last executing test programs: 4m36.938976971s ago: executing program 2 (id=56): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x495, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 4m34.333097877s ago: executing program 2 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m32.757870243s ago: executing program 2 (id=67): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x8, 0x100000002}) 4m31.211586699s ago: executing program 2 (id=72): syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0xffff, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x62, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000b40)=' ', 0x1}], 0x1}}], 0x1, 0x4c040) 4m29.616141465s ago: executing program 2 (id=76): syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040104"], 0x7) 4m28.962999394s ago: executing program 2 (id=78): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x20000014}) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x7ffffffe) 4m13.071387362s ago: executing program 32 (id=78): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x20000014}) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x7ffffffe) 2m17.614018943s ago: executing program 0 (id=270): setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0118020003110000480012800b00010065727370616e000038000280040012000500170800000000050016000200000006"], 0x68}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000400), 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 2m16.241548705s ago: executing program 0 (id=274): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x392000, 0x800, 0x0, 0x5}, 0x1c) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m12.042455171s ago: executing program 0 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdc03, {0x0, 0x0, 0x0, 0x0, 0x4200a, 0x10}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x0) 2m7.834122161s ago: executing program 0 (id=288): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) 2m6.121865977s ago: executing program 0 (id=293): r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000b40)={[0x1, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x0, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m5.457665301s ago: executing program 0 (id=296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) rt_sigqueueinfo(0x0, 0x9, &(0x7f00000023c0)={0x20, 0x2, 0x2}) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) flock(0xffffffffffffffff, 0x1) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x1, &(0x7f0000000340), 0x1, 0x626, &(0x7f0000000380)="$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") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1m50.007758936s ago: executing program 33 (id=296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) rt_sigqueueinfo(0x0, 0x9, &(0x7f00000023c0)={0x20, 0x2, 0x2}) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) flock(0xffffffffffffffff, 0x1) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x1, &(0x7f0000000340), 0x1, 0x626, &(0x7f0000000380)="$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") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 13.760197583s ago: executing program 1 (id=436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 12.192156676s ago: executing program 3 (id=437): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x814) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 11.235945732s ago: executing program 1 (id=439): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0xc0) 11.003289362s ago: executing program 3 (id=440): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100)=0xc, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) cachestat(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) 9.897813618s ago: executing program 4 (id=441): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2000002, &(0x7f0000000340), 0x9, 0x558, &(0x7f0000001a80)="$eJzs3c9vHFcdAPDvjH8mdeoEeoAKSIBCQFHW8aaNql5oLiBUVUIgDohDauyNZbLOBntd1cYS7t8AB67wJ3BA4oDUEwduHJE4IKRyQApggWIkkAbN7NjZJLvtut4f1e7nI41m3szufL8vzsx7+7yeF8DEuhIRBxExGxFvRcRiuT8pl3i9teSve3S4v3p0uL+aRJZ95x9JcTzfF23vyT1XnnM+Ir79jYgfJG0B51qr7d29eyv1em2r3L3U3HywtL27d31jc2W9tl67X63eWr5149Wbr1T7VtfLm796+PWNN77729989v0/HHz1x3laC+Wx9np8FNNd9reqPnMS5/i1b5wl2MfIVLmeHXEefDRpRHwiIr5QXP+LMdX1fzIAMC6ybDGyxfYyADDu0mIMLEkr5VjAQqRppdIaw3shzqf1xnbz2t3Gzv211ljZxZhJ727Uazcuzf3pR0WPYSbJy8vFseJ4Ua4+Vb4ZEZci4mdz54pyZbVRXxtdtwcAJtpzT7X//55rtf89SAaeHAAwOPOjTgAAGDrtPwBMHu0/AEyeHtr/8pf9BwPPBQAYjlN8/k8HmQcAMDzG/wFg8mj/AWCifOvNN/MlOyqff7329u7Ovcbb19dq2/cqmzurldXG1oPKeqOxXjyzZ/PDzldvNB4svxw77yw1a9vNpe3dvTubjZ37zTvFc73v1GaGUisA4INcuvzeH5OIOHjtXLFE21wO2moYb71/n2fOHQHGTNtD/Ez8AxPGRQ+Tq/ce/e8HmgcwOh0f5j3fcfNJPz9FEN8zgo+Vq5/uffzfHM8wXvw9L0yuqYjWxH6nMjeQXIDhOv34vx4DjIssSyLLzp2UsiybbS8AAOPnDN/ozX7Sjw4IMHJJa+n6fO++/P4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxsxCRPwwkrRSzuy5EGlaqURciIiLMZPc3ajXbkTE83E5Imbm8vLyqJMGAM4o/Vs591dcXXxp4emjs8l/isn+Z/PWv9y3tZzv/+fJ/rnW2yOqj993hnkFAYA+e2el2dyqluu2D/KPDvdXj5dh5vPwdvyvnIr4Qhzurx6dxJ+O6WI9X/Qlzv8rKcutuUhfjIipPsQ/eDciPtWp/kkxNnKxnPm0PX6UsS8MNX76RPy0ONZa552vT/YhF5g0792OiNc7XX9pXCnWna//+eIOdXYPb7dOdlTe+44O92eP4x/f/6Y6xM+v+Su9xnj5d998Zme22Dr2bsSL0yfx56Pt/nMcP+kS/6Ue4//5M5/76de6HMt+EXE1nqj/6uMIj7eWmpsPlrZ3965vbK6s19Zr96vVW8u3brx685XqUjFGvXQ8Uv2sv7927fluueX1P98l/nzH+s+evPdLPdb/l/996/uf/4D4X/lip/hpvNAxfkveJn65x/gr53/ddfruPP5al/p/2M//Wo/x3//r3lqPLwUAhmB7d+/eSr1e2zrTRv4ptB/neWYjT7GvJ+ywMduW/F9isLFOtTHTr3/V6WEnP33SV+zvmb+Xn3HIP4u077U408ajYcUa7X0JGLzHF/2oMwEAAAAAAAAAAAAAALoZxp8ujbqOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjK//BwAA//9FJ7wx") truncate(&(0x7f0000000080)='./file2\x00', 0x400327c) 8.125014s ago: executing program 1 (id=442): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x18, &(0x7f0000000100)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) 7.596362404s ago: executing program 3 (id=443): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1f, 0x3, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000"], 0xc0}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f00000005c0)=@ethtool_cmd={0x1f, 0x5, 0x2, 0x8, 0x9, 0x1, 0x5, 0x5, 0x9, 0x0, 0x2, 0x4, 0x956, 0x1, 0x6, 0x9, [0x3ff]}}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1b, 0x0, 0x1, 0x2}, 0x14) r6 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x100000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x1, 0x6de76d6b, {{0x21, 0x4, 0x1, 0x38, 0x84, 0x66, 0x0, 0xa, 0x2f, 0x0, @loopback, @loopback, {[@end, @rr={0x7, 0x1f, 0xb3, [@multicast2, @rand_addr=0x64010101, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}, @multicast1, @multicast2]}, @rr={0x7, 0x7, 0xdf, [@loopback]}, @timestamp_prespec={0x44, 0x24, 0xf, 0x3, 0x1, [{@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@empty, 0x2}]}, @lsrr={0x83, 0x23, 0x18, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r7, 0x25, 0x1, @val=@netfilter={0x3, 0x1, 0x80000001}}, 0x20) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) write(r8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006911aa0000000000180000000000000000000000feffffff"], &(0x7f0000000000)='GPL\x00'}, 0x94) 7.16304227s ago: executing program 4 (id=444): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xebf1}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.254370734s ago: executing program 4 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) r3 = add_key$user(0x0, 0x0, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, 0x0, 0x0, 0x0) fstat(r1, &(0x7f0000000280)) 5.072208434s ago: executing program 1 (id=446): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_sctp(0xa, 0x801, 0x84) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.677627668s ago: executing program 3 (id=447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee0598", 0xa8, 0x840, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)='K\x00', 0x2}], 0x1}}], 0x1, 0x8800) 1.176105564s ago: executing program 1 (id=448): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x814) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 1.151652729s ago: executing program 3 (id=449): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0xdb, 0x8, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x3ff, 0x200010, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) fcntl$dupfd(r2, 0x406, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x118a, 0x1000, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1.151520872s ago: executing program 4 (id=450): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10080009, 0xffffffff) 772.193826ms ago: executing program 4 (id=451): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0xa}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x3, 0x10, 0x1ff, 0x2, 0x29d3}, 0x80000006, 0x0, 0xfffffffd, 0x7, 0x5, 0xfd, 0x1, 0x5, 0x4, 0x3, {0x101, 0xffffffff, 0x5, 0x0, 0x2, 0x9}}}}]}, 0x78}}, 0x20040084) 222.317427ms ago: executing program 1 (id=452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) 170.013121ms ago: executing program 4 (id=453): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000680)="b90103600040f000009e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=454): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x18, &(0x7f0000000100)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b14, 0x0) kernel console output (not intermixed with test programs): enamed from eth0 [ 202.849002][ T5779] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 202.873939][ T5779] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.918886][ T5779] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.118088][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.176730][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.232245][ T5071] Bluetooth: hci2: command tx timeout [ 203.238043][ T49] Bluetooth: hci4: command tx timeout [ 203.245794][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.271322][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.312518][ T49] Bluetooth: hci3: command tx timeout [ 203.318176][ T49] Bluetooth: hci1: command tx timeout [ 203.324447][ T5071] Bluetooth: hci0: command tx timeout [ 203.587114][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.658916][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.686052][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.737277][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.823044][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.042791][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.064683][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.135010][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.142005][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.144205][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.171260][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.231099][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.299336][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.307052][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.405784][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.413540][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.600426][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.821088][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.875963][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.949054][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.956817][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.008535][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.016114][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.134733][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.198251][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.205923][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.287249][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.295028][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.470806][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.790202][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.842532][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.919714][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.927758][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.056378][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.064090][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.117449][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.315027][ T3415] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.322650][ T3415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.461107][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.498578][ T3415] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.506217][ T3415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.099921][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.409686][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.439217][ T5772] veth0_vlan: entered promiscuous mode [ 207.538415][ T5772] veth1_vlan: entered promiscuous mode [ 208.084927][ T5771] veth0_vlan: entered promiscuous mode [ 208.123887][ T5772] veth0_macvtap: entered promiscuous mode [ 208.168778][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.208252][ T5772] veth1_macvtap: entered promiscuous mode [ 208.236545][ T5771] veth1_vlan: entered promiscuous mode [ 208.538568][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.665162][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.796401][ T5771] veth0_macvtap: entered promiscuous mode [ 208.819924][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.847240][ T3415] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.898848][ T3415] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.909445][ T3415] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.974454][ T3415] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.986590][ T5771] veth1_macvtap: entered promiscuous mode [ 209.001728][ T5773] veth0_vlan: entered promiscuous mode [ 209.199038][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.234516][ T5773] veth1_vlan: entered promiscuous mode [ 209.320499][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.383605][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.398907][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.483020][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.497879][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.555184][ T5779] veth0_vlan: entered promiscuous mode [ 209.735733][ T5779] veth1_vlan: entered promiscuous mode [ 209.840360][ T5770] veth0_vlan: entered promiscuous mode [ 209.935632][ T5770] veth1_vlan: entered promiscuous mode [ 209.995754][ T5773] veth0_macvtap: entered promiscuous mode [ 210.069213][ T5773] veth1_macvtap: entered promiscuous mode [ 210.307024][ T5779] veth0_macvtap: entered promiscuous mode [ 210.411026][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.516165][ T5779] veth1_macvtap: entered promiscuous mode [ 210.537216][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.647559][ T5770] veth0_macvtap: entered promiscuous mode [ 