last executing test programs: 32.674825115s ago: executing program 3 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0xc, 0x0, 0x5a}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x8045}], 0x1) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000004c0)={0xf900000000000000, 0x4, 0x1008000009, 0xc, 0x2}) 32.311122253s ago: executing program 3 (id=129): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005fdb2971dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359ca9daf3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae682acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da30000bce645451b851111dd98ac4d8da9317c2c082020e0b2d6340809000000000000008e053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456521cffdef93e29f10f4a11f0cfbfc0ff976b20fe"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 32.177101817s ago: executing program 3 (id=130): syz_mount_image$hfsplus(&(0x7f0000000c00), &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000a40)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="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", @ANYRESOCT, @ANYRES8], 0xfb, 0x6b4, &(0x7f00000013c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [{0x1116c3fb, 0x1001}, {0xb, 0xffffffd1}]}, 0x18, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$UHID_INPUT(r1, &(0x7f0000002280)={0xa, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b3244078b089b3430356d090890e0878f0e1ac6e7049b336d959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda0362496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f11f46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360000b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f1b34bbc9963ac4f4bb330b303f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83cd06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e0ff3422f2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803335ee5f83a2b210520106b8a358b50a97a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c134b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3765b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b33c5260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb29c4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 31.958196391s ago: executing program 3 (id=131): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 31.620877899s ago: executing program 3 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1440, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) 31.068270581s ago: executing program 3 (id=138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 30.731682439s ago: executing program 32 (id=138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 7.031897082s ago: executing program 0 (id=282): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000000500)) 6.872336796s ago: executing program 0 (id=283): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000007840)=0x6) 6.729610439s ago: executing program 0 (id=284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010101, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x100000, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 5.425658658s ago: executing program 0 (id=300): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 4.673811945s ago: executing program 0 (id=301): open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 4.143430477s ago: executing program 2 (id=304): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fstat(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.932385581s ago: executing program 0 (id=307): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000640)={0xa0002002}) 3.292685556s ago: executing program 33 (id=307): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000640)={0xa0002002}) 3.046138521s ago: executing program 1 (id=316): r0 = fanotify_init(0x0, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = fanotify_init(0x10, 0x8000) fanotify_mark(r3, 0x21, 0x8, r2, 0x0) fanotify_mark(r2, 0x22, 0x1002, r2, 0x0) 3.045535821s ago: executing program 2 (id=310): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) fallocate(r1, 0x0, 0x8, 0x240000b4) tkill(r0, 0x14) rt_sigsuspend(&(0x7f0000000040)={[0x2]}, 0x8) 2.839253037s ago: executing program 1 (id=311): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x18, 0x0, 0x800de5, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.65181399s ago: executing program 4 (id=313): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x30000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xfff3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x51}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.495214304s ago: executing program 1 (id=314): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 2.064771094s ago: executing program 2 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2.062842274s ago: executing program 4 (id=323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)='D', 0x1}], 0x1, 0x0, 0x0, 0x8040}}], 0x1, 0x20000000) sendmsg$nl_netfilter(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0xb, 0x7, 0x201, 0x70bd2c, 0x25dfdbfd, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44015}, 0x20000801) 1.975327486s ago: executing program 1 (id=317): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fstat(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.895377678s ago: executing program 4 (id=318): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x7, 0x8, 0xfffffffffffffffe, 0x8, 0x100802, 0x5}) 1.586137574s ago: executing program 1 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x288a0aa, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5c, 0x3}) 1.572086475s ago: executing program 2 (id=320): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.479849687s ago: executing program 4 (id=321): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000580)={r4}) 1.174974244s ago: executing program 1 (id=322): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.075924646s ago: executing program 4 (id=324): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = gettid() recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 397.935701ms ago: executing program 2 (id=325): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) 246.672235ms ago: executing program 2 (id=326): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 0s ago: executing program 4 (id=327): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 77.047864][ T5760] cgroup: Unknown subsys name 'net' [ 77.180287][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.758226][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.740134][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.741931][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.749307][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.763741][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.763751][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.765535][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.771852][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.793400][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.796647][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.809147][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.816689][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.824669][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.853370][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.860713][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.868039][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.881831][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.890190][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.897456][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.907792][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.908003][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.923125][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.932853][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.945444][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.953063][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.343961][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 81.478631][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 81.520221][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.528099][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.536649][ T5774] bridge_slave_0: entered allmulticast mode [ 81.543978][ T5774] bridge_slave_0: entered promiscuous mode [ 81.558208][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.565637][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.574569][ T5774] bridge_slave_1: entered allmulticast mode [ 81.581509][ T5774] bridge_slave_1: entered promiscuous mode [ 81.588995][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 