __x64_sys_pwrite64+0xf0/0x220 [ 166.264464][ T7658] __x64_sys_pwrite64+0x195/0x220 [ 166.270920][ T7658] ? ksys_pwrite64+0x1c0/0x1c0 [ 166.275766][ T7658] ? lockdep_hardirqs_on+0x98/0x150 [ 166.281238][ T7658] do_syscall_64+0x55/0xb0 [ 166.285706][ T7658] ? clear_bhb_loop+0x40/0x90 [ 166.290622][ T7658] ? clear_bhb_loop+0x40/0x90 [ 166.295355][ T7658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.301981][ T7658] RIP: 0033:0x7f300db8f749 [ 166.306474][ T7658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.326705][ T7658] RSP: 002b:00007f300ea9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 166.335259][ T7658] RAX: ffffffffffffffda RBX: 00007f300dde5fa0 RCX: 00007f300db8f749 [ 166.343377][ T7658] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 166.351461][ T7658] RBP: 00007f300dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.359583][ T7658] R10: 0000000000006d0e R11: 0000000000000246 R12: 0000000000000000 [ 166.367607][ T7658] R13: 00007f300dde6038 R14: 00007f300dde5fa0 R15: 00007ffcd624bd48 [ 166.376440][ T7658] [ 166.381964][ T7658] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.389283][ T7658] CPU: 1 PID: 7658 Comm: syz.2.497 Not tainted syzkaller #0 [ 166.396609][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.406708][ T7658] Call Trace: [ 166.410021][ T7658] [ 166.412975][ T7658] dump_stack_lvl+0x16c/0x230 [ 166.417671][ T7658] ? show_regs_print_info+0x20/0x20 [ 166.422888][ T7658] ? load_image+0x3b0/0x3b0 [ 166.427415][ T7658] panic+0x2c0/0x710 [ 166.431326][ T7658] ? bpf_jit_dump+0xd0/0xd0 [ 166.435895][ T7658] __warn+0x2e0/0x470 [ 166.439904][ T7658] ? udf_truncate_extents+0xd46/0xeb0 [ 166.445319][ T7658] ? udf_truncate_extents+0xd46/0xeb0 [ 166.450718][ T7658] report_bug+0x2be/0x4f0 [ 166.455157][ T7658] ? udf_truncate_extents+0xd46/0xeb0 [ 166.460539][ T7658] ? udf_truncate_extents+0xd46/0xeb0 [ 166.465930][ T7658] ? udf_truncate_extents+0xd48/0xeb0 [ 166.471323][ T7658] handle_bug+0xcf/0x120 [ 166.475621][ T7658] exc_invalid_op+0x1a/0x50 [ 166.480137][ T7658] asm_exc_invalid_op+0x1a/0x20 [ 166.485004][ T7658] RIP: 0010:udf_truncate_extents+0xd46/0xeb0 [ 166.491026][ T7658] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2a 90 8d fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8 [ 166.510670][ T7658] RSP: 0018:ffffc900048cf9a0 EFLAGS: 00010287 [ 166.516776][ T7658] RAX: ffffffff82f80096 RBX: 1ffff1100b70c4d6 RCX: 0000000000080000 [ 166.525193][ T7658] RDX: ffffc9000d37c000 RSI: 00000000000028a9 RDI: 00000000000028aa [ 166.533177][ T7658] RBP: ffffc900048cfb68 R08: ffff888029285a00 R09: 0000000000000002 [ 166.541158][ T7658] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 166.549145][ T7658] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 166.557152][ T7658] ? udf_truncate_extents+0xd46/0xeb0 [ 166.562568][ T7658] ? udf_discard_prealloc+0x570/0x570 [ 166.567956][ T7658] ? udf_write_failed+0x178/0x1b0 [ 166.573090][ T7658] ? __lock_acquire+0x7c80/0x7c80 [ 166.578130][ T7658] ? do_raw_spin_lock+0x121/0x2c0 [ 166.583182][ T7658] ? __rwlock_init+0xa0/0x150 [ 166.587876][ T7658] ? do_raw_spin_unlock+0x121/0x230 [ 166.593098][ T7658] udf_write_failed+0x180/0x1b0 [ 166.597973][ T7658] udf_direct_IO+0x1c3/0x200 [ 166.602594][ T7658] generic_file_direct_write+0x1d4/0x3e0 [ 166.608244][ T7658] __generic_file_write_iter+0x11b/0x230 [ 166.613891][ T7658] ? udf_file_write_iter+0x2b1/0x620 [ 166.619285][ T7658] udf_file_write_iter+0x2c0/0x620 [ 166.624426][ T7658] vfs_write+0x43b/0x940 [ 166.628693][ T7658] ? file_end_write+0x250/0x250 [ 166.633573][ T7658] ? __fget_files+0x44a/0x4d0 [ 166.638275][ T7658] ? __fdget+0x180/0x210 [ 166.642535][ T7658] ? __x64_sys_pwrite64+0xf0/0x220 [ 166.647670][ T7658] __x64_sys_pwrite64+0x195/0x220 [ 166.652806][ T7658] ? ksys_pwrite64+0x1c0/0x1c0 [ 166.657591][ T7658] ? lockdep_hardirqs_on+0x98/0x150 [ 166.662810][ T7658] do_syscall_64+0x55/0xb0 [ 166.667326][ T7658] ? clear_bhb_loop+0x40/0x90 [ 166.672018][ T7658] ? clear_bhb_loop+0x40/0x90 [ 166.676720][ T7658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.682628][ T7658] RIP: 0033:0x7f300db8f749 [ 166.687056][ T7658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.706676][ T7658] RSP: 002b:00007f300ea9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 166.715105][ T7658] RAX: ffffffffffffffda RBX: 00007f300dde5fa0 RCX: 00007f300db8f749 [ 166.723089][ T7658] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 166.731089][ T7658] RBP: 00007f300dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.739068][ T7658] R10: 0000000000006d0e R11: 0000000000000246 R12: 0000000000000000 [ 166.747075][ T7658] R13: 00007f300dde6038 R14: 00007f300dde5fa0 R15: 00007ffcd624bd48 [ 166.755070][ T7658] [ 166.758371][ T7658] Kernel Offset: disabled [ 166.762809][ T7658] Rebooting in 86400 seconds..