210.722352][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.756871][ T5770] veth1_macvtap: entered promiscuous mode [ 210.778329][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.846450][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.860746][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.938466][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.037350][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.156649][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.183749][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.237674][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.295692][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.326903][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.447383][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.564100][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.606783][ T3415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.739470][ T3415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.778492][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.255752][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.284483][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.462224][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.470247][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.758588][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.792154][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.967960][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.033610][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.419776][ T5772] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 217.664574][ T5954] syzkaller0: entered promiscuous mode [ 217.670302][ T5954] syzkaller0: entered allmulticast mode [ 217.904537][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.927165][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.940583][ T5963] Zero length message leads to an empty skb [ 218.569654][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.612551][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.713756][ T29] audit: type=1326 audit(1775716098.420:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7ffc0000 [ 218.812715][ T29] audit: type=1326 audit(1775716098.430:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7ffc0000 [ 218.942249][ T29] audit: type=1326 audit(1775716098.430:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7ffc0000 [ 218.968023][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.022310][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.092260][ T29] audit: type=1326 audit(1775716098.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f82c499c819 code=0x7ffc0000 [ 219.193060][ T29] audit: type=1326 audit(1775716098.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7ffc0000 [ 219.225993][ T29] audit: type=1326 audit(1775716098.460:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7ffc0000 [ 219.260825][ T29] audit: type=1326 audit(1775716098.500:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f82c499c819 code=0x7ffc0000 [ 219.400670][ T29] audit: type=1326 audit(1775716098.500:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f82c499c819 code=0x7ffc0000 [ 219.587593][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.609542][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.712764][ T5972] loop3: detected capacity change from 0 to 128 [ 219.730275][ T5972] ======================================================= [ 219.730275][ T5972] WARNING: The mand mount option has been deprecated and [ 219.730275][ T5972] and is ignored by this kernel. Remove the mand [ 219.730275][ T5972] option from the mount to silence this warning. [ 219.730275][ T5972] ======================================================= [ 219.935274][ T29] audit: type=1800 audit(1775716099.690:10): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9" name="file2" dev="loop3" ino=1048595 res=0 errno=0 [ 219.963908][ T5972] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 219.977703][ T5977] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 220.026958][ T5972] FAT-fs (loop3): Filesystem has been set read-only [ 220.114828][ T5972] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 220.178389][ T5972] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 220.219077][ T5972] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 220.248368][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.298820][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.322942][ T5972] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 220.386241][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.406331][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.416931][ T5972] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 220.469163][ T5972] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 220.538562][ T5972] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 220.610481][ T5972] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 220.701049][ T5972] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 222.429026][ T5987] loop3: detected capacity change from 0 to 32768 [ 222.439227][ T5987] xfs: Deprecated parameter 'ikeep' [ 222.445038][ T5987] XFS: ikeep mount option is deprecated. [ 222.537969][ T5987] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.836628][ T5987] XFS (loop3): Ending clean mount [ 223.826652][ T6008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.318456][ T6010] loop4: detected capacity change from 0 to 128 [ 224.642512][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 225.243711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 225.562488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 225.664506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 225.793483][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 225.809060][ T6010] syz.4.15: attempt to access beyond end of device [ 225.809060][ T6010] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 225.839393][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 225.848595][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.909402][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 225.923720][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.936504][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 225.947115][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.962715][ T10] usb 3-1: config 0 descriptor?? [ 225.977342][ T6010] syz.4.15: attempt to access beyond end of device [ 225.977342][ T6010] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 226.082194][ T6015] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.125207][ T10] hub 3-1:0.0: USB hub found [ 226.237588][ T6010] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 226.297414][ T6019] vivid-000: disconnect [ 226.314475][ T6010] syz.4.15: attempt to access beyond end of device [ 226.314475][ T6010] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 226.393500][ T6010] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 226.588783][ T10] hub 3-1:0.0: 1 port detected [ 226.802490][ T10] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 226.882287][ T10] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 227.007740][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 227.028635][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 227.148655][ T6011] vivid-000: reconnect [ 227.189387][ T10] usb 3-1: USB disconnect, device number 2 [ 227.782741][ T6027] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 229.744724][ T6050] loop1: detected capacity change from 0 to 512 [ 229.935506][ T6050] EXT4-fs (loop1): 1 truncate cleaned up [ 229.991640][ T6050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.983503][ T5296] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 232.290912][ T5296] usb 3-1: Using ep0 maxpacket: 32 [ 232.341072][ T5296] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.472233][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 232.562208][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.672275][ T5296] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 232.742745][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.889120][ T5296] usb 3-1: config 0 descriptor?? [ 232.989014][ T6066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.153207][ T5296] hub 3-1:0.0: USB hub found [ 233.436312][ T5296] hub 3-1:0.0: 1 port detected [ 233.654211][ T5296] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 233.762438][ T5296] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 233.865748][ T5296] usbhid 3-1:0.0: can't add hid device: -71 [ 233.902799][ T5296] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 234.002322][ T5296] usb 3-1: USB disconnect, device number 3 [ 234.544450][ T6080] fuse: Unknown parameter 'group_id00000000000000000000' [ 234.646135][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.947351][ T6096] loop4: detected capacity change from 0 to 1024 [ 236.987194][ T6096] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.015103][ T6096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.105122][ T6096] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 238.131189][ T6096] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.43: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 238.151021][ T6096] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 238.161883][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 238.177835][ C0] EXT4-fs (loop4): initial error at time 1775716117: ext4_ext_check_inode:521: inode 11 [ 238.188019][ C0] EXT4-fs (loop4): last error at time 1775716117: ext4_ext_check_inode:521: inode 11 [ 238.228590][ T6096] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.43: couldn't read orphan inode 11 (err -117) [ 238.241230][ T6096] loop4: lost filesystem error report for type 5 error -117 [ 238.315190][ T6096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.642362][ T6102] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.43: Invalid block bitmap block 0 in block_group 0 [ 238.710186][ T6102] Quota error (device loop4): write_blk: dquota write failed [ 238.719068][ T6102] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 238.737193][ T6102] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.43: Failed to acquire dquot type 0 [ 240.001980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 241.742154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 241.844127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 241.945808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 242.604186][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.622135][ T137] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 242.631528][ T137] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 0 [ 242.742013][ T137] loop4: lost filesystem error report for type 5 error -117 [ 243.034929][ T5782] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 243.192234][ T5782] usb 1-1: Using ep0 maxpacket: 32 [ 243.202242][ T5782] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 243.202408][ T5782] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 243.202584][ T5782] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 243.202813][ T5782] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 243.202963][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.236100][ T5782] usb 1-1: config 0 descriptor?? [ 243.239081][ T6117] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.264983][ T5782] hub 1-1:0.0: USB hub found [ 243.533064][ T5782] hub 1-1:0.0: 1 port detected [ 243.708229][ T6126] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 244.756450][ T5782] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 244.756578][ T5782] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 244.794290][ T5782] usbhid 1-1:0.0: can't add hid device: -71 [ 244.794895][ T5782] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 245.780784][ T5782] usb 1-1: USB disconnect, device number 2 [ 246.143784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 246.452377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 246.553662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 247.122385][ T6136] xt_CT: No such helper "syz1" [ 250.820254][ T6146] loop2: detected capacity change from 0 to 128 [ 250.993051][ T6146] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 251.647807][ T6146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.230032][ T29] audit: type=1800 audit(1775716131.980:11): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.56" name="file1" dev="loop2" ino=104 res=0 errno=0 [ 254.156068][ T49] Bluetooth: hci0: unexpected event 0x10 length: 11 > 1 [ 254.156375][ T49] Bluetooth: hci0: hardware error 0xff [ 254.853006][ T5782] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 254.989465][ T6177] loop2: detected capacity change from 0 to 512 [ 255.053915][ T5782] usb 2-1: Using ep0 maxpacket: 32 [ 255.066576][ T5782] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.078990][ T5782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 255.090781][ T5782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 255.102638][ T5782] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.112066][ T5782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.125978][ T5782] usb 2-1: config 0 descriptor?? [ 255.133863][ T6173] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.162349][ T5782] hub 2-1:0.0: USB hub found [ 255.184951][ T6177] EXT4-fs (loop2): 1 truncate cleaned up [ 255.220288][ T29] audit: type=1326 audit(1775716134.970:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417879c819 code=0x7ffc0000 [ 255.252967][ T6177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.320971][ T29] audit: type=1326 audit(1775716135.000:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417879c819 code=0x7ffc0000 [ 255.402442][ T29] audit: type=1326 audit(1775716135.050:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417879c819 code=0x7ffc0000 [ 255.456076][ T5782] hub 2-1:0.0: 1 port detected [ 255.499209][ T29] audit: type=1326 audit(1775716135.070:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f417879c819 code=0x7ffc0000 [ 255.573489][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 255.624551][ T29] audit: type=1326 audit(1775716135.070:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417879c819 code=0x7ffc0000 [ 255.668733][ T29] audit: type=1326 audit(1775716135.070:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417879c819 code=0x7ffc0000 [ 255.693325][ T5782] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 255.699997][ T5782] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 255.720963][ T5832] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 255.781148][ T29] audit: type=1326 audit(1775716135.070:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417879c819 code=0x7ffc0000 [ 255.847032][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.884237][ T5782] usbhid 2-1:0.0: can't add hid device: -71 [ 255.902183][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 255.918903][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.937969][ T5782] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 255.957443][ T5832] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 255.967352][ T29] audit: type=1326 audit(1775716135.100:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f417879c819 code=0x7ffc0000 [ 256.007106][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 256.017440][ T5832] usb 1-1: config 1 has no interface number 0 [ 256.050324][ T5832] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 256.062017][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.081010][ T5782] usb 2-1: USB disconnect, device number 2 [ 256.110560][ T29] audit: type=1326 audit(1775716135.100:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f417879c819 code=0x7ffc0000 [ 256.110602][ T5832] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 256.110762][ T5832] usb 1-1: config 1 interface 105 has no altsetting 0 [ 256.173671][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.194507][ T49] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 256.217013][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 256.232325][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 256.263966][ T10] usb 4-1: Product: syz [ 256.268453][ T10] usb 4-1: Manufacturer: syz [ 256.317478][ T6187] netlink: 168 bytes leftover after parsing attributes in process `syz.4.71'. [ 256.328550][ T5832] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 256.412112][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 256.462025][ T5832] usb 1-1: Product: syz [ 256.466513][ T5832] usb 1-1: Manufacturer: syz [ 256.471332][ T5832] usb 1-1: SerialNumber: syz [ 256.495382][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 256.500986][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 256.569938][ T6185] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 256.608709][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 256.636516][ T6185] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 256.642820][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 256.772288][ T5296] usb 4-1: USB disconnect, device number 2 [ 257.177977][ T6185] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 257.242270][ T6185] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 257.502408][ T5832] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 257.569933][ T5832] aqc111 1-1:1.105: probe with driver aqc111 failed with error -32 [ 257.811555][ T49] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 258.172524][ T6203] tipc: Started in network mode [ 258.239871][ T6203] tipc: Node identity bbbbbb01, cluster identity 4711 [ 258.314680][ T6203] tipc: Enabled bearer , priority 10 [ 259.136690][ T6207] loop4: detected capacity change from 0 to 2048 [ 259.439161][ T5296] usb 1-1: USB disconnect, device number 3 [ 259.644309][ T5832] tipc: Node number set to 3149642497 [ 259.802275][ T6207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.192241][ T6218] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 261.414566][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 261.593852][ T5832] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 261.815877][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 261.855873][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 261.962012][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 262.012374][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 262.059814][ T5832] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 262.112249][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.189523][ T5832] usb 1-1: config 0 descriptor?? [ 262.226544][ T6224] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 262.303078][ T5832] hub 1-1:0.0: USB hub found [ 262.588420][ T5832] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 262.782597][ T5832] usbhid 1-1:0.0: can't add hid device: -71 [ 262.807924][ T5832] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 262.944645][ T5832] usb 1-1: USB disconnect, device number 4 [ 263.138102][ T6234] loop3: detected capacity change from 0 to 32768 [ 263.154504][ T6234] btrfs: Deprecated parameter 'usebackuproot' [ 263.160832][ T6234] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 263.171565][ T5296] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 263.192524][ T5932] udevd[5932]: setting mode of /dev/bus/usb/001/004 to 020664 failed: No such file or directory [ 263.205118][ T6234] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.87 (6234) [ 263.230600][ T6234] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.282475][ T5932] udevd[5932]: setting owner of /dev/bus/usb/001/004 to uid=0, gid=0 failed: No such file or directory [ 263.304443][ T6234] BTRFS info (device loop3): using sha256 checksum algorithm [ 263.412922][ T5296] usb 2-1: Using ep0 maxpacket: 8 [ 263.497656][ T5296] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.544898][ T5296] usb 2-1: config 4 interface 0 has no altsetting 0 [ 263.596121][ T5296] usb 2-1: string descriptor 0 read error: -22 [ 263.605843][ T5296] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 263.619565][ T5296] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 263.687044][ T6234] BTRFS info (device loop3): rebuilding free space tree [ 263.720968][ T5296] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 263.772858][ T6234] BTRFS info (device loop3): enabling ssd optimizations [ 263.780079][ T6234] BTRFS info (device loop3): enabling free space tree [ 263.787362][ T6234] BTRFS info (device loop3): force clearing of disk cache [ 263.795541][ T6234] BTRFS info (device loop3): enabling auto defrag [ 263.802325][ T6234] BTRFS info (device loop3): trying to use backup root at mount time [ 263.810672][ T6234] BTRFS info (device loop3): max_inline set to 9 [ 263.845197][ T5296] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.902592][ T5296] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 263.910205][ T5296] usb 2-1: media controller created [ 264.094744][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 264.218781][ T5296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.560851][ T6253] tipc: Enabling of bearer rejected, already enabled [ 264.622604][ T5296] zl10353_read_register: readreg error (reg=127, ret==0) [ 265.056083][ T6256] syzkaller0: refused to change device tx_queue_len [ 265.512158][ T5296] usb 2-1: USB disconnect, device number 3 [ 265.625960][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.634629][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.725950][ T6265] netlink: 'syz.1.93': attribute type 2 has an invalid length. [ 265.881555][ T6266] netlink: 'syz.1.93': attribute type 2 has an invalid length. [ 272.198634][ T6282] syzkaller0: entered promiscuous mode [ 272.263721][ T6282] syzkaller0: entered allmulticast mode [ 272.353088][ T6286] netlink: 44 bytes leftover after parsing attributes in process `syz.0.101'. [ 273.442389][ T6291] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 273.511686][ T6293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.438972][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 275.449444][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 275.449595][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 275.449734][ T49] Workqueue: hci4 hci_rx_work [ 275.449955][ T49] Call Trace: [ 275.450013][ T49] [ 275.450090][ T49] __dump_stack+0x26/0x30 [ 275.450277][ T49] dump_stack_lvl+0x14c/0x1c0 [ 275.450457][ T49] dump_stack+0x1e/0x25 [ 275.450617][ T49] sysfs_create_dir_ns+0x46c/0x540 [ 275.450866][ T49] kobject_add_internal+0x1084/0x19b0 [ 275.451063][ T49] kobject_add+0x2c1/0x410 [ 275.451247][ T49] ? kmsan_get_metadata+0xf1/0x160 [ 275.451393][ T49] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 275.451556][ T49] device_add+0xa70/0x1c00 [ 275.451797][ T49] hci_conn_add_sysfs+0x159/0x2e0 [ 275.451991][ T49] le_conn_complete_evt+0x1de4/0x2340 [ 275.452200][ T49] hci_le_conn_complete_evt+0x157/0x260 [ 275.452449][ T49] hci_le_meta_evt+0x6eb/0x960 [ 275.452661][ T49] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 275.452911][ T49] hci_event_packet+0xb8c/0x1820 [ 275.453101][ T49] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 275.453366][ T49] hci_rx_work+0x8c3/0xfc0 [ 275.453568][ T49] ? kmsan_get_metadata+0xf1/0x160 [ 275.453729][ T49] ? __pfx_hci_rx_work+0x10/0x10 [ 275.453932][ T49] process_scheduled_works+0xb82/0x1e80 [ 275.454181][ T49] worker_thread+0xee4/0x1590 [ 275.454401][ T49] kthread+0x53f/0x600 [ 275.454593][ T49] ? __pfx_worker_thread+0x10/0x10 [ 275.454778][ T49] ? __pfx_kthread+0x10/0x10 [ 275.454964][ T49] ret_from_fork+0x20f/0x910 [ 275.455129][ T49] ? __switch_to+0x51c/0x750 [ 275.455340][ T49] ? __pfx_kthread+0x10/0x10 [ 275.455539][ T49] ret_from_fork_asm+0x1a/0x30 [ 275.455769][ T49] [ 275.670632][ T49] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 275.685095][ T49] Bluetooth: hci4: failed to register connection device [ 277.056101][ T6312] dns_resolver: Unsupported server list version (6) [ 280.501934][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.584318][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.702896][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.746741][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.766940][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.476903][ T6324] loop4: detected capacity change from 0 to 32768 [ 281.487158][ T6324] btrfs: Deprecated parameter 'usebackuproot' [ 281.493574][ T6324] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 281.503919][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 281.550837][ T6324] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.111 (6324) [ 281.607515][ T6324] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.618051][ T6324] BTRFS info (device loop4): using sha256 checksum algorithm [ 281.774758][ T6324] BTRFS info (device loop4): rebuilding free space tree [ 281.807100][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 281.815629][ T6324] BTRFS info (device loop4): enabling ssd optimizations [ 281.822869][ T6324] BTRFS info (device loop4): enabling free space tree [ 281.830198][ T6324] BTRFS info (device loop4): force clearing of disk cache [ 281.838148][ T6324] BTRFS info (device loop4): enabling auto defrag [ 281.844893][ T6324] BTRFS info (device loop4): trying to use backup root at mount time [ 281.853291][ T6324] BTRFS info (device loop4): max_inline set to 9 [ 281.903916][ T29] audit: type=1800 audit(1775716161.660:21): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.111" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 282.033298][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 282.100674][ T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 282.110665][ T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 282.120191][ T10] usb 1-1: Product: syz [ 282.125903][ T10] usb 1-1: Manufacturer: syz [ 282.130745][ T10] usb 1-1: SerialNumber: syz [ 282.134994][ T5779] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.149350][ T10] usb 1-1: config 0 descriptor?? [ 282.198984][ T6327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.589695][ T5296] usb 1-1: USB disconnect, device number 5 [ 282.912218][ T5071] Bluetooth: hci5: command tx timeout [ 283.387358][ T6348] usb usb8: usbfs: process 6348 (syz.1.114) did not claim interface 0 before use [ 285.190306][ T5071] Bluetooth: hci5: command tx timeout [ 286.961227][ T6318] chnl_net:caif_netlink_parms(): no params data found [ 287.232397][ T5071] Bluetooth: hci5: command tx timeout [ 288.728651][ T6372] dns_resolver: Unsupported server list version (6) [ 289.339742][ T5071] Bluetooth: hci5: command tx timeout [ 290.576777][ T6381] loop0: detected capacity change from 0 to 32768 [ 290.593265][ T6381] btrfs: Deprecated parameter 'usebackuproot' [ 290.599674][ T6381] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 290.711628][ T6381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.122 (6381) [ 290.743736][ T6381] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 290.754649][ T6381] BTRFS info (device loop0): using sha256 checksum algorithm [ 290.803863][ T6384] loop3: detected capacity change from 0 to 1024 [ 290.816279][ T6384] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 290.830941][ T6384] JBD2: no valid journal superblock found [ 290.837267][ T6384] EXT4-fs (loop3): Could not load journal inode [ 290.933815][ T6383] batadv_slave_0: entered promiscuous mode [ 291.133519][ T6381] BTRFS info (device loop0): rebuilding free space tree [ 291.191004][ T6381] BTRFS info (device loop0): enabling ssd optimizations [ 291.206422][ T6381] BTRFS info (device loop0): enabling free space tree [ 291.215198][ T6381] BTRFS info (device loop0): force clearing of disk cache [ 291.222912][ T6381] BTRFS info (device loop0): enabling auto defrag [ 291.229550][ T6381] BTRFS info (device loop0): trying to use backup root at mount time [ 291.238180][ T6381] BTRFS info (device loop0): max_inline set to 9 [ 291.322245][ T29] audit: type=1800 audit(1775716171.070:22): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.122" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 291.474915][ T5770] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.515753][ T6318] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.577592][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.622785][ T6318] bridge_slave_0: entered allmulticast mode [ 291.678608][ T6318] bridge_slave_0: entered promiscuous mode [ 291.768818][ T6377] batadv_slave_0: left promiscuous mode [ 291.807869][ T6318] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.902266][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.952576][ T6318] bridge_slave_1: entered allmulticast mode [ 291.977336][ T6318] bridge_slave_1: entered promiscuous mode [ 293.743208][ T6409] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 293.779130][ T6318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.336559][ T6318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.960456][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.119990][ T6423] dns_resolver: Unsupported server list version (6) [ 296.388160][ T6318] team0: Port device team_slave_0 added [ 296.427813][ T6422] loop4: detected capacity change from 0 to 32768 [ 296.439581][ T6422] btrfs: Deprecated parameter 'usebackuproot' [ 296.446038][ T6422] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 296.496223][ T6422] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.134 (6422) [ 296.527863][ T6422] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.538503][ T6422] BTRFS info (device loop4): using sha256 checksum algorithm [ 296.964658][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.019389][ T6318] team0: Port device