last executing test programs: 12.366934032s ago: executing program 0 (id=212): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_FUTEX_WAITV={0x35, 0x8, 0x0, 0x0, 0x0, &(0x7f0000001380)=[{0xd06c, &(0x7f00000005c0)=0x1, 0x2}, {0x3, &(0x7f0000000600)=0x9, 0x82}, {0x1, &(0x7f0000000640)=0xfffffffffffffffb}, {0x8, &(0x7f0000000680)=0x4, 0x2}, {0x7, &(0x7f00000006c0)=0x9, 0x2}, {0xff, &(0x7f0000000700)=0x8, 0x82}, {0x0, &(0x7f0000000740), 0x82}, {0x83, &(0x7f0000000780)=0x4, 0x82}, {0x4, &(0x7f00000007c0), 0x82}, {0x1, &(0x7f0000000800)=0xfaa, 0x82}, {0x1d42, &(0x7f0000000840)=0x7ff, 0x82}, {0x2, &(0x7f0000000880)=0x9, 0x82}, {0x7, &(0x7f00000008c0)=0xfff, 0x2}, {0x3, &(0x7f00000018c0)=0xe5f0, 0x2}, {0x6, &(0x7f0000000940)=0xb8c6, 0x2}, {0x9, &(0x7f0000000a00)=0x4, 0x82}, {0x2, &(0x7f0000000a40)=0x5, 0x2}, {0x7, &(0x7f0000000a80)=0x7, 0x82}, {0x800, &(0x7f0000000ac0)=0x2ab, 0x82}, {0x0, 0x0, 0x80}, {0xbcd, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x8000, 0x0, 0x2}, {0x100000000, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x249, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x401, 0x0, 0x2}, {0x7fff, 0x0, 0x82}, {0x100000001, 0x0, 0x82}, {0x2029, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0xfffffffffffffff0, 0x0, 0x2}, {0x1ff, 0x0, 0x82}, {0xd1ae, 0x0, 0x74fbb9cba63883fa}, {0x80000000, 0x0, 0x82}, {0xfa, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x70, 0x0}, {0x8000000000000000, 0x0, 0x2}, {0x17e1, 0x0, 0x2}, {0xbfc, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x683, 0x0, 0x2}, {0xfffffffffffffff9, 0x0, 0x2}, {0x9, 0x0, 0x2}], 0x33}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 12.228198069s ago: executing program 0 (id=214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_CAP_VM_TYPES(r4, 0x4068aea3, &(0x7f0000000040)={0xeb, 0x0, 0x9}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffd, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1f4750895ab09308102c0c0"], 0x0}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) write$cgroup_pid(r0, &(0x7f00000000c0)=r8, 0x12) syz_usb_disconnect(r7) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$EVIOCRMFF(r6, 0xc0085508, &(0x7f0000000340)=0x9b) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f04040302", 0x181, 0xfffffffffffffffe) socketpair(0x23, 0x2, 0x7, &(0x7f00000016c0)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0x6, 0x7, '\x00', 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.418859579s ago: executing program 1 (id=218): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="9e", 0x1}], 0x2}, 0x20008b88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x26, 0x101, 0x70bd27, 0xfffffffc, {0x2c}}, 0x14}, 0x1, 0x0, 0x0, 0x489d6}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x3f, 0x5, 0x7) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c760280080003008a000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c15}, 0x4040140) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000b0601020003000000000000010000060900020073797a3100000000050001000700000015ba652c70cb3b90f0efdb4d9b30e29270fe295f1ef0994ae1e93c06f3593ff0e0092a19cd96bd1815c882b129e9e4249a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) 9.064357526s ago: executing program 1 (id=222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x98, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0xffffffff, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {0xff}, 0x6, 0x0, 0x32}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x7468, 0x99e, 0x1}}, @common=@addrtype={{0x30}, {0x10, 0xc0, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'geneve1\x00', 'wlan1\x00', {}, {}, 0x21}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x3b2fe5ff, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x10}, 0x40040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000140)) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x46, 0x2801) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x0, &(0x7f0000000380)}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x8000, 0x125, 0x9}) 7.875779848s ago: executing program 1 (id=225): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_FUTEX_WAITV={0x35, 0x8, 0x0, 0x0, 0x0, &(0x7f0000001380)=[{0xd06c, &(0x7f00000005c0)=0x1, 0x2}, {0x3, &(0x7f0000000600)=0x9, 0x82}, {0x1, &(0x7f0000000640)=0xfffffffffffffffb}, {0x8, &(0x7f0000000680)=0x4, 0x2}, {0x7, &(0x7f00000006c0)=0x9, 0x2}, {0xff, &(0x7f0000000700)=0x8, 0x82}, {0x0, &(0x7f0000000740), 0x82}, {0x83, &(0x7f0000000780)=0x4, 0x82}, {0x4, &(0x7f00000007c0), 0x82}, {0x1, &(0x7f0000000800)=0xfaa, 0x82}, {0x1d42, &(0x7f0000000840)=0x7ff, 0x82}, {0x2, &(0x7f0000000880)=0x9, 0x82}, {0x7, &(0x7f00000008c0)=0xfff, 0x2}, {0x3, &(0x7f00000018c0)=0xe5f0, 0x2}, {0x6, &(0x7f0000000940)=0xb8c6, 0x2}, {0x9, &(0x7f0000000a00)=0x4, 0x82}, {0x2, &(0x7f0000000a40)=0x5, 0x2}, {0x7, &(0x7f0000000a80)=0x7, 0x82}, {0x800, &(0x7f0000000ac0)=0x2ab, 0x82}, {0x1, 0x0, 0x2}, {0x0, 0x0, 0x80}, {0xbcd, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x8000, 0x0, 0x2}, {0x100000000, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x249, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x401, 0x0, 0x2}, {0x7fff, 0x0, 0x82}, {0x100000001, 0x0, 0x82}, {0x2029, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0xfffffffffffffff0, 0x0, 0x2}, {0x1ff, 0x0, 0x82}, {0xd1ae, 0x0, 0x74fbb9cba63883fa}, {0x80000000, 0x0, 0x82}, {0xfa, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x70, 0x0}, {0x8000000000000000, 0x0, 0x2}, {0x17e1, 0x0, 0x2}, {0xbfc, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x683, 0x0, 0x2}, {0xfffffffffffffff9, 0x0, 0x2}, {0x9, 0x0, 0x2}], 0x34}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 7.715382538s ago: executing program 0 (id=226): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000401010000249e5ab600000300000005000100030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8004040}, 0x20000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pipe2$9p(&(0x7f0000000000), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x7, 0x1, 0x0, 0x8, 0x3, 0xfffe, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfd}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 7.545945204s ago: executing program 1 (id=228): r0 = syz_usb_connect(0x2, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040480b03100001000000010902390002010080fa0904000000ff0000000904010000ff0000000904010103ff000000070501024000000705810240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x22, &(0x7f0000000200)='\x00'/34) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xc02) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x1, 0x0}) 7.095406162s ago: executing program 3 (id=229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000020000100ffffffff0000000002002000000000000500"/36], 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fbffffff000000e9884d0300005c6aed000085000000410000009500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x0, 0x101}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x24, &(0x7f0000000280)={r4, 0xa}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070000000c000000ff"], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000180)={0x7fffffffffffffff, 0xdb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019440)=""/102400, 0x19000) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 6.595345239s ago: executing program 0 (id=231): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000880)="660f38810181eb00000fc75a01660fc73066b93206000066b87819000066ba000000000f302ef30fc771000f07baf80c66b8121f9f8566efbafc0cecf30f09363e2e0f38f902"}], 0x0, 0xa, 0x0, 0x0) sendmsg$inet6(r1, 0x0, 0x20000010) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000004) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x7, 0x1, 0x0, 0x8, 0x3, 0xfffe, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfd}) socket$nl_generic(0x10, 0x3, 0x10) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 6.50813083s ago: executing program 2 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000003c80)={0x2020}, 0x2020) bind$inet(r1, &(0x7f0000000040)={0x2, 0x1234, @remote}, 0x10) 5.569289802s ago: executing program 2 (id=235): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x98, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0xffffffff, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {0xff}, 0x6, 0x0, 0x32}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x7468, 0x99e, 0x1}}, @common=@addrtype={{0x30}, {0x10, 0xc0, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'geneve1\x00', 'wlan1\x00', {}, {}, 0x21}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x3b2fe5ff, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1, 0x0, 0x0, 0x10}, 0x40040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000140)) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x46, 0x2801) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x0, &(0x7f0000000380)}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x8000, 0x125, 0x9}) 5.298237143s ago: executing program 0 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7e", 0xc) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) clock_nanosleep(0x1, 0xca9a3b, &(0x7f0000000080), 0x0) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) 5.223601578s ago: executing program 3 (id=237): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) 4.53267531s ago: executing program 2 (id=238): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_FUTEX_WAITV={0x35, 0x8, 0x0, 0x0, 0x0, &(0x7f0000001380)=[{0xd06c, &(0x7f00000005c0)=0x1, 0x2}, {0x3, &(0x7f0000000600)=0x9, 0x82}, {0x1, &(0x7f0000000640)=0xfffffffffffffffb}, {0x8, &(0x7f0000000680)=0x4, 0x2}, {0x7, &(0x7f00000006c0)=0x9, 0x2}, {0xff, &(0x7f0000000700)=0x8, 0x82}, {0x0, &(0x7f0000000740), 0x82}, {0x83, &(0x7f0000000780)=0x4, 0x82}, {0x4, &(0x7f00000007c0), 0x82}, {0x1, &(0x7f0000000800)=0xfaa, 0x82}, {0x1d42, &(0x7f0000000840)=0x7ff, 0x82}, {0x2, &(0x7f0000000880)=0x9, 0x82}, {0x7, &(0x7f00000008c0)=0xfff, 0x2}, {0x3, &(0x7f00000018c0)=0xe5f0, 0x2}, {0x6, &(0x7f0000000940)=0xb8c6, 0x2}, {0x9, &(0x7f0000000a00)=0x4, 0x82}, {0x2, &(0x7f0000000a40)=0x5, 0x2}, {0x7, &(0x7f0000000a80)=0x7, 0x82}, {0x1, 0x0, 0x2}, {0x0, 0x0, 0x80}, {0xbcd, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x8000, 0x0, 0x2}, {0x100000000, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x249, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x401, 0x0, 0x2}, {0x7fff, 0x0, 0x82}, {0x100000001, 0x0, 0x82}, {0x2029, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0xfffffffffffffff0, 0x0, 0x2}, {0x1ff, 0x0, 0x82}, {0xd1ae, 0x0, 0x74fbb9cba63883fa}, {0x80000000, 0x0, 0x82}, {0xfa, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x70, 0x0}, {0x8000000000000000, 0x0, 0x2}, {0x17e1, 0x0, 0x2}, {0xbfc, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x683, 0x0, 0x2}, {0xfffffffffffffff9, 0x0, 0x2}, {0x9, 0x0, 0x2}], 0x33}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 4.404107714s ago: executing program 3 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x74) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x98, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x98}}, 0x40) r5 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000400)={0x60, 0x1, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9, 0x0, 0x0, 0x81, 0x24, 0x8, 0x17, 0x75}) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x3, 0x1, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"}) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000080)={0x5, 0x5}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0xfcd66a900070b75d, 0x70bd28, 0xf0, {0x0, 0x0, 0xffa6, r1, {0x4}, {0xec0}, {0x0, 0xc00e}}}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x0) 4.225643961s ago: executing program 2 (id=241): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000401010000249e5ab600000300000005000100030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8004040}, 0x20000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x7, 0x1, 0x0, 0x8, 0x3, 0xfffe, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfd}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 4.023755459s ago: executing program 0 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000700)="a6", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) setns(0xc9, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x50}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r5], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000304000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006a701001c00128009000100626f6e64000000000c0002800800140001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) set_mempolicy(0x3, &(0x7f0000000100)=0x6, 0xb) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r7, @ANYRES8=r11, @ANYBLOB="0000000000620000280012800b00010065727370616e0000180002800400120005001600050000000800140000000000"], 0x48}}, 0x40080c0) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) iopl(0x3) ioperm(0x0, 0x1, 0x1) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ioperm(0x0, 0x40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) 4.001997804s ago: executing program 3 (id=243): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file1\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="696f636861727365743d63703836312c666c7573682c73686f72746e616d653d6c6f7765722c646d61736b3d303030303030303030303030303030303030303030306f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d312c6e6f6e756d7461696c3d302c73686f7257da746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c726f6469722c756e695f786c6174653d312c726f6469722c757466383d30"], 0xfd, 0x2a8, &(0x7f0000000240)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000711809000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4) r2 = fanotify_init(0x81, 0x40000) fanotify_mark(r2, 0x105, 0x30, r1, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r3, 0x701, 0x10003, 0xffdffffc, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1, 0x0) 3.323585873s ago: executing program 3 (id=246): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00@', @ANYRES16=0x0, @ANYBLOB="0d022abd7000fedbdf25010000000500050004000000080003000600000005000600ff000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40048d1}, 0x4894) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x82000, &(0x7f0000000240)={[{@discard}, {@fatal_errors_bug}, {@discard}]}, 0xf4, 0x559e, &(0x7f000000ac40)="$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") r1 = open(&(0x7f0000000440)='./file1\x00', 0x145242, 0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x3d72}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0xda7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}]}, &(0x7f0000000100)=0x10) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000003c0)={'pcmmio\x00', [0x140, 0xc0, 0x3, 0xffffffff, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0x0, 0x9, 0x6, 0x0, 0x4, 0x0, 0x36, 0x2, 0xffe, 0x200000, 0xaf, 0x0, 0x9, 0x1, 0x4]}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000900)) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="00e9a991058280a2f5d384ed9b55a33d126ce7d0fd000080"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0x5, 0x85, 0x80000001, 0x1, {0x3, 0xff, 0x3, 0x8, 0x200, 0xd615, 0x8, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) 3.157777852s ago: executing program 1 (id=247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) io_setup(0x239f, &(0x7f0000000380)=0x0) r2 = eventfd2(0x5, 0x80801) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r2, 0x0, 0x0, 0x800002, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r2, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x1, r2}]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.412338s ago: executing program 4 (id=248): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x98, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0xffffffff, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {0xff}, 0x6, 0x0, 0x32}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x7468, 0x99e, 0x1}}, @common=@addrtype={{0x30}, {0x10, 0xc0, 0x1, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'geneve1\x00', 'wlan1\x00', {}, {}, 0x21}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x3b2fe5ff, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1, 0x0, 0x0, 0x10}, 0x40040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000140)) r2 = syz_open_dev$mtd(&(0x7f0000000000), 0x46, 0x2801) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x0, &(0x7f0000000380)}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x8000, 0x125, 0x9}) 2.364564129s ago: executing program 2 (id=249): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='decompose,nobarrier,nls=cp865,\x00'], 0x1, 0x5c8, &(0x7f00000006c0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa7f438, &(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYBLOB="de7b", @ANYRESOCT=r1, @ANYRES8, @ANYRESHEX, @ANYBLOB="492ad0005512b034dc90f0005331325ee4487bebfa26fc9b36e7d66733c7495fdcec85757296ff263936b4e8674709feec5fd181a175430e36d0a52934d9ce8ad1c5ab671f24f940bfb26628aea9dd93337c8e0771084972be8bfb410b24975e322ff21c7a0b74c4d5a3b41ee12358ca4fe777a9d3fdd45eeca0c597b3e8f45d97c047bc4a60485103f6ae785efe89d5c177d633fa0a52183b567350b69d808956ba203f13ce2e184ede409de35650069ad5aca34edcdbb9214ac7674f94f507504aebaf1915e935b47753cc35c9a97de1ff09c0663244a0d5", @ANYRES16, @ANYRES32=r0, @ANYRES16=r1, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000680)=""/4096, 