last executing test programs: 2.092060147s ago: executing program 0 (id=172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x0, 0xcb}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1.85935415s ago: executing program 2 (id=176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.718092731s ago: executing program 0 (id=177): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x49db, 0x0, 0xfff9, 0x8001, 0x18, "00000008ff0500"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0x2, 0x10, "1b09000040000000000000e678000000101000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 1.717341691s ago: executing program 1 (id=178): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.463934694s ago: executing program 1 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x8, 0x7, 0xc000, 0xb, "0000f70509660400"}) r2 = syz_open_pts(r1, 0xa0200) r3 = dup3(r2, r0, 0x0) ioctl$TCSETAF(r3, 0x5434, 0x0) 1.457549904s ago: executing program 3 (id=181): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0xef, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 1.323292645s ago: executing program 2 (id=182): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 1.308545056s ago: executing program 1 (id=183): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000010080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @empty}}}, @ip_retopts={{0x10}}], 0x30}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x38}}], 0x2, 0x40000) 1.275242566s ago: executing program 3 (id=184): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='io\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) 1.158641787s ago: executing program 2 (id=185): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 1.002591359s ago: executing program 3 (id=186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) listen(r1, 0x0) 928.03461ms ago: executing program 2 (id=187): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="520001"], 0x4) 898.26927ms ago: executing program 1 (id=188): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009003f000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 803.237731ms ago: executing program 3 (id=189): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000440)={0x3c}, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 701.656452ms ago: executing program 1 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000004c0)={@void, @void, @eth={@broadcast, @random="c222a5fe422d", @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, "0ffdeec2bd75392d"}}}}}, 0x32) 700.922182ms ago: executing program 0 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) setreuid(0xee01, 0xffffffffffffffff) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 560.053604ms ago: executing program 3 (id=192): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effcf90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f00000000c0)={@multicast2, @loopback}) 554.651124ms ago: executing program 2 (id=193): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 482.498365ms ago: executing program 0 (id=194): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x60) 328.246307ms ago: executing program 0 (id=195): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 313.519187ms ago: executing program 3 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) exit(0x5) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) 301.570746ms ago: executing program 1 (id=197): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000a00)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x2, 0x4, 0x8, 0x0, 0x6628}}, 0x118) 204.654778ms ago: executing program 2 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x4}, {0x50000, 0x4, 0xd, 0x5, 0x3, 0x8, 0x5, 0x6, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x5, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x0, 0x8080000, 0xd, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe6}, {0x200000, 0xffff1000, 0xf, 0x0, 0x6, 0x0, 0xde, 0x6, 0x2, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x8, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x2, 0x87}, {0x6000, 0x8000}, {0x25000, 0x9}, 0x50000, 0x0, 0xdddd0000, 0x400408, 0x2, 0x8000, 0x41000, [0x3, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 0s ago: executing program 0 (id=199): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @period={0x5c, 0x46, 0x1, 0xffc0, 0x3, {0x3, 0x9, 0xfd59, 0xca9}, 0x0, 0x0}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 72.693210][ T5758] cgroup: Unknown subsys name 'net' [ 72.825480][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.475181][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.025945][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.050020][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.058859][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.067526][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.075663][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.085052][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.092541][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.103366][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.110511][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.117950][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.124956][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.126491][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.133941][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.140190][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.155715][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.156411][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.163350][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.180804][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.187949][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.199578][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.204292][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.207430][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.221230][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.221579][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.664834][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 76.759621][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 76.812056][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 76.823432][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 76.859231][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.867492][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.875123][ T5775] bridge_slave_0: entered allmulticast mode [ 76.882277][ T5775] bridge_slave_0: entered promiscuous mode [ 76.942600][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.950005][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.957499][ T5775] bridge_slave_1: entered allmulticast mode [ 76.964346][ T5775] bridge_slave_1: entered promiscuous mode [ 77.037247][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.050722][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.120535][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.130477][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.138551][ T5779] bridge_slave_0: entered allmulticast mode [ 77.145355][ T5779] bridge_slave_0: entered promiscuous mode [ 77.181930][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.191861][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.199405][ T5779] bridge_slave_1: entered allmulticast mode [ 77.206272][ T5779] bridge_slave_1: entered promiscuous mode [ 77.228323][ T5775] team0: Port device team_slave_0 added [ 77.234777][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.242071][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.249472][ T5780] bridge_slave_0: entered allmulticast mode [ 77.256291][ T5780] bridge_slave_0: entered promiscuous mode [ 77.263698][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.273457][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.280878][ T5772] bridge_slave_0: entered allmulticast mode [ 77.288221][ T5772] bridge_slave_0: entered promiscuous mode [ 