team_slave_1 added [ 297.055804][ T6422] BTRFS info (device loop4): rebuilding free space tree [ 297.092797][ T6422] BTRFS info (device loop4): enabling ssd optimizations [ 297.100013][ T6422] BTRFS info (device loop4): enabling free space tree [ 297.107441][ T6422] BTRFS info (device loop4): force clearing of disk cache [ 297.114997][ T6422] BTRFS info (device loop4): enabling auto defrag [ 297.122923][ T6422] BTRFS info (device loop4): trying to use backup root at mount time [ 297.131274][ T6422] BTRFS info (device loop4): max_inline set to 9 [ 297.275659][ T29] audit: type=1800 audit(1775716177.020:23): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.134" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 297.425407][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.699657][ T5779] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 298.392424][ T6452] loop3: detected capacity change from 0 to 1024 [ 298.405048][ T6452] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 298.419112][ T6452] JBD2: no valid journal superblock found [ 298.434849][ T6452] EXT4-fs (loop3): Could not load journal inode [ 298.514508][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.521674][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.736991][ T6318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.820728][ T6318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.870002][ T6318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.995881][ T6318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.034822][ T6451] batadv_slave_0: entered promiscuous mode [ 299.042930][ T6451] batadv_slave_0: left promiscuous mode [ 299.272411][ T5832] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 299.776318][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.827435][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 299.897693][ T5832] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 300.014159][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.090873][ T5832] usb 2-1: config 0 descriptor?? [ 300.137043][ T6455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.231277][ T5832] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 302.351103][ T5832] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 302.410237][ T5832] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 302.469033][ T5832] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 302.500375][ T6318] hsr_slave_0: entered promiscuous mode [ 302.518631][ T5832] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 302.561210][ T6318] hsr_slave_1: entered promiscuous mode [ 302.575272][ T5832] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 302.616887][ T5832] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 302.627777][ T6318] debugfs: 'hsr0' already exists in 'hsr' [ 302.662251][ T5832] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 302.695464][ T6318] Cannot create hsr debugfs directory [ 302.708716][ T5832] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 302.752882][ T5832] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 302.858522][ T5832] wacom 0003:056A:0084.0001: reserved main item tag 0xd [ 303.888384][ T6477] dns_resolver: Unsupported server list version (6) [ 304.351270][ T6476] loop1: detected capacity change from 0 to 32768 [ 304.361584][ T6476] btrfs: Deprecated parameter 'usebackuproot' [ 304.368107][ T6476] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 304.405348][ T6476] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.147 (6476) [ 304.488114][ T6476] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 304.498818][ T6476] BTRFS info (device loop1): using sha256 checksum algorithm [ 304.548229][ T5832] wacom 0003:056A:0084.0001: hidraw0: USB HID v7f.fd Device [HID 056a:0084] on usb-dummy_hcd.1-1/input0 [ 304.683087][ T5832] usb 2-1: USB disconnect, device number 4 [ 304.792716][ T6476] BTRFS info (device loop1): rebuilding free space tree [ 304.863482][ T6476] BTRFS info (device loop1): enabling ssd optimizations [ 304.870690][ T6476] BTRFS info (device loop1): enabling free space tree [ 304.878033][ T6476] BTRFS info (device loop1): force clearing of disk cache [ 304.885519][ T6476] BTRFS info (device loop1): enabling auto defrag [ 304.892328][ T6476] BTRFS info (device loop1): trying to use backup root at mount time [ 304.900611][ T6476] BTRFS info (device loop1): max_inline set to 9 [ 305.058321][ T29] audit: type=1800 audit(1775716184.810:24): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.147" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 305.184650][ T5773] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.547335][ T6505] syz.1.150 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 306.610920][ T6508] loop3: detected capacity change from 0 to 1024 [ 306.629478][ T6508] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 306.678342][ T6508] JBD2: no valid journal superblock found [ 306.684763][ T6508] EXT4-fs (loop3): Could not load journal inode [ 306.740359][ T13] bridge_slave_1: left allmulticast mode [ 306.800013][ T13] bridge_slave_1: left promiscuous mode [ 306.852975][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.934260][ T6498] fido_id[6498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 306.984014][ T13] bridge_slave_0: left allmulticast mode [ 307.005999][ T13] bridge_slave_0: left promiscuous mode [ 307.095624][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.252417][ T29] audit: type=1326 audit(1775716186.980:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.1.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b3f9c819 code=0x7fc00000 [ 307.363176][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 308.279948][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 308.918436][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.685389][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.769968][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 309.792055][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.800322][ T24] usb 5-1: Product: syz [ 309.813813][ T24] usb 5-1: Manufacturer: syz [ 309.818673][ T24] usb 5-1: SerialNumber: syz [ 309.885333][ T24] usb 5-1: config 0 descriptor?? [ 310.269407][ T24] usb 5-1: USB disconnect, device number 2 [ 311.017498][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.145517][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.256452][ T13] bond0 (unregistering): Released all slaves [ 311.345175][ T6506] batadv_slave_0: entered promiscuous mode [ 311.352508][ T6506] batadv_slave_0: left promiscuous mode [ 311.664306][ T6530] dns_resolver: Unsupported server list version (6) [ 313.488077][ T6536] loop3: detected capacity change from 0 to 32768 [ 313.498481][ T6536] btrfs: Deprecated parameter 'usebackuproot' [ 313.505007][ T6536] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 313.574313][ T6536] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.160 (6536) [ 313.614650][ T6536] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 313.630458][ T6536] BTRFS info (device loop3): using sha256 checksum algorithm [ 313.916716][ T6536] BTRFS info (device loop3): rebuilding free space tree [ 313.975272][ T6536] BTRFS info (device loop3): enabling ssd optimizations [ 313.983142][ T6536] BTRFS info (device loop3): enabling free space tree [ 313.990138][ T6536] BTRFS info (device loop3): force clearing of disk cache [ 313.997795][ T6536] BTRFS info (device loop3): enabling auto defrag [ 314.004574][ T6536] BTRFS info (device loop3): trying to use backup root at mount time [ 314.013080][ T6536] BTRFS info (device loop3): max_inline set to 9 [ 314.075988][ T29] audit: type=1800 audit(1775716193.830:26): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.160" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 314.220652][ T29] audit: type=1326 audit(1775716193.970:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417879c819 code=0x7fc00000 [ 314.391094][ T29] audit: type=1326 audit(1775716193.970:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6543 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f417879c819 code=0x7fc00000 [ 314.579104][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 315.480686][ T13] hsr_slave_0: left promiscuous mode [ 316.202866][ T13] hsr_slave_1: left promiscuous mode [ 316.245112][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.309631][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.350481][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.414932][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.408561][ T13] veth1_macvtap: left promiscuous mode [ 317.582081][ T13] veth0_macvtap: left promiscuous mode [ 318.528261][ T6584] loop1: detected capacity change from 0 to 1024 [ 318.566639][ T6584] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 318.583718][ T6584] JBD2: no valid journal superblock found [ 318.589734][ T6584] EXT4-fs (loop1): Could not load journal inode [ 318.998349][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 319.009605][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 319.016423][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 319.287044][ T6587] dns_resolver: Unsupported server list version (6) [ 320.868176][ T6595] loop4: detected capacity change from 0 to 32768 [ 320.878977][ T6595] btrfs: Deprecated parameter 'usebackuproot' [ 320.885327][ T6595] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 321.018263][ T6595] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.174 (6595) [ 321.063595][ T6595] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.074487][ T6595] BTRFS info (device loop4): using sha256 checksum algorithm [ 321.357447][ T6595] BTRFS info (device loop4): rebuilding free space tree [ 321.400046][ T6595] BTRFS info (device loop4): enabling ssd optimizations [ 321.412526][ T6595] BTRFS info (device loop4): enabling free space tree [ 321.419723][ T6595] BTRFS info (device loop4): force clearing of disk cache [ 321.427353][ T6595] BTRFS info (device loop4): enabling auto defrag [ 321.434185][ T6595] BTRFS info (device loop4): trying to use backup root at mount time [ 321.443136][ T6595] BTRFS info (device loop4): max_inline set to 9 [ 321.529053][ T29] audit: type=1800 audit(1775716201.280:29): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 321.564152][ T13] team0 (unregistering): Port device team_slave_1 removed [ 321.682207][ T13] team0 (unregistering): Port device team_slave_0 removed [ 321.808710][ T5779] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 323.178493][ T6583] batadv_slave_0: entered promiscuous mode [ 323.187243][ T6583] batadv_slave_0: left promiscuous mode [ 324.369002][ T6318] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 324.644577][ T6318] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 324.732095][ T5296] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 324.801503][ T6318] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 324.952420][ T5296] usb 4-1: Using ep0 maxpacket: 8 [ 325.017601][ T5296] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 325.043779][ T5296] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.076557][ T6318] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.141715][ T5296] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.277312][ T5296] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.461398][ T5296] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.741207][ T5296] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 326.037567][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.444944][ T5296] usb 4-1: usb_control_msg returned -32 [ 326.450901][ T5296] usbtmc 4-1:16.0: can't read capabilities [ 326.676473][ T5296] usb 4-1: USB disconnect, device number 3 [ 327.019919][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.052830][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.996624][ T6644] loop4: detected capacity change from 0 to 32768 [ 328.007051][ T6644] btrfs: Deprecated parameter 'usebackuproot' [ 328.013600][ T6644] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 328.035528][ T6648] dns_resolver: Unsupported server list version (6) [ 328.071297][ T6644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.184 (6644) [ 328.143539][ T6644] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 328.154150][ T6644] BTRFS info (device loop4): using sha256 checksum algorithm [ 328.553588][ T6644] BTRFS info (device loop4): rebuilding free space tree [ 328.622578][ T6644] BTRFS info (device loop4): enabling ssd optimizations [ 328.629816][ T6644] BTRFS info (device loop4): enabling free space tree [ 328.637211][ T6644] BTRFS info (device loop4): force clearing of disk cache [ 328.644605][ T6644] BTRFS info (device loop4): enabling auto defrag [ 328.651297][ T6644] BTRFS info (device loop4): trying to use backup root at mount time [ 328.659792][ T6644] BTRFS info (device loop4): max_inline set to 9 [ 328.768525][ T29] audit: type=1800 audit(1775716208.520:30): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.184" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 329.388033][ T5779] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 329.624310][ T6671] Illegal XDP return value 4294967294 on prog (id 8) dev syz_tun, expect packet loss! [ 329.664788][ T6318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.911150][ T6318] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.138587][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.146311][ T6099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.263537][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.271090][ T6099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.897606][ T6318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.775967][ T6700] loop0: detected capacity change from 0 to 1024 [ 333.931953][ T6702] dns_resolver: Unsupported server list version (6) [ 334.292548][ T6700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 334.420515][ T6700] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.491363][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 339.263197][ T6725] loop0: detected capacity change from 0 to 32768 [ 339.273161][ T6725] xfs: Deprecated parameter 'ikeep' [ 339.279065][ T6725] XFS: ikeep mount option is deprecated. [ 339.368380][ T6725] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 339.519345][ T6725] XFS (loop0): Ending clean mount [ 340.140978][ T6735] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.623357][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 341.427711][ T6744] loop0: detected capacity change from 0 to 128 [ 341.559783][ T6744] FAT-fs (loop0): Directory bread(block 524322) failed [ 341.597470][ T6744] FAT-fs (loop0): Directory bread(block 524323) failed [ 341.623888][ T6744] FAT-fs (loop0): Directory bread(block 524324) failed [ 341.668410][ T6744] FAT-fs (loop0): Directory bread(block 524325) failed [ 341.716375][ T6744] FAT-fs (loop0): Directory bread(block 524326) failed [ 341.765625][ T6744] FAT-fs (loop0): Directory bread(block 524327) failed [ 341.843662][ T5832] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 341.848091][ T6744] FAT-fs (loop0): Directory bread(block 524328) failed [ 341.889873][ T5071] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.897877][ T6744] FAT-fs (loop0): Directory bread(block 524329) failed [ 341.907408][ T5071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.919954][ T5071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.935317][ T5071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.955420][ T5071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.136730][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.200790][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.229842][ T6753] FAT-fs (loop0): Directory bread(block 524322) failed [ 342.272139][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.382043][ T5832] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.384010][ T6753] FAT-fs (loop0): Directory bread(block 524323) failed [ 342.454801][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.555979][ T5832] usb 4-1: config 0 descriptor?? [ 343.253692][ T5832] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 343.990551][ T5832] usb 4-1: USB disconnect, device number 4 [ 344.032143][ T5776] Bluetooth: hci1: command tx timeout [ 344.765989][ T6765] fido_id[6765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 346.623747][ T6779] loop0: detected capacity change from 0 to 32768 [ 346.633859][ T6779] xfs: Deprecated parameter 'ikeep' [ 346.639399][ T6779] XFS: ikeep mount option is deprecated. [ 346.656438][ T6781] dns_resolver: Unsupported server list version (6) [ 346.854867][ T5776] Bluetooth: hci1: command tx timeout [ 346.936253][ T6779] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 347.816284][ T6779] XFS (loop0): Ending clean mount [ 348.653661][ T6792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.929082][ T5776] Bluetooth: hci1: command tx timeout [ 349.207993][ T6749] chnl_net:caif_netlink_parms(): no params data found [ 349.229578][ T5776] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 349.272573][ T1887] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 349.322166][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 349.559288][ T1887] usb 2-1: Using ep0 maxpacket: 32 [ 349.646450][ T1887] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.723098][ T1887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 349.783514][ T1887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.817660][ T6794] loop3: detected capacity change from 0 to 4096 [ 349.842449][ T1887] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 349.902183][ T1887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.949031][ T1887] usb 2-1: config 0 descriptor?? [ 349.988586][ T6796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.056453][ T1887] hub 2-1:0.0: USB hub found [ 350.305637][ T1887] hub 2-1:0.0: 1 port detected [ 350.664706][ T6808] ntfs3(loop3): failed to convert "256c" to koi8-ru [ 350.804171][ T6794] ntfs3(loop3): failed to convert "256c" to koi8-ru [ 351.094659][ T6794] ntfs3(loop3): ino=22, "¾¾¾®¾¾¾¾¾¾¾¾®®¾®®¾®®®_¾®®®®¾®¾®¾¾¾¾¾®®®¾¾¾®®®®¾¾¾¾®¾®¾¾¾¾®¾¾®_®®®¾¾®¾®¾¾®®¾¾®" failed to extend initialized size to 8000c5d. [ 351.169530][ T5776] Bluetooth: hci1: command tx timeout [ 351.884344][ T5782] usb 2-1: USB disconnect, device number 5 [ 352.122172][ T1887] usb 2-1-port1: config error [ 352.317192][ T12] bridge_slave_1: left allmulticast mode [ 352.369644][ T12] bridge_slave_1: left promiscuous mode [ 352.418574][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.557853][ T12] bridge_slave_0: left allmulticast mode [ 352.661909][ T12] bridge_slave_0: left promiscuous mode [ 352.737734][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.048807][ T6826] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 356.295440][ T5782] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 356.590905][ T5782] usb 5-1: Using ep0 maxpacket: 8 [ 356.645671][ T5782] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 356.678520][ T5782] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 356.747273][ T5782] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.812116][ T5782] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.899193][ T5782] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.952420][ T5782] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 357.061225][ T5782] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 357.242241][ T5782] usb 5-1: config 168 interface 0 has no altsetting 0 [ 357.309012][ T5782] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 357.434380][ T5782] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 357.570796][ T5782] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 357.668593][ T5782] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 357.809801][ T5782] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 357.876798][ T6847] dns_resolver: Unsupported server list version (6) [ 358.053508][ T5782] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 358.118888][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.222180][ T5782] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 358.265826][ T5782] usb 5-1: config 168 interface 0 has no altsetting 0 [ 358.300712][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.357125][ T5782] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 358.410255][ T12] bond0 (unregistering): Released all slaves [ 358.417481][ T5782] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 358.510081][ T5782] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 358.588752][ T5782] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.668101][ T5782] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.743493][ T5782] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 358.856390][ T5782] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 358.982666][ T5782] usb 5-1: config 168 interface 0 has no altsetting 0 [ 360.492214][ T5782] usb 5-1: string descriptor 0 read error: -71 [ 360.499284][ T5782] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 360.510030][ T6828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.550174][ T6852] loop1: detected capacity change from 0 to 32768 [ 360.560208][ T6852] xfs: Deprecated parameter 'ikeep' [ 360.565812][ T6852] XFS: ikeep mount option is deprecated. [ 360.632493][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.795562][ T6852] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 360.811168][ T5782] usb 5-1: can't set config #168, error -71 [ 360.962903][ T5782] usb 5-1: USB disconnect, device number 3 [ 360.990364][ T12] hsr_slave_0: left promiscuous mode [ 361.112773][ T12] hsr_slave_1: left promiscuous mode [ 361.159944][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.270931][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.355526][ T6852] XFS (loop1): Ending clean mount [ 362.199705][ T6869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 363.062505][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 366.613497][ T6897] netlink: 'syz.0.234': attribute type 4 has an invalid length. [ 366.673822][ T6897] netlink: 'syz.0.234': attribute type 8 has an invalid length. [ 366.742481][ T6897] netlink: 212 bytes leftover after parsing attributes in process `syz.0.234'. [ 367.937686][ T12] team0 (unregistering): Port device team_slave_1 removed [ 368.168708][ T12] team0 (unregistering): Port device team_slave_0 removed [ 369.628785][ T6907] ceph: No mds server is up or the cluster is laggy [ 369.802723][ T5296] libceph: connect (1)[c::]:6789 error -101 [ 369.809140][ T5296] libceph: mon0 (1)[c::]:6789 connect error [ 372.044852][ T6909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.425527][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.490477][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.593641][ T6749] bridge_slave_0: entered allmulticast mode [ 372.695548][ T6749] bridge_slave_0: entered promiscuous mode [ 372.807641][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.945779][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.986595][ T6749] bridge_slave_1: entered allmulticast mode [ 373.026214][ T6749] bridge_slave_1: entered promiscuous mode [ 373.285358][ T5296] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 373.502100][ T5296] usb 1-1: Using ep0 maxpacket: 16 [ 374.021936][ T5296] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.105738][ T5296] usb 1-1: config 0 has no interface number 0 [ 374.176562][ T5296] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.396512][ T5296] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.616442][ T5296] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 374.784808][ T5296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.077907][ T6749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.098422][ T5296] usb 1-1: config 0 descriptor?? [ 375.155178][ T6749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.548643][ T6749] team0: Port device team_slave_0 added [ 375.686444][ T6749] team0: Port device team_slave_1 added [ 375.725452][ T5296] holtek_mouse 0003:04D9:A081.0003: item fetching failed at offset 5/8 [ 375.767562][ T5296] holtek_mouse 0003:04D9:A081.0003: hid parse failed: -22 [ 375.802597][ T5296] holtek_mouse 0003:04D9:A081.0003: probe with driver holtek_mouse failed with error -22 [ 375.890309][ T5296] usb 1-1: USB disconnect, device number 6 [ 377.682429][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.763040][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.966805][ T6749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.142941][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.211600][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.446460][ T6749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.967294][ T6749] hsr_slave_0: entered promiscuous mode [ 380.018251][ T6749] hsr_slave_1: entered promiscuous mode [ 380.092502][ T6749] debugfs: 'hsr0' already exists in 'hsr' [ 380.098609][ T6749] Cannot create hsr debugfs directory [ 380.460334][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 382.520154][ T7008] netlink: 'syz.0.256': attribute type 4 has an invalid length. [ 384.378449][ T7025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 388.448827][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.462128][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.806158][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 389.881460][ T7056] netlink: 260 bytes leftover after parsing attributes in process `syz.4.269'. [ 390.016969][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.270'. [ 390.050562][ T6749] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 390.128643][ T7063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.270'. [ 390.186368][ T6749] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 390.424683][ T6749] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 390.689982][ T6749] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 395.043975][ T6749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.357643][ T6749] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.535626][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.543329][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.797361][ T5782] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 396.075018][ T5782] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 396.093439][ T5782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.122133][ T5782] usb 2-1: Product: syz [ 396.128199][ T5782] usb 2-1: Manufacturer: syz [ 396.151026][ T5782] usb 2-1: SerialNumber: syz [ 396.269819][ T5782] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 396.484410][ T5832] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 397.138878][ T5782] usb 2-1: USB disconnect, device number 6 [ 397.876102][ T5832] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 397.982993][ T5832] ath9k_htc: Failed to initialize the device [ 398.106352][ T5782] usb 2-1: ath9k_htc: USB layer deinitialized [ 400.818218][ T5071] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.834834][ T5071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.853452][ T5071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.879762][ T5071] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.902520][ T5071] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.112371][ T7144] loop4: detected capacity change from 0 to 1024 [ 402.312993][ T7144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.992878][ T5071] Bluetooth: hci5: command tx timeout [ 403.231060][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.308158][ T7163] loop4: detected capacity change from 0 to 32768 [ 404.317456][ T7163] btrfs: Deprecated parameter 'usebackuproot' [ 404.323834][ T7163] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 404.378755][ T7163] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.298 (7163) [ 404.426241][ T7163] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 404.438012][ T7163] BTRFS info (device loop4): using sha256 checksum algorithm [ 404.996956][ T7163] BTRFS info (device loop4): rebuilding free space tree [ 405.024043][ T7163] BTRFS info (device loop4): enabling ssd optimizations [ 405.031235][ T7163] BTRFS info (device loop4): enabling free space tree [ 405.038996][ T7163] BTRFS info (device loop4): force clearing of disk cache [ 405.046448][ T7163] BTRFS info (device loop4): enabling auto defrag [ 405.053284][ T7163] BTRFS info (device loop4): trying to use backup root at mount time [ 405.061666][ T7163] BTRFS info (device loop4): max_inline set to 9 [ 405.074693][ T5071] Bluetooth: hci5: command tx timeout [ 405.130370][ T29] audit: type=1800 audit(1775716284.880:31): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.298" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 405.378718][ T7164] loop0: detected capacity change from 0 to 1024 [ 405.411207][ T5779] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.546104][ T7158] batadv_slave_0: entered promiscuous mode [ 405.593944][ T7164] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 405.699683][ T7164] JBD2: no valid journal superblock found [ 405.773680][ T7164] EXT4-fs (loop0): Could not load journal inode [ 406.308898][ T7134] chnl_net:caif_netlink_parms(): no params data found [ 406.551391][ T7183] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 407.153127][ T5071] Bluetooth: hci5: command tx timeout [ 407.379655][ T7186] loop1: detected capacity change from 0 to 4096 [ 407.936102][ T7186] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 408.612657][ T12] bridge_slave_1: left allmulticast mode [ 408.618554][ T12] bridge_slave_1: left promiscuous mode [ 408.690334][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.916024][ T12] bridge_slave_0: left allmulticast mode [ 408.922476][ T12] bridge_slave_0: left promiscuous mode [ 408.929110][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.232184][ T5071] Bluetooth: hci5: command tx timeout [ 409.772082][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 409.973297][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 410.032317][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 410.914029][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 410.927380][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 410.940129][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 410.950912][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.960913][ T7218] loop1: detected capacity change from 0 to 32768 [ 410.971418][ T7218] btrfs: Deprecated parameter 'usebackuproot' [ 410.977940][ T7218] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 410.994140][ T7218] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.309 (7218) [ 411.047850][ T9] usb 4-1: config 0 descriptor?? [ 411.064718][ T7212] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 411.087925][ T9] hub 4-1:0.0: USB hub found [ 411.099532][ T7218] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 411.112920][ T7218] BTRFS info (device loop1): using sha256 checksum algorithm [ 411.437429][ T7218] BTRFS info (device loop1): rebuilding free space tree [ 411.550752][ T7218] BTRFS info (device loop1): enabling ssd optimizations [ 411.562213][ T7218] BTRFS info (device loop1): enabling free space tree [ 411.576026][ T7218] BTRFS info (device loop1): force clearing of disk cache [ 411.584107][ T7218] BTRFS info (device loop1): enabling auto defrag [ 411.590798][ T7218] BTRFS info (device loop1): trying to use backup root at mount time [ 411.599217][ T7218] BTRFS info (device loop1): max_inline set to 9 [ 411.607225][ T9] hub 4-1:0.0: 1 port detected [ 411.726832][ T29] audit: type=1800 audit(1775716291.450:32): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.309" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 411.801131][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.023321][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.160676][ T12] bond0 (unregistering): Released all slaves [ 412.414746][ T5773] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 412.630663][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 412.638671][ T1887] usb 4-1: USB disconnect, device number 5 [ 413.841895][ T12] hsr_slave_0: left promiscuous mode [ 413.902255][ T12] hsr_slave_1: left promiscuous mode [ 413.934990][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.998211][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.805809][ T12] team0 (unregistering): Port device team_slave_1 removed [ 415.957417][ T12] team0 (unregistering): Port device team_slave_0 removed [ 417.113333][ T7156] batadv_slave_0: left promiscuous mode [ 417.179339][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.208520][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.248922][ T7134] bridge_slave_0: entered allmulticast mode [ 417.318725][ T7134] bridge_slave_0: entered promiscuous mode [ 417.379116][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.418716][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.484623][ T7134] bridge_slave_1: entered allmulticast mode [ 417.572282][ T7134] bridge_slave_1: entered promiscuous mode [ 418.254756][ T7134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.365677][ T7134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.971480][ T7134] team0: Port device team_slave_0 added [ 419.085233][ T7134] team0: Port device team_slave_1 added [ 419.157189][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.174276][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.185240][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.207897][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.220183][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 420.165756][ T7283] loop3: detected capacity change from 0 to 32768 [ 420.174966][ T7283] btrfs: Deprecated parameter 'usebackuproot' [ 420.181274][ T7283] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 420.248019][ T7283] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.320 (7283) [ 420.282997][ T7283] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 420.300996][ T7283] BTRFS info (device loop3): using sha256 checksum algorithm [ 420.362822][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.416326][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.452119][ T7134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.473653][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.484520][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.523349][ T7134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.661097][ T7283] BTRFS info (device loop3): rebuilding free space tree [ 420.723853][ T7283] BTRFS info (device loop3): enabling ssd optimizations [ 420.731046][ T7283] BTRFS info (device loop3): enabling free space tree [ 420.741960][ T7283] BTRFS info (device loop3): force clearing of disk cache [ 420.749315][ T7283] BTRFS info (device loop3): enabling auto defrag [ 420.756277][ T7283] BTRFS info (device loop3): trying to use backup root at mount time [ 420.764717][ T7283] BTRFS info (device loop3): max_inline set to 9 [ 420.842321][ T29] audit: type=1800 audit(1775716300.580:33): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.320" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 421.257164][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.312212][ T5776] Bluetooth: hci1: command tx timeout [ 421.622758][ T7134] hsr_slave_0: entered promiscuous mode [ 421.683401][ T7134] hsr_slave_1: entered promiscuous mode [ 421.725621][ T7134] debugfs: 'hsr0' already exists in 'hsr' [ 421.731569][ T7134] Cannot create hsr debugfs directory [ 423.392324][ T5776] Bluetooth: hci1: command tx timeout [ 424.702120][ T1887] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 424.892189][ T1887] usb 2-1: Using ep0 maxpacket: 8 [ 424.939020][ T1887] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 424.978324][ T1887] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.022109][ T1887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.096122][ T1887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.154152][ T1887] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.228912][ T1887] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 425.339598][ T1887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.485347][ T5776] Bluetooth: hci1: command tx timeout [ 426.224810][ T7279] chnl_net:caif_netlink_parms(): no params data found [ 426.470259][ T7339] usbtmc 2-1:16.0: simple control status returned 34 [ 426.512105][ T1887] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 426.578811][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.692342][ T9] usb 2-1: USB disconnect, device number 7 [ 426.726672][ T1887] usb 5-1: Using ep0 maxpacket: 8 [ 426.789997][ T1887] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 426.813022][ T1887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.850730][ T1887] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.895691][ T1887] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.962252][ T1887] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.008396][ T1887] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 427.026586][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.054581][ T1887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.222728][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.407341][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.568106][ T5776] Bluetooth: hci1: command tx timeout [ 427.993745][ T7134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 428.342228][ T7134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 428.468731][ T7346] loop3: detected capacity change from 0 to 32768 [ 428.479169][ T7346] btrfs: Deprecated parameter 'usebackuproot' [ 428.485798][ T7346] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 428.500637][ T7346] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.329 (7346) [ 428.582397][ T7346] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 428.593151][ T7346] BTRFS info (device loop3): using sha256 checksum algorithm [ 428.660793][ T7134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 428.781482][ T7346] BTRFS info (device loop3): rebuilding free space tree [ 428.838509][ T7346] BTRFS info (device loop3): enabling ssd optimizations [ 428.846137][ T7346] BTRFS info (device loop3): enabling free space tree [ 428.853519][ T7346] BTRFS info (device loop3): force clearing of disk cache [ 428.861302][ T7346] BTRFS info (device loop3): enabling auto defrag [ 428.868131][ T7346] BTRFS info (device loop3): trying to use backup root at mount time [ 428.882327][ T7346] BTRFS info (device loop3): max_inline set to 9 [ 428.996127][ T29] audit: type=1800 audit(1775716308.740:34): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.329" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 429.347789][ T7134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 429.483217][ T1887] usb 5-1: USB disconnect, device number 4 [ 429.500437][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.537798][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.625769][ T7279] bridge_slave_0: entered allmulticast mode [ 429.650413][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 429.741488][ T7279] bridge_slave_0: entered promiscuous mode [ 429.810338][ T12] bridge_slave_1: left allmulticast mode [ 429.862289][ T12] bridge_slave_1: left promiscuous mode [ 429.868909][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.002908][ T12] bridge_slave_0: left allmulticast mode [ 430.032191][ T12] bridge_slave_0: left promiscuous mode [ 430.070840][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.190641][ T7385] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 431.251847][ T7382] loop4: detected capacity change from 0 to 128 [ 431.547978][ T7388] usb usb8: usbfs: process 7388 (syz.3.331) did not claim interface 0 before use [ 432.021010][ T7382] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 432.082540][ T7382] FAT-fs (loop4): Filesystem has been set read-only [ 432.126795][ T7382] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52) [ 432.222189][ T7382] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52) [ 434.079308][ T7394] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 434.118669][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.202582][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.259235][ T12] bond0 (unregistering): Released all slaves [ 434.301413][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.324505][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.366067][ T7279] bridge_slave_1: entered allmulticast mode [ 434.399094][ T7279] bridge_slave_1: entered promiscuous mode [ 434.667198][ T7385] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 434.707813][ T12] IPVS: stopping backup sync thread 6218 ... [ 435.080632][ T7279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.233828][ T7279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.907366][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 436.129362][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 436.179105][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 436.245072][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.256996][ T7413] loop3: detected capacity change from 0 to 256 [ 436.269153][ T7408] loop4: detected capacity change from 0 to 32768 [ 436.279891][ T7408] btrfs: Deprecated parameter 'usebackuproot' [ 436.286421][ T7408] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 436.305282][ T7408] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.339 (7408) [ 436.361160][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.404267][ T7408] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 436.415869][ T7408] BTRFS info (device loop4): using sha256 checksum algorithm [ 436.422752][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.506859][ T7413] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 436.511473][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.520863][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 436.521020][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.643490][ T7413] exFAT-fs (loop3): start_clu is invalid cluster(0x0) [ 436.743786][ T7408] BTRFS info (device loop4): rebuilding free space tree [ 436.786192][ T7408] BTRFS info (device loop4): enabling ssd optimizations [ 436.793789][ T7408] BTRFS info (device loop4): enabling free space tree [ 436.800792][ T7408] BTRFS info (device loop4): force clearing of disk cache [ 436.808502][ T7408] BTRFS info (device loop4): enabling auto defrag [ 436.818659][ T7408] BTRFS info (device loop4): trying to use backup root at mount time [ 436.827101][ T7408] BTRFS info (device loop4): max_inline set to 9 [ 436.924791][ T29] audit: type=1800 audit(1775716316.680:35): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.339" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 437.191149][ T7279] team0: Port device team_slave_0 added [ 437.272779][ T7279] team0: Port device team_slave_1 added [ 437.517506][ T5779] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 438.104510][ T12] hsr_slave_0: left promiscuous mode [ 438.155814][ T12] hsr_slave_1: left promiscuous mode [ 438.171204][ T29] audit: type=1326 audit(1775716317.920:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f417879c819 code=0x0 [ 438.202624][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.242202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.286351][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.308611][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.376623][ T12] veth1_macvtap: left promiscuous mode [ 438.392406][ T12] veth0_macvtap: left promiscuous mode [ 438.885035][ T24] usb 2-1: USB disconnect, device number 8 [ 442.771173][ T12] team0 (unregistering): Port device team_slave_1 removed [ 442.938699][ T12] team0 (unregistering): Port device team_slave_0 removed [ 443.586667][ T7462] loop4: detected capacity change from 0 to 1024 [ 443.645709][ T7462] EXT4-fs: inline encryption not supported [ 443.658966][ T7462] EXT4-fs: Ignoring removed bh option [ 443.724439][ T7462] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 443.788256][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.804036][ T7462] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60515!