0x1000) madvise(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0xd) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="bb") mprotect(&(0x7f0000123000/0x3000)=nil, 0x3000, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) madvise(&(0x7f00002ea000/0x2000)=nil, 0x2000, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r5, &(0x7f0000000000)='\x00', &(0x7f0000000600)=@udp=r6, 0x2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f0000000280)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000000340)=ANY=[], 0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0xfc, 0xc, "d92984ad1ca44c226af5160e961711a000f2170e65e3f50327e4221c0000000000195f0000000000005700", 0x100000100000003c}, 0x60) 1.817535732s ago: executing program 3 (id=250): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x627, &(0x7f0000000680)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f00000f8000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x8}}, {@init_itable}, {@block_validity}, {@debug}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x479, &(0x7f0000000dc0)="$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") sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008000) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224060, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 847.702523ms ago: executing program 4 (id=251): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_FUTEX_WAITV={0x35, 0x8, 0x0, 0x0, 0x0, &(0x7f0000001380)=[{0xd06c, &(0x7f00000005c0)=0x1, 0x2}, {0x3, &(0x7f0000000600)=0x9, 0x82}, {0x1, &(0x7f0000000640)=0xfffffffffffffffb}, {0x8, &(0x7f0000000680)=0x4, 0x2}, {0x7, &(0x7f00000006c0)=0x9, 0x2}, {0xff, &(0x7f0000000700)=0x8, 0x82}, {0x0, &(0x7f0000000740), 0x82}, {0x83, &(0x7f0000000780)=0x4, 0x82}, {0x4, &(0x7f00000007c0), 0x82}, {0x1, &(0x7f0000000800)=0xfaa, 0x82}, {0x1d42, &(0x7f0000000840)=0x7ff, 0x82}, {0x2, &(0x7f0000000880)=0x9, 0x82}, {0x7, &(0x7f00000008c0)=0xfff, 0x2}, {0x3, &(0x7f00000018c0)=0xe5f0, 0x2}, {0x6, &(0x7f0000000940)=0xb8c6, 0x2}, {0x9, &(0x7f0000000a00)=0x4, 0x82}, {0x2, &(0x7f0000000a40)=0x5, 0x2}, {0x7, &(0x7f0000000a80)=0x7, 0x82}, {0x1, 0x0, 0x2}, {0x0, 0x0, 0x80}, {0xbcd, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x8000, 0x0, 0x2}, {0x100000000, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x249, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x401, 0x0, 0x2}, {0x7fff, 0x0, 0x82}, {0x100000001, 0x0, 0x82}, {0x2029, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0xfffffffffffffff0, 0x0, 0x2}, {0x1ff, 0x0, 0x82}, {0xd1ae, 0x0, 0x74fbb9cba63883fa}, {0x80000000, 0x0, 0x82}, {0xfa, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x70, 0x0}, {0x8000000000000000, 0x0, 0x2}, {0x17e1, 0x0, 0x2}, {0xbfc, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x683, 0x0, 0x2}, {0xfffffffffffffff9, 0x0, 0x2}, {0x9, 0x0, 0x2}], 0x33}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 632.275967ms ago: executing program 4 (id=252): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8020, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x20000002, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x3c], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0xd, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x4, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x4, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) 490.407636ms ago: executing program 1 (id=253): r0 = gettid() capset(&(0x7f0000000180)={0x19980330, r0}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000010023000000180200006a7e9aa689e086bfaa0f6fdda3b3b3c4722a2bd997170116754033c9527c0cded6d76a343a41cfc97546e29e4d4aa22216aadc9fab53278e7790eaaf327724c6fcac3afb4cad0f81450af3c08a4a641399208da59b47f6", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xff36) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@my=0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r7 = io_uring_setup(0x16b0, &(0x7f0000000040)={0x0, 0x81fa, 0xc000, 0x2, 0xc1, 0x0, r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r7, 0x2219, 0x1007721, 0x16, 0x0, 0x31) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x4, 0x20a, &(0x7f00000009c0)="$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") setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x5, @vifc_lcl_addr=@remote, @empty}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="e04ae83a38e6e5990d23b951aaaaaa05cdc0bdb2baaaaaaaaaaaaaac963023b46306ca6100000000000800000000000000000300030690780050d2b4fa000945f4fff600650005010400"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) 387.577208ms ago: executing program 4 (id=254): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000005000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000030000008500000072000000b7080000000000007b8af8ff00000000b7080000d50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000a35120163078632342cc71184131d1782ecaf147ea59b12db8960094d59ff77ee463eef43582fb33f35e9de322cba06a76e494cc1b6a91e97f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2}, 0xc) 257.432356ms ago: executing program 4 (id=255): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@dellink={0x54, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x200, 0x84}, [@IFLA_LINK={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x15bfb}, @IFLA_CARRIER={0x5, 0x21, 0x50}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x48}]}, 0x54}}, 0x0) 59.609087ms ago: executing program 2 (id=256): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) statx(r3, &(0x7f0000000180)='./file0\x00', 0x1000, 0x400, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@seclabel}, {@obj_type={'obj_type', 0x3d, 'wfdno'}}]}}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r1, 0x125f, 0x1f) 0s ago: executing program 4 (id=257): r0 = syz_usb_connect(0x2, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040480b03100001000000010902390002010080fa0904000000ff0000000904010000ff0000000904010103ff000000070501024000000705810240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x22, &(0x7f0000000200)='\x00'/34) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xc02) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x1, 0x0}) kernel console output (not intermixed with test programs): 4] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.719880][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.729281][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.729898][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.730324][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.731814][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.732051][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.737470][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.737750][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.738250][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.740041][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.740221][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.741242][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.741689][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.742576][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.743444][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.744820][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.745969][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.746195][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.754082][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.762667][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.772454][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.780353][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.804238][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.828860][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.525486][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.534188][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.542233][ T5616] bridge_slave_0: entered allmulticast mode [ 75.550791][ T5616] bridge_slave_0: entered promiscuous mode [ 75.594316][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.594419][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.594779][ T5616] bridge_slave_1: entered allmulticast mode [ 75.601713][ T5616] bridge_slave_1: entered promiscuous mode [ 75.663300][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.663463][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.663588][ T5629] bridge_slave_0: entered allmulticast mode [ 75.665205][ T5629] bridge_slave_0: entered promiscuous mode [ 75.668069][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.668161][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.668267][ T5618] bridge_slave_0: entered allmulticast mode [ 75.670969][ T5618] bridge_slave_0: entered promiscuous mode [ 75.741105][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.741273][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.741405][ T5629] bridge_slave_1: entered allmulticast mode [ 75.743177][ T5629] bridge_slave_1: entered promiscuous mode [ 75.745484][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.746142][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.746301][ T5618] bridge_slave_1: entered allmulticast mode [ 75.748632][ T5618] bridge_slave_1: entered promiscuous mode [ 75.787569][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.806440][ T4933] Bluetooth: hci4: command tx timeout [ 75.816101][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.816358][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.816489][ T5615] bridge_slave_0: entered allmulticast mode [ 75.818171][ T5615] bridge_slave_0: entered promiscuous mode [ 75.827406][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.831574][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.854900][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.856333][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.857226][ T5615] bridge_slave_1: entered allmulticast mode [ 75.859027][ T5615] bridge_slave_1: entered promiscuous mode [ 75.864425][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.887004][ T5620] Bluetooth: hci3: command tx timeout [ 75.888790][ T4933] Bluetooth: hci0: command tx timeout [ 75.889436][ T5620] Bluetooth: hci2: command tx timeout [ 75.889562][ T5620] Bluetooth: hci1: command tx timeout [ 75.905809][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.960985][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.987558][ T5616] team0: Port device team_slave_0 added [ 75.990663][ T5616] team0: Port device team_slave_1 added [ 76.004124][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.004309][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.004444][ T5617] bridge_slave_0: entered allmulticast mode [ 76.006681][ T5617] bridge_slave_0: entered promiscuous mode [ 76.029806][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.034757][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.038653][ T5618] team0: Port device team_slave_0 added [ 76.042221][ T5618] team0: Port device team_slave_1 added [ 76.061392][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.061495][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.061883][ T5617] bridge_slave_1: entered allmulticast mode [ 76.064847][ T5617] bridge_slave_1: entered promiscuous mode [ 76.116148][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.116187][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.116240][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.153190][ T5629] team0: Port device team_slave_0 added [ 76.179505][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.179557][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.180015][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.213421][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.218238][ T5629] team0: Port device team_slave_1 added [ 76.220476][ T5615] team0: Port device team_slave_0 added [ 76.221195][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.221208][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.221231][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.227257][ T5615] team0: Port device team_slave_1 added [ 76.233863][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.266020][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.266041][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.266065][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.315922][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.315942][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.315964][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.399379][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.399426][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.399858][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.402888][ T5617] team0: Port device team_slave_0 added [ 76.420784][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.420806][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.420829][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.450877][ T5617] team0: Port device team_slave_1 added [ 76.469535][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.469556][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.469578][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.493286][ T5616] hsr_slave_0: entered promiscuous mode [ 76.494685][ T5616] hsr_slave_1: entered promiscuous mode [ 76.564564][ T5618] hsr_slave_0: entered promiscuous mode [ 76.566667][ T5618] hsr_slave_1: entered promiscuous mode [ 76.567423][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 76.567519][ T5618] Cannot create hsr debugfs directory [ 76.598470][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.598498][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.598542][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.609014][ T5629] hsr_slave_0: entered promiscuous mode [ 76.610087][ T5629] hsr_slave_1: entered promiscuous mode [ 76.610791][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 76.610811][ T5629] Cannot create hsr debugfs directory [ 76.659641][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.659662][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.659686][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.716655][ T5615] hsr_slave_0: entered promiscuous mode [ 76.717733][ T5615] hsr_slave_1: entered promiscuous mode [ 76.718424][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 76.718442][ T5615] Cannot create hsr debugfs directory [ 76.839882][ T5617] hsr_slave_0: entered promiscuous mode [ 76.840808][ T5617] hsr_slave_1: entered promiscuous mode [ 76.841437][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 76.841454][ T5617] Cannot create hsr debugfs directory [ 77.258053][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.271301][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.290822][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.300762][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.306864][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.313690][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.325608][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.335488][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.384596][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.395027][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.397469][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.407128][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.410109][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.418953][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.424663][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.440452][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.527000][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.539047][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.540108][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.550503][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.564726][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.576385][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.590022][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.599360][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.690039][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.700157][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.715516][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.725393][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.728391][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.738699][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.751414][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.760545][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.783623][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.885978][ T4933] Bluetooth: hci4: command tx timeout [ 77.903697][ T5629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.918238][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.919268][ T5629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.935000][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.947014][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.957014][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.965113][ T5629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.972288][ T5620] Bluetooth: hci2: command tx timeout [ 77.972324][ T5620] Bluetooth: hci1: command tx timeout [ 77.972345][ T5620] Bluetooth: hci3: command tx timeout [ 77.972506][ T4933] Bluetooth: hci0: command tx timeout [ 77.980555][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.994279][ T5629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.000964][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.031179][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.031596][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.059980][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.060059][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.109545][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.134197][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.134353][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.171250][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.171352][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.216095][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.265280][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.279866][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.279985][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.289007][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.355332][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.355479][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.427754][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.459940][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.460054][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.511844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.511957][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.567077][ T5615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.574107][ T5615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.691238][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.763481][ T5617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.842604][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.888534][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.888661][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.944171][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.944297][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.424356][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.636389][ T5618] veth0_vlan: entered promiscuous mode [ 79.684274][ T5618] veth1_vlan: entered promiscuous mode [ 79.770259][ T5618] veth0_macvtap: entered promiscuous mode [ 79.797353][ T5618] veth1_macvtap: entered promiscuous mode [ 79.874334][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.932592][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.966294][ T4933] Bluetooth: hci4: command tx timeout [ 79.972963][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.990938][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.046425][ T5624] Bluetooth: hci3: command tx timeout [ 80.046600][ T5624] Bluetooth: hci1: command tx timeout [ 80.046885][ T5624] Bluetooth: hci2: command tx timeout [ 80.060412][ T4933] Bluetooth: hci0: command tx timeout [ 80.062959][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.156332][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.224165][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.349319][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.349389][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.349438][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.402225][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.402280][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.439462][ T5615] veth0_vlan: entered promiscuous mode [ 80.453921][ T5616] veth0_vlan: entered promiscuous mode [ 80.494496][ T5616] veth1_vlan: entered promiscuous mode [ 80.497195][ T5615] veth1_vlan: entered promiscuous mode [ 80.507972][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.518611][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.614477][ T5617] veth0_vlan: entered promiscuous mode [ 80.634342][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.664497][ T5617] veth1_vlan: entered promiscuous mode [ 80.679573][ T5629] veth0_vlan: entered promiscuous mode [ 80.734132][ T5616] veth0_macvtap: entered promiscuous mode [ 80.758480][ T5615] veth0_macvtap: entered promiscuous mode [ 80.764641][ T5629] veth1_vlan: entered promiscuous mode [ 80.772818][ T5616] veth1_macvtap: entered promiscuous mode [ 80.799957][ T5615] veth1_macvtap: entered promiscuous mode [ 80.877289][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.884194][ T5617] veth0_macvtap: entered promiscuous mode [ 80.910652][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.930570][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.944065][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.950563][ T5617] veth1_macvtap: entered promiscuous mode [ 80.971162][ T5812] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 80.981903][ T5812] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 80.997703][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.015046][ T5629] veth0_macvtap: entered promiscuous mode [ 81.027656][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 81.049873][ T5629] veth1_macvtap: entered promiscuous mode [ 81.092276][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.129165][ T5814] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.198224][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.292565][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.313543][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.331807][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.331840][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.353599][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.425096][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.425137][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.426921][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.426977][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.427009][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.428428][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.046522][ T4933] Bluetooth: hci4: command tx timeout [ 82.137420][ T5620] Bluetooth: hci2: command tx timeout [ 82.137478][ T5620] Bluetooth: hci1: command tx timeout [ 82.137529][ T5620] Bluetooth: hci3: command tx timeout [ 82.137859][ T4933] Bluetooth: hci0: command tx timeout [ 82.430356][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.430399][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.446043][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447136][ T1156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447176][ T1156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447208][ T1156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447240][ T1156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447268][ T1156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447296][ T1156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447326][ T1156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447362][ T1156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447395][ T1156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.626695][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.626743][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.854531][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.854588][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.077978][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.078018][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.149233][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.149277][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.345456][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.358604][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.530193][ T5821] loop1: detected capacity change from 0 to 32768 [ 83.617477][ T5821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2 (5821) [ 83.863676][ T5821] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.863761][ T5821] BTRFS info (device loop1): using crc32c checksum algorithm [ 84.082327][ T5840] sd 0:0:1:0: PR command failed: 1026 [ 84.082849][ T5840] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 84.083534][ T5840] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 84.798988][ T722] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x0da5869a level 0 [ 84.912394][ T5821] BTRFS error (device loop1): failed to load root extent [ 85.091299][ T5821] BTRFS error (device loop1): open_ctree failed: -EIO [ 85.976404][ T5810] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 86.157875][ T5810] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 86.173269][ T5810] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x28, changing to 0x8 [ 86.173331][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 86.173373][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 59915, setting to 64 [ 86.173394][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 86.173428][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.234435][ T5810] usb 3-1: config 0 descriptor?? [ 86.237572][ T5870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 86.305021][ T5856] loop3: detected capacity change from 0 to 32768 [ 86.340139][ T5856] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9 (5856) [ 86.393244][ T5856] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.404017][ T5856] BTRFS info (device loop3): using crc32c checksum algorithm [ 86.709166][ T5856] BTRFS info (device loop3): enabling ssd optimizations [ 86.723434][ T5856] BTRFS info (device loop3): turning on async discard [ 86.723490][ T5856] BTRFS info (device loop3): enabling free space tree [ 86.723529][ T5856] BTRFS info (device loop3): use zlib compression, level 3 [ 86.785270][ T5856] BTRFS info (device loop3 state M): use zstd compression, level 15 [ 86.880463][ T5617] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.120374][ T5810] ath6kl: Failed to read usb control message: -71 [ 87.120443][ T5810] ath6kl: Unable to read the bmi data from the device: -71 [ 87.120454][ T5810] ath6kl: Unable to recv target info: -71 [ 87.122222][ T5810] ath6kl: Failed to init ath6kl core: -71 [ 87.126295][ T5810] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 87.202868][ T5871] loop4: detected capacity change from 0 to 40427 [ 87.241792][ T5871] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 87.297976][ T5810] usb 3-1: USB disconnect, device number 2 [ 87.308218][ T5871] F2FS-fs (loop4): invalid crc value [ 88.369632][ T1923] cfg80211: failed to load regulatory.db [ 88.426667][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 88.427962][ T5871] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 88.449729][ T5871] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.586373][ T5916] loop2: detected capacity change from 0 to 64 [ 90.138119][ T5919] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.204811][ T5919] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.808772][ T5919] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.935819][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.971448][ T5919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.020994][ T5919] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.315953][ T5919] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 91.429358][ T5919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.429459][ T5919] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.491613][ T5919] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.551069][ T5919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.592663][ T5919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.617840][ T5919] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.773017][ T5919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 91.785699][ T5919] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.819871][ T5919] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 92.945017][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 93.005897][ T4933] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.005964][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.187279][ T5961] loop3: detected capacity change from 0 to 512 [ 93.252375][ T5961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 93.252528][ T5961] System zones: 1-12 [ 93.296133][ T5961] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.22: missing EA_INODE flag [ 93.345015][ T5961] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 93.345745][ C0] EXT4-fs (loop3): initial error at time 1788254143: ext4_xattr_inode_iget:437: inode 12 [ 93.345816][ C0] EXT4-fs (loop3): last error at time 1788254143: ext4_xattr_inode_iget:437: inode 12 [ 93.366058][ T5961] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.22: error while reading EA inode 12 err=-117 [ 93.366232][ T5961] loop3: lost filesystem error report for type 5 error -117 [ 93.393921][ T5961] EXT4-fs (loop3): 1 orphan inode deleted [ 93.458883][ T5961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.485669][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.737482][ T5278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.789534][ T5972] loop2: detected capacity change from 0 to 32768 [ 93.790900][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.813180][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 94.194811][ T1923] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.438473][ T1923] usb 1-1: Using ep0 maxpacket: 8 [ 94.444823][ T1923] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.533901][ T1923] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.534152][ T1923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.534175][ T1923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.534192][ T1923] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.534226][ T1923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.902710][ T5987] dvmrp1: entered allmulticast mode [ 95.096250][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.103331][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.190311][ T1923] usb 1-1: GET_CAPABILITIES returned 0 [ 95.217600][ T1923] usbtmc 1-1:16.0: can't read capabilities [ 95.432898][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.565995][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.808401][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.885830][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.999581][ T5997] sd 0:0:1:0: PR command failed: 1026 [ 96.000037][ T5997] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 96.000464][ T5997] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 97.025172][ T9] usb 1-1: USB disconnect, device number 2 [ 97.064025][ T6000] warning: `syz.2.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.313957][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.405168][ T6006] sd 0:0:1:0: PR command failed: 1026 [ 97.405785][ T6006] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 97.405850][ T6006] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 97.649914][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.900561][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.975136][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 98.231763][ T6012] Zero length message leads to an empty skb [ 98.878765][ T6028] sd 0:0:1:0: PR command failed: 1026 [ 98.879098][ T6028] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 98.879294][ T6028] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 99.881308][ T6030] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 99.979812][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 100.034685][ T5278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.159800][ T6044] loop0: detected capacity change from 0 to 64 [ 100.287375][ T5786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.435743][ T5786] usb 3-1: Using ep0 maxpacket: 8 [ 100.440784][ T5786] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.451348][ T5786] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 100.451397][ T5786] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.451417][ T5786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.451438][ T5786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.451458][ T5786] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.451494][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.644138][ T6049] loop1: detected capacity change from 0 to 64 [ 100.863422][ T5786] usb 3-1: usb_control_msg returned -32 [ 100.863475][ T5786] usbtmc 3-1:16.0: can't read capabilities [ 101.060444][ T25] usb 3-1: USB disconnect, device number 3 [ 101.091612][ T6057] loop3: detected capacity change from 0 to 1024 [ 101.105497][ T6057] ======================================================= [ 101.105497][ T6057] WARNING: The mand mount option has been deprecated and [ 101.105497][ T6057] and is ignored by this kernel. Remove the mand [ 101.105497][ T6057] option from the mount to silence this warning. [ 101.105497][ T6057] ======================================================= [ 101.170984][ T6057] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 101.213027][ T6057] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.41: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 101.213109][ T6057] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.219792][ T6057] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.41: couldn't read orphan inode 11 (err -117) [ 101.219824][ T6057] loop3: lost filesystem error report for type 5 error -117 [ 101.224076][ T6057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.442296][ T6067] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.41: lblock 2 mapped to illegal pblock 2 (length 1) [ 101.445968][ T6067] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 101.446016][ T6067] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.41: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.447873][ T6067] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 101.447893][ T6067] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.41: Failed to acquire dquot type 0 [ 101.798150][ T6073] EXT4-fs: Ignoring removed bh option [ 101.798944][ T6073] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 102.616626][ T6064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.616796][ T6064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.616895][ T6064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.616980][ T6064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.617074][ T6064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 102.759260][ T6077] loop1: detected capacity change from 0 to 64 [ 102.855749][ T5786] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.005606][ T5786] usb 5-1: Using ep0 maxpacket: 8 [ 103.006428][ T5786] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.007915][ T5786] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 103.007941][ T5786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.007963][ T5786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.007983][ T5786] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.008019][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.115447][ T6086] loop2: detected capacity change from 0 to 128 [ 103.151112][ T6086] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.158936][ T6086] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.208728][ T5723] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.223589][ T5786] usb 5-1: GET_CAPABILITIES returned 0 [ 103.223669][ T5786] usbtmc 5-1:16.0: can't read capabilities [ 103.335848][ T5723] usb 1-1: device descriptor read/64, error -71 [ 103.407136][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.451604][ T5615] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.609469][ T5723] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.738170][ T5723] usb 1-1: device descriptor read/64, error -71 [ 103.847592][ T5723] usb usb1-port1: attempt power cycle [ 103.881826][ T6107] loop2: detected capacity change from 0 to 64 [ 104.041684][ T10] usb 5-1: USB disconnect, device number 2 [ 104.121579][ T6105] loop1: detected capacity change from 0 to 32768 [ 104.189581][ T5723] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.210034][ T5723] usb 1-1: device descriptor read/8, error -71 [ 104.228932][ T6105] JBD2: Ignoring recovery information on journal [ 104.239349][ T6111] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 104.251362][ T6111] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 104.298583][ T5278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.333813][ T6105] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 104.370119][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.382548][ T97] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.382610][ T97] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 104.395026][ T97] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 104.395139][ T97] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 104.395158][ T97] loop3: lost filesystem error report for type 5 error -117 [ 104.432357][ T5617] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 104.432404][ T5617] loop3: lost filesystem error report for type 5 error -117 [ 104.438919][ T5617] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 104.438942][ T5617] loop3: lost filesystem error report for type 5 error -117 [ 104.446937][ T5617] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 104.446966][ T5617] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 104.448978][ T5723] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.455620][ T5617] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 104.455647][ T5617] loop3: lost filesystem error report for type 5 error -117 [ 104.479297][ T5723] usb 1-1: device descriptor read/8, error -71 [ 104.562398][ T6118] loop4: detected capacity change from 0 to 64 [ 104.586022][ T5723] usb usb1-port1: unable to enumerate USB device [ 104.686207][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.686636][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.686662][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.686722][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.910611][ T6131] loop2: detected capacity change from 0 to 64 [ 105.006196][ T5616] ocfs2: Unmounting device (7,1) on (node local) [ 105.312294][ T5278] 8021q: adding VLAN 0 to HW filter on device bond4 [ 105.608442][ T31] audit: type=1326 audit(1788254155.446:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.4.57" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f9b9e159 code=0x7ffc0000 [ 105.608504][ T31] audit: type=1326 audit(1788254155.456:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.4.57" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f9b9e159 code=0x7ffc0000 [ 105.610335][ T31] audit: type=1326 audit(1788254155.466:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.4.57" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f9b9e159 code=0x7ffc0000 [ 105.627163][ T31] audit: type=1326 audit(1788254155.476:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.4.57" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f29f9b9e159 code=0x7ffc0000 [ 105.631400][ T31] audit: type=1326 audit(1788254155.466:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.4.57" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f9b9e159 code=0x7ffc0000 [ 105.704327][ T31] audit: type=1326 audit(1788254155.556:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.4.57" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29f9b9e159 code=0x7ffc0000 [ 105.704384][ T31] audit: type=1326 audit(1788254155.556:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6143 comm="syz.4.57" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29f9b9dec2 code=0x7ffc0000 [ 106.916667][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 107.072734][ T6165] FAULT_INJECTION: forcing a failure. [ 107.072734][ T6165] name failslab, interval 1, probability 0, space 0, times 1 [ 107.088168][ T6165] CPU: 0 UID: 0 PID: 6165 Comm: syz.0.61 Not tainted syzkaller #0 PREEMPT(full) [ 107.088194][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.088207][ T6165] Call Trace: [ 107.088219][ T6165] [ 107.088226][ T6165] dump_stack_lvl+0xe8/0x150 [ 107.088265][ T6165] should_fail_ex+0x3eb/0x540 [ 107.088290][ T6165] ? __alloc_skb+0x1db/0x7a0 [ 107.088314][ T6165] should_failslab+0xa8/0x100 [ 107.088337][ T6165] ? __alloc_skb+0x1db/0x7a0 [ 107.088356][ T6165] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 107.088384][ T6165] ? __alloc_skb+0x18d/0x7a0 [ 107.088406][ T6165] ? __alloc_skb+0x1db/0x7a0 [ 107.088433][ T6165] __alloc_skb+0x1db/0x7a0 [ 107.088459][ T6165] netlink_ack+0x136/0xb30 [ 107.088502][ T6165] netlink_rcv_skb+0x2a4/0x4a0 [ 107.088527][ T6165] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 107.088553][ T6165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.088595][ T6165] ? bpf_lsm_capable+0x9/0x20 [ 107.088612][ T6165] ? security_capable+0x7e/0x2c0 [ 107.088638][ T6165] nfnetlink_rcv+0x2b9/0x28c0 [ 107.088666][ T6165] ? __dev_queue_xmit+0x29b/0x3820 [ 107.088697][ T6165] ? __local_bh_enable_ip+0xd6/0x140 [ 107.088722][ T6165] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.088741][ T6165] ? __dev_queue_xmit+0x29b/0x3820 [ 107.088765][ T6165] ? __local_bh_enable_ip+0xd6/0x140 [ 107.088785][ T6165] ? __dev_queue_xmit+0x29b/0x3820 [ 107.088809][ T6165] ? __dev_queue_xmit+0x1edc/0x3820 [ 107.088831][ T6165] ? do_syscall_64+0x166/0x520 [ 107.088849][ T6165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.088879][ T6165] ? __dev_queue_xmit+0x29b/0x3820 [ 107.088903][ T6165] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 107.088931][ T6165] ? __pfx___dev_queue_xmit+0x10/0x10 [ 107.088960][ T6165] ? ref_tracker_free+0x689/0x830 [ 107.088986][ T6165] ? __pfx_ref_tracker_free+0x10/0x10 [ 107.089006][ T6165] ? __asan_memcpy+0x40/0x70 [ 107.089022][ T6165] ? __skb_clone+0x5c/0x6c0 [ 107.089049][ T6165] ? __skb_clone+0x449/0x6c0 [ 107.089076][ T6165] ? skb_clone+0x246/0x3a0 [ 107.089104][ T6165] ? __netlink_deliver_tap+0x811/0x860 [ 107.089131][ T6165] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.089162][ T6165] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.089188][ T6165] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.089219][ T6165] netlink_unicast+0x7bd/0x940 [ 107.089252][ T6165] netlink_sendmsg+0x813/0xb40 [ 107.089276][ T6165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.089298][ T6165] ? apparmor_socket_sendmsg+0x98/0x360 [ 107.089315][ T6165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.089330][ T6165] sock_sendmsg_nosec+0x13a/0x180 [ 107.089350][ T6165] ____sys_sendmsg+0x54e/0x850 [ 107.089377][ T6165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.089406][ T6165] ? import_iovec+0x73/0xa0 [ 107.089431][ T6165] ___sys_sendmsg+0x2a5/0x360 [ 107.089453][ T6165] ? __lock_acquire+0x6df/0x2e50 [ 107.089475][ T6165] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.089528][ T6165] ? __fget_files+0x2a/0x420 [ 107.089552][ T6165] ? __fget_files+0x3a2/0x420 [ 107.089593][ T6165] __x64_sys_sendmsg+0x1b1/0x290 [ 107.089619][ T6165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.089660][ T6165] do_syscall_64+0x166/0x520 [ 107.089679][ T6165] ? trace_irq_disable+0x3b/0x140 [ 107.089696][ T6165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.089712][ T6165] ? clear_bhb_loop+0x70/0xc0 [ 107.089735][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.089751][ T6165] RIP: 0033:0x7f66e779e159 [ 107.089780][ T6165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.089794][ T6165] RSP: 002b:00007f66e865d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.089813][ T6165] RAX: ffffffffffffffda RBX: 00007f66e7a25fa0 RCX: 00007f66e779e159 [ 107.089824][ T6165] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 107.089834][ T6165] RBP: 00007f66e865d090 R08: 0000000000000000 R09: 0000000000000000 [ 107.089844][ T6165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.089854][ T6165] R13: 00007f66e7a26038 R14: 00007f66e7a25fa0 R15: 00007fff453014b8 [ 107.089879][ T6165] [ 107.105881][ T6163] loop4: detected capacity change from 0 to 8 [ 107.238453][ T6163] SQUASHFS error: xz decompression failed, data probably corrupt [ 107.238485][ T6163] SQUASHFS error: Failed to read block 0x108: -5 [ 107.238499][ T6163] SQUASHFS error: Unable to read metadata cache entry [106] [ 107.238516][ T6163] SQUASHFS error: Unable to read inode 0x11f [ 107.632857][ T6169] jffs2: notice: (6169) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.999677][ T6168] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 108.022402][ T6168] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.294125][ T6182] ip6erspan0: entered allmulticast mode [ 108.353280][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 108.479845][ T6151] loop2: detected capacity change from 0 to 40427 [ 108.495341][ T6151] F2FS-fs (loop2): build fault injection rate: 7 [ 108.715890][ T987] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.861918][ T6199] loop0: detected capacity change from 0 to 64 [ 108.868400][ T987] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 108.880080][ T987] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 108.880127][ T987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.880156][ T987] usb 4-1: config 0 has no interface number 0 [ 108.880195][ T987] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.880214][ T987] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 108.880251][ T987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.912148][ T987] usb 4-1: config 0 descriptor?? [ 108.999549][ T6151] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 109.039554][ T987] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 109.159304][ T1147] usb 4-1: Failed to submit usb control message: -71 [ 109.159382][ T1147] usb 4-1: unable to send the bmi data to the device: -71 [ 109.159398][ T1147] usb 4-1: unable to get target info from device [ 109.159411][ T1147] usb 4-1: could not get target info (-71) [ 109.159447][ T1147] usb 4-1: could not probe fw (-71) [ 109.159524][ T987] usb 4-1: USB disconnect, device number 2 [ 109.355957][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 109.526402][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 109.540119][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.540208][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.540248][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.850553][ T9] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 110.850593][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 110.851470][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 111.130452][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 111.445709][ T9] DVB: Unable to find symbol stv0299_attach() [ 111.604164][ T9] DVB: Unable to find symbol tda8083_attach() [ 111.610688][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 111.700760][ T6232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.707043][ T6232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.727110][ T6246] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 111.734618][ T6232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.734771][ T6232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.734865][ T6232] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 111.742408][ T6246] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.072373][ T6259] FAULT_INJECTION: forcing a failure. [ 112.072373][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.072427][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.2.77 Not tainted syzkaller #0 PREEMPT(full) [ 112.072446][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.072454][ T6259] Call Trace: [ 112.072460][ T6259] [ 112.072465][ T6259] dump_stack_lvl+0xe8/0x150 [ 112.072498][ T6259] should_fail_ex+0x3eb/0x540 [ 112.072522][ T6259] _copy_to_user+0x31/0xb0 [ 112.072547][ T6259] simple_read_from_buffer+0xe1/0x170 [ 112.072580][ T6259] proc_fail_nth_read+0x1bb/0x230 [ 112.072598][ T6259] ? common_file_perm+0x20e/0x2b0 [ 112.072616][ T6259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.072634][ T6259] ? rw_verify_area+0x24a/0x4c0 [ 112.072660][ T6259] ? tun_chr_write_iter+0x18a/0x200 [ 112.072683][ T6259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.072701][ T6259] vfs_read+0x213/0xa80 [ 112.072732][ T6259] ? __pfx___mutex_lock+0x10/0x10 [ 112.072754][ T6259] ? __pfx_vfs_read+0x10/0x10 [ 112.072781][ T6259] ? __fget_files+0x2a/0x420 [ 112.072948][ T6259] ? __fget_files+0x3a2/0x420 [ 112.072973][ T6259] ? __fget_files+0x2a/0x420 [ 112.073004][ T6259] ksys_read+0x150/0x270 [ 112.073034][ T6259] ? __pfx_ksys_read+0x10/0x10 [ 112.073069][ T6259] do_syscall_64+0x166/0x520 [ 112.073089][ T6259] ? trace_irq_disable+0x3b/0x140 [ 112.073153][ T6259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.073171][ T6259] ? clear_bhb_loop+0x70/0xc0 [ 112.073193][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.073210][ T6259] RIP: 0033:0x7f1d8055e98e [ 112.073228][ T6259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.073243][ T6259] RSP: 002b:00007f1d81447fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.073262][ T6259] RAX: ffffffffffffffda RBX: 00007f1d814486c0 RCX: 00007f1d8055e98e [ 112.073274][ T6259] RDX: 000000000000000f RSI: 00007f1d814480a0 RDI: 0000000000000003 [ 112.073285][ T6259] RBP: 00007f1d81448090 R08: 0000000000000000 R09: 0000000000000000 [ 112.073296][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.073306][ T6259] R13: 00007f1d80826038 R14: 00007f1d80825fa0 R15: 00007fff4c68ae88 [ 112.073335][ T6259] [ 112.205319][ T6263] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.80'. [ 113.195959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.458253][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.464275][ T987] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.489901][ T6267] overlayfs: failed to resolve './bus': -2 [ 113.598077][ T5786] usb 5-1: USB disconnect, device number 3 [ 113.615678][ T987] usb 1-1: device descriptor read/64, error -71 [ 113.729171][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.729374][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.805668][ T4933] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.805727][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.868124][ T987] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.059774][ T987] usb 1-1: device descriptor read/64, error -71 [ 114.109414][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 114.166290][ T987] usb usb1-port1: attempt power cycle [ 115.338552][ T987] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.364677][ T987] usb 1-1: device descriptor read/8, error -71 [ 117.405503][ T6299] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 117.409317][ T6305] loop2: detected capacity change from 0 to 256 [ 117.410324][ T6305] exfat: Unknown parameter 'i4 ?gid' [ 117.530153][ T6305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.581141][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 117.726679][ T6314] loop3: detected capacity change from 0 to 512 [ 117.811156][ T6314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.811288][ T6314] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.906626][ T6314] capability: warning: `syz.3.82' uses 32-bit