last executing test programs: 35.416154513s ago: executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) tkill(0x0, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 35.373072174s ago: executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id, r0}, 0x20) 35.108569263s ago: executing program 0: writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001400f94fff7f0000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fec0ffff0000000000000000000000011400010000000000000000000000000000000001"], 0x40}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 35.009885451s ago: executing program 0: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 34.785423597s ago: executing program 0: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@flushoncommit}, {@nossd_spread}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000140)=""/140, 0x8c) 34.440004336s ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) 33.300624492s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x40}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 33.141760612s ago: executing program 4: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 33.020615612s ago: executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 33.013103263s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, &(0x7f00000000c0)) 32.925251018s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 32.827024213s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0x9f, 0x0, &(0x7f0000000000)) 32.816513152s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x90) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 32.801628653s ago: executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x35, 0x0, 0x0, @link_id}, 0x20) 32.65168434s ago: executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) close(r0) 32.590972474s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001400f94fff7f0000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fec0ffff0000000000000000000000011400010000000000000000000000000000000001"], 0x40}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 32.421509371s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x40}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 32.355462782s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)) nanosleep(&(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f00000004c0)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, [0x80]}}) 32.304113792s ago: executing program 2: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') open(0x0, 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 32.125086848s ago: executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) tkill(0x0, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 32.06363027s ago: executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@flushoncommit}, {@nossd_spread}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000140)=""/140, 0x8c) 30.777127585s ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 30.43704848s ago: executing program 1: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000010180)={'#! ', './file0'}, 0x10017) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x7a05, 0x1700) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) 30.175602024s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf974a457bb636ff6}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c200000050a2450400e086dd60fbb2ea0000330020010000000000000000000000000000ff020000000000000000000000000001"], 0x0) 30.031348843s ago: executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x35, 0x0, 0x0, @link_id}, 0x20) 2.90290875s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0x9f, 0x0, &(0x7f0000000000)) 2.626186419s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x90) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 2.331453273s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001400f94fff7f0000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fec0ffff0000000000000000000000011400010000000000000000000000000000000001"], 0x40}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 749.457949ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 0s ago: executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) kernel console output (not intermixed with test programs): heckpoint [ 98.856009][ T5113] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.955733][ T5577] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.126686][ T5577] syz-executor.3: attempt to access beyond end of device [ 99.126686][ T5577] loop3: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 99.226489][ T5111] syz-executor.3: attempt to access beyond end of device [ 99.226489][ T5111] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.250287][ T5592] loop1: detected capacity change from 0 to 32768 [ 99.288124][ T5111] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 99.298631][ T5592] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5592) [ 99.320392][ T5118] BTRFS info (device loop2): last unmount of filesystem 0b41c772-b475-4f2a-aa52-46648445638e [ 99.424967][ T5592] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.459087][ T5592] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 99.493711][ T5592] BTRFS info (device loop1): using free-space-tree [ 99.840811][ T5630] loop0: detected capacity change from 0 to 32768 [ 99.911871][ T5630] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5630) [ 99.984348][ T5630] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.005326][ T5114] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.021271][ T5630] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 100.046097][ T5630] BTRFS info (device loop0): using free-space-tree [ 100.754684][ T5677] xt_recent: Unsupported userspace flags (00000064) [ 101.728876][ T5655] loop2: detected capacity change from 0 to 32768 [ 101.731074][ T12] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 101.773734][ T5655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5655) [ 101.786923][ T5635] loop4: detected capacity change from 0 to 32768 [ 101.840511][ T5635] BTRFS: device /dev/loop4 (7:4) using temp-fsid 266b583a-429c-47eb-9217-39e61691c14e [ 101.861118][ T5655] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.880409][ T5635] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5635) [ 101.912757][ T5655] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 101.921802][ T5655] BTRFS info (device loop2): using free-space-tree [ 101.935818][ T5109] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.401536][ T5635] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.037621][ T5706] loop3: detected capacity change from 0 to 64 [ 106.106122][ T5635] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 106.122790][ T5635] BTRFS info (device loop4): using free-space-tree [ 106.241368][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 106.242390][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 106.319844][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 106.464457][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 106.475623][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 106.489650][ T5655] BTRFS error (device loop2): open_ctree failed [ 106.505663][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 106.506252][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 106.518409][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 106.529154][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 106.539992][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 106.574280][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 106.617756][ T5727] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 106.652561][ T5635] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 106.656176][ T5635] BTRFS error (device loop4): open_ctree failed [ 106.767455][ T5728] loop1: detected capacity change from 0 to 1024 [ 107.447036][ T5737] loop0: detected capacity change from 0 to 64 [ 109.536391][ T5742] loop4: detected capacity change from 0 to 2048 [ 109.754254][ T5742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.199673][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 186 with max blocks 64 with error 28 [ 112.217178][ T5762] loop2: detected capacity change from 0 to 32768 [ 112.237916][ T5762] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5762) [ 112.250705][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.250705][ T12] [ 112.290642][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 112.311517][ T5762] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.314651][ T12] EXT4-fs (loop4): Free/Dirty block details [ 112.362213][ T5762] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 112.362392][ T12] EXT4-fs (loop4): free_blocks=0 [ 112.401394][ T12] EXT4-fs (loop4): dirty_blocks=0 [ 112.418661][ T12] EXT4-fs (loop4): Block reservation details [ 112.432544][ T5769] loop1: detected capacity change from 0 to 4096 [ 112.443631][ T12] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 112.475817][ T5769] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 112.532538][ T5113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.613342][ T5762] BTRFS info (device loop2): rebuilding free space tree [ 112.630134][ T5749] loop0: detected capacity change from 0 to 32768 [ 112.648192][ T5749] BTRFS: device /dev/loop0 (7:0) using temp-fsid d50cf10a-c9bc-4900-bb41-c4ec2a44e8b2 [ 112.653944][ T5762] BTRFS info (device loop2): disabling free space tree [ 112.666995][ T5749] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5749) [ 112.678663][ T5762] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.703160][ T5769] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 112.712971][ T5762] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.753627][ T5769] ntfs3: loop1: mft corrupted [ 112.762932][ T5769] ntfs3: loop1: Failed to load $Extend (-22). [ 112.783803][ T5769] ntfs3: loop1: Failed to initialize $Extend. [ 113.012002][ T5792] loop4: detected capacity change from 0 to 1024 [ 113.821254][ T5118] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.411377][ T5806] loop0: detected capacity change from 0 to 64 [ 117.274144][ T5816] loop1: detected capacity change from 0 to 64 [ 117.881591][ T5193] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 118.374838][ T5822] loop3: detected capacity change from 0 to 64 [ 119.393817][ T5827] loop1: detected capacity change from 0 to 2048 [ 119.640584][ T5827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.587402][ T5837] loop3: detected capacity change from 0 to 164 [ 121.054899][ T5843] loop0: detected capacity change from 0 to 64 [ 121.898942][ T5114] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.362290][ T5848] loop3: detected capacity change from 0 to 1024 [ 124.009372][ T5856] loop1: detected capacity change from 0 to 64 [ 124.051078][ T5855] loop0: detected capacity change from 0 to 64 [ 126.640063][ T5866] loop0: detected capacity change from 0 to 64 [ 127.554402][ T5874] loop2: detected capacity change from 0 to 1024 [ 127.710988][ T5878] loop1: detected capacity change from 0 to 512 [ 127.722631][ T5878] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.796075][ T5879] evm: overlay not supported [ 127.802016][ T5878] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.356113][ T5888] loop4: detected capacity change from 0 to 64 [ 129.637721][ T5878] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.740171][ T5878] EXT4-fs (loop1): 1 truncate cleaned up [ 129.753308][ T5878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.295865][ T5901] loop0: detected capacity change from 0 to 64 [ 131.122043][ T5905] loop2: detected capacity change from 0 to 1024 [ 131.199558][ T5114] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.403598][ T5909] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 132.049764][ T5903] loop4: detected capacity change from 0 to 32768 [ 132.235107][ T5922] loop2: detected capacity change from 0 to 64 [ 132.528936][ T5903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5903) [ 132.560767][ T5899] loop3: detected capacity change from 0 to 32768 [ 132.848064][ T5903] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.858992][ T5899] BTRFS: device /dev/loop3 (7:3) using temp-fsid 6246cfdb-2530-464c-84c4-47077196a35c [ 132.910302][ T5903] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 132.924251][ T5903] BTRFS info (device loop4): using free-space-tree [ 132.933672][ T5899] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5899) [ 132.968648][ T5899] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.996982][ T5899] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 133.104052][ T5899] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 133.104826][ T5899] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 133.177867][ T5899] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 133.192759][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.192852][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.257597][ T5899] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 133.328235][ T5113] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.337579][ T5899] BTRFS error (device loop3): open_ctree failed [ 136.402863][ T5976] loop3: detected capacity change from 0 to 512 [ 136.414966][ T5973] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 136.448620][ T5976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.509819][ T5976] EXT4-fs (loop3): 1 truncate cleaned up [ 136.525534][ T5976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.654039][ T5984] loop1: detected capacity change from 0 to 4096 [ 136.683191][ T5984] ntfs3: loop1: ino=3, Correct links count -> 2. [ 136.823078][ T5990] loop4: detected capacity change from 0 to 4096 [ 136.831378][ T5990] ntfs3: Unknown parameter '0x000000000000000301777777777777777777777' [ 136.879260][ T5193] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 137.088719][ T5111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.527866][ T5999] loop2: detected capacity change from 0 to 1024 [ 138.413183][ T6006] overlayfs: failed to resolve './file1': -2 [ 138.567755][ T6008] loop3: detected capacity change from 0 to 512 [ 138.671644][ T6008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.779463][ T6008] EXT4-fs (loop3): 1 truncate cleaned up [ 138.783931][ T5991] loop0: detected capacity change from 0 to 32768 [ 138.795191][ T6008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.809777][ T5991] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5991) [ 138.975790][ T6014] loop1: detected capacity