81.688450][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.721119][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.730440][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 81.816828][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.824399][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.831543][ T5772] bridge_slave_0: entered allmulticast mode [ 81.839056][ T5772] bridge_slave_0: entered promiscuous mode [ 81.859788][ T5774] team0: Port device team_slave_0 added [ 81.883522][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.890669][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.898283][ T5772] bridge_slave_1: entered allmulticast mode [ 81.905876][ T5772] bridge_slave_1: entered promiscuous mode [ 81.912530][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.920725][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.928152][ T5771] bridge_slave_0: entered allmulticast mode [ 81.935284][ T5771] bridge_slave_0: entered promiscuous mode [ 81.944213][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.951357][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.958717][ T5771] bridge_slave_1: entered allmulticast mode [ 81.966827][ T5771] bridge_slave_1: entered promiscuous mode [ 81.975547][ T5774] team0: Port device team_slave_1 added [ 82.039441][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.081232][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.104069][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.117435][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.127683][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.134903][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.160929][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.175293][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.182289][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.208742][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.229829][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.237156][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.244649][ T5773] bridge_slave_0: entered allmulticast mode [ 82.251795][ T5773] bridge_slave_0: entered promiscuous mode [ 82.289481][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.296949][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.304408][ T5773] bridge_slave_1: entered allmulticast mode [ 82.311829][ T5773] bridge_slave_1: entered promiscuous mode [ 82.344489][ T5771] team0: Port device team_slave_0 added [ 82.354144][ T5772] team0: Port device team_slave_0 added [ 82.363402][ T5772] team0: Port device team_slave_1 added [ 82.401198][ T5771] team0: Port device team_slave_1 added [ 82.440848][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.450835][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.458107][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.484122][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.507242][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.519660][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.545860][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.558879][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.565991][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.592051][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.605421][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.617333][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.624373][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.650320][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.667889][ T5774] hsr_slave_0: entered promiscuous mode [ 82.674555][ T5774] hsr_slave_1: entered promiscuous mode [ 82.752118][ T5773] team0: Port device team_slave_0 added [ 82.786980][ T5771] hsr_slave_0: entered promiscuous mode [ 82.793800][ T5771] hsr_slave_1: entered promiscuous mode [ 82.799991][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.808475][ T5771] Cannot create hsr debugfs directory [ 82.818823][ T5772] hsr_slave_0: entered promiscuous mode [ 82.825844][ T5772] hsr_slave_1: entered promiscuous mode [ 82.831957][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.839901][ T5772] Cannot create hsr debugfs directory [ 82.849290][ T5773] team0: Port device team_slave_1 added [ 82.913314][ T5777] Bluetooth: hci2: command tx timeout [ 82.952061][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.962187][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.991379][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.002190][ T5779] Bluetooth: hci3: command tx timeout [ 83.008211][ T51] Bluetooth: hci0: command tx timeout [ 83.014487][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.021637][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.022931][ T5777] Bluetooth: hci1: command tx timeout [ 83.054545][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.268408][ T5773] hsr_slave_0: entered promiscuous mode [ 83.275724][ T5773] hsr_slave_1: entered promiscuous mode [ 83.282010][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.289713][ T5773] Cannot create hsr debugfs directory [ 83.490891][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.505068][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.515462][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.537730][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.619695][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.647985][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.666729][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.679579][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.725214][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.743845][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.755290][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.765662][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.850948][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.867552][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.883375][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.904955][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.983777][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.046377][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.091188][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.107883][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.115218][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.136255][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.143410][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.167295][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.207057][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.228709][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.258961][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.266084][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.275950][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.283126][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.294646][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.301745][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.321541][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.347290][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.354545][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.412069][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.469000][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.476187][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.499119][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.506394][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.572173][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.977914][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.995022][ T5777] Bluetooth: hci2: command tx timeout [ 85.074123][ T5777] Bluetooth: hci1: command tx timeout [ 85.079658][ T5777] Bluetooth: hci3: command tx timeout [ 85.086878][ T5779] Bluetooth: hci0: command tx timeout [ 85.123656][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.160997][ T5774] veth0_vlan: entered promiscuous mode [ 85.192432][ T5774] veth1_vlan: entered promiscuous mode [ 85.209066][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.221703][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.302516][ T5773] veth0_vlan: entered promiscuous mode [ 85.330554][ T5772] veth0_vlan: entered promiscuous mode [ 85.340720][ T5774] veth0_macvtap: entered promiscuous mode [ 85.356781][ T5773] veth1_vlan: entered promiscuous mode [ 85.380221][ T5774] veth1_macvtap: entered promiscuous mode [ 85.389482][ T5772] veth1_vlan: entered promiscuous mode [ 85.455691][ T5771] veth0_vlan: entered promiscuous mode [ 85.477553][ T5771] veth1_vlan: entered promiscuous mode [ 85.501170][ T5773] veth0_macvtap: entered promiscuous mode [ 85.517442][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.528314][ T5772] veth0_macvtap: entered promiscuous mode [ 85.542641][ T5773] veth1_macvtap: entered promiscuous mode [ 85.559618][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.572036][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.582101][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.591435][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.600454][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.621854][ T5772] veth1_macvtap: entered promiscuous mode [ 85.655067][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.668628][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.680628][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.692377][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.703235][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.716598][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.750058][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.760773][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.772221][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.782008][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.801901][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.815829][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.826085][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.837385][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.850456][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.861743][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.872395][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.884699][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.895309][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.906945][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.943188][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.951947][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.966590][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.975970][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.019481][ T5771] veth0_macvtap: entered promiscuous mode [ 86.062255][ T5771] veth1_macvtap: entered promiscuous mode [ 86.097999][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.109322][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.186797][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.203119][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.217019][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.227861][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.239445][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.250847][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.262367][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.279895][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.288204][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.320809][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.332570][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.343280][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.356660][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.367036][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.377687][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.389283][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.401911][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.416531][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.437359][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.437964][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.446479][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.462457][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.543122][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.551027][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.620441][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.640213][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.690212][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.699540][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.802055][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.832415][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.964976][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.983470][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.073438][ T5777] Bluetooth: hci2: command tx timeout [ 87.153184][ T51] Bluetooth: hci0: command tx timeout [ 87.158660][ T51] Bluetooth: hci1: command tx timeout [ 87.165207][ T5777] Bluetooth: hci3: command tx timeout [ 87.506576][ T5853] syz.3.6[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.964009][ T5869] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.275080][ T5878] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.502112][ T5889] process 'syz.1.18' launched './file1' with NULL argv: empty string added [ 89.157146][ T5777] Bluetooth: hci2: command tx timeout [ 89.233753][ T5777] Bluetooth: hci3: command tx timeout [ 89.239333][ T51] Bluetooth: hci1: command tx timeout [ 89.244881][ T5779] Bluetooth: hci0: command tx timeout [ 89.611956][ T5927] loop0: detected capacity change from 0 to 8 [ 89.634172][ T5927] ======================================================= [ 89.634172][ T5927] WARNING: The mand mount option has been deprecated and [ 89.634172][ T5927] and is ignored by this kernel. Remove the mand [ 89.634172][ T5927] option from the mount to silence this warning. [ 89.634172][ T5927] ======================================================= [ 89.817838][ T5898] loop3: detected capacity change from 0 to 32768 [ 89.908460][ T5898] [ 89.908460][ T5898] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.908460][ T5898] [ 90.033815][ T27] audit: type=1800 audit(1784819941.807:2): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.20" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 90.150363][ T5898] ERROR: (device loop3): xtSearch: stack overrun! [ 90.150363][ T5898] [ 90.336967][ T5898] ERROR: (device loop3): xtSearch: stack overrun! [ 90.336967][ T5898] [ 90.353650][ T5898] xtLookup: xtSearch returned -5 [ 90.363334][ T5898] ERROR: (device loop3): xtTruncate: stack overrun! [ 90.363334][ T5898] [ 90.486272][ T3508] [ 90.486272][ T3508] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.486272][ T3508] [ 90.519952][ T3508] [ 90.519952][ T3508] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.519952][ T3508] [ 90.536275][ T3508] [ 90.536275][ T3508] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.536275][ T3508] [ 90.547275][ T3508] [ 90.547275][ T3508] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.547275][ T3508] [ 90.593538][ T3508] JFS: metapage_get_blocks failed [ 90.599161][ T3508] [ 90.599161][ T3508] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.599161][ T3508] [ 90.644309][ T5773] [ 90.644309][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.644309][ T5773] [ 90.666353][ T5773] [ 90.666353][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.666353][ T5773] [ 91.371277][ T5956] loop0: detected capacity change from 0 to 8192 [ 91.433275][ T5775] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.963451][ T35] cfg80211: failed to load regulatory.db [ 92.119974][ T5984] loop0: detected capacity change from 0 to 64 [ 92.751411][ T5997] capability: warning: `syz.2.59' uses deprecated v2 capabilities in a way that may be insecure [ 92.771595][ T3063] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.976805][ T3063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.998252][ T3063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.018173][ T3063] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 93.035204][ T3063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.066365][ T3063] usb 4-1: config 0 descriptor?? [ 93.409694][ T6001] loop2: detected capacity change from 0 to 40427 [ 93.436490][ T6001] F2FS-fs (loop2): invalid crc value [ 93.449393][ T6001] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.595203][ T6001] F2FS-fs (loop2): Start checkpoint disabled! [ 93.622936][ T6001] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 93.769768][ T6001] syz.2.61: attempt to access beyond end of device [ 93.769768][ T6001] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.948473][ T3063] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 94.178853][ T3063] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 94.305213][ T3063] usb 4-1: USB disconnect, device number 2 [ 94.397228][ T11] kworker/u4:0: attempt to access beyond end of device [ 94.397228][ T11] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 94.430954][ T6048] fido_id[6048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 94.452460][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 