last executing test programs: 2.001433392s ago: executing program 2 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ocfs2(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x2804440, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x5, 0x4430, &(0x7f0000004840)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.574598538s ago: executing program 3 (id=315): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r0, &(0x7f0000000cc0), 0xfd45) 1.558772168s ago: executing program 2 (id=316): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 1.45943031s ago: executing program 3 (id=317): prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1.292483642s ago: executing program 3 (id=319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) 1.198281693s ago: executing program 3 (id=321): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) 1.182101724s ago: executing program 0 (id=322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47) 1.054984166s ago: executing program 3 (id=324): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x7351, 0x8001) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x86, 0x7e4000, 0x20}) 972.093317ms ago: executing program 1 (id=325): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) 946.590877ms ago: executing program 2 (id=326): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2021) 945.368947ms ago: executing program 0 (id=327): socket$packet(0x11, 0xa, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xc, 0x7fffffff}]}) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0006000800"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88000001"], 0x0) 854.090318ms ago: executing program 1 (id=328): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000189c0)={0x0, 0x0, &(0x7f0000018980)={&(0x7f0000001240)=@newtaction={0xdc8, 0x30, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{0xdb4, 0x1, [@m_xt={0xdb0, 0x1f, 0x0, 0x0, {{0x7}, {0xd0c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x71, 0x6, {0xe, 'filter\x00', 0x6, 0x3, "e0e745db691d7570c34407217c70a75fb9d83d62a14aeb1c44c6dd14b5b3a76f63d4c59432c893c4508cd875e86e597acbbb491284564ca0fbb5bc07896a6525005a6ea5f5266e"}}, @TCA_IPT_TARG={0xc6d, 0x6, {0x6, 'mangle\x00', 0x6, 0xa, "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"}}]}, {0x7e, 0x6, "1a336a142bc2d0cc9aadebae77b9793a2be3fe46f70327e7cfd3d303388ddf00057939bca0e6d34677416503b5e9ecb23f8f2299b5c088006bc536b413e5f5da5d806765a75114be958f1c6c8c852cc53b30018ddb705d1e2ba1245a6b89148f7642f2a27aef19e95c94d2735800aa554321d613ccd2620b8ca4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xdc8}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 777.01882ms ago: executing program 2 (id=329): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) pread64(r0, &(0x7f0000001200)=""/223, 0x104, 0xb147) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) 751.76891ms ago: executing program 0 (id=330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3, 0x3}, 0x6) 711.44728ms ago: executing program 1 (id=331): r0 = syz_io_uring_setup(0xb92, &(0x7f00000005c0)={0x0, 0x44b6, 0x80, 0x3, 0x3d2}, &(0x7f0000000300)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1d69, 0x0, 0x0, 0x0, 0x0) 641.813781ms ago: executing program 2 (id=332): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b70400000000000085000000330000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r0], 0xfe33) 600.118862ms ago: executing program 1 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 558.023763ms ago: executing program 0 (id=334): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) 349.768666ms ago: executing program 0 (id=335): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = syz_open_dev$swradio(&(0x7f0000001180), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0xb, @win={{0x3, 0x7fff, 0xfffffffe}, 0x6, 0xfff, 0x0, 0x4, 0x0, 0x4}}) socket$nl_route(0x10, 0x3, 0x0) 330.320466ms ago: executing program 1 (id=336): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 300.749347ms ago: executing program 2 (id=337): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1064, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 116.650679ms ago: executing program 0 (id=338): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x8}, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x0, 0x0, 0x0, @time={0x7, 0x5}, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) 21.84132ms ago: executing program 1 (id=339): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x400448cc, 0x0) 0s ago: executing program 3 (id=340): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) accept4(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 81.511234][ T5777] cgroup: Unknown subsys name 'net' [ 81.643653][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.322124][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.991377][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.001608][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.017623][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.026422][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.034479][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.043188][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.051304][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.058836][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.067553][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.076064][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.083455][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.083740][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.091408][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.099466][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.105259][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.114876][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.126745][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.127396][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.141342][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.143319][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.157099][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.158985][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.177551][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.185539][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.667794][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 85.818484][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 85.861292][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 85.881649][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.889739][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.898426][ T5795] bridge_slave_0: entered allmulticast mode [ 85.905969][ T5795] bridge_slave_0: entered promiscuous mode [ 85.918807][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.926088][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.933299][ T5795] bridge_slave_1: entered allmulticast mode [ 85.940886][ T5795] bridge_slave_1: entered promiscuous mode [ 85.977889][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 86.054338][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.083983][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.186778][ T5795] team0: Port device team_slave_0 added [ 86.199720][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.207780][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.215254][ T5791] bridge_slave_0: entered allmulticast mode [ 86.222244][ T5791] bridge_slave_0: entered promiscuous mode [ 86.246043][ T5795] team0: Port device team_slave_1 added [ 