last executing test programs: 42.116127413s ago: executing program 2 (id=154): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000002000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[], 0x78) 41.808116125s ago: executing program 2 (id=157): ioperm(0x0, 0x2, 0x7e) io_submit(0x0, 0x0, 0x0) 39.841937465s ago: executing program 2 (id=159): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1210801, &(0x7f00000000c0)=ANY=[], 0x1, 0x1fc, &(0x7f0000000680)="$eJzsmbGLE0EUxr+ZvezmDhG0sLCx8MATvc3uRuWaK06wFIRT1DLoep7OXSS3wl1AMNjYWFoIaW0sLSysLPwLbLVQQbAwpV1kZGZnd8dkE6NGgvh+kMk3szPz3jx2viIBQRD/LR8/fH3/6OzKxZMA9vUX4Znxz04xh1vz3z25e+Lx6rnu87dPX2/vv/dycD8GQMqfhj2YCRfAqzUHCdhcOvLj6kUrBaNxCRzHjb4MBj+VfalJOzEYrpo5tyzdnDdCxP61prh+Y1PEgWpC1USqqdvxVVK9DoNaVtXZScms5zt77dsNIeLWoKjILM7Qo18V4wqp81vjWEVWPSlVsa48fNBRfVMbBOB5/UJwhEbXwbBu9Ao8+L5flMQ6/+G5Yn9nkvPPVjzT4sCyiM1bIf9u0OyO/NZy9W7NvGL/hKhMZR82OKIudD5yqJd5oD3n058nX53qlfHsnMcLmMhDj94sCHF+aNX8xBm6JYXKReFPytmPWf50s1v4Ry3ZulPb2Wsvb241NuKNeDuK6meCU0FwOqppI0rbMf5X1f60YO1fGTHXZS52G0nSCneBpBXm/ShtLcddf9H8otdw7X8cS0d1V3uqPrZXHoOZD9ffSi055TPvjzwTQRAEQRAEQRAEQRAEQRBEOUfAYP7zYPgmRxFd0L9Qfg8AAP//mh9m3g==") 37.936254889s ago: executing program 2 (id=164): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x80, 0x1}}], 0x20, 0x4048800}, 0xc0) 36.850843993s ago: executing program 2 (id=168): mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000040)='./file1\x00', 0x14e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 35.652715609s ago: executing program 2 (id=171): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 19.81179434s ago: executing program 32 (id=171): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 17.964121764s ago: executing program 1 (id=213): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000500)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.491636949s ago: executing program 1 (id=220): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) 14.020311413s ago: executing program 1 (id=221): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0xc040) 13.58013831s ago: executing program 3 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001940)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 10.750674s ago: executing program 1 (id=223): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xbf, 0xc2, 0xb, 0x20, 0xf11, 0x1010, 0x2cbb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x87, 0x30, 0x7, [{{0x9, 0x4, 0xcc, 0x1, 0x1, 0x7f, 0x5, 0x5c, 0xb5, [], [{{0x9, 0x5, 0xe81eb71784d4b393, 0x2, 0x400, 0x9, 0x5, 0x2e}}]}}]}}]}}, 0x0) 9.487270748s ago: executing program 3 (id=227): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 8.846292151s ago: executing program 1 (id=228): syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c"], 0x0) 8.811213105s ago: executing program 3 (id=229): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) 7.080653485s ago: executing program 1 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) readahead(r0, 0xff, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x20, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}}, 0x4000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x1, '\x00', r7, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 4.985946312s ago: executing program 4 (id=238): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000540), 0x0, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ////8+wKHhUtID7hAOjFcXV2f8+nMsBIBLl3r/n+/A3mcLMBIKfY1AhAYZf/3/f9zpelDJQQAAAzcdGtKCqXs673pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea9YXWlsm514zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPf3AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvD+AYDAAAA6Na5Tm/N/znsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89eHulM/Xx8qlBxf3LFyJiNi/+eEy25pNRjIjrf09i/MR2SUSMDSD+4b2I+Ghe/KSZ1lHIvPiDeBPOiR+z2buQF//GAOLDVXa/efx5La//FeLZ1jy//41H/E/9g+p9/Iuj499Yj/5/s88YT73zs3LP+PcinhrPP/504ic94j/XZ/yvf+3goNe69EcRc53Pn9YR72SE41K5sbVTru8f3N7YWl6vrFe2FxcXXl56Zemlpfny2ka1kv2bG+M7T//8/bPafz338y/Jsund/udz9pf3mfSfd+4++HCncng6/q3ncuL/6sfZK07HL2RxPpWVm+vnOuXDdvmkZ376m2fOav/qcfuLD/P/f6vXTrud6ihP9/unAwBcgPr+weZytVrZHdlC8yr9EUhD4REsfGugO0zTNG32qZxV9yOin/0kMeCWFvLzOS70PAIM+8gEAAAM2vFJ/7AzAQAAAAAAAAAAAAAAAAAAgKvrMp6y1h3z+BHIySAeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/DQAA///dpdP7") mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x189) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) 4.585700479s ago: executing program 0 (id=240): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@abort}]}, 0x1, 0x4bf, &(0x7f0000000a00)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10206, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone(0xa0062000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000b00)={{0x0, 0x0, 0x80}}) 3.970000747s ago: executing program 4 (id=241): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000005580)=""/4100, 0x1004}, {&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000001480)=""/166, 0xa6}, {&(0x7f0000002640)=""/216, 0xd8}], 0x6}, 0x0) 3.523827814s ago: executing program 0 (id=242): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@data_err_abort}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) 3.292377828s ago: executing program 3 (id=243): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0xc040) 2.200574659s ago: executing program 4 (id=244): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_init(0x202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 2.152137702s ago: executing program 0 (id=245): syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xd7, &(0x7f0000000640)=@string={0xd7, 0x3, "1b3b55a83e0192fcd50a31566596c5be00a55079b9c2d3e70ec653a9df70b07d49daaae61f78f86fb6f6eff7a78062e289e73357a428c3a77736c5024eb41d73594c849f77d45f13ac7ac2eb61d6fc50680f4ff3d5d39d53d9f648b0d45edc2caa474a147b9b8c9d7fc477fd97f61e984f1d1865e86a318b1b8a0c198905a1d09b638b3b5644a589a6448283090d88c4aa8db930208d25756846751d0c877b27870898fa8bd3273bb3477c997e0e7da7375b41cbbc1cdd9e9e6966c67df7bd0a9c71a16eaa89c9078a8fb07e9e57ad23f19564b823"}}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) 2.100141334s ago: executing program 3 (id=246): epoll_create1(0x80000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x11, 0xa, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000100)="01", 0x1}) sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x21, r4, 0x202, &(0x7f0000000000)={0x0}) ptrace$cont(0x9, r4, 0x4, 0x6) recvmsg$can_bcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=""/236, 0xec}, 0x140) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) getegid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.171451647s ago: executing program 0 (id=247): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x48010, 0x0, 0x0) symlink(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39cb2bf87c62d30c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.134776262s ago: executing program 4 (id=248): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) socket(0x10, 0x803, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9, 0x4, 0x0, 0x80000001}) 612.253153ms ago: executing program 4 (id=249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 418.911245ms ago: executing program 4 (id=250): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000008) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7801, 0x0, 0x1}}) 169.867446ms ago: executing program 0 (id=251): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0xffffffffffffffff, 0x0) 267.443µs ago: executing program 3 (id=252): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYRESDEC], 0x0) 0s ago: executing program 0 (id=253): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000c40)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRES8, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="49a1486fe36d97d24180765a932a2f9279e66d9440816f1928e5810d9a113c6322cb6b9fc3aba4e21409599100e0b81eb9fca74d7f28a6bfa3aa08e788f2440f472019109d5878c76c746066d98847"], 0x1, 0xa82, &(0x7f0000000180)="$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") syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. [ 72.851901][ T5816] cgroup: Unknown subsys name 'net' [ 72.967208][ T5816] cgroup: Unknown subsys name 'cpuset' [ 72.976545][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.562053][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.345821][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.354206][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.362923][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.370736][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.378158][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.386341][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.395438][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.397850][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.404390][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.417324][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.425523][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.438659][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.447412][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.459220][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.479408][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.486622][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.488524][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.502822][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.509323][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.510368][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.516957][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.538566][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.547865][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.556149][ T5832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.563941][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.571700][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.578823][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.598866][ T5141] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.607323][ T5141] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.614822][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.420840][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 78.495182][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 78.534759][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 78.663384][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 78.859626][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 78.899911][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.907465][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.915172][ T5829] bridge_slave_0: entered allmulticast mode [ 78.922501][ T5829] bridge_slave_0: entered promiscuous mode [ 78.974967][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.982150][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.989776][ T5834] bridge_slave_0: entered allmulticast mode [ 78.998998][ T5834] bridge_slave_0: entered promiscuous mode [ 79.039436][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.046946][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.054679][ T5826] bridge_slave_0: entered allmulticast mode [ 79.061900][ T5826] bridge_slave_0: entered promiscuous mode [ 79.070468][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.077715][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.085456][ T5829] bridge_slave_1: entered allmulticast mode [ 79.092611][ T5829] bridge_slave_1: entered promiscuous mode [ 79.145731][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.152896][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.160180][ T5833] bridge_slave_0: entered allmulticast mode [ 79.168826][ T5833] bridge_slave_0: entered promiscuous mode [ 79.176753][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.184180][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.191530][ T5834] bridge_slave_1: entered allmulticast mode [ 79.199533][ T5834] bridge_slave_1: entered promiscuous mode [ 79.225810][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.232978][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.240870][ T5826] bridge_slave_1: entered allmulticast mode [ 79.248320][ T5826] bridge_slave_1: entered promiscuous mode [ 79.277678][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.309369][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.316651][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.325027][ T5833] bridge_slave_1: entered allmulticast mode [ 79.332222][ T5833] bridge_slave_1: entered promiscuous mode [ 79.398095][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.434190][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.488444][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.502796][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.524221][ T54] Bluetooth: hci0: command tx timeout [ 79.536479][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.580857][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.603424][ T5141] Bluetooth: hci2: command tx timeout [ 79.609856][ T54] Bluetooth: hci1: command tx timeout [ 79.616774][ T54] Bluetooth: hci3: command tx timeout [ 79.643812][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.658551][ T5829] team0: Port device team_slave_0 added [ 79.689168][ T54] Bluetooth: hci4: command tx timeout [ 79.704360][ T5834] team0: Port device team_slave_0 added [ 79.726108][ T5829] team0: Port device team_slave_1 added [ 79.751508][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.758764][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.766192][ T5839] bridge_slave_0: entered allmulticast mode [ 79.773704][ T5839] bridge_slave_0: entered promiscuous mode [ 79.787256][ T5833] team0: Port device team_slave_0 added [ 79.797222][ T5833] team0: Port device team_slave_1 added [ 79.805862][ T5834] team0: Port device team_slave_1 added [ 79.871619][ T5826] team0: Port device team_slave_0 added [ 79.877968][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.885499][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.892644][ T5839] bridge_slave_1: entered allmulticast mode [ 79.900216][ T5839] bridge_slave_1: entered promiscuous mode [ 79.942896][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.950055][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.976144][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.991175][ T5826] team0: Port device team_slave_1 added [ 80.049459][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.057975][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.084444][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.096595][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.104031][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.130609][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.170433][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.180981][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.188105][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.214194][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.227539][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.234625][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.261554][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.274044][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.281008][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.307311][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.346314][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.396565][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.403808][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.430321][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.444458][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.451425][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.477577][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.627233][ T5833] hsr_slave_0: entered promiscuous mode [ 80.637468][ T5833] hsr_slave_1: entered promiscuous mode [ 80.652247][ T5829] hsr_slave_0: entered promiscuous mode [ 80.659885][ T5829] hsr_slave_1: entered promiscuous mode [ 80.666638][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.674737][ T5829] Cannot create hsr debugfs directory [ 80.688054][ T5839] team0: Port device team_slave_0 added [ 80.719366][ T5834] hsr_slave_0: entered promiscuous mode [ 80.726366][ T5834] hsr_slave_1: entered promiscuous mode [ 80.732448][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.740340][ T5834] Cannot create hsr debugfs directory [ 80.780462][ T5839] team0: Port device team_slave_1 added [ 80.909056][ T5826] hsr_slave_0: entered promiscuous mode [ 80.915646][ T5826] hsr_slave_1: entered promiscuous mode [ 80.921731][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.929503][ T5826] Cannot create hsr debugfs directory [ 80.972051][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.979286][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.005621][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.019145][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.026180][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.053023][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.367167][ T5839] hsr_slave_0: entered promiscuous mode [ 81.374075][ T5839] hsr_slave_1: entered promiscuous mode [ 81.380231][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.388122][ T5839] Cannot create hsr debugfs directory [ 81.603923][ T54] Bluetooth: hci0: command tx timeout [ 81.683975][ T54] Bluetooth: hci1: command tx timeout [ 81.689417][ T54] Bluetooth: hci3: command tx timeout [ 81.691103][ T5141] Bluetooth: hci2: command tx timeout [ 81.763250][ T5141] Bluetooth: hci4: command tx timeout [ 