change from 0 to 64 [ 139.362858][ T5991] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.633774][ T5991] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 139.690174][ T5991] BTRFS info (device loop0): using free-space-tree [ 139.744888][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 139.775607][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 139.854491][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 139.958611][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 140.001587][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 140.018330][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 140.028087][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 140.047532][ T6029] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 140.084240][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 140.086036][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 140.133124][ T5991] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 140.179940][ T6032] 9pnet_fd: Insufficient options for proto=fd [ 140.219097][ T6040] overlayfs: failed to resolve './file1': -2 [ 140.228624][ T5991] BTRFS error (device loop0): open_ctree failed [ 140.259719][ T6041] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.271498][ T6041] TCP: tcp_parse_options: Illegal window scaling value 133 > 14 received [ 140.478926][ T5111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.144096][ T6060] loop3: detected capacity change from 0 to 64 [ 142.363231][ T6070] loop2: detected capacity change from 0 to 4096 [ 142.371361][ T6070] ntfs3: Unknown parameter '0x000000000000000301777777777777777777777' [ 142.953913][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.434800][ T6083] loop4: detected capacity change from 0 to 64 [ 145.342769][ T6088] loop3: detected capacity change from 0 to 512 [ 145.355169][ T6088] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.472412][ T6088] EXT4-fs (loop3): 1 truncate cleaned up [ 145.498352][ T6088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.540627][ T6096] loop1: detected capacity change from 0 to 1024 [ 145.952411][ T5111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.660304][ T6111] loop2: detected capacity change from 0 to 64 [ 147.302958][ T6090] loop0: detected capacity change from 0 to 32768 [ 147.399914][ T6090] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6090) [ 147.442046][ T6090] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.455997][ T6090] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 150.906281][ T6149] loop2: detected capacity change from 0 to 64 [ 151.050074][ T6090] BTRFS error (device loop0): open_ctree failed [ 151.144127][ T6149] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 152.008071][ T6165] loop2: detected capacity change from 0 to 4096 [ 152.015978][ T6165] ntfs3: Unknown parameter '0x000000000000000301777777777777777777777' [ 152.262569][ T6154] loop3: detected capacity change from 0 to 32768 [ 153.670673][ T6181] loop4: detected capacity change from 0 to 64 [ 153.804147][ T6154] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 153.818193][ T6154] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 153.895786][ T6154] bcachefs (loop3): alloc_read... done [ 153.902137][ T6154] bcachefs (loop3): stripes_read... done [ 153.923278][ T6154] bcachefs (loop3): snapshots_read... done [ 153.964124][ T6154] bcachefs (loop3): journal_replay... done [ 153.980592][ T6155] loop1: detected capacity change from 0 to 32768 [ 153.995701][ T6155] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6155) [ 154.011194][ T6154] bcachefs (loop3): resume_logged_ops... done [ 154.042474][ T6154] bcachefs (loop3): going read-write [ 154.071420][ T6155] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.118843][ T6154] bcachefs (loop3): bch2_copygc_start(): error creating copygc thread EINTR [ 154.128028][ T6155] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 154.157035][ T6154] bcachefs (loop3): error starting copygc thread [ 154.159515][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 154.175741][ T6154] bcachefs (loop3): going read-only [ 154.179837][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 154.207291][ T6154] bcachefs (loop3): finished waiting for writes to stop [ 154.424515][ T6154] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 154.451386][ T6154] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8 [ 154.455486][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 154.462917][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 154.520689][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 154.854212][ T6205] loop4: detected capacity change from 0 to 64 [ 155.250161][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 155.250778][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 155.296827][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 