86.258594][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.265917][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.273095][ T5791] bridge_slave_1: entered allmulticast mode [ 86.280498][ T5791] bridge_slave_1: entered promiscuous mode [ 86.300316][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.307597][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.314883][ T5787] bridge_slave_0: entered allmulticast mode [ 86.321857][ T5787] bridge_slave_0: entered promiscuous mode [ 86.380011][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.387508][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.394709][ T5787] bridge_slave_1: entered allmulticast mode [ 86.402722][ T5787] bridge_slave_1: entered promiscuous mode [ 86.432845][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.440180][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.447973][ T5786] bridge_slave_0: entered allmulticast mode [ 86.455694][ T5786] bridge_slave_0: entered promiscuous mode [ 86.465993][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.490974][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.501316][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.509065][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.535605][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.548225][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.556220][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.563412][ T5786] bridge_slave_1: entered allmulticast mode [ 86.570685][ T5786] bridge_slave_1: entered promiscuous mode [ 86.591676][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.602934][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.631884][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.639795][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.665923][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.724480][ T5787] team0: Port device team_slave_0 added [ 86.733478][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.758866][ T5791] team0: Port device team_slave_0 added [ 86.767439][ T5787] team0: Port device team_slave_1 added [ 86.775470][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.804564][ T5791] team0: Port device team_slave_1 added [ 86.889766][ T5786] team0: Port device team_slave_0 added [ 86.901490][ T5795] hsr_slave_0: entered promiscuous mode [ 86.909764][ T5795] hsr_slave_1: entered promiscuous mode [ 86.930189][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.937440][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.964105][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.977068][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.984119][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.010203][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.023502][ T5786] team0: Port device team_slave_1 added [ 87.066412][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.073423][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.124865][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.150885][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.158011][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.185684][ T50] Bluetooth: hci2: command tx timeout [ 87.192317][ T5801] Bluetooth: hci1: command tx timeout [ 87.198229][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.264978][ T50] Bluetooth: hci0: command tx timeout [ 87.270862][ T50] Bluetooth: hci3: command tx timeout [ 87.292104][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.299857][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.331034][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.408636][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.420334][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.451974][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.542314][ T5787] hsr_slave_0: entered promiscuous mode [ 87.555145][ T5787] hsr_slave_1: entered promiscuous mode [ 87.561611][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.575300][ T5787] Cannot create hsr debugfs directory [ 87.619996][ T5791] hsr_slave_0: entered promiscuous mode [ 87.626931][ T5791] hsr_slave_1: entered promiscuous mode [ 87.633114][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.640767][ T5791] Cannot create hsr debugfs directory [ 87.736550][ T5786] hsr_slave_0: entered promiscuous mode [ 87.743122][ T5786] hsr_slave_1: entered promiscuous mode [ 87.750769][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.758949][ T5786] Cannot create hsr debugfs directory [ 88.059015][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.070687][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.094462][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.107696][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.199109][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.214465][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.232327][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.243619][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.359712][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.396214][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.410906][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.422799][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.493156][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.504519][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.528216][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.540691][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.647998][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.670244][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.720897][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.748885][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.756434][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.774372][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.785101][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.812412][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.819658][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.833318][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.840499][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.893432][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.922412][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.929620][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.939398][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.946608][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.965925][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.001040][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.008258][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.070653][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.121510][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.128720][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.149956][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.157237][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.265325][ T50] Bluetooth: hci2: command tx timeout [ 89.266926][ T5801] Bluetooth: hci1: command tx timeout [ 89.326688][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.338403][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.349525][ T5801] Bluetooth: hci0: command tx timeout [ 89.358535][ T5801] Bluetooth: hci3: command tx timeout [ 89.596205][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.757063][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.782192][ T5795] veth0_vlan: entered promiscuous mode [ 89.802601][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.816381][ T5795] veth1_vlan: entered promiscuous mode [ 89.881637][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.936634][ T5787] veth0_vlan: entered promiscuous mode [ 89.975864][ T5787] veth1_vlan: entered promiscuous mode [ 89.987862][ T5795] veth0_macvtap: entered promiscuous mode [ 90.026814][ T5791] veth0_vlan: entered promiscuous mode [ 90.035569][ T5795] veth1_macvtap: entered promiscuous mode [ 90.063207][ T5791] veth1_vlan: entered promiscuous mode [ 90.093409][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.116751][ T5786] veth0_vlan: entered promiscuous mode [ 90.132686][ T5786] veth1_vlan: entered promiscuous mode [ 90.144047][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.170248][ T5795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.179844][ T5795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.189713][ T5795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.200065][ T5795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.220708][ T5787] veth0_macvtap: entered promiscuous mode [ 90.262757][ T5791] veth0_macvtap: entered promiscuous mode [ 90.271096][ T5787] veth1_macvtap: entered promiscuous mode [ 90.296662][ T5791] veth1_macvtap: entered promiscuous mode [ 90.383130][ T5786] veth0_macvtap: entered promiscuous mode [ 90.419855][ T5786] veth1_macvtap: entered promiscuous mode [ 90.430020][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.442092][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.453945][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.477119][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.486042][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.489714][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.498085][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.514443][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.527213][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.539753][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.564084][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.575577][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.588887][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.603735][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.615787][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.626511][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.638643][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.650247][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.664312][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.673447][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.682900][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.692057][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.712641][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.721891][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.731745][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.740785][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.790540][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.803193][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.813156][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.824223][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.834128][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.844605][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.856654][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.910208][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.919660][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.936808][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.957719][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.967990][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.980788][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.991287][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.001896][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.013146][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.073857][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.088390][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.097525][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.107255][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.157881][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.167178][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.304387][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.320188][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.345973][ T5801] Bluetooth: hci2: command tx timeout [ 91.345984][ T50] Bluetooth: hci1: command tx timeout [ 91.425359][ T5801] Bluetooth: hci0: command tx timeout [ 91.425914][ T50] Bluetooth: hci3: command tx timeout [ 91.473491][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.508239][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.534453][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.581036][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.652806][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.673635][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.757341][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.795379][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.925111][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.947288][ T5891] netlink: 'syz.3.4': attribute type 7 has an invalid length. [ 91.960642][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.005093][ T5891] gretap0: entered promiscuous mode [ 92.037426][ T5891] gretap0: left promiscuous mode [ 92.152243][ T1188] cfg80211: failed to load regulatory.db [ 92.337517][ T5898] syz.0.8[5898]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.455790][ T5900] Bluetooth: MGMT ver 1.22 [ 92.675805][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.815512][ T5850] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.874318][ T5910] capability: warning: `syz.2.13' uses deprecated v2 capabilities in a way that may be insecure [ 93.035249][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 93.059299][ T5850] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 93.085234][ T5850] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 93.100040][ T5898] loop0: detected capacity change from 0 to 32768 [ 93.103894][ T5914] loop1: detected capacity change from 0 to 2048 [ 93.120744][ T5850] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 93.133001][ T5898] ======================================================= [ 93.133001][ T5898] WARNING: The mand mount option has been deprecated and [ 93.133001][ T5898] and is ignored by this kernel. Remove the mand [ 93.133001][ T5898] option from the mount to silence this warning. [ 93.133001][ T5898] ======================================================= [ 93.167916][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.184649][ T5850] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 93.240699][ T5850] usb 4-1: config 0 interface 0 has no altsetting 0 [ 93.277233][ T5850] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 93.294659][ T5914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.306859][ T5850] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 93.306911][ T5850] usb 4-1: Product: syz [ 93.306926][ T5850] usb 4-1: Manufacturer: syz [ 93.306941][ T5850] usb 4-1: SerialNumber: syz [ 93.322044][ T5850] usb 4-1: config 0 descriptor?? [ 93.435480][ T50] Bluetooth: hci2: command tx timeout [ 93.435894][ T5801] Bluetooth: hci1: command tx timeout [ 93.447057][ T5850] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 93.478739][ T5898] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 93.505452][ T5801] Bluetooth: hci0: command