81.765368][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.783641][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.814416][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.826017][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.989351][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.008562][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.025366][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.071646][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.237744][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.256293][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.297657][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.332095][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.519413][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.545004][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.605091][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.621178][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.669215][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.722716][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.755405][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.772200][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.797750][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.805148][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.821870][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.851863][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.900887][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.908444][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.030694][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.092336][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.113082][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.160373][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.167510][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.195573][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.202769][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.240976][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.282472][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.289689][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.361937][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.369180][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.390802][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.529301][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.561837][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.588700][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.595842][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.645306][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.652522][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.677932][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.692396][ T5141] Bluetooth: hci0: command tx timeout [ 83.763390][ T5141] Bluetooth: hci3: command tx timeout [ 83.763671][ T54] Bluetooth: hci1: command tx timeout [ 83.779380][ T54] Bluetooth: hci2: command tx timeout [ 83.813532][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.855606][ T54] Bluetooth: hci4: command tx timeout [ 83.907495][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.952924][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.960164][ T5896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.998953][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.006185][ T5896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.207436][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.368297][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.500878][ T5829] veth0_vlan: entered promiscuous mode [ 84.537698][ T5829] veth1_vlan: entered promiscuous mode [ 84.567818][ T5834] veth0_vlan: entered promiscuous mode [ 84.623639][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.636077][ T5834] veth1_vlan: entered promiscuous mode [ 84.698416][ T5833] veth0_vlan: entered promiscuous mode [ 84.746967][ T5833] veth1_vlan: entered promiscuous mode [ 84.761932][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.818383][ T5829] veth0_macvtap: entered promiscuous mode [ 84.837071][ T5834] veth0_macvtap: entered promiscuous mode [ 84.850105][ T5829] veth1_macvtap: entered promiscuous mode [ 84.871655][ T5834] veth1_macvtap: entered promiscuous mode [ 84.886201][ T5826] veth0_vlan: entered promiscuous mode [ 84.942036][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.960920][ T5833] veth0_macvtap: entered promiscuous mode [ 84.980910][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.990254][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.004566][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.016767][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.030080][ T5826] veth1_vlan: entered promiscuous mode [ 85.050111][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.060118][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.069403][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.078604][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.091834][ T5833] veth1_macvtap: entered promiscuous mode [ 85.111451][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.122639][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.135260][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.169594][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.178527][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.188032][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.197079][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.269991][ T5839] veth0_vlan: entered promiscuous mode [ 85.277818][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.290607][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.300682][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.311357][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.322865][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.409098][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.419686][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.430644][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.441721][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.454668][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.495458][ T5839] veth1_vlan: entered promiscuous mode [ 85.527539][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.541197][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.551419][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.560417][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.597372][ T5826] veth0_macvtap: entered promiscuous mode [ 85.610870][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.628907][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.642304][ T5826] veth1_macvtap: entered promiscuous mode [ 85.672664][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.681965][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.709908][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.726272][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.764062][ T54] Bluetooth: hci0: command tx timeout [ 85.808668][ T5839] veth0_macvtap: entered promiscuous mode [ 85.830517][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.841608][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.852186][ T54] Bluetooth: hci2: command tx timeout [ 85.853705][ T5141] Bluetooth: hci1: command tx timeout [ 85.857604][ T5838] Bluetooth: hci3: command tx timeout [ 85.868474][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.879057][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.889746][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.900253][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.919191][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.926606][ T5838] Bluetooth: hci4: command tx timeout [ 85.943616][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.951458][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.978000][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.993043][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.004329][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.014817][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.024830][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.035303][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.047750][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.065714][ T5839] veth1_macvtap: entered promiscuous mode [ 86.076002][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.108758][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.119414][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.128630][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.137729][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.156829][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.191916][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.250289][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.290081][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.308304][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.320524][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.332723][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.347666][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.359003][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.369608][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.382032][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.431233][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.449251][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.461127][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.480455][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.502813][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.520605][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.531110][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.542053][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.555559][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.566767][ T5917] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.655772][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.672783][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.681593][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.715724][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.724904][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.733736][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.259611][ T5924] block device autoloading is deprecated and will be removed. [ 87.925418][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.961908][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.104010][ T5934] loop3: detected capacity change from 0 to 8 [ 88.136389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.190940][ T5934] SQUASHFS error: lzo decompression failed, data probably corrupt [ 88.213662][ T5934] SQUASHFS error: Failed to read block 0x4ef: -5 [ 88.220219][ T5934] SQUASHFS error: Unable to read metadata cache entry [4ed] [ 88.228151][ T5934] SQUASHFS error: Unable to read inode 0x500a7 [ 88.243814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.483062][ T3028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.530433][ T3028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.727827][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 88.780655][ T5896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.793459][ T5896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.850374][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 88.891598][ T5941] bridge_slave_1: left allmulticast mode [ 88.926448][ T5941] bridge_slave_1: left promiscuous mode [ 88.953593][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.028764][ T5941] bridge_slave_0: left allmulticast mode [ 89.066752][ T5941] bridge_slave_0: left promiscuous mode [ 89.072621][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.190145][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.201732][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.225598][ T5949] loop4: detected capacity change from 0 to 512 [ 89.316888][ T5949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.329679][ T5949] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.343544][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.364934][ T5949] bridge0: port 3(syz_tun) entered blocking state [ 89.371649][ T5949] bridge0: port 3(syz_tun) entered disabled state [ 89.380040][ T5949] syz_tun: entered allmulticast mode [ 89.391324][ T5949] syz_tun: entered promiscuous mode [ 89.398573][ T5949] bridge0: port 3(syz_tun) entered blocking state [ 89.405609][ T5949] bridge0: port 3(syz_tun) entered forwarding state [ 89.411263][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 89.421125][ T5955] syz_tun: left allmulticast mode [ 89.426302][ T5955] syz_tun: left promiscuous mode [ 89.431489][ T5955] bridge0: port 3(syz_tun) entered disabled state [ 89.460018][ T5955] bridge_slave_1: left allmulticast mode [ 89.471826][ T5955] bridge_slave_1: left promiscuous mode [ 89.477745][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.505150][ T5955] bridge_slave_0: left allmulticast mode [ 89.510990][ T5955] bridge_slave_0: left promiscuous mode [ 89.517002][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.602080][ T5958] loop2: detected capacity change from 0 to 164 [ 89.696514][ T5958] process 'syz.2.15' launched '/dev/fd/4' with NULL argv: empty string added [ 89.708840][ T5960] loop0: detected capacity change from 0 to 64 [ 90.167805][ T5962] loop1: detected capacity change from 0 to 4096 [ 90.584018][ T5901] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.784607][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 90.811423][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 90.861658][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.910413][ T5901] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 90.926096][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.935560][ T5901] usb 4-1: Product: syz [ 90.945982][ T5987] loop1: detected capacity change from 0 to 164 [ 90.952337][ T5901] usb 4-1: Manufacturer: syz [ 90.967286][ T5901] usb 4-1: SerialNumber: syz [ 91.021295][ T5901] usb 4-1: config 0 descriptor?? [ 91.027627][ T5888] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.071717][ T5901] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 91.102950][ T5901] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 91.199131][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.227827][ T5888] usb 1-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 91.240175][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.303891][ T5888] usb 1-1: config 0 descriptor?? [ 91.401555][ T5993] loop2: detected capacity change from 0 to 1024 [ 91.468633][ T5993] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.480262][ T5993] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.493052][ T5993] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.501475][ T5993] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.564034][ T68] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.571884][ T68] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.667764][ T5901] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 91.681666][ T5901] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 91.737159][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 91.760275][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 91.786170][ T5997] netlink: 456 bytes leftover after parsing attributes in process `syz.2.32'. [ 91.800440][ T5888] usb 1-1: USB disconnect, device number 2 [ 92.018382][ T6002] loop2: detected capacity change from 0 to 1024 [ 92.139458][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.179141][ T976] cfg80211: failed to load regulatory.db [ 92.335202][ T5901] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 92.379764][ T5901] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 92.414335][ T5901] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 92.429284][ T5901] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 92.451673][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.775172][ T29] audit: type=1326 audit(1740172362.059:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b98d0a9 code=0x7ffc0000 [ 92.841904][ T29] audit: type=1326 audit(1740172362.089:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b98d0a9 code=0x7ffc0000 [ 92.865543][ T5901] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 92.867779][ T5901] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 92.892588][ T29] audit: type=1326 audit(1740172362.089:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e7b98d0a9 code=0x7ffc0000 [ 92.925681][ T5901] usb 4-1: USB disconnect, device number 2 [ 92.943377][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.945083][ T6020] netlink: 96 bytes leftover after parsing attributes in process `syz.2.42'. [ 93.004575][ T29] audit: type=1326 audit(1740172362.089:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b98d0a9 code=0x7ffc0000 [ 93.085413][ T29] audit: type=1326 audit(1740172362.089:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b98d0a9 code=0x7ffc0000 [ 93.133937][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 93.147055][ T5888] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 93.160518][ T29] audit: type=1326 audit(1740172362.089:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1e7b98d0a9 code=0x7ffc0000 [ 93.176424][ T5888] usb 2-1: config 0 has no interface number 0 [ 93.221588][ T29] audit: type=1326 audit(1740172362.099:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b98d0a9 code=0x7ffc0000 [ 93.243040][ T5888] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 93.274991][ T5888] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 93.285030][ T29] audit: type=1326 audit(1740172362.099:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e7b98d0a9 code=0x7ffc0000 [ 93.337067][ T29] audit: type=1326 audit(1740172362.099:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b98d0a9 code=0x7ffc0000 [ 93.363890][ T5888] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 93.385534][ T6033] loop4: detected capacity change from 0 to 512 [ 93.430960][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.452521][ T6038] loop2: detected capacity change from 0 to 1024 [ 93.467944][ T29] audit: type=1326 audit(1740172362.099:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6016 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1e7b98d0a9 code=0x7ffc0000 [ 93.474692][ T6033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.502653][ T6033] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.527108][ T5888] usb 2-1: Product: syz [ 93.531322][ T5888] usb 2-1: Manufacturer: syz [ 93.573259][ T5888] usb 2-1: SerialNumber: syz [ 93.638758][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 93.652222][ T5888] usb 2-1: config 0 descriptor?? [ 93.709435][ T6015] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.720691][ T6015] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.753048][ T12] hfsplus: b-tree write err: -5, ino 4 [ 94.007515][ T6015] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 94.027377][ T6015] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 94.162186][ T6054] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 94.248475][ T6056] netlink: 'syz.3.54': attribute type 4 has an invalid length. [ 94.436710][ T6062] netlink: 96 bytes leftover after parsing attributes in process `syz.3.55'. [ 94.663590][ T5888] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 94.686539][ T5888] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 94.712364][ T5888] asix 2-1:0.251: probe with driver asix failed with error -71 [ 94.765923][ T5888] usb 2-1: USB disconnect, device number 2 [ 94.858429][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 95.008589][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 95.177292][ T6084] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 95.388247][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 