94.469348][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 95.285633][ T6064] loop0: detected capacity change from 0 to 32768 [ 95.302095][ T6064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.67 (6064) [ 95.357780][ T6064] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.368384][ T6064] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 95.377206][ T6064] BTRFS info (device loop0): force clearing of disk cache [ 95.384415][ T6064] BTRFS info (device loop0): metadata ratio 0 [ 95.390542][ T6064] BTRFS info (device loop0): enabling disk space caching [ 95.398255][ T6064] BTRFS info (device loop0): disk space caching is enabled [ 95.545638][ T6064] BTRFS info (device loop0): enabling ssd optimizations [ 95.552898][ T6064] BTRFS info (device loop0): auto enabling async discard [ 95.567867][ T6064] BTRFS info (device loop0): rebuilding free space tree [ 95.616157][ T6064] BTRFS info (device loop0): disabling free space tree [ 95.626395][ T6064] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.636408][ T6064] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.772818][ T27] audit: type=1800 audit(1784819947.557:3): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.67" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 95.816493][ T6064] BTRFS info (device loop0): balance: start [ 95.823347][ T6064] BTRFS info (device loop0): balance: ended with status: 0 [ 95.823552][ T6097] loop3: detected capacity change from 0 to 16 [ 95.927932][ T6097] erofs: (device loop3): mounted with root inode @ nid 36. [ 95.995033][ T5772] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.405067][ T6110] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 96.498051][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 96.625399][ T6116] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 96.971142][ T6129] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 96.992561][ T6128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.86'. [ 97.153471][ T6131] gre0: entered allmulticast mode [ 97.175174][ T6130] gre0: left allmulticast mode [ 97.335705][ T6139] input: syz0 as /devices/virtual/input/input5 [ 97.780696][ T6153] loop0: detected capacity change from 0 to 512 [ 97.856039][ T6153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.872115][ T6153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.966266][ T6153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.042871][ T6153] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.247835][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.344741][ T6171] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 98.506419][ T6175] loop3: detected capacity change from 0 to 128 [ 98.569661][ T6175] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.626319][ T6181] tls_set_device_offload: netdev not found [ 98.644647][ T6175] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.863233][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.063802][ T171] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.234866][ T6202] syzkaller1: entered promiscuous mode [ 99.240566][ T6202] syzkaller1: entered allmulticast mode [ 99.285685][ T171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 99.297101][ T171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50610, setting to 1024 [ 99.309570][ T171] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.322987][ T171] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.332197][ T171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.350230][ T171] usb 1-1: config 0 descriptor?? [ 99.362824][ T6185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.424616][ T35] IPVS: starting estimator thread 0... [ 99.544515][ T6205] IPVS: using max 20 ests per chain, 48000 per kthread [ 99.782787][ T5815] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.805555][ T171] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 99.824332][ T171] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.984135][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 100.001753][ T5815] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.029100][ T6210] input: syz0 as /devices/virtual/input/input6 [ 100.040226][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 100.042813][ T5815] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.082998][ T5815] usb 2-1: config 1 has no interface number 0 [ 100.090038][ T5815] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.114292][ T5815] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 100.129511][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.139364][ T5815] usb 2-1: Product: syz [ 100.143923][ T5815] usb 2-1: Manufacturer: syz [ 100.148556][ T5815] usb 2-1: SerialNumber: syz [ 100.854861][ T5815] usb 2-1: USB disconnect, device number 2 [ 101.135269][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 101.149543][ T6235] loop3: detected capacity change from 0 to 1024 [ 101.150573][ T35] usb 1-1: USB disconnect, device number 2 [ 101.313706][ T34] hfsplus: b-tree write err: -5, ino 8 [ 101.375753][ T6237] loop3: detected capacity change from 0 to 1024 [ 101.383524][ T6237] EXT4-fs: Ignoring removed bh option [ 101.422036][ T6237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 101.492969][ T6237] loop3: detected capacity change from 1024 to 64 [ 101.524771][ T6241] syz.3.131: attempt to access beyond end of device [ 101.524771][ T6241] loop3: rw=2051, sector=224, nr_sectors = 32 limit=64 [ 101.538855][ T6241] EXT4-fs (loop3): discard request in group:0 block:7 count:16 failed with -5 [ 101.549240][ T6241] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.914090][ T6251] loop0: detected capacity change from 0 to 2048 [ 101.962176][ T6251] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.041277][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 102.082756][ T6238] kmmpd-loop3: attempt to access beyond end of device [ 102.082756][ T6238] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 102.116182][ T6238] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 102.142214][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.261572][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.366383][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.520311][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.670096][ T6257] loop0: detected capacity change from 0 to 512 [ 102.725810][ T6257] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 102.784125][ T6257] EXT4-fs (loop0): 1 truncate cleaned up [ 102.854081][ T6257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.266503][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.385695][ T6039] Bluetooth: hci1: Frame reassembly failed (-84) [ 103.518723][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.528458][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.538048][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.562830][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.573173][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 103.581095][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.335873][ T6282] chnl_net:caif_netlink_parms(): no params data found [ 104.704898][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.712166][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.733340][ T6282] bridge_slave_0: entered allmulticast mode [ 104.741566][ T6282] bridge_slave_0: entered promiscuous mode [ 104.788123][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.843445][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.850740][ T6282] bridge_slave_1: entered allmulticast mode [ 104.892113][ T6282] bridge_slave_1: entered promiscuous mode [ 105.042009][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.065237][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.159864][ T11] hsr_slave_0: left promiscuous mode [ 105.167767][ T11] hsr_slave_1: left promiscuous mode [ 105.190697][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.205835][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.229967][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.252810][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.260874][ T11] bridge_slave_1: left allmulticast mode [ 105.274531][ T11] bridge_slave_1: left promiscuous mode [ 105.282238][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.323699][ T11] bridge_slave_0: left allmulticast mode [ 105.332780][ T11] bridge_slave_0: left promiscuous mode [ 105.339052][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.386723][ T11] veth1_macvtap: left promiscuous mode [ 105.393205][ T5779] Bluetooth: hci1: command 0x1003 tx timeout [ 105.400603][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 105.401789][ T11] veth0_macvtap: left promiscuous mode [ 