tx timeout [ 93.514964][ T5801] Bluetooth: hci3: command tx timeout [ 93.543088][ T5850] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 93.707031][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.878512][ T5927] netlink: 10 bytes leftover after parsing attributes in process `syz.1.18'. [ 93.917182][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 94.208357][ T5924] loop2: detected capacity change from 0 to 32768 [ 94.243412][ T5924] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.17 (5924) [ 94.332176][ T5934] loop0: detected capacity change from 0 to 64 [ 94.347289][ T5864] usb 4-1: USB disconnect, device number 2 [ 94.356379][ T5924] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.374421][ T5924] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 94.404949][ T5924] BTRFS info (device loop2): metadata ratio 2 [ 94.414523][ T5864] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 94.424864][ T5924] BTRFS info (device loop2): allowing degraded mounts [ 94.441969][ T5924] BTRFS info (device loop2): force zlib compression, level 3 [ 94.462078][ T5924] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 94.483751][ T5924] BTRFS info (device loop2): use zstd compression, level 3 [ 94.509876][ T5924] BTRFS info (device loop2): force clearing of disk cache [ 94.525249][ T5924] BTRFS info (device loop2): max_inline at 0 [ 94.541555][ T5924] BTRFS info (device loop2): using free space tree [ 94.591455][ T5786] hfs: node 4:3 still has 1 user(s)! [ 94.672933][ T5924] BTRFS info (device loop2): enabling ssd optimizations [ 94.706633][ T5924] BTRFS info (device loop2): rebuilding free space tree [ 94.888193][ T5924] BTRFS error (device loop2: state M): unrecognized mount option 'ÿÿ18446744073709551615ÿ01777777777777777777777±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Ç0177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿÿÿ' [ 95.077379][ T5795] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.742959][ T5973] loop3: detected capacity change from 0 to 16 [ 95.844994][ T5973] erofs: (device loop3): mounted with root inode @ nid 36. [ 95.959832][ T5172] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.186145][ T5172] usb 3-1: Using ep0 maxpacket: 8 [ 96.196679][ T5978] loop3: detected capacity change from 0 to 4096 [ 96.213832][ T5172] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 96.233388][ T5172] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 96.256392][ T5172] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.285288][ T5172] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 96.342338][ T5172] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 96.353114][ T5172] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.367826][ T5172] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.378218][ T5172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.378451][ T5982] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.382089][ T5978] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 96.496240][ T5978] NILFS (loop3): mounting fs with errors [ 96.603869][ T5983] loop0: detected capacity change from 0 to 8192 [ 96.612210][ T5985] sit0: entered promiscuous mode [ 96.641968][ T5985] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 96.652189][ T5172] usb 3-1: GET_CAPABILITIES returned 0 [ 96.677706][ T5172] usbtmc 3-1:16.0: can't read capabilities [ 96.715246][ T5985] netlink: 1 bytes leftover after parsing attributes in process `syz.1.36'. [ 96.734234][ T5978] syz.3.33 (5978) used greatest stack depth: 19408 bytes left [ 96.926416][ T5988] netlink: 44 bytes leftover after parsing attributes in process `syz.1.38'. [ 96.938622][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 96.959737][ T5969] usbtmc 3-1:16.0: Unable to send data, error -71 [ 97.014446][ T5172] usb 3-1: USB disconnect, device number 2 [ 97.434548][ T6002] mmap: syz.3.44 (6002) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.739662][ T6009] loop3: detected capacity change from 0 to 4096 [ 97.795081][ T6009] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 97.921793][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 97.947865][ T6009] ntfs3: loop3: Failed to load $Extend (-22). [ 97.964301][ T6009] ntfs3: loop3: Failed to initialize $Extend. [ 97.987200][ T6019] loop1: detected capacity change from 0 to 1024 [ 98.091349][ T6019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.169164][ T6019] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.337251][ T6019] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 98.406704][ T6019] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28 [ 98.458113][ T6015] loop2: detected capacity change from 0 to 32768 [ 98.497337][ T6019] EXT4-fs (loop1): This should not happen!! Data will be lost [ 98.497337][ T6019] [ 98.499971][ T6015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.50 (6015) [ 98.569014][ T6019] EXT4-fs (loop1): Total free blocks count 0 [ 98.592813][ T6015] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.606110][ T6019] EXT4-fs (loop1): Free/Dirty block details [ 98.612135][ T6019] EXT4-fs (loop1): free_blocks=4293918720 [ 98.630949][ T6015] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 98.644694][ T6019] EXT4-fs (loop1): dirty_blocks=16 [ 98.653988][ T6019] EXT4-fs (loop1): Block reservation details [ 98.663801][ T6015] BTRFS info (device loop2): using free space tree [ 98.695107][ T6019] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 98.725457][ T6026] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.52: lblock 3 mapped to illegal pblock 3 (length 13) [ 98.746218][ T6026] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 98.775027][ T6030] tap0: tun_chr_ioctl cmd 1074025677 [ 98.790117][ T6030] tap0: linktype set to 776 [ 98.882403][ T6015] BTRFS info (device loop2): enabling ssd optimizations [ 98.907628][ T6015] BTRFS info (device loop2): auto enabling async discard [ 99.201456][ T6057] netlink: 56 bytes leftover after parsing attributes in process `syz.3.61'. [ 99.375292][ T5795] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.880402][ T5801] Bluetooth: Unknown LE signaling command 0x90 [ 99.887330][ T5801] Bluetooth: Wrong link type (-22) [ 100.123870][ T6079] loop3: detected capacity change from 0 to 1024 [ 100.391772][ T6060] loop0: detected capacity change from 0 to 40427 [ 100.401876][ T6085] capability: warning: `syz.1.72' uses 32-bit capabilities (legacy support in use) [ 100.418252][ T6085] Falling back ldisc for ttyS3. [ 100.456576][ T6060] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 100.464698][ T6060] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.600071][ T6060] F2FS-fs (loop0): invalid crc value [ 100.652785][ T6060] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.713537][ T6092] loop2: detected capacity change from 0 to 2048 [ 100.747590][ T6092] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 100.813098][ T6092] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 100.851173][ T6092] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 100.887986][ T6092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.904830][ T6060] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.912204][ T6060] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.338977][ T6098] loop2: detected capacity change from 0 to 512 [ 101.366332][ T6098] EXT4-fs: inline encryption not supported [ 101.383500][ T6098] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.407054][ T6098] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.473663][ T6098] EXT4-fs (loop2): 1 truncate cleaned up [ 101.491858][ T6094] loop1: detected capacity change from 0 to 32768 [ 101.507278][ T6094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.76 (6094) [ 101.522910][ T6098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.540965][ T6094] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.552787][ T6094] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 101.561677][ T6094] BTRFS info (device loop1): setting nodatasum [ 101.568617][ T6094] BTRFS info (device loop1): enabling auto defrag [ 101.570497][ T6087] loop3: detected capacity change from 0 to 32768 [ 101.575193][ T6094] BTRFS info (device loop1): disabling tree log [ 101.575240][ T6094] BTRFS info (device loop1): using free space tree [ 101.670687][ T28] audit: type=1800 audit(1751593272.238:2): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.77" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 101.700339][ T6094] BTRFS info (device loop1): enabling ssd optimizations [ 101.715175][ T6094] BTRFS info (device loop1): auto enabling async discard [ 101.800224][ T6087] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 101.955357][ T5791] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.213129][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.252814][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 103.146929][ T6119] loop1: detected capacity change from 0 to 32768 [ 103.171401][ T6119] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.79 (6119) [ 103.196134][ T6119] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.216090][ T6119] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 103.255660][ T6119] BTRFS info (device loop1): enabling auto defrag [ 103.274510][ T6119] BTRFS info (device loop1): use no compression [ 103.301045][ T6119] BTRFS info (device loop1): force clearing of disk cache [ 103.321725][ T6119] BTRFS info (device loop1): max_inline at 4096 [ 103.328333][ T6119] BTRFS info (device loop1): turning on sync discard [ 103.336583][ T6119] BTRFS info (device loop1): disabling free space tree [ 103.424976][ T6119] BTRFS info (device loop1): enabling ssd optimizations [ 103.457118][ T6119] BTRFS info (device loop1): rebuilding free space tree [ 103.555145][ T6119] BTRFS info (device loop1): disabling free space tree [ 103.574541][ T6124] loop2: detected capacity change from 0 to 32768 [ 103.582364][ T6119] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.618253][ T6119] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.652348][ T6124] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 103.779126][ T28] audit: type=1800 audit(1751593274.338:3): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.82" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 103.906865][ T5791] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.973671][ T5795] ocfs2: Unmounting device (7,2) on (node local) [ 104.166241][ T6162] netlink: 'syz.2.90': attribute type 10 has an invalid length. [ 104.173962][ T6162] netlink: 55 bytes leftover after parsing attributes in process `syz.2.90'. [ 104.340234][ T6169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.92'. [ 104.632487][ T6175] loop1: detected capacity change from 0 to 128 [ 104.678808][ T6175] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 104.711743][ T6177] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.733527][ T6175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.761459][ T6177] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 104.794385][ T6177] bridge_slave_0: default FDB implementation only supports local addresses [ 105.098011][ T6186] loop1: detected capacity change from 0 to 512 [ 105.117496][ T6186] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 105.215132][ T6186] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.100: iget: bogus i_mode (5) [ 105.291051][ T6186] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.100: couldn't read orphan inode 15 (err -117) [ 105.314679][ T6186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.338741][ T6186] ext2 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.378005][ T6186] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.517564][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.675490][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 105.733443][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'. [ 106.473666][ T6234] loop2: detected capacity change from 0 to 128 [ 106.499764][ T6234] EXT4-fs: Ignoring removed nobh option [ 106.548525][ T6234] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.596049][ T6234] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.819915][ T5795] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.892763][ T6246] loop1: detected capacity change from 0 to 128 [ 106.960175][ T6246] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.988910][ T6249] loop3: detected capacity change from 0 to 128 [ 107.005127][ T6246] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.149899][ T5791] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.183028][ T6254] program syz.2.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.269592][ T6256] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 107.947076][ T6281] loop3: detected capacity change from 0 to 64 [ 107.983766][ T6281] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 108.128232][ T6285] loop2: detected capacity change from 0 to 1024 [ 108.250141][ T6285] hfsplus: xattr searching failed [ 108.265664][ T28] audit: type=1800 audit(1751593534.832:4): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.133" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 108.285041][ T6285] hfsplus: xattr searching failed [ 108.302939][ T28] audit: type=1800 audit(1751593534.852:5): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.133" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 108.703279][ T6299] tap0: tun_chr_ioctl cmd 35111 [ 108.843067][ T6304] netlink: 'syz.3.143': attribute type 3 has an invalid length. [ 109.059181][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 109.079460][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 109.265088][ T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.340779][ T6320] xt_CT: No such helper "snmp" [ 109.457662][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.469072][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.478999][ T786] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 109.488131][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.498158][ T786] usb 1-1: config 0 descriptor?? [ 109.554904][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.669792][ T6327] loop1: detected capacity change from 0 to 4096 [ 109.754972][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 109.764256][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.764405][ T6327] ntfs3: loop1: failed to convert "0080" to koi8-ru [ 109.772603][ T8] usb 3-1: config 0 has no interface number 0 [ 109.788798][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 109.791692][ T6327] ntfs3: loop1: failed to convert name for inode 1e. [ 109.798168][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.814078][ T6327] ntfs3: loop1: failed to convert "256c" to koi8-ru [ 109.814111][ T8] usb 3-1: Product: syz [ 109.829769][ T8] usb 3-1: Manufacturer: syz [ 109.834431][ T8] usb 3-1: SerialNumber: syz [ 109.851498][ T8] usb 3-1: config 0 descriptor?? [ 109.860128][ T8] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 109.874179][ T8] usb 3-1: selecting invalid altsetting 1 [ 109.880638][ T8] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 109.902758][ T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.913967][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 109.923366][ T8] usb 3-1: media controller created [ 109.933887][ T786] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 109.961673][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.970373][ T786] isku 0003:1E7D:319C.0001: unknown main item tag 0x0 [ 110.006228][ T786] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 110.393585][ T786] usb 1-1: USB disconnect, device number 2 [ 110.640139][ T6331] loop1: detected capacity change from 0 to 32768 [ 110.664235][ T6331] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 110.673718][ T6331] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 110.704489][ T6331] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 110.723084][ T6344] loop3: detected capacity change from 0 to 256 [ 110.769724][ T6344] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 110.786708][ T6331] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 110.816981][ T28] audit: type=1800 audit(1751593537.382:6): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name="file1" dev="loop3" ino=1048594 res=0 errno=0 [ 111.105275][ T8] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 111.118075][ T6346] loop3: detected capacity change from 0 to 8192 [ 111.125693][ T8] zl10353_read_register: readreg error (reg=127, ret==-110) [ 111.156108][ T6346] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 111.172456][ T6318] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 111.224874][ T6346] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 111.248782][ T6346] REISERFS (device loop3): using ordered data mode [ 111.290079][ T8] usb 3-1: USB disconnect, device number 3 [ 111.296362][ T6346] reiserfs: using flush barriers [ 111.322263][ T6346] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 111.359942][ T6346] REISERFS (device loop3): checking transaction log (loop3) [ 111.452754][ T6346] REISERFS (device loop3): Using tea hash to sort names [ 111.462843][ T6346] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 111.634854][ T5864] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.824921][ T5864] usb 1-1: Using ep0 maxpacket: 16 [ 111.846986][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.864834][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.890536][ T5864] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 111.908030][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.927446][ T5864] usb 1-1: config 0 descriptor?? [ 112.088450][ T6371] loop3: detected capacity change from 0 to 512 [ 112.268861][ T6371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.317667][ T6371] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.352960][ T5864] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 112.378744][ T5864] gt683r_led 0003:1770:FF00.0002: item fetching failed at offset 4/5 [ 112.408420][ T5864] gt683r_led 0003:1770:FF00.0002: hid parsing failed [ 112.446398][ T5864] gt683r_led: probe of 0003:1770:FF00.0002 failed with error -22 [ 112.485465][ T6371] EXT4-fs error (device loop3): __ext4_new_inode:1284: comm syz.3.174: failed to insert inode 16: doubly allocated? [ 112.549410][ T6378] loop1: detected capacity change from 0 to 512 [ 112.595312][ T6378] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.621761][ T5864] usb 1-1: USB disconnect, device number 3 [ 112.633995][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.663687][ T6378] EXT4-fs (loop1): 1 truncate cleaned up [ 112.683590][ T6378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.772136][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.984758][ C1] sched: RT throttling activated [ 113.733595][ T6391] loop0: detected capacity change from 0 to 512 [ 113.783893][ T6391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.865104][ T6391] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.987070][ T6391] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #2: comm syz.0.182: corrupted inode contents [ 114.007490][ T6391] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #2: comm syz.0.182: mark_inode_dirty error [ 114.039681][ T6391] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #2: comm syz.0.182: corrupted inode contents [ 114.295618][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.422877][ T6369] loop2: detected capacity change from 0 to 262144 [ 114.486258][ T6369] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.554842][ T6369] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.302042][ T6405] loop1: detected capacity change from 0 to 32768 [ 115.420356][ T6405] [ 115.420356][ T6405] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.420356][ T6405] [ 115.490250][ T6405] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 115.619375][ T6418] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.626105][ T11] [ 115.626105][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.626105][ T11] [ 115.669106][ T11] [ 115.669106][ T11] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.669106][ T11] [ 115.701021][ T5791] [ 115.701021][ T5791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.701021][ T5791] [ 115.740582][ T111] [ 115.740582][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.740582][ T111] [ 115.791927][ T5791] [ 115.791927][ T5791] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.791927][ T5791] [ 115.914451][ T6420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.194'. [ 116.449301][ T6426] loop1: detected capacity change from 0 to 1024 [ 116.894376][ T6422] loop0: detected capacity change from 0 to 32768 [ 116.950256][ T6422] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 117.139670][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 117.216731][ T6435] loop1: detected capacity change from 0 to 16 [ 117.243739][ T6435] erofs: (device loop1): mounted with root inode @ nid 36. [ 117.624031][ T6453] loop2: detected capacity change from 0 to 512 [ 117.674201][ T6453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.694971][ T6453] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.799192][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.044898][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.070212][ T6474] loop3: detected capacity change from 0 to 16 [ 118.080206][ T6474] erofs: (device loop3): mounted with root inode @ nid 36. [ 118.101745][ T6474] syz.3.213: attempt to access beyond end of device [ 118.101745][ T6474] loop3: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 118.123497][ T6474] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 118.139694][ T6474] syz.3.213: attempt to access beyond end of device [ 118.139694][ T6474] loop3: rw=0, sector=296, nr_sectors = 8 limit=16 [ 118.155052][ T6474] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 118.163899][ T6474] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 118.237699][ T8] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 118.251602][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.270897][ T8] usb 2-1: config 0 descriptor?? [ 118.272730][ T6478] sctp: [Deprecated]: syz.3.215 (pid 6478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.272730][ T6478] Use struct sctp_sack_info instead [ 118.526212][ T8] kaweth 2-1:0.0: Firmware present in device. [ 118.575206][ T6486] bond0: Unable to set down delay as MII monitoring is disabled [ 118.715999][ T8] kaweth 2-1:0.0: Statistics collection: 0 [ 118.732079][ T8] kaweth 2-1:0.0: Multicast filter limit: 0 [ 118.745928][ T8] kaweth 2-1:0.0: MTU: 0 [ 118.764691][ T8] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 