95.417602][ T6081] loop0: detected capacity change from 0 to 2048 [ 95.420054][ T6090] Bluetooth: MGMT ver 1.23 [ 95.458571][ T6081] ext4: Unknown parameter 'euid<00000000000000000000' [ 95.464373][ T6090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.64'. [ 95.512402][ T6092] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 95.620295][ T6094] Zero length message leads to an empty skb [ 95.773778][ T6096] loop3: detected capacity change from 0 to 512 [ 95.784774][ T6100] netlink: 96 bytes leftover after parsing attributes in process `syz.0.67'. [ 95.801665][ T6096] ======================================================= [ 95.801665][ T6096] WARNING: The mand mount option has been deprecated and [ 95.801665][ T6096] and is ignored by this kernel. Remove the mand [ 95.801665][ T6096] option from the mount to silence this warning. [ 95.801665][ T6096] ======================================================= [ 95.909401][ T6096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.002929][ T6096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.061945][ T6096] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.286866][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.288613][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.603263][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 96.714961][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.882737][ T6117] bridge_slave_1 (unregistering): left allmulticast mode [ 96.902665][ T6117] bridge_slave_1 (unregistering): left promiscuous mode [ 96.911554][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.946440][ T6127] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 97.124942][ T6131] loop0: detected capacity change from 0 to 2048 [ 97.139868][ T6131] ext4: Unknown parameter 'euid<00000000000000000000' [ 97.158961][ T6135] netlink: 'syz.2.80': attribute type 4 has an invalid length. [ 97.509191][ T6148] loop1: detected capacity change from 0 to 512 [ 97.587880][ T6148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.600804][ T6148] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.624971][ T6148] bridge0: port 3(syz_tun) entered blocking state [ 97.631553][ T6148] bridge0: port 3(syz_tun) entered disabled state [ 97.638963][ T6148] syz_tun: entered allmulticast mode [ 97.646738][ T6148] syz_tun: entered promiscuous mode [ 97.652735][ T6148] bridge0: port 3(syz_tun) entered blocking state [ 97.659325][ T6148] bridge0: port 3(syz_tun) entered forwarding state [ 97.669309][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 97.678222][ T6148] syz_tun: left allmulticast mode [ 97.683358][ T6148] syz_tun: left promiscuous mode [ 97.688534][ T6148] bridge0: port 3(syz_tun) entered disabled state [ 97.711292][ T6148] bridge_slave_1: left allmulticast mode [ 97.717420][ T6148] bridge_slave_1: left promiscuous mode [ 97.723468][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.764630][ T6148] bridge_slave_0: left allmulticast mode [ 97.770319][ T6148] bridge_slave_0: left promiscuous mode [ 97.776188][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.932184][ T6159] syz.0.90 uses obsolete (PF_INET,SOCK_PACKET) [ 98.122077][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 98.227798][ T6167] team0: Port device team_slave_0 removed [ 98.235429][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.299850][ T6171] netlink: 'syz.0.96': attribute type 4 has an invalid length. [ 98.396544][ T5913] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 98.429982][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.457978][ T5913] usb 5-1: config 0 descriptor?? [ 98.481219][ T5913] cp210x 5-1:0.0: cp210x converter detected [ 98.529548][ T6177] netlink: 'syz.3.97': attribute type 1 has an invalid length. [ 98.697977][ T6177] loop3: detected capacity change from 0 to 2048 [ 98.733939][ T6177] ext4: Unknown parameter 'euid<00000000000000000000' [ 99.099221][ T5913] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 99.137676][ T5913] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 99.198418][ T5913] usb 5-1: cp210x converter now attached to ttyUSB0 [ 99.249916][ T5913] usb 5-1: USB disconnect, device number 2 [ 99.312241][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 99.333115][ T5913] cp210x 5-1:0.0: device disconnected [ 99.552262][ T6195] kernel profiling enabled (shift: 17) [ 100.550414][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.598885][ T6205] loop0: detected capacity change from 0 to 128 [ 100.681007][ T6205] sysv: Unknown parameter '0x000000000000000001777777777777777777777zIC6똰Z(m.OJ%-As`.#W5"YCdI]ȫCt' [ 100.863253][ T6215] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 101.030065][ T6209] loop3: detected capacity change from 0 to 2048 [ 101.054364][ T6209] ext4: Unknown parameter 'euid<00000000000000000000' [ 101.114890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.126996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 101.210613][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 101.263738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.274372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.284938][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 101.383842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.411862][ T6228] loop4: detected capacity change from 0 to 164 [ 101.485102][ T6228] rock: directory entry would overflow storage [ 101.531956][ T6228] rock: sig=0x4f50, size=4, remaining=3 [ 101.539047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 101.547939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 101.557246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 101.617804][ T6228] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 102.212922][ T6244] loop4: detected capacity change from 0 to 512 [ 102.378981][ T6244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.392025][ T6244] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.534793][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 103.325542][ T5888] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.645815][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 103.770086][ T5888] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 103.901651][ T5888] usb 1-1: config 0 has no interface number 0 [ 104.021310][ T5888] usb 1-1: config 0 interface 12 has no altsetting 0 [ 104.222743][ T5888] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 104.383010][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.491548][ T5888] usb 1-1: Product: syz [ 104.533206][ T5888] usb 1-1: Manufacturer: syz [ 104.583037][ T5888] usb 1-1: SerialNumber: syz [ 104.834340][ T5888] usb 1-1: config 0 descriptor?? [ 105.427435][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.597255][ T5888] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 105.616273][ T5888] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 105.633708][ T5888] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 105.655520][ T5888] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 105.714441][ T5913] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.772759][ T5888] usb 1-1: USB disconnect, device number 3 [ 105.900481][ T5913] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 105.932370][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.976607][ T5913] usb 4-1: config 0 descriptor?? [ 106.006289][ T5913] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 106.099006][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 106.117094][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 106.467690][ T6287] syz_tun: entered allmulticast mode [ 106.517553][ T6287] syz_tun: left allmulticast mode [ 107.056552][ T6295] loop2: detected capacity change from 0 to 512 [ 108.462854][ T6295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.476432][ T6295] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.653109][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 109.728096][ T5913] usb 4-1: USB disconnect, device number 3 [ 110.044592][ T5888] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.242241][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 110.386264][ T5888] usb 1-1: device descriptor read/64, error -32 [ 110.733042][ T5838] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 110.780655][ T5888] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.007522][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.029065][ T5888] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 111.063870][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.113258][ T5888] usb 1-1: config 0 has no interface number 0 [ 111.138279][ T5888] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 111.173688][ T5888] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.234591][ T5888] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 111.246086][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.285310][ T5888] usb 1-1: Product: syz [ 111.289515][ T5888] usb 1-1: Manufacturer: syz [ 111.322938][ T5888] usb 1-1: SerialNumber: syz [ 111.334970][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 111.359646][ T5888] usb 1-1: config 0 descriptor?? [ 111.568612][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 111.655229][ T6337] hsr_slave_0: left promiscuous mode [ 111.685078][ T6337] hsr_slave_1: left promiscuous mode [ 112.760556][ T6349] loop1: detected capacity change from 0 to 512 [ 112.809413][ T6349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.848680][ T6349] EXT4-fs: Ignoring removed i_version option [ 112.872343][ T6349] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 113.422964][ T6361] loop1: detected capacity change from 0 to 512 [ 113.927359][ T6361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.940334][ T6361] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.090300][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 115.218099][ T52] usb 1-1: USB disconnect, device number 5 [ 116.203705][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 116.203721][ T29] audit: type=1326 audit(1740172385.479:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065458d0a9 code=0x7ffc0000 [ 116.349345][ T6378] loop2: detected capacity change from 0 to 16 [ 116.418117][ T29] audit: type=1326 audit(1740172385.479:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065458d0a9 code=0x7ffc0000 [ 116.480683][ T6379] loop0: detected capacity change from 0 to 1024 [ 116.508367][ T6378] erofs (device loop2): invalid sb_extslots 4160 (more than a fs block) [ 116.537826][ T29] audit: type=1326 audit(1740172385.569:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f065458d0a9 code=0x7ffc0000 [ 116.563673][ T29] audit: type=1326 audit(1740172385.569:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065458d0a9 code=0x7ffc0000 [ 116.586061][ T29] audit: type=1326 audit(1740172385.569:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f065458d0a9 code=0x7ffc0000 [ 116.610604][ T29] audit: type=1326 audit(1740172385.569:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065458d0a9 code=0x7ffc0000 [ 116.632812][ T29] audit: type=1326 audit(1740172385.569:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f065458d0a9 code=0x7ffc0000 [ 116.655468][ T29] audit: type=1326 audit(1740172385.569:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065458d0a9 code=0x7ffc0000 [ 116.655759][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.678165][ T29] audit: type=1326 audit(1740172385.589:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f065458d0a9 code=0x7ffc0000 [ 116.770078][ T29] audit: type=1326 audit(1740172385.589:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f065458d0a9 code=0x7ffc0000 [ 117.240321][ T6379] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.266959][ T6379] EXT4-fs: Ignoring removed orlov option [ 117.310137][ T6379] EXT4-fs (loop0): Test dummy encryption mode enabled [ 117.374866][ T6379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.642806][ T6379] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 117.906351][ T6379] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 118.052108][ T6407] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 118.098811][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.312146][ T6412] capability: warning: `syz.2.168' uses deprecated v2 capabilities in a way that may be insecure [ 118.390674][ T6412] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 118.580515][ T6412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.701179][ T6433] loop0: detected capacity change from 0 to 256 [ 119.893229][ T6436] loop4: detected capacity change from 0 to 512 [ 120.854525][ T6436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.867606][ T6436] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.028162][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 121.072011][ T6433] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 123.121691][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.426234][ T6469] loop1: detected capacity change from 0 to 128 [ 124.809408][ T5888] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.830084][ T6469] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.874957][ T6469] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.009991][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 125.037188][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 125.088340][ T5888] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 125.115829][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 125.156210][ T5888] usb 1-1: Product: syz [ 125.160416][ T5888] usb 1-1: Manufacturer: syz [ 125.194330][ T5888] usb 1-1: SerialNumber: syz [ 125.201643][ T5839] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.203488][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 125.254102][ T5888] usb 1-1: config 0 descriptor?? [ 125.259939][ T6466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.449920][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 125.449938][ T29] audit: type=1326 audit(1740172394.729:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 125.533274][ T29] audit: type=1326 audit(1740172394.729:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 125.561298][ T5888] usb 1-1: USB disconnect, device number 6 [ 125.644741][ T29] audit: type=1326 audit(1740172394.779:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 125.734738][ T6484] loop3: detected capacity change from 0 to 2048 [ 125.757238][ T6464] netlink: 'syz.0.180': attribute type 3 has an invalid length. [ 125.758373][ T29] audit: type=1326 audit(1740172394.779:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 125.922938][ T6489] loop1: detected capacity change from 0 to 512 [ 125.957829][ T6484] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 126.163713][ T6489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.176753][ T6489] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.258883][ T29] audit: type=1326 audit(1740172394.779:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 126.282141][ T29] audit: type=1326 audit(1740172394.779:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 126.344902][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 126.729545][ T6484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.260885][ T29] audit: type=1326 audit(1740172394.779:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 127.283622][ T29] audit: type=1326 audit(1740172394.779:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 128.283557][ T29] audit: type=1326 audit(1740172394.779:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 128.305833][ T29] audit: type=1326 audit(1740172394.779:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.1.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 129.078701][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.458341][ T6508] ISOFS: Unable to identify CD-ROM format. [ 130.826619][ T6517] loop0: detected capacity change from 0 to 128 [ 130.943272][ T6517] EXT4-fs (loop0): Test dummy encryption mode enabled [ 130.975423][ T6517] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.003898][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 131.003916][ T29] audit: type=1326 audit(1740172400.289:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 131.086738][ T6517] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.207450][ T29] audit: type=1326 audit(1740172400.289:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 131.285608][ T29] audit: type=1326 audit(1740172400.389:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 131.375988][ T29] audit: type=1326 audit(1740172400.389:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 131.461157][ T29] audit: type=1326 audit(1740172400.389:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 131.524525][ T6517] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 131.585767][ T29] audit: type=1326 audit(1740172400.389:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 131.667716][ T29] audit: type=1326 audit(1740172400.389:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 131.724278][ T5826] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.755136][ T29] audit: type=1326 audit(1740172400.389:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 131.796098][ T29] audit: type=1326 audit(1740172400.389:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 131.872997][ T29] audit: type=1326 audit(1740172400.389:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6520 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fbe29d8d0a9 code=0x7ffc0000 [ 132.138117][ T6542] loop1: detected capacity change from 0 to 764 [ 132.293692][ T6547] loop4: detected capacity change from 0 to 512 [ 133.155391][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.162120][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.438215][ T6547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.451264][ T6547] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.609654][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 135.383340][ T5838] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 135.461909][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.903251][ T52] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.023262][ T5913] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 137.102234][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 137.153482][ T52] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 137.183198][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.201626][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 137.210304][ T5913] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.245392][ T5913] usb 4-1: config 0 has no interface number 0 [ 137.255251][ T52] usb 1-1: config 0 descriptor?? [ 137.286602][ T5913] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 137.307779][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.323377][ T5913] usb 