=35945) [ 443.835253][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.898616][ T7462] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 443.972408][ T7462] EXT4-fs (loop4): orphan cleanup on readonly fs [ 444.002147][ T7462] EXT4-fs error (device loop4): ext4_quota_enable:7217: comm syz.4.349: inode #2304: comm syz.4.349: iget: illegal inode # [ 444.015532][ T7462] loop4: lost filesystem error report for type 5 error -117 [ 444.018572][ T7279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.031928][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 444.043510][ C0] EXT4-fs (loop4): initial error at time 1775716323: ext4_quota_enable:7217 [ 444.052571][ C0] EXT4-fs (loop4): last error at time 1775716323: ext4_quota_enable:7217 [ 444.067714][ T7462] EXT4-fs (loop4): Remounting filesystem read-only [ 444.076562][ T7462] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 444.098588][ T7462] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 444.109143][ T7462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 444.171144][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.208800][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.297969][ T7279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.503455][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.805280][ T7470] loop4: detected capacity change from 0 to 32768 [ 445.815716][ T7470] btrfs: Deprecated parameter 'usebackuproot' [ 445.826254][ T7470] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 445.999843][ T7470] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.351 (7470) [ 446.919861][ T7470] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 446.930458][ T7470] BTRFS info (device loop4): using sha256 checksum algorithm [ 447.890027][ T7470] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 447.891043][ T7470] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 447.901971][ T7470] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 447.911852][ T7470] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 447.921845][ T7470] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 447.931919][ T7470] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 447.942446][ T7470] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 447.952458][ T7470] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 447.962978][ T7470] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 447.977620][ T7470] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 447.989381][ T7470] BTRFS error (device loop4): open_ctree failed: -12 [ 448.324265][ T7279] hsr_slave_0: entered promiscuous mode [ 448.364228][ T29] audit: type=1326 audit(1775716328.120:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7493 comm="syz.4.354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f417879c819 code=0x0 [ 448.404767][ T7279] hsr_slave_1: entered promiscuous mode [ 448.424493][ T7279] debugfs: 'hsr0' already exists in 'hsr' [ 448.453803][ T7279] Cannot create hsr debugfs directory [ 449.901508][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.912519][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.190645][ T7134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.537916][ T7508] loop4: detected capacity change from 0 to 4096 [ 450.629442][ T7511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 450.660962][ T7134] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.810696][ T7519] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 450.866950][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.874613][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.242919][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.250494][ T6132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.503671][ T7279] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 451.712923][ T7279] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 451.819122][ T7279] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 451.852690][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 451.961175][ T7279] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 452.074703][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.122149][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.209766][ T9] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 452.242109][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 452.277387][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.343186][ T9] usb 4-1: config 0 descriptor?? [ 452.472292][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 452.568359][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 452.604149][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.671657][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.742130][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.798001][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.861084][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 452.910897][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.153317][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 453.160070][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 453.316211][ T9] usb 4-1: USB disconnect, device number 6 [ 453.566980][ T24] usb 5-1: USB disconnect, device number 5 [ 454.516254][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.557734][ T29] audit: type=1326 audit(1775716334.310:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.3.366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82c499c819 code=0x0 [ 455.823260][ T7279] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.118910][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.126653][ T6132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.608753][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.616487][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.093022][ T7559] loop3: detected capacity change from 0 to 512 [ 457.335032][ T7559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 457.372516][ T7559] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.460010][ T7134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.867191][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 470.312161][ T1887] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 470.341177][ T29] audit: type=1326 audit(1775716350.090:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.1.378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07b3f9c819 code=0x0 [ 470.399646][ T5071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 470.431069][ T5071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 470.453924][ T5071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 470.469289][ T5071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 470.487105][ T5071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 470.591080][ T1887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.623203][ T1887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.639895][ T1887] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 470.649700][ T1887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.730250][ T1887] usb 4-1: config 0 descriptor?? [ 470.863825][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.465393][ T1887] usbhid 4-1:0.0: can't add hid device: -71 [ 471.529946][ T1887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 471.595854][ T1887] usb 4-1: USB disconnect, device number 7 [ 472.592715][ T5071] Bluetooth: hci0: command tx timeout [ 473.617874][ T7603] chnl_net:caif_netlink_parms(): no params data found [ 473.958152][ T7643] qnx6: unable to read the first superblock [ 473.964667][ T7643] qnx6: unable to read the first superblock [ 473.970723][ T7643] qnx6: unable to read the first superblock [ 474.446594][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 474.669658][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 474.679442][ T5071] Bluetooth: hci0: command tx timeout [ 474.709103][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.722434][ T24] usb 2-1: Product: syz [ 474.731356][ T24] usb 2-1: Manufacturer: syz [ 474.793093][ T24] usb 2-1: SerialNumber: syz [ 474.830368][ T24] usb 2-1: config 0 descriptor?? [ 475.512193][ T24] usb 2-1: f81604_read: reg: 105 failed: -EPIPE [ 475.577427][ T24] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 475.612203][ T24] f81604 2-1:0.0: probe with driver f81604 failed with error -32 [ 475.871156][ T7646] loop4: detected capacity change from 0 to 2048 [ 475.991942][ T7646] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 2047: 0xdc != 0x02 [ 476.076107][ T7646] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 476.138104][ T7646] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 476.753135][ T5071] Bluetooth: hci0: command tx timeout [ 477.064237][ T1887] usb 2-1: USB disconnect, device number 9 [ 478.401860][ T29] audit: type=1326 audit(1775716358.140:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7666 comm="syz.4.389" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f417879c819 code=0x0 [ 478.833504][ T5071] Bluetooth: hci0: command tx timeout [ 479.549881][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.589049][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.630553][ T7603] bridge_slave_0: entered allmulticast mode [ 479.681221][ T7603] bridge_slave_0: entered promiscuous mode [ 479.756677][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.792452][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.800290][ T7603] bridge_slave_1: entered allmulticast mode [ 479.877189][ T7603] bridge_slave_1: entered promiscuous mode [ 479.930175][ T7681] tipc: Started in network mode [ 479.962933][ T7681] tipc: Node identity 9e2d0572da12, cluster identity 4711 [ 479.971209][ T7681] tipc: Enabled bearer , priority 0 [ 480.035211][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.059895][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.076880][ T7682] syzkaller0: MTU too low for tipc bearer [ 480.089741][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 480.122701][ T7682] tipc: Disabling bearer [ 480.144779][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 480.164475][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 480.189613][ T60] bridge_slave_1: left allmulticast mode [ 480.252416][ T60] bridge_slave_1: left promiscuous mode [ 480.293003][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.354297][ T60] bridge_slave_0: left allmulticast mode [ 480.360782][ T60] bridge_slave_0: left promiscuous mode [ 480.372659][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.915284][ T7692] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 480.922074][ T7692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 480.932069][ T7692] vhci_hcd vhci_hcd.0: Device attached [ 481.029259][ T7691] loop1: detected capacity change from 0 to 512 [ 481.113086][ T7691] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.394: inode has both inline data and extents flags [ 481.126682][ T7691] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 481.132346][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 481.148364][ C0] EXT4-fs (loop1): initial error at time 1775716360: ext4_orphan_get:1397: inode 15 [ 481.158196][ C0] EXT4-fs (loop1): last error at time 1775716360: ext4_orphan_get:1397: inode 15 [ 481.174343][ T7691] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.394: couldn't read orphan inode 15 (err -117) [ 481.187682][ T7691] loop1: lost filesystem error report for type 5 error -117 [ 481.188450][ T9] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 481.209599][ T7691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.418656][ T7693] vhci_hcd: connection reset by peer [ 481.433888][ T137] vhci_hcd vhci_hcd.1: stop threads [ 481.439354][ T137] vhci_hcd vhci_hcd.1: release socket [ 481.494025][ T137] vhci_hcd vhci_hcd.1: disconnect device [ 481.955224][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.013596][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.077525][ T60] bond0 (unregistering): Released all slaves [ 482.272286][ T5776] Bluetooth: hci5: command tx timeout [ 482.511585][ T7691] warning: `syz.1.394' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 482.629285][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.803137][ T60] hsr_slave_0: left promiscuous mode [ 482.842817][ T60] hsr_slave_1: left promiscuous mode [ 482.879637][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.933427][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.302825][ T1887] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 483.545240][ T1887] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 483.566854][ T1887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.582264][ T1887] usb 2-1: Product: syz [ 483.586671][ T1887] usb 2-1: Manufacturer: syz [ 483.591569][ T1887] usb 2-1: SerialNumber: syz [ 483.623251][ T1887] usb 2-1: config 0 descriptor?? [ 484.330515][ T1887] usb 2-1: f81604_read: reg: 105 failed: -EPIPE [ 484.352288][ T5776] Bluetooth: hci5: command tx timeout [ 484.354959][ T1887] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPIPE [ 484.382884][ T1887] f81604 2-1:0.0: probe with driver f81604 failed with error -32 [ 484.947491][ T60] team0 (unregistering): Port device team_slave_1 removed [ 485.101281][ T60] team0 (unregistering): Port device team_slave_0 removed [ 485.784268][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.840907][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.936259][ T29] audit: type=1326 audit(1775716365.690:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7fc00000 [ 486.070904][ T29] audit: type=1326 audit(1775716365.690:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82c499c819 code=0x7fc00000 [ 486.169883][ T29] audit: type=1326 audit(1775716365.690:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7fc00000 [ 486.242188][ T29] audit: type=1326 audit(1775716365.690:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7fc00000 [ 486.342036][ T5827] usb 2-1: USB disconnect, device number 10 [ 486.348847][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 486.387719][ T29] audit: type=1326 audit(1775716365.690:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7fc00000 [ 486.432060][ T5776] Bluetooth: hci5: command tx timeout [ 486.456817][ T29] audit: type=1326 audit(1775716365.690:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7fc00000 [ 486.512828][ T29] audit: type=1326 audit(1775716365.690:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7fc00000 [ 486.622141][ T29] audit: type=1326 audit(1775716365.710:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7fc00000 [ 486.763549][ T29] audit: type=1326 audit(1775716365.710:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7724 comm="syz.3.