capabilities (legacy support in use) [ 118.053175][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.174691][ T6329] loop2: detected capacity change from 0 to 256 [ 118.183183][ T6329] vfat: Deprecated parameter 'posix' [ 118.194780][ T6329] FAT-fs: "posix" option is obsolete, not supported now [ 118.268738][ T6304] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.268891][ T6304] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.269012][ T6304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.269096][ T6304] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.269177][ T6304] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.548876][ T987] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 118.688639][ T6345] loop2: detected capacity change from 0 to 64 [ 118.700428][ T987] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 118.711302][ T987] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.711388][ T987] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.711427][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.964539][ T6323] loop4: detected capacity change from 0 to 32768 [ 119.084000][ T6334] loop3: detected capacity change from 0 to 32768 [ 119.199617][ T6323] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 119.211474][ T6334] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 119.365512][ T5278] 8021q: adding VLAN 0 to HW filter on device bond5 [ 119.379355][ T6334] XFS (loop3): Ending clean mount [ 119.402127][ T987] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 119.402175][ T987] dvb_ttusb_budget: ttusb_init_controller: error [ 119.404040][ T987] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 119.431624][ T6323] XFS (loop4): Ending clean mount [ 119.647389][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.722482][ T987] DVB: Unable to find symbol stv0299_attach() [ 119.769912][ T6374] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 120.042334][ T987] DVB: Unable to find symbol tda8083_attach() [ 120.042373][ T987] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 120.068071][ T6379] loop2: detected capacity change from 0 to 128 [ 120.071115][ T6379] ufs: ufstype=hp is supported read-only [ 120.079849][ T6379] ufs: ufs_fill_super(): bad magic number [ 120.096459][ T5629] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 120.286129][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.286181][ T4933] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.286226][ T4933] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.286254][ T4933] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.515241][ T5617] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 121.511393][ T6393] loop2: detected capacity change from 0 to 512 [ 121.654355][ T6393] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 121.678694][ T6393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 121.678816][ T6393] System zones: 1-12 [ 121.679017][ T6393] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.715089][ T6393] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.103: attempt to clear invalid blocks 1024 len 1 [ 121.715150][ T6393] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.723176][ T6393] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.103: bg 0: block 361: padding at end of block bitmap is not set [ 121.723209][ T6393] loop2: lost filesystem error report for type 5 error -117 [ 121.723508][ T6393] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 121.723527][ T6393] loop2: lost filesystem error report for type 5 error -117 [ 121.724591][ T6393] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.103: invalid indirect mapped block 1811939328 (level 0) [ 121.724622][ T6393] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.724942][ T6393] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.103: invalid indirect mapped block 2 (level 2) [ 121.724968][ T6393] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.735558][ C0] EXT4-fs (loop2): error count since last fsck: 5 [ 121.735580][ C0] EXT4-fs (loop2): initial error at time 1788254171: ext4_clear_blocks:876: inode 11 [ 121.735608][ C0] EXT4-fs (loop2): last error at time 1788254171: ext4_free_branches:1023: inode 11 [ 121.741710][ T6393] EXT4-fs (loop2): 1 truncate cleaned up [ 121.752336][ T10] usb 2-1: USB disconnect, device number 2 [ 121.839079][ T6393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 121.944161][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 122.111653][ T6407] process 'syz.4.105' launched './file0' with NULL argv: empty string added [ 122.124402][ T6407] FAULT_INJECTION: forcing a failure. [ 122.124402][ T6407] name failslab, interval 1, probability 0, space 0, times 0 [ 122.138677][ T6407] CPU: 1 UID: 0 PID: 6407 Comm: syz.4.105 Not tainted syzkaller #0 PREEMPT(full) [ 122.138702][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.138713][ T6407] Call Trace: [ 122.138720][ T6407] [ 122.138728][ T6407] dump_stack_lvl+0xe8/0x150 [ 122.138760][ T6407] should_fail_ex+0x3eb/0x540 [ 122.138786][ T6407] should_failslab+0xa8/0x100 [ 122.138810][ T6407] __kmalloc_noprof+0xfe/0x720 [ 122.138828][ T6407] ? rcu_is_watching+0x16/0xb0 [ 122.138850][ T6407] ? tomoyo_realpath_from_path+0xef/0x640 [ 122.138874][ T6407] ? tomoyo_realpath_from_path+0xef/0x640 [ 122.138905][ T6407] tomoyo_realpath_from_path+0xef/0x640 [ 122.138938][ T6407] ? tomoyo_path_number_perm+0x219/0x5f0 [ 122.138959][ T6407] tomoyo_path_number_perm+0x246/0x5f0 [ 122.138979][ T6407] ? __lock_acquire+0x6df/0x2e50 [ 122.139008][ T6407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 122.139069][ T6407] ? __pfx_current_check_access_path+0x10/0x10 [ 122.139092][ T6407] ? d_alloc_parallel+0x1535/0x16b0 [ 122.139119][ T6407] tomoyo_path_mknod+0x14a/0x1a0 [ 122.139145][ T6407] ? d_alloc_parallel+0x39c/0x16b0 [ 122.139163][ T6407] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 122.139189][ T6407] ? __d_lookup+0x66/0x790 [ 122.139213][ T6407] security_path_mknod+0x176/0x370 [ 122.139241][ T6407] may_o_create+0xc2/0x380 [ 122.139267][ T6407] lookup_open+0x68a/0x1380 [ 122.139296][ T6407] ? lookup_fast+0x1a8/0x5d0 [ 122.139330][ T6407] path_openat+0x69b/0x1e50 [ 122.139369][ T6407] do_file_open+0x23e/0x4a0 [ 122.139397][ T6407] ? __pfx_do_file_open+0x10/0x10 [ 122.139438][ T6407] ? _raw_spin_unlock+0x28/0x50 [ 122.139457][ T6407] ? alloc_fd+0x651/0x6c0 [ 122.139492][ T6407] do_sys_openat2+0x115/0x200 [ 122.139519][ T6407] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.139541][ T6407] ? ksys_write+0x242/0x270 [ 122.139569][ T6407] ? __pfx_ksys_write+0x10/0x10 [ 122.139599][ T6407] __x64_sys_openat+0x138/0x170 [ 122.139628][ T6407] do_syscall_64+0x166/0x520 [ 122.139648][ T6407] ? trace_irq_disable+0x3b/0x140 [ 122.139666][ T6407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.139685][ T6407] ? clear_bhb_loop+0x70/0xc0 [ 122.139707][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.139725][ T6407] RIP: 0033:0x7f29f9b9e159 [ 122.139742][ T6407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.139756][ T6407] RSP: 002b:00007f29fab41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.139776][ T6407] RAX: ffffffffffffffda RBX: 00007f29f9e25fa0 RCX: 00007f29f9b9e159 [ 122.139789][ T6407] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 122.139801][ T6407] RBP: 00007f29fab41090 R08: 0000000000000000 R09: 0000000000000000 [ 122.139812][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.139823][ T6407] R13: 00007f29f9e26038 R14: 00007f29f9e25fa0 R15: 00007ffc05cdb308 [ 122.139854][ T6407] [ 122.166641][ T6407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.243047][ T6404] loop1: detected capacity change from 0 to 32768 [ 122.285793][ T6404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.104 (6404) [ 122.333398][ T6404] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.333428][ T6404] BTRFS info (device loop1): using sha256 checksum algorithm [ 122.479222][ T6404] BTRFS info (device loop1): enabling ssd optimizations [ 122.479246][ T6404] BTRFS info (device loop1): turning on sync discard [ 122.479260][ T6404] BTRFS info (device loop1): enabling free space tree [ 122.546870][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 122.546921][ T31] audit: type=1800 audit(1788254172.406:28): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.104" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 122.593224][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 122.605287][ T6423] loop4: detected capacity change from 0 to 128 [ 122.614829][ T6423] ext4: Unknown parameter 'hash' [ 122.705688][ T6427] FAULT_INJECTION: forcing a failure. [ 122.705688][ T6427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.723376][ T6427] CPU: 1 UID: 0 PID: 6427 Comm: syz.1.104 Not tainted syzkaller #0 PREEMPT(full) [ 122.723404][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.723414][ T6427] Call Trace: [ 122.723422][ T6427] [ 122.723431][ T6427] dump_stack_lvl+0xe8/0x150 [ 122.723462][ T6427] should_fail_ex+0x3eb/0x540 [ 122.723487][ T6427] _copy_from_user+0x2d/0xb0 [ 122.723511][ T6427] comedi_unlocked_ioctl+0x5fe/0x1af0 [ 122.723548][ T6427] ? kasan_quarantine_put+0xbb/0x1f0 [ 122.723568][ T6427] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 122.723617][ T6427] ? do_vfs_ioctl+0x116f/0x1530 [ 122.723639][ T6427] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 122.723671][ T6427] ? hook_file_ioctl+0x1f2/0x600 [ 122.723711][ T6427] ? __fget_files+0x2a/0x420 [ 122.723739][ T6427] ? __fget_files+0x2a/0x420 [ 122.723761][ T6427] ? __fget_files+0x3a2/0x420 [ 122.723784][ T6427] ? __fget_files+0x2a/0x420 [ 122.723811][ T6427] ? bpf_lsm_file_ioctl+0x9/0x20 [ 122.723837][ T6427] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 122.723855][ T6427] __se_sys_ioctl+0xfc/0x170 [ 122.723877][ T6427] do_syscall_64+0x166/0x520 [ 122.723898][ T6427] ? trace_irq_disable+0x3b/0x140 [ 122.723916][ T6427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.723945][ T6427] ? clear_bhb_loop+0x70/0xc0 [ 122.723968][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.723986][ T6427] RIP: 0033:0x7fdc1739e159 [ 122.724004][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.724019][ T6427] RSP: 002b:00007fdc18255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.724038][ T6427] RAX: ffffffffffffffda RBX: 00007fdc17626090 RCX: 00007fdc1739e159 [ 122.724051][ T6427] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 000000000000000c [ 122.724063][ T6427] RBP: 00007fdc18255090 R08: 0000000000000000 R09: 0000000000000000 [ 122.724073][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.724084][ T6427] R13: 00007fdc17626128 R14: 00007fdc17626090 R15: 00007ffdf44c2fa8 [ 122.724114][ T6427] [ 123.094457][ T6439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.104'. [ 123.187624][ T6427] dvmrp0: entered allmulticast mode [ 124.112431][ T6455] loop0: detected capacity change from 0 to 64 [ 124.220686][ T6446] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.243794][ T6446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.258584][ T6446] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.297579][ T6446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.308049][ T6446] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.586251][ T6471] mmap: syz.3.116 (6471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.607474][ T30] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 124.792696][ T30] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 124.815311][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.815899][ T30] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.816062][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.535397][ T5616] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.741083][ T6481] FAULT_INJECTION: forcing a failure. [ 125.741083][ T6481] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 125.741135][ T6481] CPU: 0 UID: 0 PID: 6481 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(full) [ 125.741153][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.741162][ T6481] Call Trace: [ 125.741168][ T6481] [ 125.741175][ T6481] dump_stack_lvl+0xe8/0x150 [ 125.741203][ T6481] should_fail_ex+0x3eb/0x540 [ 125.741225][ T6481] prepare_alloc_pages+0x223/0x600 [ 125.741251][ T6481] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 125.741272][ T6481] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 125.741293][ T6481] ? __pfx_policy_nodemask+0x10/0x10 [ 125.741314][ T6481] ? __lock_acquire+0x6df/0x2e50 [ 125.741345][ T6481] alloc_pages_mpol+0x21e/0x390 [ 125.741370][ T6481] alloc_pages_noprof+0xb1/0x2b0 [ 125.741391][ T6481] pte_alloc_one+0x22/0x370 [ 125.741413][ T6481] __pte_alloc+0x25/0x1a0 [ 125.741433][ T6481] do_pte_missing+0x2db7/0x34b0 [ 125.741453][ T6481] ? do_raw_spin_unlock+0xf5/0x200 [ 125.741478][ T6481] ? __pmd_alloc+0x40a/0x5c0 [ 125.741502][ T6481] handle_mm_fault+0x1a53/0x3750 [ 125.741531][ T6481] ? handle_mm_fault+0xf1/0x3750 [ 125.741561][ T6481] ? __pfx_handle_mm_fault+0x10/0x10 [ 125.741592][ T6481] ? __lock_acquire+0x6df/0x2e50 [ 125.741611][ T6481] ? lock_mm_and_find_vma+0xa7/0x340 [ 125.741637][ T6481] do_user_addr_fault+0x7f6/0x1480 [ 125.741667][ T6481] exc_page_fault+0x6a/0xc0 [ 125.741687][ T6481] asm_exc_page_fault+0x26/0x30 [ 125.741702][ T6481] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 125.741726][ T6481] Code: e9 c4 69 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 69 04 00 66 2e 0f 1f [ 125.741738][ T6481] RSP: 0018:ffffc9000d797e50 EFLAGS: 00050202 [ 125.741754][ T6481] RAX: ffffffff84df5f00 RBX: 0000000000000004 RCX: 0000000000000004 [ 125.741764][ T6481] RDX: 0000000000000000 RSI: ffff88802c618000 RDI: 0000200000000180 [ 125.741774][ T6481] RBP: 0000000000000004 R08: ffff88802c618003 R09: 1ffff110058c3000 [ 125.741785][ T6481] R10: dffffc0000000000 R11: ffffed10058c3001 R12: 0000200000000184 [ 125.741795][ T6481] R13: 00007ffffffff000 R14: ffff88802c618000 R15: 0000200000000180 [ 125.741813][ T6481] ? _copy_from_user+0xa0/0xb0 [ 125.741838][ T6481] _copy_to_user+0x8a/0xb0 [ 125.741857][ T6481] __se_sys_mincore+0x516/0x660 [ 125.741878][ T6481] do_syscall_64+0x166/0x520 [ 125.741895][ T6481] ? trace_irq_disable+0x3b/0x140 [ 125.741910][ T6481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.741926][ T6481] ? clear_bhb_loop+0x70/0xc0 [ 125.741945][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.741960][ T6481] RIP: 0033:0x7f66e779e159 [ 125.741974][ T6481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.741986][ T6481] RSP: 002b:00007f66e865d028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 125.742002][ T6481] RAX: ffffffffffffffda RBX: 00007f66e7a25fa0 RCX: 00007f66e779e159 [ 125.742013][ T6481] RDX: 0000200000000180 RSI: 0000000000004000 RDI: 0000200000586000 [ 125.742023][ T6481] RBP: 00007f66e865d090 R08: 0000000000000000 R09: 0000000000000000 [ 125.742032][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.742041][ T6481] R13: 00007f66e7a26038 R14: 00007f66e7a25fa0 R15: 00007fff453014b8 [ 125.742068][ T6481] [ 125.974993][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.092914][ T30] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 126.092941][ T30] dvb_ttusb_budget: ttusb_init_controller: error [ 126.092953][ T30] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 126.222073][ T31] audit: type=1326 audit(1788254176.076:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.113" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1739e159 code=0x7ffc0000 [ 126.250802][ T31] audit: type=1326 audit(1788254176.076:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.113" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1739e159 code=0x7ffc0000 [ 126.250886][ T31] audit: type=1326 audit(1788254176.076:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.113" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fdc1739e159 code=0x7ffc0000 [ 126.250923][ T31] audit: type=1326 audit(1788254176.076:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.113" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1739e159 code=0x7ffc0000 [ 126.250974][ T31] audit: type=1326 audit(1788254176.076:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.113" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1739e159 code=0x7ffc0000 [ 126.251009][ T31] audit: type=1326 audit(1788254176.076:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.113" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc1739e159 code=0x7ffc0000 [ 126.251044][ T31] audit: type=1326 audit(1788254176.076:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.113" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1739e159 code=0x7ffc0000 [ 126.251080][ T31] audit: type=1326 audit(1788254176.076:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.113" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1739e159 code=0x7ffc0000 [ 126.251114][ T31] audit: type=1326 audit(1788254176.076:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.1.113" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc1739e159 code=0x7ffc0000 [ 126.303022][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.303066][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.391248][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.391306][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.643372][ T30] DVB: Unable to find symbol stv0299_attach() [ 126.690291][ T6492] loop0: detected capacity change from 0 to 32768 [ 126.775985][ T30] DVB: Unable to find symbol tda8083_attach() [ 126.782510][ T30] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 127.147824][ T6496] dvmrp1: entered allmulticast mode [ 127.859102][ T6502] loop0: detected capacity change from 0 to 8192 [ 127.947393][ T5810] usb 5-1: USB disconnect, device number 4 [ 128.278523][ T6513] loop4: detected capacity change from 0 to 1024 [ 128.467175][ T6517] FAULT_INJECTION: forcing a failure. [ 128.467175][ T6517] name failslab, interval 1, probability 0, space 0, times 0 [ 128.484676][ T6517] CPU: 1 UID: 0 PID: 6517 Comm: syz.3.126 Not tainted syzkaller #0 PREEMPT(full) [ 128.484701][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.484711][ T6517] Call Trace: [ 128.484718][ T6517] [ 128.484725][ T6517] dump_stack_lvl+0xe8/0x150 [ 128.484755][ T6517] should_fail_ex+0x3eb/0x540 [ 128.484779][ T6517] should_failslab+0xa8/0x100 [ 128.484802][ T6517] __kmalloc_cache_node_noprof+0xaa/0x620 [ 128.484822][ T6517] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 128.484849][ T6517] ? page_pool_create_percpu+0x73/0xc70 [ 128.484869][ T6517] ? page_pool_create_percpu+0x73/0xc70 [ 128.485251][ T6517] page_pool_create_percpu+0x73/0xc70 [ 128.485289][ T6517] ? page_pool_create+0xd/0x20 [ 128.485423][ T6517] bpf_test_run_xdp_live+0x23a/0x1c20 [ 128.485454][ T6517] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 128.485478][ T6517] ? __mutex_unlock_slowpath+0x731/0x900 [ 128.485506][ T6517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.485532][ T6517] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 128.485557][ T6517] ? 