77.296642][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.304523][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.314498][ T5772] bridge_slave_1: entered allmulticast mode [ 77.321523][ T5772] bridge_slave_1: entered promiscuous mode [ 77.339925][ T5775] team0: Port device team_slave_1 added [ 77.348797][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.361261][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.368539][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.375764][ T5780] bridge_slave_1: entered allmulticast mode [ 77.383649][ T5780] bridge_slave_1: entered promiscuous mode [ 77.410812][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.437807][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.444825][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.471110][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.515870][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.522963][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.552540][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.567203][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.579723][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.593084][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.614969][ T5779] team0: Port device team_slave_0 added [ 77.633887][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.662600][ T5779] team0: Port device team_slave_1 added [ 77.690339][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.697630][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.723860][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.772399][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.779611][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.805934][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.819536][ T5772] team0: Port device team_slave_0 added [ 77.835344][ T5780] team0: Port device team_slave_0 added [ 77.855782][ T5772] team0: Port device team_slave_1 added [ 77.886671][ T5780] team0: Port device team_slave_1 added [ 77.909837][ T5775] hsr_slave_0: entered promiscuous mode [ 77.916499][ T5775] hsr_slave_1: entered promiscuous mode [ 77.934233][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.943893][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.972581][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.021139][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.030580][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.057663][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.069468][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.076447][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.105533][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.123184][ T5779] hsr_slave_0: entered promiscuous mode [ 78.129707][ T5779] hsr_slave_1: entered promiscuous mode [ 78.135773][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.143761][ T5779] Cannot create hsr debugfs directory [ 78.174321][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.182453][ T5774] Bluetooth: hci1: command tx timeout [ 78.187460][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.214976][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.267485][ T5774] Bluetooth: hci3: command tx timeout [ 78.270011][ T5785] Bluetooth: hci0: command tx timeout [ 78.347625][ T5785] Bluetooth: hci2: command tx timeout [ 78.390933][ T5772] hsr_slave_0: entered promiscuous mode [ 78.400343][ T5772] hsr_slave_1: entered promiscuous mode [ 78.406528][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.414508][ T5772] Cannot create hsr debugfs directory [ 78.453757][ T5780] hsr_slave_0: entered promiscuous mode [ 78.460167][ T5780] hsr_slave_1: entered promiscuous mode [ 78.466544][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.474382][ T5780] Cannot create hsr debugfs directory [ 78.737163][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.758056][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.783488][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.793624][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.889296][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.900456][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.913128][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.924129][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.025743][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.060754][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.074459][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.084683][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.134218][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.144710][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.171205][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.191588][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.243430][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.306620][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.332300][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.339907][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.360494][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.398695][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.405867][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.460584][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.475442][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.514634][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.521818][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.540004][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.547267][ T4553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.568346][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.583533][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.636575][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.644159][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.690493][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.697799][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.721515][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.736563][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.830013][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.864517][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.871971][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.904287][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.911536][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.006218][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.066334][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.120319][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.204099][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.239653][ T5775] veth0_vlan: entered promiscuous mode [ 80.260543][ T5785] Bluetooth: hci1: command tx timeout [ 80.287060][ T5775] veth1_vlan: entered promiscuous mode [ 80.338379][ T5785] Bluetooth: hci0: command tx timeout [ 80.338859][ T5774] Bluetooth: hci3: command tx timeout [ 80.418778][ T5774] Bluetooth: hci2: command tx timeout [ 80.462349][ T5775] veth0_macvtap: entered promiscuous mode [ 80.506672][ T5779] veth0_vlan: entered promiscuous mode [ 80.522832][ T5775] veth1_macvtap: entered promiscuous mode [ 80.563665][ T5779] veth1_vlan: entered promiscuous mode [ 80.593374][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.616127][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.629854][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.646506][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.674131][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.683273][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.696479][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.706222][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.761430][ T5779] veth0_macvtap: entered promiscuous mode [ 80.774708][ T5779] veth1_macvtap: entered promiscuous mode [ 