4-1: Product: syz [ 137.333220][ T5913] usb 4-1: Manufacturer: syz [ 137.343336][ T5913] usb 4-1: SerialNumber: syz [ 137.423270][ T5901] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.429318][ T5913] usb 4-1: config 0 descriptor?? [ 137.456875][ T5913] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 137.509789][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.520551][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.531770][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.638681][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 137.645021][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.653748][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 137.667212][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.678410][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 137.688653][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 137.698487][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.706664][ T5901] usb 2-1: Product: syz [ 137.710831][ T5901] usb 2-1: Manufacturer: syz [ 137.715472][ T5901] usb 2-1: SerialNumber: syz [ 137.727824][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.739876][ T5901] usb 2-1: config 0 descriptor?? [ 137.766093][ T5901] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 137.793192][ T5901] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 138.335036][ T6578] chnl_net:caif_netlink_parms(): no params data found [ 138.443595][ T5901] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 138.463302][ T5901] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 138.861440][ T5913] gspca_spca1528: reg_w err -71 [ 138.868880][ T5913] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 138.890628][ T5913] usb 4-1: USB disconnect, device number 4 [ 139.121399][ T5901] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 139.143252][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.173986][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.191579][ T6578] bridge_slave_0: entered allmulticast mode [ 139.208964][ T6578] bridge_slave_0: entered promiscuous mode [ 139.234730][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.259005][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.277113][ T6578] bridge_slave_1: entered allmulticast mode [ 139.296025][ T6578] bridge_slave_1: entered promiscuous mode [ 139.539240][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.578002][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.763652][ T54] Bluetooth: hci5: command tx timeout [ 139.772726][ T52] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 139.823237][ T52] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 139.856426][ T6578] team0: Port device team_slave_0 added [ 139.875879][ T52] asix 1-1:0.0: probe with driver asix failed with error -71 [ 139.889661][ T6578] team0: Port device team_slave_1 added [ 139.932833][ T5901] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 139.958516][ T52] usb 1-1: USB disconnect, device number 7 [ 139.981148][ T5901] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 140.013645][ T5901] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 140.053352][ T5901] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 140.096533][ T5901] usb 2-1: USB disconnect, device number 3 [ 140.125617][ T6596] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.217725][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 140.352094][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.359954][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.423190][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.484587][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.516697][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.543103][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.620997][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.720809][ T6607] loop0: detected capacity change from 0 to 512 [ 140.762999][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.856582][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 141.035486][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.197784][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.325976][ T8] usb 5-1: Product: syz [ 141.390975][ T8] usb 5-1: Manufacturer: syz [ 141.459045][ T8] usb 5-1: SerialNumber: syz [ 141.675837][ T6607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.689133][ T6607] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.784074][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 141.843290][ T54] Bluetooth: hci5: command tx timeout [ 142.119775][ T6599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.762748][ T6430] Set syz1 is full, maxelem 65536 reached [ 143.047572][ T6599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.193240][ T54] Bluetooth: hci5: command tx timeout [ 144.227783][ T8] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 144.264336][ T8] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 144.271867][ T8] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 144.362967][ T8] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 144.381112][ T6607] bridge0: port 3(syz_tun) entered blocking state [ 144.387800][ T6607] bridge0: port 3(syz_tun) entered disabled state [ 144.394659][ T6607] syz_tun: entered allmulticast mode [ 144.401998][ T6607] syz_tun: entered promiscuous mode [ 144.407943][ T6607] bridge0: port 3(syz_tun) entered blocking state [ 144.414508][ T6607] bridge0: port 3(syz_tun) entered forwarding state [ 144.421546][ T6611] syz_tun: left allmulticast mode [ 144.426633][ T6611] syz_tun: left promiscuous mode [ 144.431786][ T6611] bridge0: port 3(syz_tun) entered disabled state [ 144.470343][ T6611] bridge_slave_1: left allmulticast mode [ 144.477413][ T6611] bridge_slave_1: left promiscuous mode [ 144.483561][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.509116][ T8] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 144.519918][ T6611] bridge_slave_0: left allmulticast mode [ 144.525645][ T6611] bridge_slave_0: left promiscuous mode [ 144.531465][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.571778][ T8] wwan wwan0: port wwan0mbim0 attached [ 144.603614][ T5841] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.785069][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 144.851813][ T5841] usb 2-1: config 8 has an invalid interface number: 204 but max is 0 [ 144.861144][ T5841] usb 2-1: config 8 has no interface number 0 [ 144.877034][ T5841] usb 2-1: config 8 interface 204 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 144.902657][ T5841] usb 2-1: config 8 interface 204 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 144.988137][ T5841] usb 2-1: config 8 interface 204 has no altsetting 0 [ 145.048359][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.079750][ T6578] hsr_slave_0: entered promiscuous mode [ 145.085543][ T5841] usb 2-1: New USB device found, idVendor=0f11, idProduct=1010, bcdDevice=2c.bb [ 145.110846][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.143233][ T5841] usb 2-1: Product: syz [ 145.152298][ T5841] usb 2-1: Manufacturer: syz [ 145.161125][ T6578] hsr_slave_1: entered promiscuous mode [ 145.194451][ T6578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.202052][ T6578] Cannot create hsr debugfs directory [ 145.203028][ T5841] usb 2-1: SerialNumber: syz [ 145.267284][ T6620] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.393410][ T8] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42 [ 145.515410][ T8] usb 5-1: USB disconnect, device number 3 [ 145.525864][ T5841] ldusb 2-1:8.204: Interrupt in endpoint not found [ 145.554735][ T8] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 145.594035][ T5841] usb 2-1: USB disconnect, device number 4 [ 145.773260][ T6627] loop4: detected capacity change from 0 to 1024 [ 145.829565][ T6627] hfsplus: failed to load attributes file [ 145.937668][ T8] wwan wwan0: port wwan0mbim0 disconnected [ 146.051895][ T5998] udevd[5998]: setting mode of /dev/bus/usb/005/003 to 020664 failed: No such file or directory [ 146.090979][ T5998] udevd[5998]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory [ 146.257127][ T54] Bluetooth: hci5: command tx timeout [ 146.531375][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.759319][ T8] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 146.771085][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.790760][ T8] usb 2-1: config 0 has no interface number 0 [ 146.814466][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 146.830676][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.843427][ T8] usb 2-1: Product: syz [ 146.847623][ T8] usb 2-1: Manufacturer: syz [ 146.882997][ T8] usb 2-1: SerialNumber: syz [ 146.965470][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.984513][ T8] usb 2-1: config 0 descriptor?? [ 147.029453][ T8] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 147.056532][ T8] usb 2-1: No valid video chain found. [ 147.256482][ T5841] usb 2-1: USB disconnect, device number 5 [ 147.271316][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.467168][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.579949][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.015820][ T6578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.340254][ T6578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.701193][ T6651] loop1: detected capacity change from 0 to 512 [ 148.893991][ T6651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.906759][ T6651] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.962043][ T6578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.039394][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 149.061419][ T6578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.141411][ T6670] loop4: detected capacity change from 0 to 512 [ 150.203009][ T6670] __quota_error: 18 callbacks suppressed [ 150.203029][ T6670] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 150.331942][ T6670] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 150.420494][ T6670] EXT4-fs error (device loop4): ext4_acquire_dquot:6912: comm syz.4.238: Failed to acquire dquot type 1 [ 150.462049][ T6670] EXT4-fs (loop4): 1 truncate cleaned up [ 150.479029][ T6677] loop0: detected capacity change from 0 to 512 [ 150.569737][ T6677] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #4: comm syz.0.240: pblk 26 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 150.613115][ T6670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.663930][ T6677] EXT4-fs error (device loop0): ext4_quota_enable:7089: comm syz.0.240: Bad quota inode: 4, type: 1 [ 150.676542][ T6670] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.712766][ T6677] EXT4-fs warning (device loop0): ext4_enable_quotas:7130: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 150.827414][ T6677] EXT4-fs (loop0): mount failed [ 151.060937][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.094474][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.117086][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.178735][ T51] bond0 (unregistering): Released all slaves [ 151.671892][ T6687] loop0: detected capacity change from 0 to 1024 [ 151.742830][ T6687] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 151.779222][ T6687] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 151.802164][ T6687] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 151.847049][ T6687] EXT4-fs error (device loop0): ext4_get_journal_inode:5783: inode #5: comm syz.0.242: unexpected bad inode w/o EXT4_IGET_BAD [ 151.898315][ T6687] EXT4-fs (loop0): no journal found [ 151.942592][ T6687] EXT4-fs (loop0): can't get journal size [ 152.010514][ T6687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.030852][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.748925][ T6578] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.858040][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.865284][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.895156][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.902348][ T6300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.961348][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.208783][ T6707] Option 'd' to dns_resolver key: bad/missing value [ 153.371852][ T51] hsr_slave_0: left promiscuous mode [ 153.389387][ T51] hsr_slave_1: left promiscuous mode [ 153.400893][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.429591][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.449716][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.471770][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.543108][ T51] veth1_macvtap: left promiscuous mode [ 153.563548][ T51] veth0_macvtap: left promiscuous mode [ 153.582206][ T51] veth1_vlan: left promiscuous mode [ 153.595746][ T51] veth0_vlan: left promiscuous mode [ 154.036081][ T6718] loop4: detected capacity change from 0 to 512 [ 154.186809][ T6718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 154.214642][ T6718] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.365739][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 155.299197][ T976] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.333230][ T5888] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.343098][ T51] team0 (unregistering): Port device team_slave_1 removed [ 155.407612][ T51] team0 (unregistering): Port device team_slave_0 removed [ 155.465514][ T976] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 155.477950][ T976] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 155.490266][ T976] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 155.493417][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 155.502634][ T6726] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002b: 0000 [#1] PREEMPT SMP KASAN PTI [ 155.518870][ T6726] KASAN: null-ptr-deref in range [0x0000000000000158-0x000000000000015f] [ 155.527289][ T6726] CPU: 1 UID: 0 PID: 6726 Comm: syz.4.250 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 155.537340][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 155.547398][ T6726] RIP: 0010:qca_close+0x72/0x2e0 [ 155.552338][ T6726] Code: e4 77 eb f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 70 f9 52 f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a [ 155.571937][ T6726] RSP: 0018:ffffc9001aaffb90 EFLAGS: 00010206 [ 155.577993][ T6726] RAX: 000000000000002b RBX: ffff888079bb4400 RCX: ffff888020f48000 [ 155.585951][ T6726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a [ 155.593907][ T6726] RBP: 1ffff1100f3768b7 R08: ffffffff8189c813 R09: 1ffffffff28ad627 [ 155.601864][ T6726] R10: dffffc0000000000 R11: ffffffff88d686b0 R12: 0000000000000000 [ 155.609823][ T6726] R13: dffffc0000000000 R14: ffff888079bb45b8 R15: 0000000000000000 [ 155.617785][ T6726] FS: 00005555739d9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 155.626711][ T6726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.633282][ T6726] CR2: 00007f06545704e0 CR3: 0000000040268000 CR4: 00000000003526f0 [ 155.641242][ T6726] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.649198][ T6726] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.657157][ T6726] Call Trace: [ 155.660421][ T6726] [ 155.663338][ T6726] ? __die_body+0x5f/0xb0 [ 155.667662][ T6726] ? die_addr+0xb0/0xe0 [ 155.671809][ T6726] ? exc_general_protection+0x3dd/0x5d0 [ 155.677347][ T6726] ? asm_exc_general_protection+0x26/0x30 [ 155.683056][ T6726] ? __pfx_qca_close+0x10/0x10 [ 155.687808][ T6726] ? enable_work+0x2e3/0x360 [ 155.692390][ T6726] ? qca_close+0x72/0x2e0 [ 155.696710][ T6726] hci_uart_tty_close+0x205/0x290 [ 155.701728][ T6726] tty_ldisc_kill+0xa3/0x1a0 [ 155.706311][ T6726] tty_ldisc_release+0x1a1/0x200 [ 155.711236][ T6726] tty_release_struct+0x2b/0xe0 [ 155.716082][ T6726] tty_release+0xd06/0x12c0 [ 155.720580][ T6726] ? __pfx_tty_release+0x10/0x10 [ 155.725507][ T6726] __fput+0x3e9/0x9f0 [ 155.729482][ T6726] task_work_run+0x24f/0x310 [ 155.734060][ T6726] ? _raw_spin_unlock+0x28/0x50 [ 155.738899][ T6726] ? __pfx_task_work_run+0x10/0x10 [ 155.743996][ T6726] ? syscall_exit_to_user_mode+0xa3/0x340 [ 155.749705][ T6726] syscall_exit_to_user_mode+0x13f/0x340 [ 155.755333][ T6726] do_syscall_64+0x100/0x230 [ 155.759917][ T6726] ? clear_bhb_loop+0x45/0xa0 [ 155.764587][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.770468][ T6726] RIP: 0033:0x7f53d2d8d0a9 [ 155.774886][ T6726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.794483][ T6726] RSP: 002b:00007ffd53357788 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 155.802884][ T6726] RAX: 0000000000000000 RBX: 00007f53d2fa7ba0 RCX: 00007f53d2d8d0a9 [ 155.810842][ T6726] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 155.818798][ T6726] RBP: 00007f53d2fa7ba0 R08: 0000000000000130 R09: 0000000d53357a7f [ 155.826757][ T6726] R10: 00007f53d2fa7ac0 R11: 0000000000000246 R12: 0000000000025f37 [ 155.834718][ T6726] R13: 00007ffd53357880 R14: ffffffffffffffff R15: 00007ffd533578a0 [ 155.842686][ T6726] [ 155.845692][ T6726] Modules linked in: [ 155.851857][ T6726] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 155.863177][ T976] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 155.894047][ T976] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 155.900423][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.951521][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.959790][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.961586][ T6726] RIP: 0010:qca_close+0x72/0x2e0 [ 155.993664][ T6726] Code: e4 77 eb f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 70 f9 52 f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a [ 156.023338][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.036138][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.051032][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.072649][ T6726] RSP: 0018:ffffc9001aaffb90 EFLAGS: 00010206 [ 156.107981][ T6726] RAX: 000000000000002b RBX: ffff888079bb4400 RCX: ffff888020f48000 [ 156.145913][ T6726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a [ 156.173189][ T6726] RBP: 1ffff1100f3768b7 R08: ffffffff8189c813 R09: 1ffffffff28ad627 [ 156.181276][ T6726] R10: dffffc0000000000 R11: ffffffff88d686b0 R12: 0000000000000000 [ 156.232880][ T6726] R13: dffffc0000000000 R14: ffff888079bb45b8 R15: 0000000000000000 [ 156.263229][ T6726] FS: 00005555739d9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 156.272221][ T6726] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.293328][ T6726] CR2: 0000400001000000 CR3: 0000000040268000 CR4: 00000000003526f0 [ 156.301368][ T6726] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.328001][ T6726] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 156.343271][ T6726] Kernel panic - not syncing: Fatal exception [ 156.349502][ T6726] Kernel Offset: disabled [ 156.353812][ T6726] Rebooting in 86400 seconds..