118.857664][ T6498] loop2: detected capacity change from 0 to 256 [ 118.866145][ T6498] exfat: Deprecated parameter 'utf8' [ 119.066791][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 119.077453][ T6505] loop3: detected capacity change from 0 to 512 [ 119.087514][ T6505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.110828][ T8] kaweth 2-1:0.0: Error setting SOFS wait [ 119.120617][ T6505] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.228: invalid indirect mapped block 4294967295 (level 0) [ 119.136289][ T8] kaweth: probe of 2-1:0.0 failed with error -5 [ 119.151519][ T6505] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.228: invalid indirect mapped block 4294967295 (level 1) [ 119.157299][ T8] usb 2-1: USB disconnect, device number 2 [ 119.177822][ T6505] EXT4-fs (loop3): 1 orphan inode deleted [ 119.183627][ T6505] EXT4-fs (loop3): 1 truncate cleaned up [ 119.191382][ T6505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.234985][ T5850] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.292265][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.340333][ T6513] netlink: 124 bytes leftover after parsing attributes in process `syz.3.231'. [ 119.430522][ T5850] usb 1-1: config 0 has no interfaces? [ 119.436941][ T6517] vxcan1: tx address claim with dest, not broadcast [ 119.444793][ T5850] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 119.475449][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.500054][ T5850] usb 1-1: config 0 descriptor?? [ 119.745698][ T6501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.785228][ T6501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.801706][ T5172] usb 1-1: USB disconnect, device number 4 [ 120.136865][ T6528] loop2: detected capacity change from 0 to 32768 [ 120.145352][ T6528] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.238 (6528) [ 120.161819][ T6528] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.176920][ T6528] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 120.188573][ T6528] BTRFS info (device loop2): using free space tree [ 120.229976][ T6528] BTRFS info (device loop2): enabling ssd optimizations [ 120.239446][ T6528] BTRFS info (device loop2): auto enabling async discard [ 120.267930][ T6532] loop3: detected capacity change from 0 to 32768 [ 120.275869][ T6532] XFS: attr2 mount option is deprecated. [ 120.303671][ T6532] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 120.318861][ T6532] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 120.375159][ T5172] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.394277][ T6532] XFS (loop3): Ending clean mount [ 120.413854][ T5795] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.418736][ T6532] XFS (loop3): Quotacheck needed: Please wait. [ 120.546477][ T6532] XFS (loop3): Quotacheck: Done. [ 120.609681][ T5172] usb 1-1: config index 0 descriptor too short (expected 72, got 36) [ 120.629299][ T5172] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 120.679716][ T5172] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.701872][ T5172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.727346][ T5172] usb 1-1: Product: syz [ 120.731578][ T5172] usb 1-1: Manufacturer: syz [ 120.754876][ T5172] usb 1-1: SerialNumber: syz [ 120.769595][ T5172] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 120.777385][ T5787] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.024372][ T5834] usb 1-1: USB disconnect, device number 5 [ 121.349547][ T6571] loop3: detected capacity change from 0 to 128 [ 121.389228][ T28] audit: type=1800 audit(1751593547.952:7): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.247" name="file1" dev="loop3" ino=1048596 res=0 errno=0 [ 121.418799][ T6573] kernel profiling enabled (shift: 9) [ 121.733322][ T6574] syz.3.247: attempt to access beyond end of device [ 121.733322][ T6574] loop3: rw=0, sector=121, nr_sectors = 8 limit=128 [ 121.929399][ T1083] kworker/u4:6: attempt to access beyond end of device [ 121.929399][ T1083] loop3: rw=1, sector=129, nr_sectors = 912 limit=128 [ 122.208444][ T6576] loop1: detected capacity change from 0 to 32768 [ 122.216134][ T6576] XFS: attr2 mount option is deprecated. [ 122.247772][ T6576] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.301339][ T6605] netlink: 'syz.3.259': attribute type 14 has an invalid length. [ 122.309728][ T6576] XFS (loop1): Ending clean mount [ 122.326659][ T6576] XFS (loop1): Quotacheck needed: Please wait. [ 122.400946][ T6576] XFS (loop1): Quotacheck: Done. [ 122.519509][ T5791] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 123.067780][ T6633] loop2: detected capacity change from 0 to 128 [ 123.101467][ T6633] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.293641][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.331587][ T6643] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 123.585977][ T6651] process 'syz.2.281' launched './file2' with NULL argv: empty string added [ 124.445900][ T6677] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 124.445900][ T6677] program syz.3.292 not setting count and/or reply_len properly [ 124.617739][ T6683] tap0: tun_chr_ioctl cmd 1074025677 [ 124.623443][ T6683] tap0: linktype set to 805 [ 124.634971][ T5864] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 124.827704][ T5864] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.847938][ T5864] usb 1-1: config 0 has no interface number 0 [ 124.854126][ T5864] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 124.897996][ T5864] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 124.919143][ T5864] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.935435][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.947002][ T5864] usb 1-1: config 0 descriptor?? [ 124.960587][ T6675] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.988893][ T5864] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 125.150694][ T6700] warning: `syz.3.303' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.231630][ T5864] usb 1-1: USB disconnect, device number 6 [ 125.487003][ T6712] loop2: detected capacity change from 0 to 512 [ 125.513428][ T6712] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.309: invalid block [ 125.528568][ T6712] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.309: invalid indirect mapped block 10 (level 1) [ 125.553318][ T6712] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.309: invalid indirect mapped block 8 (level 1) [ 125.569895][ T6712] EXT4-fs (loop2): 1 truncate cleaned up [ 125.582039][ T6712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.656424][ T5795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.055967][ T6726] loop0: detected capacity change from 0 to 256 [ 126.079775][ T6726] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d) [ 126.112040][ T6724] loop2: detected capacity change from 0 to 32768 [ 126.148812][ T6724] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 126.238924][ T6724] syz.2.313 (6724) used greatest stack depth: 17712 bytes left [ 126.268084][ T5795] ocfs2: Unmounting device (7,2) on (node local) [ 126.479246][ T6735] syz.0.318[6735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.479390][ T6735] syz.0.318[6735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.008276][ T6757] ptrace attach of "./syz-executor exec"[5791] was attempted by "\x22 È\x0d 0 *½p üÛß% ´\x0d °\x0d \x07  xt \x0c\x0d€$  filter q   filter   àçEÛiupÃD\x07!