80.854270][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.865897][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.878771][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.923413][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.935353][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.936454][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.951722][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.956335][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.001849][ T5772] veth0_vlan: entered promiscuous mode [ 81.009168][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.021232][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.030623][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.039722][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.054266][ T5780] veth0_vlan: entered promiscuous mode [ 81.093125][ T5772] veth1_vlan: entered promiscuous mode [ 81.101987][ T5780] veth1_vlan: entered promiscuous mode [ 81.112830][ T4553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.130352][ T4553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.167235][ T5772] veth0_macvtap: entered promiscuous mode [ 81.200806][ T5772] veth1_macvtap: entered promiscuous mode [ 81.279841][ T5780] veth0_macvtap: entered promiscuous mode [ 81.308222][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.319665][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.331136][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.350395][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.369961][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.380922][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.391927][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.431069][ T5780] veth1_macvtap: entered promiscuous mode [ 81.477168][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.489458][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.500632][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.511242][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.523645][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.534861][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.549134][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.559806][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.570373][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.580772][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.591357][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.603002][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.611781][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.625185][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.653433][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.664616][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.676410][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.687212][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.698498][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.709251][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.721733][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.732648][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.757822][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.766636][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.783706][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.822263][ T5836] syz.0.5[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.834754][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.846375][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.866597][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.890720][ T5836] loop0: detected capacity change from 0 to 512 [ 81.898132][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.930362][ T5836] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.984059][ T5836] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.032066][ T5836] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.072286][ T5836] EXT4-fs (loop0): 1 truncate cleaned up [ 82.100958][ T5836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.275565][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.302010][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.337957][ T5774] Bluetooth: hci1: command tx timeout [ 82.373227][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.382571][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.418738][ T5774] Bluetooth: hci3: command tx timeout [ 82.420335][ T5785] Bluetooth: hci0: command tx timeout [ 82.498047][ T5785] Bluetooth: hci2: command tx timeout [ 82.536558][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.555893][ T5846] loop3: detected capacity change from 0 to 4096 [ 82.571822][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.605014][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.783428][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.805539][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.037950][ T5831] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.292097][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.321736][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.351441][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.365596][ T5831] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.379438][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.456202][ T5831] usb 1-1: config 0 descriptor?? [ 83.633705][ T5868] loop3: detected capacity change from 0 to 128 [ 83.674194][ T5868] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.925042][ T5831] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 83.970428][ T5831] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 84.016621][ T5831] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 84.417934][ T5785] Bluetooth: hci1: command tx timeout [ 84.451406][ T5813] usb 1-1: USB disconnect, device number 2 [ 84.499129][ T5785] Bluetooth: hci3: command tx timeout [ 84.499144][ T5774] Bluetooth: hci0: command tx timeout [ 84.501555][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.506868][ T5883] capability: warning: `syz.1.18' uses deprecated v2 capabilities in a way that may be insecure [ 84.536352][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.579565][ T5785] Bluetooth: hci2: command tx timeout [ 84.596489][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.637830][ T5881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.664473][ T5881] Zero length message leads to an empty skb [ 84.827064][ T5891] Bluetooth: MGMT ver 1.22 [ 84.958477][ T5895] warning: `syz.3.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.077708][ T789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.257446][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.280820][ T789] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.299877][ T789] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.317535][ T789] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.337077][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.374787][ T5913] loop0: detected capacity change from 0 to 16 [ 85.379986][ T5889] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.410341][ T789] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 85.420617][ T5913] erofs: (device loop0): mounted with root inode @ nid 36. [ 85.455964][ T5913] ======================================================= [ 85.455964][ T5913] WARNING: The mand mount option has been deprecated and [ 85.455964][ T5913] and is ignored by this kernel. Remove the mand [ 85.455964][ T5913] option from the mount to silence this warning. [ 85.455964][ T5913] ======================================================= [ 85.489098][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.520941][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.558828][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.597151][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.647618][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.663507][ T9] usb 3-1: config 0 descriptor?? [ 85.924208][ T5922] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.999283][ T23] usb 2-1: USB disconnect, device number 2 [ 86.142249][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 86.166831][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 86.654602][ T5937] syz.0.35 uses obsolete (PF_INET,SOCK_PACKET) [ 87.097055][ T5762] usb 3-1: USB disconnect, device number 2 [ 87.125260][ T5942] loop1: detected capacity change from 0 to 4096 [ 87.266645][ T5942] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 87.365063][ T5942] ntfs3: loop1: Failed to load $Extend (-22). [ 87.387493][ T5942] ntfs3: loop1: Failed to initialize $Extend. [ 87.675696][ T28] audit: type=1800 audit(1778258068.016:2): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.37" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=33 res=0 errno=0 [ 87.747753][ T5947] tipc: Started in network mode [ 87.752818][ T5947] tipc: Node identity ac14140f, cluster identity 4711 [ 87.787707][ T5947] tipc: Enabled bearer , priority 10 [ 88.557602][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.686218][ T5975] loop2: detected capacity change from 0 to 256 [ 88.721425][ T5975] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.755200][ T5975] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 88.769979][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 88.800016][ T5975] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 88.810637][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 88.837728][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.872297][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.898443][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.909587][ T5813] tipc: Node number set to 2886997007 [ 88.924847][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.971780][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.997598][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.268598][ T23] usb 4-1: usb_control_msg returned -32 [ 89.274617][ T23] usbtmc 4-1:16.0: can't read capabilities [ 89.347969][ T5989] loop2: detected capacity change from 0 to 2048 [ 89.691546][ T6000] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 89.894440][ T789] usb 4-1: USB disconnect, device number 2 [ 90.133176][ T6018] loop0: detected capacity change from 0 to 1024 [ 90.163826][ T6018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.469335][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.561343][ T6031] Bluetooth: hci0: unsupported parameter 256 [ 90.570917][ T6031] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 90.832474][ T6042] input: syz1 as /devices/virtual/input/input6 [ 91.103118][ T6047] syz.2.80: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 91.147938][ T6047] CPU: 1 PID: 6047 Comm: syz.2.80 Not tainted syzkaller #0 [ 91.155326][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.165695][ T6047] Call Trace: [ 91.169033][ T6047] [ 91.172008][ T6047] dump_stack_lvl+0x18c/0x250 [ 91.177389][ T6047] ? show_regs_print_info+0x20/0x20 [ 91.177450][ T6047] ? load_image+0x420/0x420 [ 91.177483][ T6047] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 91.177512][ T6047] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 91.177539][ T6047] warn_alloc+0x246/0x340 [ 91.177571][ T6047] ? stack_trace_save+0xaa/0x100 [ 91.177598][ T6047] ? zone_watermark_ok_safe+0x230/0x230 [ 91.177640][ T6047] ? kasan_set_track+0x5f/0x70 [ 91.177660][ T6047] ? kasan_set_track+0x4e/0x70 [ 91.177679][ T6047] ? __kasan_kmalloc+0x8f/0xa0 [ 91.177700][ T6047] ? xsk_init_queue+0xad/0x100 [ 91.177723][ T6047] ? xsk_setsockopt+0x4e5/0x760 [ 91.177746][ T6047] ? do_sock_setsockopt+0x175/0x1a0 [ 91.177763][ T6047] ? __x64_sys_setsockopt+0x182/0x200 [ 91.177785][ T6047] __vmalloc_node_range+0x126/0x1330 [ 91.177844][ T6047] ? free_vm_area+0x50/0x50 [ 91.177882][ T6047] vmalloc_user+0x74/0x80 [ 91.177908][ T6047] ? xskq_create+0xbf/0x170 [ 91.177933][ T6047] xskq_create+0xbf/0x170 [ 91.177964][ T6047] xsk_init_queue+0xad/0x100 [ 91.178007][ T6047] xsk_setsockopt+0x4e5/0x760 [ 91.178036][ T6047] ? xsk_poll+0x680/0x680 [ 91.178064][ T6047] ? __fget_files+0x28/0x4b0 [ 91.178089][ T6047] ? __fget_files+0x28/0x4b0 [ 91.178115][ T6047] ? aa_sock_opt_perm+0x74/0x100 [ 91.178143][ T6047] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 91.178167][ T6047] ? security_socket_setsockopt+0x7e/0xa0 [ 91.178189][ T6047] ? xsk_poll+0x680/0x680 [ 91.178216][ T6047] do_sock_setsockopt+0x175/0x1a0 [ 91.178234][ T6047] ? __fdget+0x180/0x210 [ 91.178263][ T6047] __x64_sys_setsockopt+0x182/0x200 [ 91.178289][ T6047] do_syscall_64+0x55/0xa0 [ 91.178308][ T6047] ? clear_bhb_loop+0x40/0x90 [ 91.178334][ T6047] ? clear_bhb_loop+0x40/0x90 [ 91.178362][ T6047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.178386][ T6047] RIP: 0033:0x7f1b63d9cdd9 [ 91.178406][ T6047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.178424][ T6047] RSP: 002b:00007f1b64cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.178450][ T6047] RAX: ffffffffffffffda RBX: 00007f1b64015fa0 RCX: 00007f1b63d9cdd9 [ 91.178466][ T6047] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 91.178479][ T6047] RBP: 00007f1b63e32d69 R08: 0000000000000004 R09: 0000000000000000 [ 91.178492][ T6047] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 91.178506][ T6047] R13: 00007f1b64016038 R14: 00007f1b64015fa0 R15: 00007fffbf608808 [ 91.178538][ T6047] [ 91.224183][ T6047] Mem-Info: [ 91.501254][ T6047] active_anon:5739 inactive_anon:0 isolated_anon:0 [ 91.501254][ T6047] active_file:1116 inactive_file:39975 isolated_file:0 [ 91.501254][ T6047] unevictable:768 dirty:1848 writeback:0 [ 91.501254][ T6047] slab_reclaimable:9927 slab_unreclaimable:91709 [ 91.501254][ T6047] mapped:24503 shmem:1362 pagetables:549 [ 91.501254][ T6047] sec_pagetables:0 bounce:0 [ 91.501254][ T6047] kernel_misc_reclaimable:0 [ 91.501254][ T6047] free:1363671 free_pcp:11597 free_cma:0 [ 91.548815][ T6047] Node 0 active_anon:23156kB inactive_anon:0kB active_file:4564kB inactive_file:159696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98012kB dirty:7388kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10564kB pagetables:2296kB sec_pagetables:0kB all_unreclaimable? no [ 91.582632][ T6047] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 91.632582][ T6047] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.661967][ T6047] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 91.668768][ T6047] Node 0 DMA32 free:1547140kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23112kB inactive_anon:0kB active_file:4564kB inactive_file:158880kB unevictable:1536kB writepending:7380kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:22652kB local_pcp:12232kB free_cma:0kB [ 91.702843][ T6047] lowmem_reserve[]: 0 0 0 0 0 [ 91.708380][ T6047] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:8kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 91.745035][ T6047] lowmem_reserve[]: 0 0 0 0 0 [ 91.750369][ T6047] Node 1 Normal free:3891680kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21616kB local_pcp:13752kB free_cma:0kB [ 91.790765][ T6047] lowmem_reserve[]: 0 0 0 0 0 [ 91.795766][ T6047] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 91.817226][ T6047] Node 0 DMA32: 983*4kB (UM) 1033*8kB (UME) 308*16kB (UM) 21*32kB (ME) 22*64kB (UME) 19*128kB (UME) 15*256kB (UME) 8*512kB (UM) 4*1024kB (ME) 3*2048kB (ME) 368*4096kB (M) = 1547140kB [ 91.842883][ T6047] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 91.863697][ T6047] Node 1 Normal: 94*4kB (UME) 47*8kB (UME) 39*16kB (UME) 36*32kB (UME) 8*64kB (UE) 4*128kB (UME) 0*256kB 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3891680kB [ 91.886859][ T6047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.900158][ T6047] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.927293][ T6047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.950174][ T6047] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.965841][ T6047] 45727 total pagecache pages [ 91.971881][ T6047] 0 pages in swap cache [ 91.976352][ T6047] Free swap = 124728kB [ 91.986076][ T6047] Total swap = 124996kB [ 91.990679][ T6047] 2097051 pages RAM [ 91.994701][ T6047] 0 pages HighMem/MovableOnly [ 92.005032][ T6047] 416927 pages reserved [ 92.009670][ T6047] 0 pages cma reserved [ 92.073869][ T6057] loop0: detected capacity change from 0 to 32768 [ 92.164334][ T6057] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.262552][ T27] cfg80211: failed to load regulatory.db [ 92.628620][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 93.534255][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 93.602147][ T6090] loop2: detected capacity change from 0 to 512 [ 93.666011][ T6090] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.738484][ T6090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.803343][ T6090] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.057280][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.287503][ T5811] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.447561][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.491899][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.504505][ T5811] usb 2-1: config 0 has no interfaces? [ 94.519999][ T5811] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.540070][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.561680][ T5811] usb 2-1: config 0 descriptor?? [ 94.667797][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 94.681095][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 94.703629][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 26229, setting to 1024 [ 94.721383][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 94.728368][ T27] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 94.747498][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.776559][ T27] usb 3-1: config 0 descriptor?? [ 94.803860][ T6101] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 95.062589][ T6101] loop2: detected capacity change from 0 to 256 [ 95.064559][ T789] usb 2-1: USB disconnect, device number 3 [ 95.160526][ T6127] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.333028][ T27] hid (null): bogus close delimiter [ 95.344384][ T27] hid (null): unknown global tag 0xd [ 95.357109][ T27] hid (null): unknown global tag 0xe [ 95.373199][ T27] hid (null): invalid report_size -63607042 [ 95.386624][ T27] hid (null): bogus close delimiter [ 95.507109][ T6119] loop3: detected capacity change from 0 to 40427 [ 95.528724][ T6131] loop0: detected capacity change from 0 to 2048 [ 95.551140][ T6119] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 95.574065][ T6131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.578341][ T6119] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 95.607318][ T6119] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 95.630039][ T6119] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 95.660048][ T5811] usb 3-1: USB disconnect, device number 3 [ 95.661600][ T6119] F2FS-fs (loop3): Image doesn't support compression [ 95.724555][ T6119] F2FS-fs (loop3): invalid crc value [ 95.754038][ T6119] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.773163][ T28] audit: type=1800 audit(1778258076.116:3): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.111" name="file1" dev="loop0" ino=1368 res=0 errno=0 [ 95.870984][ T6119] F2FS-fs (loop3): Start checkpoint disabled! [ 95.932272][ T6119] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 95.943950][ T6119] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 96.182927][ T6142] kernel read not supported for file / 1 0 ram0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 96.182927][ T6142] 1 1 ram1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 96.182927][ T6142] 1 2 ram2 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 96.182927][ T6142] 1 3 ram3 0 0 0 0 0 0 0 0 0 € (pid: 6142 comm: syz.0.115) [ 96.224180][ T28] audit: type=1800 audit(1778258076.566:4): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.115" name=2020203120202020202020302072616D30203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020312072616D31203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020322072616D32203020302030203020302030203020302030203020302030203020302030203020300A2020203120202020202020332072616D33203020302030203020302030203020302030208005 dev="mqueue" ino=8429 res=0 errno=0 [ 96.310259][ T1121] kworker/u4:6: attempt to access beyond end of device [ 96.310259][ T1121] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 96.350305][ T1121] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.364474][ T1121] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.655920][ T6152] loop0: detected capacity change from 0 to 512 [ 96.688693][ T6152] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.119: inode has both inline data and extents flags [ 96.704448][ T6152] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.119: couldn't read orphan inode 15 (err -117) [ 96.724096][ T6152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.894771][ T6156] loop3: detected capacity change from 0 to 512 [ 96.921851][ T6156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.937894][ T6156] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.069156][ T6160] loop2: detected capacity change from 0 to 512 [ 97.078939][ T6160] EXT4-fs: Ignoring removed bh option [ 97.087061][ T6160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.097705][ T27] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 97.126684][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.148614][ T6160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.180934][ T6160] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.293934][ T6160] EXT4-fs (loop2): shut down requested (2) [ 97.315445][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.349503][ T27] usb 1-1: config 1 has no interface number 0 [ 97.355909][ T27] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.393689][ T27] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 97.414733][ T27] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 97.437948][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.450741][ T27] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 97.479816][ T27] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 8184, setting to 64 [ 97.509666][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.535644][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.554523][ T27] usb 1-1: Product: syz [ 97.559092][ T27] usb 1-1: Manufacturer: syz [ 97.563741][ T27] usb 1-1: SerialNumber: syz [ 97.613049][ T6152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.857828][ T6152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.865263][ T6152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.997955][ T6180] loop2: detected capacity change from 0 to 2048 [ 98.065249][ T6180] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.101192][ T6152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.134229][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.199169][ T6182] loop1: detected capacity change from 0 to 4096 [ 98.220264][ T6182] EXT4-fs: Ignoring removed bh option [ 98.303795][ T6182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.339294][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 98.356384][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 98.372188][ T6186] loop2: detected capacity change from 0 to 256 [ 98.377115][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.398275][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.413412][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.425030][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.436444][ T6182] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.130: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 98.470066][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.481263][ T6182] EXT4-fs (loop1): Remounting filesystem read-only [ 98.495656][ T6182] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.130: directory missing '..' [ 98.510831][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.547194][ T6152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.558449][ T6152] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.601215][ T27] cdc_ncm 1-1:1.1: bind() failure [ 98.736545][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.781493][ T23] usb 4-1: usb_control_msg returned -32 [ 98.787175][ T23] usbtmc 4-1:16.0: can't read capabilities [ 98.926520][ T8] usb 1-1: USB disconnect, device number 3 [ 99.573022][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.602564][ T6206] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.622201][ T6206] netlink: 'syz.1.139': attribute type 12 has an invalid length. [ 99.637653][ T6206] netlink: 'syz.1.139': attribute type 29 has an invalid length. [ 99.647569][ T6203] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 99.653906][ T6206] netlink: 148 bytes leftover after parsing attributes in process `syz.1.139'. [ 99.673936][ T6206] netlink: 'syz.1.139': attribute type 2 has an invalid length. [ 99.696132][ T6206] netlink: 'syz.1.139': attribute type 3 has an invalid length. [ 99.719702][ T6206] netlink: 15 bytes leftover after parsing attributes in process `syz.1.139'. [ 99.767009][ T8] usb 4-1: USB disconnect, device number 3 [ 100.459791][ T28] audit: type=1326 audit(1778258080.796:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.3.146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89cf79cdd9 code=0x0 [ 100.543631][ T6221] loop3: detected capacity change from 0 to 1024 [ 100.820273][ T6227] loop0: detected capacity change from 0 to 256 [ 100.857304][ T6227] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9b1b127f, utbl_chksum : 0xe619d30d) [ 101.166087][ T6234] loop1: detected capacity change from 0 to 512 [ 101.202631][ T6234] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.236402][ T6234] EXT4-fs (loop1): 1 truncate cleaned up [ 101.252476][ T6234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.415344][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.549326][ T6245] binder: 6244:6245 ioctl c0306201 0 returned -14 [ 101.562599][ T6245] binder: 6244:6245 ioctl c0306201 2000000001c0 returned -14 [ 101.754760][ T6252] loop2: detected capacity change from 0 to 128 [ 101.803348][ T6252] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.820356][ T6252] hpfs: filesystem error: improperly stopped [ 101.830707][ T6252] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.842387][ T6252] hpfs: You really don't want any checks? You are crazy... [ 101.903629][ T6252] hpfs: Code page index out of array [ 101.914975][ T6252] hpfs: code page support is disabled [ 101.933064][ T6252] hpfs: hpfs_map_4sectors(): unaligned read [ 101.963338][ T6252] hpfs: hpfs_map_4sectors(): unaligned read [ 101.997551][ T6252] hpfs: filesystem error: unable to find root dir [ 102.048429][ T6258] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967272. macoff=96 [ 102.337741][ T6262] loop1: detected capacity change from 0 to 2048 [ 102.405419][ T6262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.246364][ T6291] Illegal XDP return value 4294967294 on prog (id 20) dev N/A, expect packet loss! [ 103.322716][ T6296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.179'. [ 103.358876][ T6287] use of bytesused == 0 is deprecated and will be removed in the future, [ 103.372475][ T6287] use the actual size instead. [ 104.896059][ T6350] [ 104.898844][ T6350] ===================================================== [ 104.905905][ T6350] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 104.913503][ T6350] syzkaller #0 Not tainted [ 104.917964][ T6350] ----------------------------------------------------- [ 104.924936][ T6350] syz.0.199/6350 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 104.932669][ T6350] ffff8880267d20c0 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x192/0x4b0 [ 104.941446][ T6350] [ 104.941446][ T6350] and this task is already holding: [ 104.948941][ T6350] ffff88802d187028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 104.958750][ T6350] which would create a new lock dependency: [ 104.964681][ T6350] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 104.973392][ T6350] [ 104.973392][ T6350] but this new dependency connects a HARDIRQ-irq-safe lock: [ 104.983370][ T6350] (&dev->event_lock#2){-.-.}-{2:2} [ 104.983407][ T6350] [ 104.983407][ T6350] ... which became HARDIRQ-irq-safe at: [ 104.996328][ T6350] lock_acquire+0x19e/0x420 [ 105.001029][ T6350] _raw_spin_lock_irqsave+0xb4/0x100 [ 105.006421][ T6350] input_event+0x7a/0xc0 [ 105.010785][ T6350] psmouse_report_standard_packet+0x53/0x200 [ 105.016951][ T6350] psmouse_process_byte+0x478/0x670 [ 105.022368][ T6350] psmouse_handle_byte+0x43/0x490 [ 105.027515][ T6350] ps2_interrupt+0x164/0x980 [ 105.032246][ T6350] serio_interrupt+0x8b/0x130 [ 105.037029][ T6350] i8042_interrupt+0x385/0x710 [ 105.041901][ T6350] __handle_irq_event_percpu+0x271/0x940 [ 105.047735][ T6350] handle_irq_event+0x8b/0x1e0 [ 105.052607][ T6350] handle_edge_irq+0x247/0xb30 [ 105.057494][ T6350] __common_interrupt+0x13b/0x230 [ 105.063010][ T6350] common_interrupt+0xb4/0xd0 [ 105.067798][ T6350] asm_common_interrupt+0x26/0x40 [ 105.073003][ T6350] _raw_spin_unlock_irqrestore+0xc0/0x120 [ 105.078838][ T6350] i8042_aux_write+0x109/0x170 [ 105.083792][ T6350] ps2_do_sendbyte+0x1fd/0x6f0 [ 105.088849][ T6350] ps2_sendbyte+0x5f/0x120 [ 105.093628][ T6350] cypress_send_ext_cmd+0x244/0x930 [ 105.098927][ T6350] cypress_detect+0x93/0x1a0 [ 105.103619][ T6350] psmouse_extensions+0x471/0xc00 [ 105.109096][ T6350] psmouse_switch_protocol+0xc8/0x5f0 [ 105.114574][ T6350] psmouse_connect+0x8d8/0x14c0 [ 105.119528][ T6350] serio_driver_probe+0x7a/0xa0 [ 105.124479][ T6350] really_probe+0x25b/0xb20 [ 105.129096][ T6350] __driver_probe_device+0x18c/0x330 [ 105.134519][ T6350] driver_probe_device+0x4f/0x420 [ 105.140180][ T6350] __driver_attach+0x44e/0x6e0 [ 105.145048][ T6350] bus_for_each_dev+0x235/0x2b0 [ 105.150194][ T6350] serio_handle_event+0x1a2/0x860 [ 105.155456][ T6350] process_scheduled_works+0xa5d/0x15d0 [ 105.161395][ T6350] worker_thread+0xa55/0xfc0 [ 105.166189][ T6350] kthread+0x2fa/0x390 [ 105.170453][ T6350] ret_from_fork+0x48/0x80 [ 105.175181][ T6350] ret_from_fork_asm+0x11/0x20 [ 105.180073][ T6350] [ 105.180073][ T6350] to a HARDIRQ-irq-unsafe lock: [ 105.188242][ T6350] (tasklist_lock){.+.+}-{2:2} [ 105.188273][ T6350] [ 105.188273][ T6350] ... which became HARDIRQ-irq-unsafe at: [ 105.203409][ T6350] ... [ 105.203420][ T6350] lock_acquire+0x19e/0x420 [ 105.211327][ T6350] _raw_read_lock+0x36/0x50 [ 105.216321][ T6350] do_wait+0x294/0xae0 [ 105.220602][ T6350] kernel_wait+0xd7/0x1c0 [ 105.226382][ T6350] call_usermodehelper_exec_work+0xb9/0x220 [ 105.233272][ T6350] process_scheduled_works+0xa5d/0x15d0 [ 105.239227][ T6350] worker_thread+0xa55/0xfc0 [ 105.243942][ T6350] kthread+0x2fa/0x390 [ 105.248320][ T6350] ret_from_fork+0x48/0x80 [ 105.253116][ T6350] ret_from_fork_asm+0x11/0x20 [ 105.258345][ T6350] [ 105.258345][ T6350] other info that might help us debug this: [ 105.258345][ T6350] [ 105.268956][ T6350] Chain exists of: [ 105.268956][ T6350] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 105.268956][ T6350] [ 105.282727][ T6350] Possible interrupt unsafe locking scenario: [ 105.282727][ T6350] [ 105.291319][ T6350] CPU0 CPU1 [ 105.296781][ T6350] ---- ---- [ 105.302162][ T6350] lock(tasklist_lock); [ 105.306420][ T6350] local_irq_disable(); [ 105.314112][ T6350] lock(&dev->event_lock#2); [ 105.321489][ T6350] lock(&client->buffer_lock); [ 105.329396][ T6350] [ 105.332883][ T6350] lock(&dev->event_lock#2); [ 105.337940][ T6350] [ 105.337940][ T6350] *** DEADLOCK *** [ 105.337940][ T6350] [ 105.346445][ T6350] 7 locks held by syz.0.199/6350: [ 105.351566][ T6350] #0: ffff8881447c9110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x180/0x490 [ 105.361077][ T6350] #1: ffff8881406af230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_inject_event+0xab/0x320 [ 105.371503][ T6350] #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xbc/0x320 [ 105.381479][ T6350] #3: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0xa3/0x12f0 [ 105.391340][ T6350] #4: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x79/0x330 [ 105.400764][ T6350] #5: ffff88802d187028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 105.410963][ T6350] #6: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x53/0x4b0 [ 105.420215][ T6350] [ 105.420215][ T6350] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 105.431028][ T6350] -> (&dev->event_lock#2){-.