105.413977][ T51] Bluetooth: hci0: command tx timeout [ 105.435426][ T11] veth1_vlan: left promiscuous mode [ 105.441031][ T11] veth0_vlan: left promiscuous mode [ 105.633222][ T5779] Bluetooth: hci4: command tx timeout [ 106.072178][ T27] audit: type=1800 audit(1784819957.857:4): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.163" name="file2" dev="overlay" ino=283 res=0 errno=0 [ 106.155801][ T6351] loop1: detected capacity change from 0 to 4096 [ 106.166475][ T6351] EXT4-fs: inline encryption not supported [ 106.206514][ T6351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.221834][ T6351] EXT4-fs (loop1): Test dummy encryption mode enabled [ 106.268032][ T6351] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 106.289185][ T6351] System zones: 0-5 [ 106.307948][ T6351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.437428][ T6351] EXT4-fs (loop1): shut down requested (0) [ 106.510499][ T6357] fs-verity: sha512 using implementation "sha512-avx2" [ 106.569672][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.603831][ T11] team0 (unregistering): Port device team_slave_1 removed [ 106.690139][ T11] team0 (unregistering): Port device team_slave_0 removed [ 106.730170][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.791615][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.100878][ T11] bond0 (unregistering): Released all slaves [ 107.201982][ T6282] team0: Port device team_slave_0 added [ 107.212230][ T6282] team0: Port device team_slave_1 added [ 107.243744][ T6343] Zero length message leads to an empty skb [ 107.419767][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.428223][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.463040][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.490598][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.511536][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.564940][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.584328][ T23] IPVS: starting estimator thread 0... [ 107.590026][ T6368] IPVS: fo: FWM 3 0x00000003 - no destination available [ 107.618073][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 107.673210][ T6369] IPVS: using max 21 ests per chain, 50400 per kthread [ 107.713034][ T5779] Bluetooth: hci4: command tx timeout [ 107.794684][ T6282] hsr_slave_0: entered promiscuous mode [ 107.824241][ T6282] hsr_slave_1: entered promiscuous mode [ 107.862685][ T6282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.888740][ T6282] Cannot create hsr debugfs directory [ 108.007864][ T6380] loop1: detected capacity change from 0 to 1024 [ 108.103978][ T6380] hfsplus: invalid length 32517 has been corrected to 255 [ 108.211567][ T27] audit: type=1800 audit(1784819959.987:5): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.172" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 108.295616][ T6380] hfsplus: b-tree write err: -5, ino 20 [ 108.594563][ T34] hfsplus: b-tree write err: -5, ino 4 [ 108.617878][ T34] hfsplus: b-tree write err: -5, ino 25 [ 108.629482][ T34] hfsplus: b-tree write err: -5, ino 2 [ 108.638512][ T34] hfsplus: invalid length 32517 has been corrected to 255 [ 108.646783][ T34] hfsplus: b-tree write err: -5, ino 20 [ 108.806033][ T6282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.846644][ T6282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.898213][ T6378] loop0: detected capacity change from 0 to 32768 [ 108.910260][ T6282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.951740][ T6282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.108283][ T6378] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.140461][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.202791][ T1195] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 109.219992][ T6282] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.271904][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.279128][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.329674][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.336914][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.406147][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.425168][ T6282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.437077][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.456083][ T1195] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 109.471927][ T1195] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 109.489199][ T1195] usb 3-1: Manufacturer: syz [ 109.506326][ T1195] usb 3-1: config 0 descriptor?? [ 109.546873][ T5772] ocfs2: Unmounting device (7,0) on (node local) [ 109.793711][ T5779] Bluetooth: hci4: command tx timeout [ 109.983729][ T1195] cougar 0003:060B:700A.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 110.197250][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.254554][ T1195] usb 3-1: USB disconnect, device number 2 [ 110.383844][ T6429] fido_id[6429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 111.176856][ T6282] veth0_vlan: entered promiscuous mode [ 111.230540][ T6282] veth1_vlan: entered promiscuous mode [ 111.292739][ T3063] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 111.304961][ T6282] veth0_macvtap: entered promiscuous mode [ 111.327984][ T6282] veth1_macvtap: entered promiscuous mode [ 111.337738][ T6452] loop1: detected capacity change from 0 to 128 [ 111.373551][ T6452] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 111.382932][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.419776][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.466736][ T6452] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.484240][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.516469][ T3063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 111.527215][ T3063] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.536574][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.541740][ T3063] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 111.561794][ T3063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.573072][ T3063] usb 3-1: config 0 descriptor?? [ 111.579839][ T6449] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.604310][ T6452] ext2 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.613399][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.626124][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.640745][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.674675][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.741671][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.772238][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.832794][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.857808][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.874232][ T5779] Bluetooth: hci4: command tx timeout [ 111.902129][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.938800][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.967354][ T6282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.979794][ T6282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.027053][ T6282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.038325][ T3063] elecom 0003:056E:00FE.0004: invalid report_count 46852 [ 112.065630][ T3063] elecom 0003:056E:00FE.0004: item 0 2 1 9 parsing failed [ 112.073111][ T6282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.088026][ T3063] elecom: probe of 0003:056E:00FE.0004 failed with error -22 [ 112.140732][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.288017][ T5833] usb 3-1: USB disconnect, device number 3 [ 112.410047][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.447929][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.565701][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.592805][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.086166][ T6505] loop4: detected capacity change from 0 to 256 [ 114.105139][ T6505] exfat: Deprecated parameter 'namecase' [ 114.110923][ T6505] exfat: Deprecated parameter 'namecase' [ 114.240501][ T6505] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 114.514214][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 114.567810][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 114.623955][ T6515] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.633381][ T6515] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.642143][ T6515] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.650951][ T6515] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.710986][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 114.722480][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 115.113006][ T5833] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.152724][ T5815] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.327016][ T5833] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 115.352997][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 115.358358][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.373605][ T5815] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 115.385469][ T5815] usb 3-1: config 0 has no interface number 0 [ 115.391741][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.410908][ T5815] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 115.422690][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 115.443714][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.456857][ T5815] usb 3-1: Product: syz [ 115.461161][ T5815] usb 3-1: Manufacturer: syz [ 115.467753][ T5833] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 115.482717][ T5815] usb 3-1: SerialNumber: syz [ 115.488590][ T5833] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 115.507994][ T5833] usb 1-1: Manufacturer: syz [ 115.513979][ T5815] usb 3-1: config 0 descriptor?? [ 115.532309][ T5815] smsc95xx v2.0.0 [ 115.541299][ T5833] usb 1-1: config 0 descriptor?? [ 116.004796][ T5833] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 116.023456][ T5833] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 116.046424][ T5833] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 116.592828][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.770184][ T5815] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 116.785686][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.811866][ T5815] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 116.828694][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 116.834237][ T5815] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 116.851080][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 116.870673][ T23] usb 5-1: Product: syz [ 116.871384][ T5815] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 116.881976][ T23] usb 5-1: Manufacturer: syz [ 116.900043][ T23] usb 5-1: SerialNumber: syz [ 116.911667][ T5815] usb 3-1: USB disconnect, device number 4 [ 116.976407][ T6552] loop1: detected capacity change from 0 to 32768 [ 117.181850][ T23] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 117.525488][ T5815] usb 5-1: USB disconnect, device number 2 [ 117.587104][ T5815] usblp1: removed [ 118.257403][ T23] usb 1-1: USB disconnect, device number 3 [ 118.384597][ T6600] bridge_slave_0: left allmulticast mode [ 118.390532][ T6600] bridge_slave_0: left promiscuous mode [ 118.398209][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.603687][ T6600] bridge_slave_1: left allmulticast mode [ 118.609480][ T6600] bridge_slave_1: left promiscuous mode [ 118.617339][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.653600][ T6600] bond0: (slave bond_slave_0): Releasing backup interface [ 118.714930][ T6600] bond0: (slave bond_slave_1): Releasing backup interface [ 118.790768][ T6600] team0: Port device team_slave_0 removed [ 118.856412][ T6600] team0: Port device team_slave_1 removed [ 118.883827][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.910085][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.956577][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.992888][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.011336][ T6608] loop4: detected capacity change from 0 to 4096 [ 119.049598][ T6608] EXT4-fs (loop4): Test dummy encryption mode enabled [ 119.106975][ T6608] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 119.188910][ T6608] System zones: 0-5 [ 119.206632][ T6608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.477687][ T6282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.798445][ T27] audit: type=1326 audit(1784819971.587:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6637 comm="syz.4.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34bad9de99 code=0x0 [ 122.101765][ T6677] loop2: detected capacity change from 0 to 32768 [ 122.216715][ T27] audit: type=1800 audit(1784819974.007:7): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.241" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 123.113133][ T6723] loop4: detected capacity change from 0 to 764 [ 123.188790][ T6723] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 123.738629][ T6736] Bluetooth: MGMT ver 1.22 [ 124.044631][ T6726] loop0: detected capacity change from 0 to 40427 [ 124.108493][ T6726] F2FS-fs (loop0): invalid crc value [ 124.156375][ T6726] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.241292][ T6726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.265548][ T6754] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 124.335303][ T6754] bond1: (slave lo): Enslaving as an active interface with an up link [ 124.363147][ T5815] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.386234][ T6726] syz.0.257: attempt to access beyond end of device [ 124.386234][ T6726] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.410091][ T6726] syz.0.257: attempt to access beyond end of device [ 124.410091][ T6726] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 124.451290][ T6754] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 124.551393][ T5772] syz-executor: attempt to access beyond end of device [ 124.551393][ T5772] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 124.593861][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 124.604068][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 124.613456][ T5815] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.622873][ T5815] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.631514][ T5815] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.641845][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.651892][ T5815] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.661884][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.675257][ T5815] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.684731][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.708127][ T5815] usb 3-1: config 0 descriptor?? [ 124.980160][ T5815] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 125.051049][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 125.068914][ T6768] netlink: 'syz.4.269': attribute type 5 has an invalid length. [ 125.077605][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 125.127292][ T6768] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.136161][ T6768] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.144980][ T6768] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.153759][ T6768] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.186508][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 125.252722][ T6769] netlink: 'syz.4.269': attribute type 5 has an invalid length. [ 125.260474][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 125.291231][ T5815] usb 3-1: USB disconnect, device number 5 [ 125.311537][ T5815] usblp0: removed [ 125.556456][ T6779] loop0: detected capacity change from 0 to 512 [ 125.611529][ T6779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.629121][ T6779] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.766065][ T6779] syz.0.266 (6779) used greatest stack depth: 20552 bytes left [ 125.821547][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.246865][ T6799] bridge_slave_0: left allmulticast mode [ 126.272361][ T6799] bridge_slave_0: left promiscuous mode [ 126.297514][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.326911][ T6799] bridge_slave_1: left allmulticast mode [ 126.336323][ T6799] bridge_slave_1: left promiscuous mode [ 126.344523][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.383364][ T6799] bond0: (slave bond_slave_0): Releasing backup interface [ 126.463427][ T6799] bond0: (slave bond_slave_1): Releasing backup interface [ 126.548847][ T6799] team0: Port device team_slave_0 removed [ 126.615850][ T6799] team0: Port device team_slave_1 removed [ 126.634772][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.642356][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.680288][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.689821][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.927636][ T6818] warning: `syz.4.286' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.077958][ T6821] 9pnet: p9_errstr2errno: server reported unknown error õ1 [ 127.461207][ T6815] loop1: detected capacity change from 0 to 32768 [ 127.580738][ T6828] loop2: detected capacity change from 0 to 512 [ 127.598058][ T6828] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.290: bad orphan inode 13 [ 127.629808][ T6828] ext4_test_bit(bit=12, block=4) = 1 [ 127.662985][ T6815] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 127.673827][ T6828] is_bad_inode(inode)=0 [ 127.678031][ T6828] NEXT_ORPHAN(inode)=0 [ 127.682154][ T6828] max_ino=32 [ 127.686680][ T6828] i_nlink=1 [ 127.691217][ T6828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.725254][ T6828] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.290: Hash code is SIPHASH, but hash not in dirent [ 127.739465][ T6828] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.290: Corrupt directory, running e2fsck is recommended [ 127.804249][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.909814][ T6815] XFS (loop1): Ending clean mount [ 127.965359][ T6842] loop0: detected capacity change from 0 to 1024 [ 127.997861][ T6842] EXT4-fs: Ignoring removed bh option [ 128.094575][ T6842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 128.324176][ T6842] loop0: detected capacity change from 1024 to 64 [ 128.372381][ T5774] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 128.375232][ T6850] syz.0.300: attempt to access beyond end of device [ 128.375232][ T6850] loop0: rw=2051, sector=224, nr_sectors = 32 limit=64 [ 128.403403][ T6850] EXT4-fs (loop0): discard request in group:0 block:7 count:16 failed with -5 [ 128.415147][ T6854] netlink: 'syz.4.296': attribute type 2 has an invalid length. [ 129.074813][ T6874] 9pnet: p9_errstr2errno: server reported unknown error õ1 [ 129.161962][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 129.206510][ T6846] kmmpd-loop0: attempt to access beyond end of device [ 129.206510][ T6846] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 129.247968][ T6846] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 129.381187][ T6887] loop1: detected capacity change from 0 to 1024 [ 129.422432][ T6887] EXT4-fs: Ignoring removed bh option [ 129.540033][ T6887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 129.584890][ T6887] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.712163][ T6887] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.306: lblock 3 mapped to illegal pblock 3 (length 3) [ 129.794572][ T6887] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 129.812975][ T6887] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.812975][ T6887] [ 129.838904][ T6902] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.306: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.902071][ T6887] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.306: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 129.930854][ T6887] EXT4-fs error (device loop1) in ext4_setattr:5682: Corrupt filesystem [ 130.050851][ T60] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 130.104475][ T60] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 130.137819][ T60] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.137819][ T60] [ 130.169429][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.697164][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.706891][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.715693][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.718369][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 130.735285][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 130.746392][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.755019][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.762425][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.173249][ T6926] chnl_net:caif_netlink_parms(): no params data found [ 131.446478][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.454280][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.462156][ T6926] bridge_slave_0: entered allmulticast mode [ 131.469625][ T6926] bridge_slave_0: entered promiscuous mode [ 131.484646][ T6955] loop4: detected capacity change from 0 to 512 [ 131.500150][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.511748][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.520567][ T6926] bridge_slave_1: entered allmulticast mode [ 131.528581][ T6926] bridge_slave_1: entered promiscuous mode [ 131.538467][ T6955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.572875][ T6955] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.597300][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.615088][ T6955] EXT4-fs error (device loop4): ext4_group_add:1745: inode #7: comm syz.4.318: iget: checksum invalid [ 131.645270][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.656081][ T6955] EXT4-fs warning (device loop4): ext4_group_add:1747: Error opening resize inode [ 131.757227][ T6282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.847639][ T6926] team0: Port device team_slave_0 added [ 131.870794][ T6926] team0: Port device team_slave_1 added [ 131.978940][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.032716][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.149358][ T6926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.263313][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.321705][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.369107][ T6926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.455623][ T6926] hsr_slave_0: entered promiscuous mode [ 132.471298][ T6926] hsr_slave_1: entered promiscuous mode [ 132.478227][ T6926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.492762][ T6926] Cannot create hsr debugfs directory [ 132.542961][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.743019][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 132.761514][ T5815] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.788425][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.820395][ T5815] usb 2-1: Product: syz [ 132.833562][ T5779] Bluetooth: hci1: command tx timeout [ 132.843641][ T5815] usb 2-1: Manufacturer: syz [ 132.857561][ T5815] usb 2-1: SerialNumber: syz [ 132.891314][ T5815] usb 2-1: config 0 descriptor?? [ 132.921866][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.928915][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.040956][ T6926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.086238][ T6926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.110283][ T6926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.124454][ T6926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.184727][ T5815] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 133.455328][ T6926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.518240][ T6926] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.550769][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.558008][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.589838][ T6987] ================================================================== [ 133.597955][ T6987] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 133.605639][ T6987] Read of size 8 at addr ffff8881457a8218 by task syz.2.326/6987 [ 133.613416][ T6987] [ 133.615787][ T6987] CPU: 1 PID: 6987 Comm: syz.2.326 Not tainted syzkaller #0 [ 133.623106][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026 [ 133.633235][ T6987] Call Trace: [ 133.636555][ T6987] [ 133.639538][ T6987] dump_stack_lvl+0x18c/0x250 [ 133.644287][ T6987] ? read_lock_is_recursive+0x20/0x20 [ 133.649717][ T6987] ? show_regs_print_info+0x20/0x20 [ 133.654965][ T6987] ? load_image+0x420/0x420 [ 133.659527][ T6987] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 133.665091][ T6987] ? __virt_addr_valid+0x10c/0x380 [ 133.670251][ T6987] ? __virt_addr_valid+0x10c/0x380 [ 133.675423][ T6987] ? __virt_addr_valid+0x10c/0x380 [ 133.680585][ T6987] print_report+0xa8/0x210 [ 133.685056][ T6987] ? dvb_device_open+0xc9/0x360 [ 133.689949][ T6987] kasan_report+0x117/0x150 [ 133.694508][ T6987] ? chrdev_open+0x385/0x600 [ 133.699147][ T6987] ? dvb_device_open+0xc9/0x360 [ 133.704056][ T6987] dvb_device_open+0xc9/0x360 [ 133.708792][ T6987] chrdev_open+0x58c/0x600 [ 133.713250][ T6987] ? cd_forget+0x160/0x160 [ 133.717714][ T6987] ? fsnotify_perm+0x3ed/0x5e0 [ 133.722531][ T6987] do_dentry_open+0x880/0x14b0 [ 133.727347][ T6987] ? cd_forget+0x160/0x160 [ 133.731814][ T6987] path_openat+0x284f/0x3270 [ 133.736457][ T6987] ? do_sys_openat2+0xda/0x1d0 [ 133.741264][ T6987] ? __x64_sys_openat+0x139/0x160 [ 133.746344][ T6987] ? verify_lock_unused+0x140/0x140 [ 133.751581][ T6987] ? do_filp_open+0x430/0x430 [ 133.756300][ T6987] do_filp_open+0x1f2/0x430 [ 133.760847][ T6987] ? vfs_tmpfile+0x480/0x480 [ 133.765492][ T6987] ? _raw_spin_unlock+0x28/0x40 [ 133.770390][ T6987] ? alloc_fd+0x590/0x640 [ 133.774812][ T6987] do_sys_openat2+0x134/0x1d0 [ 133.779534][ T6987] ? do_sys_open+0xe0/0xe0 [ 133.783994][ T6987] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 133.790024][ T6987] ? lock_chain_count+0x20/0x20 [ 133.794929][ T6987] __x64_sys_openat+0x139/0x160 [ 133.799840][ T6987] do_syscall_64+0x55/0xb0 [ 133.804322][ T6987] ? clear_bhb_loop+0x40/0x90 [ 133.809037][ T6987] ? clear_bhb_loop+0x40/0x90 [ 133.813749][ T6987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.819698][ T6987] RIP: 0033:0x7f307695e6ce [ 133.821033][ T5815] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 133.824157][ T6987] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.824177][ T6987] RSP: 002b:00007f3077945b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.859479][ T6987] RAX: ffffffffffffffda RBX: 00007f30779466c0 RCX: 00007f307695e6ce [ 133.867495][ T6987] RDX: 0000000000000002 RSI: 00007f3077945c00 RDI: ffffffffffffff9c [ 133.875529][ T6987] RBP: 00007f3077945c00 R08: 0000000000000000 R09: 0000000000000000 [ 133.883533][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 133.891547][ T6987] R13: 00007f3076c26038 R14: 00007f3076c25fa0 R15: 00007ffeb9d6f918 [ 133.899568][ T6987] [ 133.902643][ T6987] [ 133.904987][ T6987] Allocated by task 1: [ 133.909101][ T6987] kasan_set_track+0x4e/0x70 [ 133.913206][ T5815] usb 2-1: USB disconnect, device number 3 [ 133.913724][ T6987] __kasan_kmalloc+0x8f/0xa0 [ 133.924181][ T6987] dvb_register_device+0x309/0x1df0 [ 133.929413][ T6987] dvb_register_frontend+0x62d/0x900 [ 133.934747][ T6987] vidtv_bridge_probe+0x9d6/0xf60 [ 133.939822][ T6987] platform_probe+0x13b/0x1c0 [ 133.944556][ T6987] really_probe+0x247/0xae0 [ 133.949124][ T6987] __driver_probe_device+0x1f5/0x390 [ 133.954463][ T6987] driver_probe_device+0x4f/0x420 [ 133.959527][ T6987] __driver_attach+0x444/0x6d0 [ 133.964353][ T6987] bus_for_each_dev+0x235/0x2b0 [ 133.969246][ T6987] bus_add_driver+0x340/0x630 [ 133.973965][ T6987] driver_register+0x23a/0x310 [ 133.978774][ T6987] vidtv_bridge_init+0x3d/0x70 [ 133.983582][ T6987] do_one_initcall+0x242/0x790 [ 133.988394][ T6987] do_initcall_level+0x13d/0x1f0 [ 133.993375][ T6987] do_initcalls+0x69/0xd0 [ 133.997753][ T6987] kernel_init_freeable+0x3d9/0x560 [ 134.003005][ T6987] kernel_init+0x1d/0x1c0 [ 134.007382][ T6987] ret_from_fork+0x48/0x80 [ 134.011854][ T6987] ret_from_fork_asm+0x11/0x20 [ 134.016679][ T6987] [ 134.019027][ T6987] Freed by task 6935: [ 134.023035][ T6987] kasan_set_track+0x4e/0x70 [ 134.027691][ T6987] kasan_save_free_info+0x28/0x40 [ 134.032815][ T6987] ____kasan_slab_free+0x126/0x1f0 [ 134.037990][ T6987] slab_free_freelist_hook+0x130/0x1a0 [ 134.043495][ T6987] __kmem_cache_free+0xba/0x1f0 [ 134.048387][ T6987] dvb_device_open+0x2d9/0x360 [ 134.053184][ T6987] chrdev_open+0x58c/0x600 [ 134.057649][ T6987] do_dentry_open+0x880/0x14b0 [ 134.062452][ T6987] path_openat+0x284f/0x3270 [ 134.067107][ T6987] do_filp_open+0x1f2/0x430 [ 134.071655][ T6987] do_sys_openat2+0x134/0x1d0 [ 134.076366][ T6987] __x64_sys_openat+0x139/0x160 [ 134.081275][ T6987] do_syscall_64+0x55/0xb0 [ 134.085743][ T6987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.091695][ T6987] [ 134.094050][ T6987] The buggy address belongs to the object at ffff8881457a8200 [ 134.094050][ T6987] which belongs to the cache kmalloc-256 of size 256 [ 134.108133][ T6987] The buggy address is located 24 bytes inside of [ 134.108133][ T6987] freed 256-byte region [ffff8881457a8200, ffff8881457a8300) [ 134.121886][ T6987] [ 134.124240][ T6987] The buggy address belongs to the physical page: [ 134.130687][ T6987] page:ffffea000515ea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1457a8 [ 134.140984][ T6987] head:ffffea000515ea00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 134.149950][ T6987] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 134.158053][ T6987] page_type: 0xffffffff() [ 134.162455][ T6987] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 134.171068][ T6987] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 134.179682][ T6987] page dumped because: kasan: bad access detected [ 134.186138][ T6987] page_owner tracks the page as allocated [ 134.191884][ T6987] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18483011100, free_ts 0 [ 134.211630][ T6987] post_alloc_hook+0x1c1/0x200 [ 134.216452][ T6987] get_page_from_freelist+0x2181/0x22a0 [ 134.222087][ T6987] __alloc_pages+0x1f0/0x460 [ 134.226718][ T6987] alloc_page_interleave+0x24/0x1e0 [ 134.231954][ T6987] alloc_slab_page+0x5d/0x180 [ 134.236662][ T6987] new_slab+0x87/0x2d0 [ 134.240791][ T6987] ___slab_alloc+0xc5c/0x12f0 [ 134.245517][ T6987] __kmem_cache_alloc_node+0x11f/0x250 [ 134.251013][ T6987] kmalloc_trace+0x2a/0xe0 [ 134.255477][ T6987] bus_add_driver+0x162/0x630 [ 134.260199][ T6987] driver_register+0x23a/0x310 [ 134.265012][ T6987] usb_register_driver+0x205/0x3c0 [ 134.270171][ T6987] do_one_initcall+0x242/0x790 [ 134.274988][ T6987] do_initcall_level+0x13d/0x1f0 [ 134.279962][ T6987] do_initcalls+0x69/0xd0 [ 134.284337][ T6987] kernel_init_freeable+0x3d9/0x560 [ 134.289616][ T6987] page_owner free stack trace missing [ 134.290689][ T6926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.294999][ T6987] [ 134.295004][ T6987] Memory state around the buggy address: [ 134.295016][ T6987] ffff8881457a8100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.295030][ T6987] ffff8881457a8180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.295043][ T6987] >ffff8881457a8200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.295053][ T6987] ^ [ 134.295064][ T6987] ffff8881457a8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 134.295078][ T6987] ffff8881457a8300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.295088][ T6987] ================================================================== [ 134.295156][ C1] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 134.390464][ T6987] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.397720][ T6987] CPU: 0 PID: 6987 Comm: syz.2.326 Not tainted syzkaller #0 [ 134.405037][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026 [ 134.415133][ T6987] Call Trace: [ 134.418449][ T6987] [ 134.421437][ T6987] dump_stack_lvl+0x18c/0x250 [ 134.426184][ T6987] ? show_regs_print_info+0x20/0x20 [ 134.431432][ T6987] ? load_image+0x420/0x420 [ 134.435996][ T6987] panic+0x2ca/0x720 [ 134.439941][ T6987] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.446187][ T6987] ? bpf_jit_dump+0xd0/0xd0 [ 134.450745][ T6987] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 134.456780][ T6987] ? _raw_spin_unlock+0x40/0x40 [ 134.456876][ T6926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.472022][ T6987] ? dvb_device_open+0xc9/0x360 [ 134.476924][ T6987] check_panic_on_warn+0x84/0xa0 [ 134.481912][ T6987] ? dvb_device_open+0xc9/0x360 [ 134.486810][ T6987] end_report+0x6f/0x130 [ 134.491113][ T6987] kasan_report+0x128/0x150 [ 134.495668][ T6987] ? chrdev_open+0x385/0x600 [ 134.500305][ T6987] ? dvb_device_open+0xc9/0x360 [ 134.505212][ T6987] dvb_device_open+0xc9/0x360 [ 134.509942][ T6987] chrdev_open+0x58c/0x600 [ 134.514411][ T6987] ? cd_forget+0x160/0x160 [ 134.518872][ T6987] ? fsnotify_perm+0x3ed/0x5e0 [ 134.523690][ T6987] do_dentry_open+0x880/0x14b0 [ 134.528512][ T6987] ? cd_forget+0x160/0x160 [ 134.532977][ T6987] path_openat+0x284f/0x3270 [ 134.537642][ T6987] ? do_sys_openat2+0xda/0x1d0 [ 134.542456][ T6987] ? __x64_sys_openat+0x139/0x160 [ 134.547531][ T6987] ? verify_lock_unused+0x140/0x140 [ 134.552775][ T6987] ? do_filp_open+0x430/0x430 [ 134.557499][ T6987] do_filp_open+0x1f2/0x430 [ 134.562055][ T6987] ? vfs_tmpfile+0x480/0x480 [ 134.566693][ T6987] ? _raw_spin_unlock+0x28/0x40 [ 134.571585][ T6987] ? alloc_fd+0x590/0x640 [ 134.575982][ T6987] do_sys_openat2+0x134/0x1d0 [ 134.580722][ T6987] ? do_sys_open+0xe0/0xe0 [ 134.585199][ T6987] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 134.591227][ T6987] ? lock_chain_count+0x20/0x20 [ 134.596134][ T6987] __x64_sys_openat+0x139/0x160 [ 134.601031][ T6987] do_syscall_64+0x55/0xb0 [ 134.605494][ T6987] ? clear_bhb_loop+0x40/0x90 [ 134.610235][ T6987] ? clear_bhb_loop+0x40/0x90 [ 134.614950][ T6987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.620896][ T6987] RIP: 0033:0x7f307695e6ce [ 134.625347][ T6987] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.645020][ T6987] RSP: 002b:00007f3077945b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 134.653484][ T6987] RAX: ffffffffffffffda RBX: 00007f30779466c0 RCX: 00007f307695e6ce [ 134.655738][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.656071][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.675756][ T6987] RDX: 0000000000000002 RSI: 00007f3077945c00 RDI: ffffffffffffff9c [ 134.683794][ T6987] RBP: 00007f3077945c00 R08: 0000000000000000 R09: 0000000000000000 [ 134.691794][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 134.699802][ T6987] R13: 00007f3076c26038 R14: 00007f3076c25fa0 R15: 00007ffeb9d6f918 [ 134.707820][ T6987] [ 134.710985][ T6987] Kernel Offset: disabled [ 134.715313][ T6987] Rebooting in 86400 seconds..