|p§_¹Ø=b¡JëDÆݵ³§ocÔÅ”2È“ÄPŒØuènYzË»I„VL ûµ¼\x07‰je% Zn¥õ&n m\x0c  mangle  \x0a $B‘Šªï1Ç„„Ûuô¶‘¨áJ¡ßP¨é¡-Ù¾;¤ƒÍ×ò\x0cqàFÞ™;–ðãêÙkÀ쑨²únsö`ÏCÞ¾0rg|ViB·ÿT© [ 127.268422][ T6765] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.332'. [ 127.504101][ T6749] loop3: detected capacity change from 0 to 32768 [ 127.538907][ T6749] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.851860][ T5787] [ 127.854255][ T5787] ====================================================== [ 127.861301][ T5787] WARNING: possible circular locking dependency detected [ 127.868357][ T5787] 6.6.95-syzkaller #0 Not tainted [ 127.873407][ T5787] ------------------------------------------------------ [ 127.880548][ T5787] syz-executor/5787 is trying to acquire lock: [ 127.886732][ T5787] ffff888053819818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x351/0x10b0 [ 127.899958][ T5787] [ 127.899958][ T5787] but task is already holding lock: [ 127.907356][ T5787] ffff88805381ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 127.920138][ T5787] [ 127.920138][ T5787] which lock already depends on the new lock. [ 127.920138][ T5787] [ 127.930575][ T5787] [ 127.930575][ T5787] the existing dependency chain (in reverse order) is: [ 127.939620][ T5787] [ 127.939620][ T5787] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 127.950182][ T5787] down_write+0x97/0x1f0 [ 127.954965][ T5787] __ocfs2_move_extents_range+0x1a65/0x3360 [ 127.961429][ T5787] ocfs2_move_extents+0x379/0x940 [ 127.967038][ T5787] ocfs2_ioctl_move_extents+0x4e1/0x6c0 [ 127.973160][ T5787] ocfs2_ioctl+0x195/0x750 [ 127.978123][ T5787] __se_sys_ioctl+0xfd/0x170 [ 127.983246][ T5787] do_syscall_64+0x55/0xb0 [ 127.988196][ T5787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.994627][ T5787] [ 127.994627][ T5787] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 128.005280][ T5787] __lock_acquire+0x2ddb/0x7c80 [ 128.010689][ T5787] lock_acquire+0x197/0x410 [ 128.015725][ T5787] down_write+0x97/0x1f0 [ 128.020580][ T5787] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 128.026921][ T5787] ocfs2_flush_truncate_log+0x4f/0x60 [ 128.032881][ T5787] ocfs2_sync_fs+0x117/0x310 [ 128.038004][ T5787] sync_filesystem+0x1c2/0x220 [ 128.043320][ T5787] generic_shutdown_super+0x6f/0x2b0 [ 128.049137][ T5787] kill_block_super+0x44/0x90 [ 128.054341][ T5787] deactivate_locked_super+0x97/0x100 [ 128.060248][ T5787] cleanup_mnt+0x429/0x4c0 [ 128.065206][ T5787] task_work_run+0x1ce/0x250 [ 128.070328][ T5787] exit_to_user_mode_loop+0xe6/0x110 [ 128.076149][ T5787] exit_to_user_mode_prepare+0xb1/0x140 [ 128.082227][ T5787] syscall_exit_to_user_mode+0x1a/0x50 [ 128.088215][ T5787] do_syscall_64+0x61/0xb0 [ 128.093161][ T5787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.099582][ T5787] [ 128.099582][ T5787] other info that might help us debug this: [ 128.099582][ T5787] [ 128.109818][ T5787] Possible unsafe locking scenario: [ 128.109818][ T5787] [ 128.117276][ T5787] CPU0 CPU1 [ 128.122650][ T5787] ---- ---- [ 128.128022][ T5787] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 128.135318][ T5787] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 128.145136][ T5787] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 128.154958][ T5787] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 128.162283][ T5787] [ 128.162283][ T5787] *** DEADLOCK *** [ 128.162283][ T5787] [ 128.170435][ T5787] 2 locks held by syz-executor/5787: [ 128.175722][ T5787] #0: ffff88805e2fa0e0 (&type->s_umount_key#53){++++}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 128.185921][ T5787] #1: ffff88805381ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 128.199098][ T5787] [ 128.199098][ T5787] stack backtrace: [ 128.205015][ T5787] CPU: 0 PID: 5787 Comm: syz-executor Not tainted 6.6.95-syzkaller #0 [ 128.213188][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.223263][ T5787] Call Trace: [ 128.226552][ T5787] [ 128.229508][ T5787] dump_stack_lvl+0x16c/0x230 [ 128.234214][ T5787] ? load_image+0x3b0/0x3b0 [ 128.238769][ T5787] ? show_regs_print_info+0x20/0x20 [ 128.243994][ T5787] ? print_circular_bug+0x12b/0x1a0 [ 128.249208][ T5787] check_noncircular+0x2bd/0x3c0 [ 128.254160][ T5787] ? print_deadlock_bug+0x5d0/0x5d0 [ 128.259387][ T5787] ? lockdep_lock+0xe0/0x220 [ 128.264024][ T5787] ? _find_first_zero_bit+0xd3/0x100 [ 128.269332][ T5787] __lock_acquire+0x2ddb/0x7c80 [ 128.274219][ T5787] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 128.280222][ T5787] ? __lock_acquire+0x7c80/0x7c80 [ 128.285258][ T5787] ? verify_lock_unused+0x140/0x140 [ 128.290483][ T5787] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 128.296134][ T5787] ? do_raw_spin_lock+0x121/0x2c0 [ 128.301174][ T5787] ? mutex_unlock+0x10/0x10 [ 128.305783][ T5787] lock_acquire+0x197/0x410 [ 128.310298][ T5787] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 128.316292][ T5787] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 128.322296][ T5787] ? __might_sleep+0xe0/0xe0 [ 128.326909][ T5787] ? read_lock_is_recursive+0x20/0x20 [ 128.332294][ T5787] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 128.338464][ T5787] ? __wake_up+0x11f/0x190 [ 128.342895][ T5787] down_write+0x97/0x1f0 [ 128.347155][ T5787] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 128.353160][ T5787] ? down_read_killable+0x340/0x340 [ 128.358373][ T5787] ? _raw_write_unlock+0x28/0x40 [ 128.363346][ T5787] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 128.369172][ T5787] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 128.375000][ T5787] ? ocfs2_truncate_log_needs_flush+0x2e0/0x2e0 [ 128.381264][ T5787] ? read_lock_is_recursive+0x20/0x20 [ 128.386653][ T5787] ? down_write+0x162/0x1f0 [ 128.391167][ T5787] ? down_read_killable+0x340/0x340 [ 128.396380][ T5787] ? __rwlock_init+0x150/0x150 [ 128.401163][ T5787] ocfs2_flush_truncate_log+0x4f/0x60 [ 128.406580][ T5787] ocfs2_sync_fs+0x117/0x310 [ 128.411204][ T5787] ? ocfs2_put_super+0x1c0/0x1c0 [ 128.416155][ T5787] ? writeback_inodes_sb_nr+0x30/0x30 [ 128.421545][ T5787] ? get_nr_dirty_inodes+0x1d4/0x220 [ 128.426841][ T5787] sync_filesystem+0x1c2/0x220 [ 128.431619][ T5787] generic_shutdown_super+0x6f/0x2b0 [ 128.436921][ T5787] kill_block_super+0x44/0x90 [ 128.441608][ T5787] deactivate_locked_super+0x97/0x100 [ 128.446991][ T5787] cleanup_mnt+0x429/0x4c0 [ 128.451422][ T5787] task_work_run+0x1ce/0x250 [ 128.456031][ T5787] ? task_work_cancel+0x240/0x240 [ 128.461083][ T5787] ? exit_to_user_mode_loop+0x3b/0x110 [ 128.466566][ T5787] exit_to_user_mode_loop+0xe6/0x110 [ 128.471885][ T5787] exit_to_user_mode_prepare+0xb1/0x140 [ 128.477450][ T5787] syscall_exit_to_user_mode+0x1a/0x50 [ 128.482929][ T5787] do_syscall_64+0x61/0xb0 [ 128.487372][ T5787] ? clear_bhb_loop+0x40/0x90 [ 128.492064][ T5787] ? clear_bhb_loop+0x40/0x90 [ 128.496768][ T5787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.502692][ T5787] RIP: 0033:0x7f85e2f8fc57 [ 128.507128][ T5787] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 128.526759][ T5787] RSP: 002b:00007fff51bd0ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 128.535190][ T5787] RAX: 0000000000000000 RBX: 00007f85e3010925 RCX: 00007f85e2f8fc57 [ 128.543172][ T5787] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff51bd0fb0 [ 128.551166][ T5787] RBP: 00007fff51bd0fb0 R08: 0000000000000000 R09: 0000000000000000 [ 128.559160][ T5787] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff51bd2040 [ 128.567141][ T5787] R13: 00007f85e3010925 R14: 000000000001f2cb R15: 00007fff51bd2080 [ 128.575136][ T5787] [ 128.586467][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 133.108845][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.115288][ T1290] ieee802154 phy1 wpan1: encryption failed: -22