-.}-{2:2} { [ 105.438415][ T6350] IN-HARDIRQ-W at: [ 105.443155][ T6350] lock_acquire+0x19e/0x420 [ 105.450097][ T6350] _raw_spin_lock_irqsave+0xb4/0x100 [ 105.457227][ T6350] input_event+0x7a/0xc0 [ 105.463310][ T6350] psmouse_report_standard_packet+0x53/0x200 [ 105.471256][ T6350] psmouse_process_byte+0x478/0x670 [ 105.478346][ T6350] psmouse_handle_byte+0x43/0x490 [ 105.485310][ T6350] ps2_interrupt+0x164/0x980 [ 105.491738][ T6350] serio_interrupt+0x8b/0x130 [ 105.498254][ T6350] i8042_interrupt+0x385/0x710 [ 105.504868][ T6350] __handle_irq_event_percpu+0x271/0x940 [ 105.512463][ T6350] handle_irq_event+0x8b/0x1e0 [ 105.519148][ T6350] handle_edge_irq+0x247/0xb30 [ 105.525948][ T6350] __common_interrupt+0x13b/0x230 [ 105.532965][ T6350] common_interrupt+0xb4/0xd0 [ 105.539776][ T6350] asm_common_interrupt+0x26/0x40 [ 105.546774][ T6350] _raw_spin_unlock_irqrestore+0xc0/0x120 [ 105.554531][ T6350] i8042_aux_write+0x109/0x170 [ 105.561380][ T6350] ps2_do_sendbyte+0x1fd/0x6f0 [ 105.568012][ T6350] ps2_sendbyte+0x5f/0x120 [ 105.574317][ T6350] cypress_send_ext_cmd+0x244/0x930 [ 105.581356][ T6350] cypress_detect+0x93/0x1a0 [ 105.588331][ T6350] psmouse_extensions+0x471/0xc00 [ 105.595468][ T6350] psmouse_switch_protocol+0xc8/0x5f0 [ 105.602860][ T6350] psmouse_connect+0x8d8/0x14c0 [ 105.609564][ T6350] serio_driver_probe+0x7a/0xa0 [ 105.616443][ T6350] really_probe+0x25b/0xb20 [ 105.623054][ T6350] __driver_probe_device+0x18c/0x330 [ 105.630269][ T6350] driver_probe_device+0x4f/0x420 [ 105.637317][ T6350] __driver_attach+0x44e/0x6e0 [ 105.643931][ T6350] bus_for_each_dev+0x235/0x2b0 [ 105.650890][ T6350] serio_handle_event+0x1a2/0x860 [ 105.657754][ T6350] process_scheduled_works+0xa5d/0x15d0 [ 105.666136][ T6350] worker_thread+0xa55/0xfc0 [ 105.675398][ T6350] kthread+0x2fa/0x390 [ 105.683704][ T6350] ret_from_fork+0x48/0x80 [ 105.691913][ T6350] ret_from_fork_asm+0x11/0x20 [ 105.702244][ T6350] IN-SOFTIRQ-W at: [ 105.708120][ T6350] lock_acquire+0x19e/0x420 [ 105.720688][ T6350] _raw_spin_lock_irqsave+0xb4/0x100 [ 105.732994][ T6350] input_inject_event+0xab/0x320 [ 105.744435][ T6350] led_trigger_event+0x133/0x210 [ 105.753666][ T6350] kbd_bh+0x1c0/0x2d0 [ 105.760322][ T6350] tasklet_action_common+0x302/0x4d0 [ 105.767834][ T6350] handle_softirqs+0x280/0x820 [ 105.775754][ T6350] run_ksoftirqd+0xa8/0x100 [ 105.783001][ T6350] smpboot_thread_fn+0x635/0xa00 [ 105.791292][ T6350] kthread+0x2fa/0x390 [ 105.797218][ T6350] ret_from_fork+0x48/0x80 [ 105.803577][ T6350] ret_from_fork_asm+0x11/0x20 [ 105.810813][ T6350] INITIAL USE at: [ 105.814822][ T6350] lock_acquire+0x19e/0x420 [ 105.821326][ T6350] _raw_spin_lock_irqsave+0xb4/0x100 [ 105.828711][ T6350] input_inject_event+0xab/0x320 [ 105.835928][ T6350] led_trigger_event+0x133/0x210 [ 105.842825][ T6350] kbd_led_trigger_activate+0xbd/0x100 [ 105.850224][ T6350] led_trigger_set+0x52c/0x950 [ 105.857198][ T6350] led_trigger_set_default+0x1a0/0x1e0 [ 105.864409][ T6350] led_classdev_register_ext+0x733/0x9b0 [ 105.871879][ T6350] input_leds_connect+0x4eb/0x6b0 [ 105.878653][ T6350] input_register_device+0xcdc/0x1070 [ 105.885994][ T6350] atkbd_connect+0x70a/0x9b0 [ 105.892357][ T6350] serio_driver_probe+0x7a/0xa0 [ 105.898963][ T6350] really_probe+0x25b/0xb20 [ 105.905304][ T6350] __driver_probe_device+0x18c/0x330 [ 105.912336][ T6350] driver_probe_device+0x4f/0x420 [ 105.919112][ T6350] __driver_attach+0x44e/0x6e0 [ 105.925896][ T6350] bus_for_each_dev+0x235/0x2b0 [ 105.932776][ T6350] serio_handle_event+0x1a2/0x860 [ 105.940090][ T6350] process_scheduled_works+0xa5d/0x15d0 [ 105.947651][ T6350] worker_thread+0xa55/0xfc0 [ 105.954456][ T6350] kthread+0x2fa/0x390 [ 105.960643][ T6350] ret_from_fork+0x48/0x80 [ 105.967018][ T6350] ret_from_fork_asm+0x11/0x20 [ 105.974087][ T6350] } [ 105.976824][ T6350] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 105.986309][ T6350] -> (&client->buffer_lock){....}-{2:2} { [ 105.992241][ T6350] INITIAL USE at: [ 105.996150][ T6350] lock_acquire+0x19e/0x420 [ 106.002331][ T6350] _raw_spin_lock+0x2e/0x40 [ 106.008937][ T6350] evdev_pass_values+0xcb/0xab0 [ 106.015918][ T6350] evdev_events+0x1d8/0x330 [ 106.022374][ T6350] input_pass_values+0x905/0x12f0 [ 106.029009][ T6350] input_event_dispose+0x346/0x6c0 [ 106.035712][ T6350] input_inject_event+0x1f9/0x320 [ 106.042411][ T6350] evdev_write+0x35f/0x490 [ 106.048410][ T6350] vfs_write+0x296/0x990 [ 106.054240][ T6350] ksys_write+0x150/0x260 [ 106.060335][ T6350] do_syscall_64+0x55/0xa0 [ 106.066501][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.074331][ T6350] } [ 106.076844][ T6350] ... key at: [] evdev_open.__key.28+0x0/0x20 [ 106.085142][ T6350] ... acquired at: [ 106.089227][ T6350] _raw_spin_lock+0x2e/0x40 [ 106.093924][ T6350] evdev_pass_values+0xcb/0xab0 [ 106.098983][ T6350] evdev_events+0x1d8/0x330 [ 106.103678][ T6350] input_pass_values+0x905/0x12f0 [ 106.108893][ T6350] input_event_dispose+0x346/0x6c0 [ 106.114201][ T6350] input_inject_event+0x1f9/0x320 [ 106.119426][ T6350] evdev_write+0x35f/0x490 [ 106.124117][ T6350] vfs_write+0x296/0x990 [ 106.128552][ T6350] ksys_write+0x150/0x260 [ 106.133092][ T6350] do_syscall_64+0x55/0xa0 [ 106.138334][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.144438][ T6350] [ 106.146778][ T6350] [ 106.146778][ T6350] the dependencies between the lock to be acquired [ 106.146788][ T6350] and HARDIRQ-irq-unsafe lock: [ 106.160332][ T6350] -> (tasklist_lock){.+.+}-{2:2} { [ 106.165654][ T6350] HARDIRQ-ON-R at: [ 106.169823][ T6350] lock_acquire+0x19e/0x420 [ 106.176426][ T6350] _raw_read_lock+0x36/0x50 [ 106.183039][ T6350] do_wait+0x294/0xae0 [ 106.189996][ T6350] kernel_wait+0xd7/0x1c0 [ 106.196341][ T6350] call_usermodehelper_exec_work+0xb9/0x220 [ 106.204241][ T6350] process_scheduled_works+0xa5d/0x15d0 [ 106.211897][ T6350] worker_thread+0xa55/0xfc0 [ 106.218679][ T6350] kthread+0x2fa/0x390 [ 106.225194][ T6350] ret_from_fork+0x48/0x80 [ 106.232055][ T6350] ret_from_fork_asm+0x11/0x20 [ 106.238863][ T6350] SOFTIRQ-ON-R at: [ 106.243036][ T6350] lock_acquire+0x19e/0x420 [ 106.249923][ T6350] _raw_read_lock+0x36/0x50 [ 106.256545][ T6350] do_wait+0x294/0xae0 [ 106.262640][ T6350] kernel_wait+0xd7/0x1c0 [ 106.269129][ T6350] call_usermodehelper_exec_work+0xb9/0x220 [ 106.277237][ T6350] process_scheduled_works+0xa5d/0x15d0 [ 106.284794][ T6350] worker_thread+0xa55/0xfc0 [ 106.291398][ T6350] kthread+0x2fa/0x390 [ 106.297507][ T6350] ret_from_fork+0x48/0x80 [ 106.304474][ T6350] ret_from_fork_asm+0x11/0x20 [ 106.311363][ T6350] INITIAL USE at: [ 106.315534][ T6350] lock_acquire+0x19e/0x420 [ 106.322149][ T6350] _raw_write_lock_irq+0xaf/0xf0 [ 106.329018][ T6350] copy_process+0x2275/0x3d80 [ 106.335925][ T6350] kernel_clone+0x24b/0x8a0 [ 106.342448][ T6350] user_mode_thread+0x111/0x180 [ 106.349231][ T6350] rest_init+0x27/0x300 [ 106.355493][ T6350] arch_call_rest_init+0xe/0x10 [ 106.362279][ T6350] start_kernel+0x459/0x4e0 [ 106.368712][ T6350] x86_64_start_reservations+0x2a/0x30 [ 106.376206][ T6350] copy_bootdata+0x0/0xe0 [ 106.382472][ T6350] secondary_startup_64_no_verify+0x179/0x17b [ 106.390500][ T6350] INITIAL READ USE at: [ 106.395133][ T6350] lock_acquire+0x19e/0x420 [ 106.402130][ T6350] _raw_read_lock+0x36/0x50 [ 106.409020][ T6350] do_wait+0x294/0xae0 [ 106.415735][ T6350] kernel_wait+0xd7/0x1c0 [ 106.422520][ T6350] call_usermodehelper_exec_work+0xb9/0x220 [ 106.430855][ T6350] process_scheduled_works+0xa5d/0x15d0 [ 106.439744][ T6350] worker_thread+0xa55/0xfc0 [ 106.446994][ T6350] kthread+0x2fa/0x390 [ 106.453527][ T6350] ret_from_fork+0x48/0x80 [ 106.460306][ T6350] ret_from_fork_asm+0x11/0x20 [ 106.467434][ T6350] } [ 106.470594][ T6350] ... key at: [] tasklist_lock+0x18/0x40 [ 106.478784][ T6350] ... acquired at: [ 106.482871][ T6350] _raw_read_lock+0x36/0x50 [ 106.487590][ T6350] send_sigurg+0xf0/0x3c0 [ 106.492135][ T6350] sk_send_sigurg+0x6f/0xc0 [ 106.497087][ T6350] queue_oob+0x3f1/0x4f0 [ 106.501514][ T6350] unix_stream_sendmsg+0xaf3/0xbf0 [ 106.506811][ T6350] ____sys_sendmsg+0x5ba/0x960 [ 106.511812][ T6350] ___sys_sendmsg+0x2a6/0x360 [ 106.516676][ T6350] __sys_sendmmsg+0x2ca/0x510 [ 106.521536][ T6350] __x64_sys_sendmmsg+0xa0/0xb0 [ 106.526662][ T6350] do_syscall_64+0x55/0xa0 [ 106.531353][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.537434][ T6350] [ 106.539770][ T6350] -> (&f->f_owner.lock){....