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82c499c819 code=0x7fc00000 [ 486.776312][ T7603] team0: Port device team_slave_0 added [ 486.976389][ T29] audit: type=1326 audit(1775716366.730:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.3.401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82c499c819 code=0x0 [ 487.616853][ T7603] team0: Port device team_slave_1 added [ 488.512587][ T5776] Bluetooth: hci5: command tx timeout [ 490.561299][ T7750] loop1: detected capacity change from 0 to 128 [ 494.845411][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.912530][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.066165][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.359202][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.390997][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.420155][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.772935][ T7765] loop1: detected capacity change from 0 to 128 [ 495.957903][ T7765] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 496.042725][ T7765] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 496.145612][ T7603] hsr_slave_0: entered promiscuous mode [ 496.184080][ T7603] hsr_slave_1: entered promiscuous mode [ 496.233066][ T7603] debugfs: 'hsr0' already exists in 'hsr' [ 496.249945][ T7603] Cannot create hsr debugfs directory [ 496.749777][ T7771] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 496.786066][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 498.192826][ T60] bridge_slave_1: left allmulticast mode [ 498.228018][ T60] bridge_slave_1: left promiscuous mode [ 498.260080][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.328764][ T60] bridge_slave_0: left allmulticast mode [ 498.359790][ T60] bridge_slave_0: left promiscuous mode [ 498.384008][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.040333][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.134578][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.227544][ T60] bond0 (unregistering): Released all slaves [ 500.767270][ T60] hsr_slave_0: left promiscuous mode [ 500.797407][ T60] hsr_slave_1: left promiscuous mode [ 500.829575][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.861446][ T7814] loop1: detected capacity change from 0 to 128 [ 500.899674][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.020930][ T7814] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 501.154464][ T7814] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 504.492144][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 508.444680][ T60] team0 (unregistering): Port device team_slave_1 removed [ 508.610712][ T60] team0 (unregistering): Port device team_slave_0 removed [ 509.792716][ T7684] chnl_net:caif_netlink_parms(): no params data found [ 509.935867][ T7839] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 511.335750][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.351279][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.801346][ T7863] loop3: detected capacity change from 0 to 512 [ 511.808359][ T7861] netlink: 44 bytes leftover after parsing attributes in process `syz.4.431'. [ 511.865253][ T7863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 511.944377][ T7863] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 512.021612][ T7863] EXT4-fs (loop3): 1 truncate cleaned up [ 512.104987][ T7863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.577892][ T7603] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 512.803721][ T7603] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 512.942539][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.993073][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.042827][ T7684] bridge_slave_0: entered allmulticast mode [ 513.081520][ T7684] bridge_slave_0: entered promiscuous mode [ 513.095733][ T7603] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 513.582667][ T7603] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 513.856104][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.946335][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.017657][ T7684] bridge_slave_1: entered allmulticast mode [ 514.128361][ T7684] bridge_slave_1: entered promiscuous mode [ 515.203720][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.707568][ T7684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.840878][ T7684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.074046][ T7684] team0: Port device team_slave_0 added [ 519.094141][ T7684] team0: Port device team_slave_1 added [ 519.282569][ T7900] loop4: detected capacity change from 0 to 512 [ 519.524981][ T7900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 519.554802][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.562500][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.592224][ T7900] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.622778][ T7684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.783681][ T7900] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 18: comm syz.4.441: lblock 23 mapped to illegal pblock 18 (length 1) [ 519.801433][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.830198][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.935593][ T7684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.952045][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 519.974925][ T7910] loop3: detected capacity change from 0 to 128 [ 520.074693][ T7910] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.141913][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 520.148211][ T5779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 520.169797][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 520.182839][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.205618][ T7910] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 520.243685][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 520.280011][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 520.312162][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.335984][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 520.347966][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.732005][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 520.737854][ T9] usbtmc 2-1:16.0: can't read capabilities [ 520.970637][ T7684] hsr_slave_0: entered promiscuous mode [ 521.040745][ T9] usb 2-1: USB disconnect, device number 11 [ 521.103706][ T7684] hsr_slave_1: entered promiscuous mode [ 521.370952][ T7684] debugfs: 'hsr0' already exists in 'hsr' [ 521.430702][ T7684] Cannot create hsr debugfs directory [ 524.474059][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 525.440108][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.797256][ T7940] netlink: 44 bytes leftover after parsing attributes in process `syz.4.451'. [ 527.357107][ T5071] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 527.378205][ T5071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 527.388996][ T5071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 527.420691][ T5071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 527.440456][ T5071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 527.597028][ T7946] ===================================================== [ 527.604646][ T7946] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 527.612195][ T7946] batadv_get_vid+0x2ce/0x3b0 [ 527.617082][ T7946] batadv_interface_tx+0x2e8/0x1dd0 [ 527.622855][ T7946] dev_hard_start_xmit+0x24e/0xad0 [ 527.628181][ T7946] __dev_queue_xmit+0x3412/0x5980 [ 527.633552][ T7946] __bpf_redirect+0x162e/0x1760 [ 527.638734][ T7946] bpf_clone_redirect+0x4a6/0x6c0 [ 527.644142][ T7946] ___bpf_prog_run+0x13e8/0xea90 [ 527.649287][ T7946] __bpf_prog_run512+0xc5/0x100 [ 527.654455][ T7946] bpf_test_run+0x493/0xdf0 [ 527.659237][ T7946] bpf_prog_test_run_skb+0x22a5/0x3050 [ 527.665060][ T7946] bpf_prog_test_run+0x5bb/0x9f0 [ 527.670218][ T7946] __sys_bpf+0x925/0xee0 [ 527.674882][ T7946] __x64_sys_bpf+0xa4/0xf0 [ 527.679526][ T7946] x64_sys_call+0x13d0/0x3ea0 [ 527.684558][ T7946] do_syscall_64+0x134/0xf80 [ 527.689412][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 527.695792][ T7946] [ 527.698316][ T7946] Uninit was created at: [ 527.702944][ T7946] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 527.709193][ T7946] pskb_expand_head+0x2ef/0x1fb0 [ 527.714474][ T7946] skb_ensure_writable+0x44e/0x510 [ 527.719795][ T7946] bpf_clone_redirect+0x301/0x6c0 [ 527.725209][ T7946] ___bpf_prog_run+0x13e8/0xea90 [ 527.730356][ T7946] __bpf_prog_run512+0xc5/0x100 [ 527.735528][ T7946] bpf_test_run+0x493/0xdf0 [ 527.740313][ T7946] bpf_prog_test_run_skb+0x22a5/0x3050 [ 527.746094][ T7946] bpf_prog_test_run+0x5bb/0x9f0 [ 527.751354][ T7946] __sys_bpf+0x925/0xee0 [ 527.755929][ T7946] __x64_sys_bpf+0xa4/0xf0 [ 527.760611][ T7946] x64_sys_call+0x13d0/0x3ea0 [ 527.765646][ T7946] do_syscall_64+0x134/0xf80 [ 527.770455][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.776742][ T7946] [ 527.779299][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.4.453 Not tainted syzkaller #0 PREEMPT(full) [ 527.788813][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 527.799196][ T7946] ===================================================== [ 527.806402][ T7946] Disabling lock debugging due to kernel taint [ 527.812818][ T7946] Kernel panic - not syncing: kmsan.panic set ... [ 527.819415][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.4.453 Tainted: G B syzkaller #0 PREEMPT(full) [ 527.830419][ T7946] Tainted: [B]=BAD_PAGE [ 527.834701][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 527.844933][ T7946] Call Trace: [ 527.848348][ T7946] [ 527.851413][ T7946] __dump_stack+0x26/0x30 [ 527.856087][ T7946] dump_stack_lvl+0x50/0x1c0 [ 527.860908][ T7946] ? dump_stack+0x12/0x25 [ 527.865489][ T7946] dump_stack+0x1e/0x25 [ 527.869909][ T7946] vpanic+0x7b4/0x1430 [ 527.874334][ T7946] panic+0x15d/0x160 [ 527.878567][ T7946] kmsan_report+0x31a/0x320 [ 527.883343][ T7946] ? __msan_warning+0x1b/0x30 [ 527.888273][ T7946] ? batadv_get_vid+0x2ce/0x3b0 [ 527.893357][ T7946] ? batadv_interface_tx+0x2e8/0x1dd0 [ 527.898965][ T7946] ? dev_hard_start_xmit+0x24e/0xad0 [ 527.904531][ T7946] ? __dev_queue_xmit+0x3412/0x5980 [ 527.909970][ T7946] ? __bpf_redirect+0x162e/0x1760 [ 527.915228][ T7946] ? bpf_clone_redirect+0x4a6/0x6c0 [ 527.920657][ T7946] ? ___bpf_prog_run+0x13e8/0xea90 [ 527.925997][ T7946] ? __bpf_prog_run512+0xc5/0x100 [ 527.931242][ T7946] ? bpf_test_run+0x493/0xdf0 [ 527.936137][ T7946] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 527.942005][ T7946] ? bpf_prog_test_run+0x5bb/0x9f0 [ 527.947341][ T7946] ? __sys_bpf+0x925/0xee0 [ 527.951984][ T7946] ? __x64_sys_bpf+0xa4/0xf0 [ 527.956775][ T7946] ? x64_sys_call+0x13d0/0x3ea0 [ 527.961874][ T7946] ? do_syscall_64+0x134/0xf80 [ 527.966875][ T7946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.973158][ T7946] ? kernel_text_address+0x10e/0x1a0 [ 527.978730][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 527.984064][ T7946] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 527.990172][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 527.995523][ T7946] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.001553][ T7946] ? batadv_interface_tx+0x21/0x1dd0 [ 528.007104][ T7946] ? filter_irq_stacks+0x49/0x190 [ 528.012420][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.017752][ T7946] __msan_warning+0x1b/0x30 [ 528.022504][ T7946] batadv_get_vid+0x2ce/0x3b0 [ 528.027429][ T7946] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.033459][ T7946] batadv_interface_tx+0x2e8/0x1dd0 [ 528.038904][ T7946] ? kmsan_report+0x2f0/0x320 [ 528.043941][ T7946] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 528.050565][ T7946] ? __pfx_batadv_interface_tx+0x10/0x10 [ 528.056471][ T7946] dev_hard_start_xmit+0x24e/0xad0 [ 528.061860][ T7946] __dev_queue_xmit+0x3412/0x5980 [ 528.067121][ T7946] ? skb_release_data+0x107c/0x11b0 [ 528.072570][ T7946] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 528.079086][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.084401][ T7946] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.090447][ T7946] ? __dev_queue_xmit+0x27a/0x5980 [ 528.095796][ T7946] ? pskb_expand_head+0x1c0e/0x1fb0 [ 528.101256][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.106713][ T7946] __bpf_redirect+0x162e/0x1760 [ 528.111803][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.117127][ T7946] bpf_clone_redirect+0x4a6/0x6c0 [ 528.122416][ T7946] ___bpf_prog_run+0x13e8/0xea90 [ 528.127620][ T7946] __bpf_prog_run512+0xc5/0x100 [ 528.132727][ T7946] ? kmsan_internal_poison_memory+0x78/0x90 [ 528.138884][ T7946] ? kmsan_internal_poison_memory+0x4a/0x90 [ 528.145047][ T7946] ? kmsan_slab_alloc+0xdc/0x160 [ 528.150326][ T7946] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 528.156270][ T7946] ? slab_build_skb+0x5c/0x5b0 [ 528.161233][ T7946] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 528.167053][ T7946] ? bpf_prog_test_run+0x5bb/0x9f0 [ 528.172389][ T7946] ? __sys_bpf+0x925/0xee0 [ 528.177098][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.182451][ T7946] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.188482][ T7946] ? bpf_test_run+0xb1/0xdf0 [ 528.193300][ T7946] ? filter_irq_stacks+0x49/0x190 [ 528.198678][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.203984][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.209381][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.214746][ T7946] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 528.221345][ T7946] ? kmsan_get_metadata+0x146/0x160 [ 528.226921][ T7946] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.232940][ T7946] ? __pfx___bpf_prog_run512+0x10/0x10 [ 528.238626][ T7946] ? __pfx___bpf_prog_run512+0x10/0x10 [ 528.244305][ T7946] bpf_test_run+0x493/0xdf0 [ 528.249053][ T7946] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.255153][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.260475][ T7946] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.266623][ T7946] ? bpf_test_run+0x2f4/0xdf0 [ 528.271555][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.276866][ T7946] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 528.282984][ T7946] bpf_prog_test_run_skb+0x22a5/0x3050 [ 528.288684][ T7946] ? kmsan_get_metadata+0xf1/0x160 [ 528.294063][ T7946] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 528.300199][ T7946] bpf_prog_test_run+0x5bb/0x9f0 [ 528.305379][ T7946] __sys_bpf+0x925/0xee0 [ 528.309879][ T7946] __x64_sys_bpf+0xa4/0xf0 [ 528.314505][ T7946] x64_sys_call+0x13d0/0x3ea0 [ 528.319434][ T7946] do_syscall_64+0x134/0xf80 [ 528.324271][ T7946] ? clear_bhb_loop+0x50/0xa0 [ 528.329165][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.335302][ T7946] RIP: 0033:0x7f417879c819 [ 528.339887][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.359818][ T7946] RSP: 002b:00007f41795fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.368448][ T7946] RAX: ffffffffffffffda RBX: 00007f4178a15fa0 RCX: 00007f417879c819 [ 528.376623][ T7946] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 528.384771][ T7946] RBP: 00007f4178832c91 R08: 0000000000000000 R09: 0000000000000000 [ 528.392913][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.401046][ T7946] R13: 00007f4178a16038 R14: 00007f4178a15fa0 R15: 00007ffccdafc888 [ 528.409277][ T7946] [ 528.413082][ T7946] Kernel Offset: disabled [ 528.417496][ T7946] Rebooting in 86400 seconds..