0xffffffffa04047c0 [ 128.485631][ T6517] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 128.485658][ T6517] ? _copy_from_user+0x94/0xb0 [ 128.485680][ T6517] ? bpf_test_init+0x113/0x150 [ 128.485702][ T6517] ? xdp_convert_md_to_buff+0x5b/0x330 [ 128.485731][ T6517] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 128.485771][ T6517] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.485801][ T6517] ? __fget_files+0x2a/0x420 [ 128.485829][ T6517] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 128.485848][ T6517] bpf_prog_test_run+0x2c5/0x340 [ 128.485864][ T6517] __sys_bpf+0xa22/0xd90 [ 128.485879][ T6517] ? __pfx___sys_bpf+0x10/0x10 [ 128.485895][ T6517] ? __fget_files+0x2a/0x420 [ 128.485923][ T6517] ? ksys_write+0x242/0x270 [ 128.485940][ T6517] ? __pfx_ksys_write+0x10/0x10 [ 128.485957][ T6517] __x64_sys_bpf+0xba/0xd0 [ 128.485968][ T6517] do_syscall_64+0x166/0x520 [ 128.485980][ T6517] ? trace_irq_disable+0x3b/0x140 [ 128.485989][ T6517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.485999][ T6517] ? clear_bhb_loop+0x70/0xc0 [ 128.486011][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.486021][ T6517] RIP: 0033:0x7f7eb319e159 [ 128.486032][ T6517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.486040][ T6517] RSP: 002b:00007f7eb4011028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.486052][ T6517] RAX: ffffffffffffffda RBX: 00007f7eb3425fa0 RCX: 00007f7eb319e159 [ 128.486060][ T6517] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 128.486066][ T6517] RBP: 00007f7eb4011090 R08: 0000000000000000 R09: 0000000000000000 [ 128.486072][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.486078][ T6517] R13: 00007f7eb3426038 R14: 00007f7eb3425fa0 R15: 00007ffedbdf1fb8 [ 128.486094][ T6517] [ 128.495782][ T6509] netlink: 48 bytes leftover after parsing attributes in process `syz.4.124'. [ 128.495802][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 128.637731][ T6521] loop1: detected capacity change from 0 to 64 [ 129.005474][ T6511] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.005870][ T6511] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.005995][ T6511] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.006081][ T6511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.006165][ T6511] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.158073][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 129.832401][ T6531] loop2: detected capacity change from 0 to 512 [ 130.009001][ T6531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.009113][ T6531] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.039883][ T6543] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 130.093263][ T6543] FAULT_INJECTION: forcing a failure. [ 130.093263][ T6543] name failslab, interval 1, probability 0, space 0, times 0 [ 130.112404][ T6543] CPU: 1 UID: 0 PID: 6543 Comm: syz.4.131 Not tainted syzkaller #0 PREEMPT(full) [ 130.112433][ T6543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.112443][ T6543] Call Trace: [ 130.112451][ T6543] [ 130.112459][ T6543] dump_stack_lvl+0xe8/0x150 [ 130.112490][ T6543] should_fail_ex+0x3eb/0x540 [ 130.112514][ T6543] ? alloc_slab_obj_exts+0x5c/0x180 [ 130.112539][ T6543] should_failslab+0xa8/0x100 [ 130.112563][ T6543] ? alloc_slab_obj_exts+0x5c/0x180 [ 130.112586][ T6543] __kmalloc_flags_noprof+0x128/0x7a0 [ 130.112609][ T6543] ? alloc_slab_obj_exts+0x5c/0x180 [ 130.112640][ T6543] alloc_slab_obj_exts+0x5c/0x180 [ 130.112668][ T6543] __memcg_slab_post_alloc_hook+0x60b/0xd90 [ 130.112706][ T6543] ? vm_area_dup+0x28/0x760 [ 130.112724][ T6543] kmem_cache_alloc_noprof+0x367/0x600 [ 130.112750][ T6543] ? vm_area_dup+0x28/0x760 [ 130.112774][ T6543] ? kmem_cache_alloc_noprof+0x156/0x600 [ 130.112801][ T6543] ? vm_area_dup+0x28/0x760 [ 130.112824][ T6543] vm_area_dup+0x28/0x760 [ 130.112839][ T6543] ? __split_vma+0x1b7/0xa60 [ 130.112867][ T6543] __split_vma+0x1d7/0xa60 [ 130.112894][ T6543] ? mas_next_slot+0xc91/0xd70 [ 130.112920][ T6543] ? __pfx___split_vma+0x10/0x10 [ 130.112956][ T6543] ? mas_find+0x6d6/0xcb0 [ 130.112982][ T6543] vms_gather_munmap_vmas+0x4e3/0x1370 [ 130.113020][ T6543] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 130.113048][ T6543] ? mas_walk+0x37e/0x490 [ 130.113077][ T6543] mmap_region+0x92e/0x2240 [ 130.113115][ T6543] ? __pfx_mmap_region+0x10/0x10 [ 130.113135][ T6543] ? process_measurement+0x7b2/0x1c10 [ 130.113168][ T6543] ? up_write+0x19d/0x4a0 [ 130.113200][ T6543] ? __lock_acquire+0x6df/0x2e50 [ 130.113234][ T6543] ? __pfx_process_measurement+0x10/0x10 [ 130.113303][ T6543] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 130.113348][ T6543] ? mm_get_unmapped_area+0xd3/0x100 [ 130.113378][ T6543] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 130.113402][ T6543] ? cap_mmap_addr+0xaf/0x100 [ 130.113420][ T6543] ? bpf_lsm_mmap_addr+0x9/0x50 [ 130.113442][ T6543] ? security_mmap_addr+0x71/0x240 [ 130.113462][ T6543] ? shmem_mapping+0xd/0x50 [ 130.113478][ T6543] ? memfd_check_seals_mmap+0x16f/0x220 [ 130.113505][ T6543] do_mmap+0xe0a/0x1300 [ 130.113526][ T6543] ? get_pid_task+0x20/0x1f0 [ 130.113550][ T6543] ? __pfx_do_mmap+0x10/0x10 [ 130.113582][ T6543] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 130.113601][ T6543] ? down_write_killable+0x17e/0x240 [ 130.113626][ T6543] ? __pfx_down_write_killable+0x10/0x10 [ 130.113657][ T6543] vm_mmap_pgoff+0x272/0x4e0 [ 130.113676][ T6543] ? lock_acquire+0x115/0x350 [ 130.113697][ T6543] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 130.113717][ T6543] ? __fget_files+0x2a/0x420 [ 130.113741][ T6543] ? __fget_files+0x3a2/0x420 [ 130.113767][ T6543] ? __fget_files+0x2a/0x420 [ 130.113792][ T6543] ksys_mmap_pgoff+0x4dc/0x760 [ 130.113818][ T6543] do_syscall_64+0x166/0x520 [ 130.113837][ T6543] ? trace_irq_disable+0x3b/0x140 [ 130.113852][ T6543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.113871][ T6543] ? clear_bhb_loop+0x70/0xc0 [ 130.113894][ T6543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.113910][ T6543] RIP: 0033:0x7f29f9b9e159 [ 130.113927][ T6543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.113941][ T6543] RSP: 002b:00007f29fab41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 130.113960][ T6543] RAX: ffffffffffffffda RBX: 00007f29f9e25fa0 RCX: 00007f29f9b9e159 [ 130.113973][ T6543] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 130.113984][ T6543] RBP: 00007f29fab41090 R08: 0000000000000003 R09: 0000000000000000 [ 130.113995][ T6543] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000001 [ 130.114005][ T6543] R13: 00007f29f9e26038 R14: 00007f29f9e25fa0 R15: 00007ffc05cdb308 [ 130.114034][ T6543] [ 130.166239][ T6541] sd 0:0:1:0: PR command failed: 1026 [ 130.166271][ T6541] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 130.166297][ T6541] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 130.447223][ T5723] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 130.457378][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.475293][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.085728][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.085779][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.091887][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.154714][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.198645][ T5723] usb 1-1: Using ep0 maxpacket: 8 [ 131.199632][ T5723] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.200726][ T5723] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 131.200753][ T5723] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 131.200775][ T5723] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.200795][ T5723] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.200830][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.416601][ T5723] usb 1-1: GET_CAPABILITIES returned 0 [ 131.416675][ T5723] usbtmc 1-1:16.0: can't read capabilities [ 131.460963][ T6555] loop1: detected capacity change from 0 to 1024 [ 131.482335][ T6555] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 131.507432][ T6555] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.135: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 131.507498][ T6555] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 131.507921][ T6555] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.135: couldn't read orphan inode 11 (err -117) [ 131.507947][ T6555] loop1: lost filesystem error report for type 5 error -117 [ 131.530318][ T6555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.696626][ T6566] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.135: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.712258][ T6566] __quota_error: 2 callbacks suppressed [ 131.718240][ T6566] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 131.726803][ T6566] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.135: lblock 0 mapped to illegal pblock 48 (length 1) [ 131.751026][ T6566] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 131.751064][ T6566] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.135: Failed to acquire dquot type 0 [ 132.086395][ T6571] EXT4-fs: Ignoring removed bh option [ 132.087200][ T6571] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 132.810035][ T30] usb 1-1: USB disconnect, device number 11 [ 133.172206][ T6580] loop0: detected capacity change from 0 to 128 [ 133.631327][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.631414][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.972656][ T6583] program syz.0.141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.342866][ T6590] loop4: detected capacity change from 0 to 64 [ 136.455611][ T5810] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.919730][ T6601] sd 0:0:1:0: PR command failed: 1026 [ 136.919774][ T6601] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 136.919846][ T6601] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 137.313509][ T6595] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.313720][ T6595] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.313878][ T6595] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 137.313988][ T6595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.314073][ T6595] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.002088][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.038165][ T50] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.071879][ T50] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 138.083522][ T50] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 138.083638][ T50] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 138.083675][ T50] loop1: lost filesystem error report for type 5 error -117 [ 138.107527][ T5616] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 138.107557][ T5616] loop1: lost filesystem error report for type 5 error -117 [ 138.107915][ T5616] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 138.107933][ T5616] loop1: lost filesystem error report for type 5 error -117 [ 138.113222][ T5616] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 138.113251][ T5616] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 138.116292][ T5616] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 138.116319][ T5616] loop1: lost filesystem error report for type 5 error -117 [ 138.528964][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.935407][ T30] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 139.332917][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.332921][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.332970][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.333088][ T30] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 139.335600][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.335654][ T30] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.335692][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.352801][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.964090][ T30] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 139.964193][ T30] dvb_ttusb_budget: ttusb_init_controller: error [ 139.964222][ T30] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 140.250129][ T5278] 8021q: adding VLAN 0 to HW filter on device bond6 [ 140.775295][ T6630] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.775632][ T6630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.775800][ T6630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.775948][ T6630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.776103][ T6630] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.944044][ T30] DVB: Unable to find symbol stv0299_attach() [ 141.126450][ T5786] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 141.319381][ T5786] usb 1-1: Using ep0 maxpacket: 8 [ 141.350367][ T5786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.413317][ T5786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 141.426898][ T5786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 141.426971][ T5786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.427026][ T5786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.442132][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.911577][ T6654] sd 0:0:1:0: PR command failed: 1026 [ 141.911650][ T6654] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 141.911704][ T6654] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 141.942663][ T30] DVB: Unable to find symbol tda8083_attach() [ 141.942692][ T30] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 141.981704][ T30] usb 2-1: USB disconnect, device number 3 [ 142.055638][ T5786] usb 1-1: GET_CAPABILITIES returned 0 [ 142.055715][ T5786] usbtmc 1-1:16.0: can't read capabilities [ 142.056242][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.872648][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.872701][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.872740][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.872759][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.082846][ T6661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.083059][ T6661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.101876][ T6661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.109479][ T6661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.119582][ T6661] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.133581][ T5810] usb 1-1: USB disconnect, device number 12 [ 143.209303][ T6674] loop2: detected capacity change from 0 to 64 [ 143.229629][ T6676] loop1: detected capacity change from 0 to 1024 [ 143.241575][ T6676] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 143.282886][ T6676] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.160: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 143.306714][ T6676] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 143.307138][ T6676] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.160: couldn't read orphan inode 11 (err -117) [ 143.316593][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 143.316617][ C1] EXT4-fs (loop1): initial error at time 1788254193: ext4_ext_check_inode:521: inode 11 [ 143.316650][ C1] EXT4-fs (loop1): last error at time 1788254193: ext4_ext_check_inode:521: inode 11 [ 143.355784][ T6676] loop1: lost filesystem error report for type 5 error -117 [ 143.371542][ T6676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.626829][ T6678] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 143.697187][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 144.546254][ T6692] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.160: lblock 2 mapped to illegal pblock 2 (length 1) [ 144.668514][ T6692] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 144.668589][ T6692] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.160: lblock 0 mapped to illegal pblock 48 (length 1) [ 144.693629][ T6692] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 144.693681][ T6692] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.160: Failed to acquire dquot type 0 [ 144.792088][ T6695] loop0: detected capacity change from 0 to 32768 [ 144.934568][ T6694] EXT4-fs: Ignoring removed bh option [ 144.934722][ T6694] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 145.005601][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.094905][ T4933] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.175818][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.177787][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.177826][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.748067][ T987] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 148.205641][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.213612][ T6710] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 148.428824][ T6710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.492116][ T6710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.492283][ T6710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.652839][ T987] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 149.163316][ T6710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 149.510579][ T987] usb 5-1: unable to read config index 0 descriptor/all [ 149.517817][ T987] usb 5-1: can't read configurations, error -71 [ 150.285868][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.521417][ T6728] sd 0:0:1:0: PR command failed: 1026 [ 150.521479][ T6728] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 150.521535][ T6728] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 150.527651][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.527687][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.125319][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.175'. [ 151.256486][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.664105][ T6738] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.670209][ T6738] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.672995][ T6738] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.674073][ T6738] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.675404][ T6738] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.766441][ T6751] loop3: detected capacity change from 0 to 64 [ 151.869050][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.890768][ T97] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 151.890831][ T97] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 151.897417][ T97] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 151.897461][ T97] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 151.897480][ T97] loop1: lost filesystem error report for type 5 error -117 [ 151.909463][ T5616] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 151.909492][ T5616] loop1: lost filesystem error report for type 5 error -117 [ 151.912854][ T5616] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 151.912884][ T5616] loop1: lost filesystem error report for type 5 error -117 [ 151.930536][ T5616] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 151.930567][ T5616] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 151.934264][ T5616] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 151.934292][ T5616] loop1: lost filesystem error report for type 5 error -117 [ 152.385662][ T5810] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 152.425853][ T987] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.546896][ T5810] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 152.548025][ T5810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.548079][ T5810] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.548116][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.589914][ T987] usb 5-1: Using ep0 maxpacket: 8 [ 152.597959][ T987] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.608324][ T987] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 152.608356][ T987] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.608376][ T987] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.608396][ T987] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.608433][ T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.670029][ T5810] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 153.689635][ T5810] dvb_ttusb_budget: ttusb_init_controller: error [ 153.690213][ T5810] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 153.735839][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.735996][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.736060][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.736157][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.027894][ T6778] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.034297][ T6778] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.040655][ T6778] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.040897][ T6778] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.041049][ T6778] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.111001][ T987] usb 5-1: usb_control_msg returned -71 [ 154.111064][ T987] usbtmc 5-1:16.0: can't read capabilities [ 154.190814][ T987] usb 5-1: USB disconnect, device number 7 [ 154.197801][ T5810] DVB: Unable to find symbol stv0299_attach() [ 154.302282][ T5810] DVB: Unable to find symbol tda8083_attach() [ 154.302315][ T5810] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 154.343472][ T6797] capability: warning: `syz.3.184' uses deprecated v2 capabilities in a way that may be insecure [ 154.529189][ T6807] sd 0:0:1:0: PR command failed: 1026 [ 154.529252][ T6807] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 154.529295][ T6807] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 154.606483][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.703667][ T6814] loop1: detected capacity change from 0 to 1024 [ 154.728969][ T6814] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 154.753407][ T6814] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.188: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 154.753473][ T6814] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 154.755270][ T6814] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.188: couldn't read orphan inode 11 (err -117) [ 154.755299][ T6814] loop1: lost filesystem error report for type 5 error -117 [ 154.764909][ T6814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.169615][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 155.669383][ T6827] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.188: lblock 2 mapped to illegal pblock 2 (length 1) [ 155.709642][ T6827] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 155.720330][ T6827] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 48: comm syz.1.188: lblock 0 mapped to illegal pblock 48 (length 1) [ 155.803796][ T6827] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 155.803930][ T6827] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.188: Failed to acquire dquot type 0 [ 155.984628][ T6816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.984784][ T6816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.984909][ T6816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.984994][ T6816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.985084][ T6816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.175478][ T987] usb 1-1: USB disconnect, device number 13 [ 156.251745][ T6828] EXT4-fs: Ignoring removed bh option [ 156.251881][ T6828] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 156.392400][ T6837] loop0: detected capacity change from 0 to 64 [ 157.570327][ T6846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.653867][ T6846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.654099][ T6846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.654241][ T6846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.686276][ T6846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.976235][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.166222][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 158.191267][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.249482][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 158.263628][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 158.263709][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.276214][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.289891][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.612279][ T6581] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.612338][ T6581] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.628430][ T6581] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 158.628472][ T6581] EXT4-fs error (device loop1): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 0 [ 158.628491][ T6581] loop1: lost filesystem error report for type 5 error -117 [ 158.629103][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.640933][ T5616] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 158.640960][ T5616] loop1: lost filesystem error report for type 5 error -117 [ 158.641684][ T5616] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 158.641701][ T5616] loop1: lost filesystem error report for type 5 error -117 [ 158.641890][ T5616] EXT4-fs error (device loop1): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 158.641911][ T5616] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 158.643174][ T5616] EXT4-fs error (device loop1): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 158.643199][ T5616] loop1: lost filesystem error report for type 5 error -117 [ 158.810529][ T6868] sd 0:0:1:0: PR command failed: 1026 [ 158.810593][ T6868] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 158.810658][ T6868] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 159.276855][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 159.645944][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.738786][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.746954][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.754008][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.806761][ T6872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.806945][ T6872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.807070][ T6872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.807171][ T6872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.807270][ T6872] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 160.051968][ T9] usb 5-1: usb_control_msg returned -71 [ 160.052031][ T9] usbtmc 5-1:16.0: can't read capabilities [ 160.172887][ T9] usb 5-1: USB disconnect, device number 8 [ 160.205899][ T5810] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 160.300248][ T6894] loop3: detected capacity change from 0 to 64 [ 160.377111][ T5810] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 160.397526][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.397597][ T5810] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.409503][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.109973][ T5810] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 161.117152][ T5810] dvb_ttusb_budget: ttusb_init_controller: error [ 161.117210][ T5810] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 161.841043][ T5810] DVB: Unable to find symbol stv0299_attach() [ 161.863155][ T6897] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.863326][ T6897] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.863456][ T6897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.863553][ T6897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.863636][ T6897] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.949798][ T6919] loop4: detected capacity change from 0 to 1024 [ 161.967374][ T6919] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 161.982844][ T6919] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.211: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 162.001377][ T6919] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.003494][ T6919] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.211: couldn't read orphan inode 11 (err -117) [ 162.012720][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 162.012741][ C0] EXT4-fs (loop4): initial error at time 1788254211: ext4_ext_check_inode:521: inode 11 [ 162.012770][ C0] EXT4-fs (loop4): last error at time 1788254211: ext4_ext_check_inode:521: inode 11 [ 162.054424][ T6919] loop4: lost filesystem error report for type 5 error -117 [ 162.057135][ T6919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.064790][ T5810] DVB: Unable to find symbol tda8083_attach() [ 162.064803][ T5810] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 162.212995][ T6931] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.211: lblock 2 mapped to illegal pblock 2 (length 1) [ 162.223985][ T6931] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 162.224037][ T6931] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.211: lblock 0 mapped to illegal pblock 48 (length 1) [ 162.225093][ T6931] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 162.225111][ T6931] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.211: Failed to acquire dquot type 0 [ 162.306504][ T6935] EXT4-fs: Ignoring removed bh option [ 162.312202][ T6935] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 162.364749][ T6933] sd 0:0:1:0: PR command failed: 1026 [ 162.364809][ T6933] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 162.364863][ T6933] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 162.455640][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.591027][ T6938] loop3: detected capacity change from 0 to 32768 [ 162.706503][ T30] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 162.908145][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 162.952009][ T30] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 162.978526][ T6942] dvmrp1: entered allmulticast mode [ 163.032806][ T30] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.032878][ T30] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.046927][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.047104][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.368327][ T30] usb 1-1: config 0 descriptor?? [ 163.711941][ T5723] usb 2-1: USB disconnect, device number 4 [ 163.886034][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.892643][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.892687][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.892738][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.974788][ T30] input: HID 05ac:0269 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:0269.0001/input/input5 [ 164.124357][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 164.637578][ T6945] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 164.637739][ T6945] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.637835][ T6945] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 164.637920][ T6945] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.638002][ T6945] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 165.163755][ T30] magicmouse 0003:05AC:0269.0001: input,hidraw0: USB HID vff.fd Joystick [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 165.231239][ T30] usb 1-1: USB disconnect, device number 14 [ 165.805725][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.090744][ T6967] fido_id[6967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 166.249064][ T97] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 166.249124][ T97] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 166.249433][ T97] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 166.249467][ T97] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 166.249485][ T97] loop4: lost filesystem error report for type 5 error -117 [ 166.304253][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.334767][ T6977] binder: 6976:6977 ioctl c0306201 2000000004c0 returned -22 [ 166.335159][ T5629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 166.335183][ T5629] loop4: lost filesystem error report for type 5 error -117 [ 166.342324][ T5629] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 166.342348][ T5629] loop4: lost filesystem error report for type 5 error -117 [ 166.344386][ T5629] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 166.344414][ T5629] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 166.349255][ T5629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 166.349284][ T5629] loop4: lost filesystem error report for type 5 error -117 [ 166.467629][ T6980] loop4: detected capacity change from 0 to 64 [ 166.685614][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.685664][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.685707][ T5625] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.685735][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.836143][ T6991] sd 0:0:1:0: PR command failed: 1026 [ 166.836205][ T6991] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 166.836257][ T6991] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 167.082980][ T6961] loop2: detected capacity change from 0 to 32768 [ 167.177748][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 167.431323][ T6985] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.450059][ T6985] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.450229][ T6985] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.450364][ T6985] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.450452][ T6985] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 167.785937][ T5786] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 167.978211][ T5786] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 167.989669][ T5786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.989744][ T5786] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.989812][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.153583][ T7028] loop4: detected capacity change from 0 to 1024 [ 168.200113][ T7028] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 168.234433][ T7028] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.234: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 168.234496][ T7028] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.234816][ T7028] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.234: couldn't read orphan inode 11 (err -117) [ 168.234842][ T7028] loop4: lost filesystem error report for type 5 error -117 [ 168.235559][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 168.235578][ C0] EXT4-fs (loop4): initial error at time 1788254218: ext4_ext_check_inode:521: inode 11 [ 168.235606][ C0] EXT4-fs (loop4): last error at time 1788254218: ext4_ext_check_inode:521: inode 11 [ 168.244662][ T7028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.364162][ T5278] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.420830][ T7034] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.234: lblock 2 mapped to illegal pblock 2 (length 1) [ 168.437378][ T7034] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 168.437478][ T7034] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.234: lblock 0 mapped to illegal pblock 48 (length 1) [ 168.461333][ T7034] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 168.461382][ T7034] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.234: Failed to acquire dquot type 0 [ 168.621888][ T7022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.622091][ T7022] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.622249][ T7022] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.622361][ T7022] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.622449][ T7022] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 168.656362][ T7035] EXT4-fs: Ignoring removed bh option [ 168.656531][ T7035] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 168.929437][ T5786] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 168.929478][ T5786] dvb_ttusb_budget: ttusb_init_controller: error [ 168.929509][ T5786] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 169.624797][ T7044] syz.0.236 uses obsolete (PF_INET,SOCK_PACKET) [ 169.678209][ T5786] DVB: Unable to find symbol stv0299_attach() [ 169.770961][ T5786] DVB: Unable to find symbol tda8083_attach() [ 169.771010][ T5786] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 169.869861][ T5629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.876030][ T1156] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 169.876063][ T1156] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.876316][ T1156] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 169.876350][ T1156] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 0 [ 169.876367][ T1156] loop4: lost filesystem error report for type 5 error -117 [ 169.877223][ T5629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 169.877246][ T5629] loop4: lost filesystem error report for type 5 error -117 [ 169.878275][ T5629] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 169.878294][ T5629] loop4: lost filesystem error report for type 5 error -117 [ 169.878503][ T5629] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 169.878523][ T5629] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 169.878738][ T5629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 169.878760][ T5629] loop4: lost filesystem error report for type 5 error -117 [ 169.969901][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.072903][ T7058] sd 0:0:1:0: PR command failed: 1026 [ 170.072964][ T7058] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 170.073045][ T7058] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 170.393613][ T7076] loop3: detected capacity change from 0 to 256 [ 170.523133][ T7076] vfat: Bad value for 'dmask' [ 170.685637][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 170.685685][ T4933] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.685725][ T4933] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.685751][ T4933] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.988248][ T25] usb 2-1: USB disconnect, device number 5 [ 171.034597][ T7063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.034865][ T7063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.035004][ T7063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.035136][ T7063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.035267][ T7063] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.215045][ T7090] loop3: detected capacity change from 0 to 32768 [ 172.286003][ T4933] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.938052][ T7105] loop2: detected capacity change from 0 to 1024 [ 173.087156][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 173.087264][ T4933] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.087285][ T4933] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.087307][ T4933] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.363334][ T7109] loop3: detected capacity change from 0 to 1024 [ 173.375620][ T7109] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 173.391889][ T7109] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.250: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 173.391942][ T7109] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 173.392396][ T7109] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.250: couldn't read orphan inode 11 (err -117) [ 173.392423][ T7109] loop3: lost filesystem error report for type 5 error -117 [ 173.461766][ T7109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.488242][ T5278] 8021q: adding VLAN 0 to HW filter on device bond8 [ 173.530779][ T7112] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 173.583500][ T7117] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.250: lblock 2 mapped to illegal pblock 2 (length 1) [ 173.597898][ T7117] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 173.597965][ T7117] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.250: lblock 0 mapped to illegal pblock 48 (length 1) [ 173.628185][ T7117] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 173.628235][ T7117] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.250: Failed to acquire dquot type 0 [ 173.852896][ T7121] EXT4-fs: Ignoring removed bh option [ 173.853038][ T7121] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 174.152752][ T7126] loop1: detected capacity change from 0 to 8 [ 174.162188][ T7126] squashfs: Unknown parameter '0' [ 174.174689][ T7126] lo: entered allmulticast mode [ 174.183846][ T5615] [ 174.186205][ T5615] ====================================================== [ 174.193231][ T5615] WARNING: possible circular locking dependency detected [ 174.193440][ T7125] lo: left allmulticast mode [ 174.204849][ T5615] syzkaller #0 Not tainted [ 174.209447][ T5615] ------------------------------------------------------ [ 174.216623][ T5615] syz-executor/5615 is trying to acquire lock: [ 174.222768][ T5615] ffff88807b2e38f0 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_free+0xc7/0x630 [ 174.232629][ T5615] [ 174.232629][ T5615] but task is already holding lock: [ 174.240105][ T5615] ffff888074c13940 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x2d0/0xd20 [ 174.251334][ T5615] [ 174.251334][ T5615] which lock already depends on the new lock. [ 174.251334][ T5615] [ 174.261827][ T5615] [ 174.261827][ T5615] the existing dependency chain (in reverse order) is: [ 174.271438][ T5615] [ 174.271438][ T5615] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 174.280466][ T5615] __mutex_lock+0x19c/0x15a0 [ 174.285673][ T5615] hfsplus_get_block+0x391/0x1610 [ 174.291219][ T5615] block_read_full_folio+0x2db/0x8d0 [ 174.297014][ T5615] filemap_read_folio+0x12c/0x3a0 [ 174.302552][ T5615] do_read_cache_folio+0x354/0x590 [ 174.308192][ T5615] read_cache_page+0x5d/0x170 [ 174.313482][ T5615] hfsplus_block_allocate+0xf7/0xd30 [ 174.319303][ T5615] hfsplus_file_extend+0xb77/0x1df0 [ 174.325022][ T5615] hfsplus_get_block+0x41f/0x1610 [ 174.330575][ T5615] __block_write_begin_int+0x6c2/0x1900 [ 174.336678][ T5615] cont_write_begin+0x71b/0xac0 [ 174.342046][ T5615] hfsplus_write_begin+0x126/0x1e0 [ 174.347782][ T5615] page_symlink+0x27a/0x440 [ 174.352815][ T5615] hfsplus_symlink+0xd3/0x390 [ 174.358016][ T5615] vfs_symlink+0x18b/0x330 [ 174.362948][ T5615] filename_symlinkat+0x1cd/0x410 [ 174.368485][ T5615] __se_sys_symlink+0x4d/0x2b0 [ 174.373833][ T5615] do_syscall_64+0x166/0x520 [ 174.378941][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.385348][ T5615] [ 174.385348][ T5615] -> #0 (&sbi->alloc_mutex){+.+.}-{4:4}: [ 174.393347][ T5615] __lock_acquire+0x15ff/0x2e50 [ 174.398822][ T5615] lock_acquire+0x115/0x350 [ 174.403859][ T5615] __mutex_lock+0x19c/0x15a0 [ 174.409047][ T5615] hfsplus_block_free+0xc7/0x630 [ 174.414509][ T5615] hfsplus_free_extents+0x121/0xa50 [ 174.420223][ T5615] hfsplus_file_truncate+0x7ef/0xd20 [ 174.426026][ T5615] hfsplus_delete_inode+0x180/0x230 [ 174.431772][ T5615] hfsplus_unlink+0x4e4/0x8e0 [ 174.436978][ T5615] vfs_unlink+0x27b/0x6d0 [ 174.441820][ T5615] filename_unlinkat+0x3cd/0x610 [ 174.447265][ T5615] __se_sys_unlink+0x2e/0x140 [ 174.452498][ T5615] do_syscall_64+0x166/0x520 [ 174.457598][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.463997][ T5615] [ 174.463997][ T5615] other info that might help us debug this: [ 174.463997][ T5615] [ 174.474205][ T5615] Possible unsafe locking scenario: [ 174.474205][ T5615] [ 174.481808][ T5615] CPU0 CPU1 [ 174.487156][ T5615] ---- ---- [ 174.492510][ T5615] lock(&HFSPLUS_I(inode)->extents_lock); [ 174.498304][ T5615] lock(&sbi->alloc_mutex); [ 174.505421][ T5615] lock(&HFSPLUS_I(inode)->extents_lock); [ 174.513928][ T5615] lock(&sbi->alloc_mutex); [ 174.518601][ T5615] [ 174.518601][ T5615] *** DEADLOCK *** [ 174.518601][ T5615] [ 174.526815][ T5615] locks held by syz-executor/5615: 5, last CPU#1: [ 174.533312][ T5615] #0: ffff888021b20460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 174.542729][ T5615] #1: ffff88807f6908d8 (&type->i_mutex_dir_key#13/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 174.553750][ T5615] #2: ffff888074c13ad8 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: vfs_unlink+0xd5/0x6d0 [ 174.563936][ T5615] #3: ffff88807b2e3988 (&sbi->vh_mutex){+.+.}-{4:4}, at: hfsplus_unlink+0x18b/0x8e0 [ 174.573438][ T5615] #4: ffff888074c13940 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x2d0/0xd20 [ 174.585129][ T5615] [ 174.585129][ T5615] stack backtrace: [ 174.591022][ T5615] CPU: 1 UID: 0 PID: 5615 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 174.600583][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.610718][ T5615] Call Trace: [ 174.613987][ T5615] [ 174.616912][ T5615] dump_stack_lvl+0xe8/0x150 [ 174.621498][ T5615] print_circular_bug+0x2e2/0x300 [ 174.626519][ T5615] check_noncircular+0x12f/0x150 [ 174.631452][ T5615] __lock_acquire+0x15ff/0x2e50 [ 174.636323][ T5615] ? lockdep_unlock+0x5c/0xd0 [ 174.640988][ T5615] ? __lock_acquire+0x14b9/0x2e50 [ 174.646003][ T5615] lock_acquire+0x115/0x350 [ 174.650591][ T5615] ? hfsplus_block_free+0xc7/0x630 [ 174.655696][ T5615] __mutex_lock+0x19c/0x15a0 [ 174.660278][ T5615] ? hfsplus_block_free+0xc7/0x630 [ 174.665408][ T5615] ? rcu_is_watching+0x16/0xb0 [ 174.670266][ T5615] ? trace_contention_end+0x3d/0x140 [ 174.675645][ T5615] ? __mutex_lock+0x30a/0x15a0 [ 174.680409][ T5615] ? hfsplus_block_free+0xc7/0x630 [ 174.685551][ T5615] ? __pfx___mutex_lock+0x10/0x10 [ 174.690579][ T5615] ? hfsplus_file_truncate+0x7c6/0xd20 [ 174.696045][ T5615] ? __mutex_unlock_slowpath+0x731/0x900 [ 174.701776][ T5615] hfsplus_block_free+0xc7/0x630 [ 174.706778][ T5615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.712802][ T5615] ? hfsplus_find_init+0x9d/0x2e0 [ 174.717817][ T5615] ? hfsplus_free_extents+0x2a/0xa50 [ 174.723106][ T5615] hfsplus_free_extents+0x121/0xa50 [ 174.728383][ T5615] hfsplus_file_truncate+0x7ef/0xd20 [ 174.734551][ T5615] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 174.740388][ T5615] ? __pfx___mutex_lock+0x10/0x10 [ 174.745440][ T5615] hfsplus_delete_inode+0x180/0x230 [ 174.750813][ T5615] hfsplus_unlink+0x4e4/0x8e0 [ 174.755510][ T5615] ? __pfx_hfsplus_unlink+0x10/0x10 [ 174.760707][ T5615] ? down_write+0x16b/0x200 [ 174.765204][ T5615] ? try_break_deleg+0x5e/0x190 [ 174.770054][ T5615] vfs_unlink+0x27b/0x6d0 [ 174.774378][ T5615] filename_unlinkat+0x3cd/0x610 [ 174.779306][ T5615] ? __pfx_filename_unlinkat+0x10/0x10 [ 174.784784][ T5615] ? do_getname+0x151/0x250 [ 174.789279][ T5615] __se_sys_unlink+0x2e/0x140 [ 174.793955][ T5615] do_syscall_64+0x166/0x520 [ 174.798548][ T5615] ? trace_irq_disable+0x3b/0x140 [ 174.803599][ T5615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.809673][ T5615] ? clear_bhb_loop+0x70/0xc0 [ 174.814361][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.820247][ T5615] RIP: 0033:0x7f1d8059d247 [ 174.824669][ T5615] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 174.844276][ T5615] RSP: 002b:00007fff4c689008 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 174.852691][ T5615] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1d8059d247 [ 174.860660][ T5615] RDX: 00007fff4c689030 RSI: 00007fff4c6890c0 RDI: 00007fff4c6890c0 [ 174.868631][ T5615] RBP: 00007fff4c6890c0 R08: 00007fff4c68a0c0 R09: 00000000ffffffff [ 174.876599][ T5615] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff4c68a1b0 [ 174.884584][ T5615] R13: 00007f1d80634474 R14: 000000000002a719 R15: 00007fff4c68b280 [ 174.892568][ T5615] [ 175.239327][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 175.313316][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.318684][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.335364][ T6718] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 175.335411][ T6718] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 175.337314][ T6718] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 175.337343][ T6718] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:13: Failed to release dquot type 0 [ 175.337361][ T6718] loop3: lost filesystem error report for type 5 error -117 [ 175.337925][ T5617] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 175.337947][ T5617] loop3: lost filesystem error report for type 5 error -117 [ 175.338079][ T5617] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 175.338094][ T5617] loop3: lost filesystem error report for type 5 error -117 [ 175.338212][ T5617] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 175.338232][ T5617] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 175.338373][ T5617] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 175.338393][ T5617] loop3: lost filesystem error report for type 5 error -117 [ 175.467112][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 175.488442][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.489546][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.509744][ T10] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.509795][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.563196][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.604709][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.721193][ T59] bridge_slave_1: left allmulticast mode [ 175.721234][ T59] bridge_slave_1: left promiscuous mode [ 175.721388][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.728559][ T59] bridge_slave_0: left allmulticast mode [ 175.728582][ T59] bridge_slave_0: left promiscuous mode [ 175.728702][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.739238][ T59] dvmrp1: left allmulticast mode [ 175.839517][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.862690][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.873688][ T59] bond0 (unregistering): Released all slaves [ 176.155925][ T10] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 176.155958][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 176.155981][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 176.174212][ T59] hsr_slave_0: left promiscuous mode [ 176.183325][ T59] hsr_slave_1: left promiscuous mode [ 176.185561][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.185580][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.189834][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.189853][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.208369][ T59] veth1_macvtap: left promiscuous mode [ 176.208399][ T59] veth0_macvtap: left promiscuous mode [ 176.208458][ T59] veth1_vlan: left promiscuous mode [ 176.208498][ T59] veth0_vlan: left promiscuous mode [ 176.271288][ T10] DVB: Unable to find symbol stv0299_attach() [ 176.320518][ T10] DVB: Unable to find symbol tda8083_attach() [ 176.326738][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 176.400657][ T59] team0 (unregistering): Port device team_slave_1 removed [ 176.419075][ T59] team0 (unregistering): Port device team_slave_0 removed [ 176.499753][ T5278] 8021q: adding VLAN 0 to HW filter on device bond9 [ 177.341756][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 177.700828][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 177.951733][ T5786] usb 5-1: USB disconnect, device number 9 [ 178.049714][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 178.411497][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4