}-{2:2} { [ 106.545273][ T6350] INITIAL USE at: [ 106.549370][ T6350] lock_acquire+0x19e/0x420 [ 106.555652][ T6350] _raw_write_lock_irq+0xaf/0xf0 [ 106.562540][ T6350] __f_setown+0x3b/0x330 [ 106.568576][ T6350] fcntl_dirnotify+0x6e2/0x8d0 [ 106.575189][ T6350] do_fcntl+0x390/0x1490 [ 106.581286][ T6350] __se_sys_fcntl+0xc9/0x1a0 [ 106.587644][ T6350] do_syscall_64+0x55/0xa0 [ 106.593809][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.601485][ T6350] INITIAL READ USE at: [ 106.605920][ T6350] lock_acquire+0x19e/0x420 [ 106.612623][ T6350] _raw_read_lock_irqsave+0xbc/0x100 [ 106.620096][ T6350] send_sigio+0x33/0x360 [ 106.626526][ T6350] dnotify_handle_event+0x153/0x420 [ 106.634031][ T6350] fsnotify+0x1353/0x17c0 [ 106.640634][ T6350] __fsnotify_parent+0x655/0x7c0 [ 106.647846][ T6350] notify_change+0xb47/0xe10 [ 106.654708][ T6350] do_truncate+0x1b0/0x240 [ 106.661486][ T6350] do_sys_ftruncate+0x325/0x3d0 [ 106.668883][ T6350] do_syscall_64+0x55/0xa0 [ 106.675613][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.684023][ T6350] } [ 106.686720][ T6350] ... key at: [] init_file.__key+0x0/0x20 [ 106.694979][ T6350] ... acquired at: [ 106.698969][ T6350] _raw_read_lock_irqsave+0xbc/0x100 [ 106.704541][ T6350] send_sigio+0x33/0x360 [ 106.709105][ T6350] kill_fasync+0x228/0x4b0 [ 106.713998][ T6350] sock_wake_async+0x137/0x160 [ 106.719090][ T6350] sk_wake_async+0x184/0x280 [ 106.723988][ T6350] sock_def_readable+0x22d/0x420 [ 106.729131][ T6350] queue_oob+0x421/0x4f0 [ 106.733686][ T6350] unix_stream_sendmsg+0xaf3/0xbf0 [ 106.738998][ T6350] ____sys_sendmsg+0x5ba/0x960 [ 106.743999][ T6350] ___sys_sendmsg+0x2a6/0x360 [ 106.749085][ T6350] __sys_sendmmsg+0x2ca/0x510 [ 106.754327][ T6350] __x64_sys_sendmmsg+0xa0/0xb0 [ 106.759381][ T6350] do_syscall_64+0x55/0xa0 [ 106.763985][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.770084][ T6350] [ 106.772438][ T6350] -> (&new->fa_lock){....}-{2:2} { [ 106.777593][ T6350] INITIAL USE at: [ 106.781509][ T6350] lock_acquire+0x19e/0x420 [ 106.787601][ T6350] _raw_write_lock_irq+0xaf/0xf0 [ 106.794127][ T6350] fasync_remove_entry+0xf4/0x1c0 [ 106.800979][ T6350] sock_fasync+0x88/0xf0 [ 106.806814][ T6350] __fput+0x7f3/0x970 [ 106.812377][ T6350] task_work_run+0x1d4/0x260 [ 106.818639][ T6350] exit_to_user_mode_loop+0xe6/0x110 [ 106.825608][ T6350] exit_to_user_mode_prepare+0xee/0x180 [ 106.832841][ T6350] syscall_exit_to_user_mode+0x1a/0x50 [ 106.839897][ T6350] do_syscall_64+0x61/0xa0 [ 106.846012][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.853488][ T6350] INITIAL READ USE at: [ 106.857869][ T6350] lock_acquire+0x19e/0x420 [ 106.864394][ T6350] _raw_read_lock_irqsave+0xbc/0x100 [ 106.871713][ T6350] kill_fasync+0x192/0x4b0 [ 106.878176][ T6350] sock_wake_async+0x137/0x160 [ 106.885080][ T6350] sk_wake_async+0x184/0x280 [ 106.891986][ T6350] queue_oob+0x3f1/0x4f0 [ 106.898245][ T6350] unix_stream_sendmsg+0xaf3/0xbf0 [ 106.905392][ T6350] ____sys_sendmsg+0x5ba/0x960 [ 106.912222][ T6350] ___sys_sendmsg+0x2a6/0x360 [ 106.918932][ T6350] __sys_sendmmsg+0x2ca/0x510 [ 106.925632][ T6350] __x64_sys_sendmmsg+0xa0/0xb0 [ 106.932661][ T6350] do_syscall_64+0x55/0xa0 [ 106.939311][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.947448][ T6350] } [ 106.950137][ T6350] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 106.959114][ T6350] ... acquired at: [ 106.963664][ T6350] _raw_read_lock_irqsave+0xbc/0x100 [ 106.969383][ T6350] kill_fasync+0x192/0x4b0 [ 106.974426][ T6350] evdev_pass_values+0x54b/0xab0 [ 106.979730][ T6350] evdev_events+0x1d8/0x330 [ 106.984507][ T6350] input_pass_values+0x905/0x12f0 [ 106.989735][ T6350] input_event_dispose+0x346/0x6c0 [ 106.995045][ T6350] input_inject_event+0x1f9/0x320 [ 107.000275][ T6350] evdev_write+0x35f/0x490 [ 107.004979][ T6350] vfs_write+0x296/0x990 [ 107.009435][ T6350] ksys_write+0x150/0x260 [ 107.014088][ T6350] do_syscall_64+0x55/0xa0 [ 107.018705][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.024790][ T6350] [ 107.027145][ T6350] [ 107.027145][ T6350] stack backtrace: [ 107.033246][ T6350] CPU: 1 PID: 6350 Comm: syz.0.199 Not tainted syzkaller #0 [ 107.040566][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.050655][ T6350] Call Trace: [ 107.053977][ T6350] [ 107.056928][ T6350] dump_stack_lvl+0x18c/0x250 [ 107.061680][ T6350] ? load_image+0x420/0x420 [ 107.066234][ T6350] ? show_regs_print_info+0x20/0x20 [ 107.071477][ T6350] ? load_image+0x420/0x420 [ 107.076200][ T6350] ? print_shortest_lock_dependencies+0xf4/0x160 [ 107.082638][ T6350] __lock_acquire+0x6851/0x7d40 [ 107.087511][ T6350] ? verify_lock_unused+0x140/0x140 [ 107.092816][ T6350] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 107.098739][ T6350] ? verify_lock_unused+0x140/0x140 [ 107.103953][ T6350] lock_acquire+0x19e/0x420 [ 107.108563][ T6350] ? kill_fasync+0x192/0x4b0 [ 107.113173][ T6350] ? read_lock_is_recursive+0x20/0x20 [ 107.118568][ T6350] _raw_read_lock_irqsave+0xbc/0x100 [ 107.123867][ T6350] ? kill_fasync+0x192/0x4b0 [ 107.128472][ T6350] ? _raw_read_lock+0x50/0x50 [ 107.133254][ T6350] kill_fasync+0x192/0x4b0 [ 107.137790][ T6350] ? kill_fasync+0x53/0x4b0 [ 107.142360][ T6350] evdev_pass_values+0x54b/0xab0 [ 107.147323][ T6350] ? evdev_pass_values+0x4d1/0xab0 [ 107.152458][ T6350] evdev_events+0x1d8/0x330 [ 107.156976][ T6350] ? evdev_events+0x79/0x330 [ 107.161588][ T6350] ? evdev_event+0xf0/0xf0 [ 107.166017][ T6350] input_pass_values+0x905/0x12f0 [ 107.171126][ T6350] ? input_pass_values+0xa3/0x12f0 [ 107.176443][ T6350] input_event_dispose+0x346/0x6c0 [ 107.181725][ T6350] input_inject_event+0x1f9/0x320 [ 107.187043][ T6350] ? input_inject_event+0xbc/0x320 [ 107.192568][ T6350] evdev_write+0x35f/0x490 [ 107.197262][ T6350] ? evdev_read+0xba0/0xba0 [ 107.202016][ T6350] ? common_file_perm+0x198/0x1f0 [ 107.207080][ T6350] ? fsnotify_perm+0x5d/0x5e0 [ 107.211777][ T6350] ? security_file_permission+0x79/0xa0 [ 107.217553][ T6350] ? evdev_read+0xba0/0xba0 [ 107.222105][ T6350] vfs_write+0x296/0x990 [ 107.226370][ T6350] ? file_end_write+0x250/0x250 [ 107.231330][ T6350] ? __fget_files+0x28/0x4b0 [ 107.235936][ T6350] ? __fget_files+0x28/0x4b0 [ 107.240544][ T6350] ? __fget_files+0x43d/0x4b0 [ 107.245334][ T6350] ? __fdget_pos+0x1d8/0x330 [ 107.249944][ T6350] ? ksys_write+0x75/0x260 [ 107.254467][ T6350] ksys_write+0x150/0x260 [ 107.258816][ T6350] ? __ia32_sys_read+0x90/0x90 [ 107.263611][ T6350] ? lockdep_hardirqs_on+0x98/0x150 [ 107.268847][ T6350] do_syscall_64+0x55/0xa0 [ 107.273289][ T6350] ? clear_bhb_loop+0x40/0x90 [ 107.278039][ T6350] ? clear_bhb_loop+0x40/0x90 [ 107.282753][ T6350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.288769][ T6350] RIP: 0033:0x7fd18139cdd9 [ 107.293284][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.313193][ T6350] RSP: 002b:00007fd1822b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.321796][ T6350] RAX: ffffffffffffffda RBX: 00007fd181615fa0 RCX: 00007fd18139cdd9 [ 107.329958][ T6350] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 107.338655][ T6350] RBP: 00007fd181432d69 R08: 0000000000000000 R09: 0000000000000000 [ 107.346650][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.354631][ T6350] R13: 00007fd181616038 R14: 00007fd181615fa0 R15: 00007fff8abde448 [ 107.362624][ T6350] [ 107.437734][ T6343] loop1: detected capacity change from 0 to 32768 [ 107.484749][ T6343] JBD2: Ignoring recovery information on journal [ 107.564222][ T6343] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 107.663306][ T5772] ocfs2: Unmounting device (7,1) on (node local)