155.333380][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 155.384953][ T6154] bcachefs (loop3): shutdown complete, journal seq 9 [ 155.425931][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 155.443977][ T6155] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 155.475727][ T6154] bcachefs (loop3): marking filesystem clean [ 155.641042][ T6154] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR [ 155.681501][ T6154] bcachefs (loop3): shutting down [ 155.698396][ T6155] BTRFS error (device loop1): open_ctree failed [ 155.765500][ T6154] bcachefs (loop3): shutdown complete [ 156.929235][ T6227] 9pnet_fd: Insufficient options for proto=fd [ 156.963158][ T6227] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 156.972917][ T6227] TCP: tcp_parse_options: Illegal window scaling value 133 > 14 received [ 157.032643][ T6230] loop1: detected capacity change from 0 to 64 [ 157.072358][ T6230] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 157.298387][ T6217] loop0: detected capacity change from 0 to 32768 [ 157.340664][ T6217] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6217) [ 157.393079][ T6217] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.426434][ T6217] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 157.639303][ T6217] BTRFS info (device loop0): rebuilding free space tree [ 157.743942][ T6217] BTRFS info (device loop0): disabling free space tree [ 157.784250][ T6217] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.821943][ T6217] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.956015][ T6262] loop3: detected capacity change from 0 to 1024 [ 158.512955][ T6266] loop2: detected capacity change from 0 to 64 [ 159.235740][ T5109] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.604756][ T6273] loop3: detected capacity change from 0 to 64 [ 159.718434][ T6273] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 159.972303][ T6277] loop2: detected capacity change from 0 to 64 [ 161.028510][ T6285] loop2: detected capacity change from 0 to 1024 [ 161.244829][ T6289] loop3: detected capacity change from 0 to 64 [ 162.572537][ T6304] overlayfs: failed to resolve './file1': -2 [ 163.545928][ T6321] loop3: detected capacity change from 0 to 64 [ 164.180318][ T6296] loop4: detected capacity change from 0 to 40427 [ 164.276259][ T6323] loop2: detected capacity change from 0 to 1024 [ 164.294352][ T6296] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 164.302421][ T6296] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 164.324644][ T6296] F2FS-fs (loop4): invalid crc value [ 164.397552][ T6296] F2FS-fs (loop4): Found nat_bits in checkpoint [ 164.624689][ T6296] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 164.631819][ T6296] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 164.777091][ T5113] syz-executor.4: attempt to access beyond end of device [ 164.777091][ T5113] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 164.816202][ T5113] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 164.840931][ T5113] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 165.007137][ T6316] loop0: detected capacity change from 0 to 32768 [ 165.368071][ T6316] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 165.404715][ T6348] loop3: detected capacity change from 0 to 1024 [ 165.430810][ T6316] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 165.508492][ T6334] loop1: detected capacity change from 0 to 40427 [ 165.535097][ T6334] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 165.563249][ T6334] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 165.664154][ T6334] F2FS-fs (loop1): invalid crc value [ 165.680944][ T6316] bcachefs (loop0): alloc_read... done [ 165.681455][ T6334] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.873639][ T6316] bcachefs (loop0): stripes_read... done [ 165.994466][ T6316] bcachefs (loop0): snapshots_read... done [ 166.464327][ T6316] bcachefs (loop0): journal_replay... done [ 166.563722][ T6316] bcachefs (loop0): resume_logged_ops... done [ 166.611531][ T6316] bcachefs (loop0): going read-write [ 166.638408][ T6316] bcachefs (loop0): bch2_copygc_start(): error creating copygc thread EINTR [ 166.649822][ T6316] bcachefs (loop0): error starting copygc thread [ 166.656676][ T6316] bcachefs (loop0): going read-only [ 166.661987][ T6316] bcachefs (loop0): finished waiting for writes to stop [ 166.669184][ T6316] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 166.682300][ T6316] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8 [ 166.710710][ T6334] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 166.710717][ T6316] bcachefs (loop0): shutdown complete, journal seq 9 [ 166.710739][ T6334] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.726620][ T6316] bcachefs (loop0): marking filesystem clean [ 166.747211][ T6316] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 166.768251][ T6316] bcachefs (loop0): shutting down [ 166.817918][ T6316] bcachefs (loop0): shutdown complete [ 166.946120][ T5114] syz-executor.1: attempt to access beyond end of device [ 166.946120][ T5114] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 166.979284][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 167.017096][ T6365] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.026815][ T6365] TCP: tcp_parse_options: Illegal window scaling value 133 > 14 received [ 167.069478][ T5114] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 167.102974][ T5114] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 168.226973][ T6378] loop2: detected capacity change from 0 to 64 [ 168.293453][ T6378] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 168.830636][ T6384] loop4: detected capacity change from 0 to 64 [ 169.339658][ T6316] syz-executor.0 (6316) used greatest stack depth: 17680 bytes left [ 169.618999][ T6393] loop2: detected capacity change from 0 to 164 [ 169.726722][ T6393] syz-executor.2: attempt to access beyond end of device [ 169.726722][ T6393] loop2: rw=524288, sector=263328, nr_sectors = 8 limit=164 [ 169.784548][ T6394] loop3: detected capacity change from 0 to 1024 [ 169.798793][ T6393] syz-executor.2: attempt to access beyond end of device [ 169.798793][ T6393] loop2: rw=0, sector=263328, nr_sectors = 8 limit=164 [ 169.814395][ T5160] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 169.875100][ T29] audit: type=1800 audit(1716934081.956:2): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="loop2" ino=1862 res=0 errno=0 [ 169.987020][ T6397] 9pnet_fd: Insufficient options for proto=fd [ 170.010790][ T6397] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 170.020523][ T6397] TCP: tcp_parse_options: Illegal window scaling value 133 > 14 received [ 170.036426][ T5160] usb 2-1: Using ep0 maxpacket: 32 [ 170.048047][ T5160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 170.065698][ T5160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 170.077936][ T5146] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 170.091497][ T5160] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 170.101683][ T5160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.151898][ T5160] usb 2-1: config 0 descriptor?? [ 170.177790][ T6387] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.209435][ T5160] hub 2-1:0.0: USB hub found [ 170.273973][ T5146] usb 3-1: Using ep0 maxpacket: 32 [ 170.289691][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.312455][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.331821][ T5146] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 170.348101][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.369300][ T5146] usb 3-1: config 0 descriptor?? [ 170.412066][ T5160] hub 2-1:0.0: 2 ports detected [ 170.426949][ T5146] hub 3-1:0.0: USB hub found [ 170.498438][ T6401] loop0: detected capacity change from 0 to 4096 [ 170.524135][ T6401] ntfs3: loop0: ino=3, Correct links count -> 2. [ 170.584188][ T6392] loop4: detected capacity change from 0 to 32768 [ 170.633952][ T6392] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6392) [ 170.661631][ T6392] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 170.672729][ T5146] hub 3-1:0.0: 1 port detected [ 170.678460][ T6392] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 170.692106][ T6392] BTRFS info (device loop4): using free-space-tree [ 171.096314][ T5146] usb 3-1: USB disconnect, device number 2 [ 171.980513][ T5113] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.110318][ T6434] loop0: detected capacity change from 0 to 128 [ 172.131938][ T6434] sysv_free_block: flc_count > flc_size [ 172.141531][ T6434] sysv_free_block: flc_count > flc_size [ 172.159253][ T6436] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 172.172633][ T6434] sysv_free_block: flc_count > flc_size [ 172.194449][ T6434] sysv_free_block: flc_count > flc_size [ 172.219446][ T6434] sysv_free_block: flc_count > flc_size [ 172.246789][ T6434] sysv_free_block: flc_count > flc_size [ 172.281594][ T6434] sysv_free_block: flc_count > flc_size [ 172.290710][ T5163] usb 2-1: USB disconnect, device number 2 [ 172.303020][ T8] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 172.321027][ T6434] sysv_free_block: flc_count > flc_size [ 172.343975][ T6434] sysv_free_block: flc_count > flc_size [ 172.349583][ T6434] sysv_free_block: flc_count > flc_size [ 172.372382][ T6434] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 172.508124][ T6442] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.144684][ T6455] loop3: detected capacity change from 0 to 64 [ 174.142889][ T6464] loop1: detected capacity change from 0 to 164 [ 174.273133][ T6465] loop2: detected capacity change from 0 to 64 [ 174.845100][ T6464] syz-executor.1: attempt to access beyond end of device [ 174.845100][ T6464] loop1: rw=524288, sector=263328, nr_sectors = 8 limit=164 [ 174.910615][ T6464] syz-executor.1: attempt to access beyond end of device [ 174.910615][ T6464] loop1: rw=0, sector=263328, nr_sectors = 8 limit=164 [ 174.939649][ T29] audit: type=1800 audit(1716934087.026:3): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="loop1" ino=1862 res=0 errno=0 [ 175.343755][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 175.433774][ T5160] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.533760][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 175.545552][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.570165][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.581399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 175.603762][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.628728][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.647707][ T25] usb 2-1: config 0 descriptor?? [ 175.662524][ T25] hub 2-1:0.0: USB hub found [ 175.675503][ T5160] usb 1-1: Using ep0 maxpacket: 32 [ 175.692792][ T5160] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 175.730754][ T5160] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 175.796822][ T5160] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 175.816582][ T5160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.838028][ T5160] usb 1-1: config 0 descriptor?? [ 175.847992][ T6476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 175.859180][ T5160] hub 1-1:0.0: USB hub found [ 175.869116][ T25] hub 2-1:0.0: 1 port detected [ 175.923331][ T6484] loop3: detected capacity change from 0 to 32768 [ 175.951191][ T6484] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6484) [ 176.007604][ T6484] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.035355][ T6484] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 176.069849][ T6464] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 176.072511][ T5160] hub 1-1:0.0: 2 ports detected [ 176.111022][ T25] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 176.114929][ T6484] BTRFS info (device loop3): using free-space-tree [ 176.138894][ T25] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 176.174298][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 176.191482][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 176.276011][ T25] usb 2-1: USB disconnect, device number 3 [ 176.431974][ T6513] loop2: detected capacity change from 0 to 8 [ 176.441022][ T6513] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 177.558525][ T6484] BTRFS info (device loop3): balance: start -s [ 177.864849][ T6484] BTRFS info (device loop3): relocating block group 1048576 flags system [ 177.885163][ T784] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 177.898293][ T5146] usb 1-1: USB disconnect, device number 3 [ 177.904307][ T784] usb 1-1: Failed to suspend device, error -71 [ 178.048752][ T6530] loop2: detected capacity change from 0 to 1024 [ 178.355081][ T6484] BTRFS info (device loop3): balance: ended with status: 0 [ 178.446873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 178.549777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 178.716474][ T6558] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.734301][ T5111] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.993090][ T6566] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.333064][ T6570] loop2: detected capacity change from 0 to 4096 [ 179.525449][ T6570] NILFS (loop2): invalid segment: Checksum error in segment payload [ 179.565819][ T6570] NILFS (loop2): trying rollback from an earlier position [ 179.715927][ T6570] NILFS (loop2): recovery complete [ 179.739730][ T29] audit: type=1326 audit(1716934091.826:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 179.790481][ T6583] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.883213][ T29] audit: type=1326 audit(1716934091.826:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 179.930617][ T6587] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.976872][ T29] audit: type=1326 audit(1716934091.826:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 180.024977][ T29] audit: type=1326 audit(1716934091.826:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 180.125385][ T29] audit: type=1326 audit(1716934091.826:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 180.252632][ T29] audit: type=1326 audit(1716934091.826:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 180.324275][ T29] audit: type=1326 audit(1716934091.826:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7aec7a667 code=0x7ffc0000 [ 180.355745][ T6601] loop4: detected capacity change from 0 to 1024 [ 180.392826][ T29] audit: type=1326 audit(1716934091.826:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7aec40329 code=0x7ffc0000 [ 180.517093][ T29] audit: type=1326 audit(1716934091.826:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7aec7a667 code=0x7ffc0000 [ 180.519229][ T6606] tipc: Started in network mode [ 180.573813][ T29] audit: type=1326 audit(1716934091.826:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7aec40329 code=0x7ffc0000 [ 180.596947][ T6606] tipc: Node identity ffffffff, cluster identity 4711 [ 180.617598][ T6611] loop2: detected capacity change from 0 to 256 [ 180.658026][ T29] audit: type=1326 audit(1716934091.826:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7aec7a667 code=0x7ffc0000 [ 180.662373][ T6606] tipc: Enabling of bearer rejected, failed to enable media [ 180.688794][ T29] audit: type=1326 audit(1716934091.826:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa7aec40329 code=0x7ffc0000 [ 181.344363][ T4490] Bluetooth: hci2: command 0x0406 tx timeout [ 181.353797][ T4490] Bluetooth: hci1: command 0x0406 tx timeout [ 181.354532][ T4490] Bluetooth: hci0: command 0x0406 tx timeout [ 181.355215][ T4490] Bluetooth: hci4: command 0x0406 tx timeout [ 181.355383][ T4490] Bluetooth: hci3: command 0x0406 tx timeout [ 182.422116][ T6596] loop1: detected capacity change from 0 to 32768 [ 182.458966][ T6596] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6596) [ 182.500003][ T6596] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.532302][ T6596] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 182.567942][ T6596] BTRFS info (device loop1): using free-space-tree [ 182.837480][ T6652] syz-executor.0: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 182.854172][ T6652] CPU: 0 PID: 6652 Comm: syz-executor.0 Not tainted 6.10.0-rc1-next-20240528-syzkaller #0 [ 182.864109][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 182.874205][ T6652] Call Trace: [ 182.877525][ T6652] [ 182.880488][ T6652] dump_stack_lvl+0x241/0x360 [ 182.885239][ T6652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.890468][ T6652] ? __pfx__printk+0x10/0x10 [ 182.895104][ T6652] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 182.901563][ T6652] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 182.908111][ T6652] warn_alloc+0x278/0x410 [ 182.912477][ T6652] ? stack_depot_save_flags+0x29/0x830 [ 182.917977][ T6652] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 182.924081][ T6652] ? __pfx_warn_alloc+0x10/0x10 [ 182.928972][ T6652] ? kasan_save_track+0x3f/0x80 [ 182.933862][ T6652] ? __kasan_kmalloc+0x98/0xb0 [ 182.938666][ T6652] ? xsk_setsockopt+0x598/0x950 [ 182.943559][ T6652] ? do_sock_setsockopt+0x3af/0x720 [ 182.948790][ T6652] ? __sys_setsockopt+0x1ae/0x250 [ 182.953847][ T6652] ? __x64_sys_setsockopt+0xb5/0xd0 [ 182.959066][ T6652] ? do_syscall_64+0xf3/0x230 [ 182.963740][ T6652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.969814][ T6652] __vmalloc_node_range_noprof+0x130/0x1460 [ 182.975728][ T6652] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.982059][ T6652] ? __kasan_kmalloc+0x98/0xb0 [ 182.986823][ T6652] ? xskq_create+0x54/0x170 [ 182.991330][ T6652] vmalloc_user_noprof+0x74/0x80 [ 182.996270][ T6652] ? xskq_create+0xb6/0x170 [ 183.000777][ T6652] xskq_create+0xb6/0x170 [ 183.005113][ T6652] xsk_init_queue+0xa1/0x100 [ 183.009715][ T6652] xsk_setsockopt+0x598/0x950 [ 183.014399][ T6652] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.019600][ T6652] ? __pfx_lock_acquire+0x10/0x10 [ 183.024621][ T6652] ? aa_sock_opt_perm+0x79/0x120 [ 183.029565][ T6652] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 183.035109][ T6652] ? security_socket_setsockopt+0x87/0xb0 [ 183.040826][ T6652] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.046021][ T6652] do_sock_setsockopt+0x3af/0x720 [ 183.051051][ T6652] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 183.056598][ T6652] ? __fget_files+0x29/0x470 [ 183.061187][ T6652] ? __fget_files+0x3f6/0x470 [ 183.065875][ T6652] __sys_setsockopt+0x1ae/0x250 [ 183.070731][ T6652] __x64_sys_setsockopt+0xb5/0xd0 [ 183.075759][ T6652] do_syscall_64+0xf3/0x230 [ 183.080259][ T6652] ? clear_bhb_loop+0x35/0x90 [ 183.084937][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.090836][ T6652] RIP: 0033:0x7faca6e7cee9 [ 183.095255][ T6652] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 183.114860][ T6652] RSP: 002b:00007faca7cc50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.123275][ T6652] RAX: ffffffffffffffda RBX: 00007faca6fb3fa0 RCX: 00007faca6e7cee9 [ 183.131244][ T6652] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 183.139211][ T6652] RBP: 00007faca6ec947f R08: 00000000000000eb R09: 0000000000000000 [ 183.147173][ T6652] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 183.155137][ T6652] R13: 000000000000000b R14: 00007faca6fb3fa0 R15: 00007ffc734a6d28 [ 183.163123][ T6652] [ 183.214178][ T6652] Mem-Info: [ 183.217536][ T6652] active_anon:23771 inactive_anon:0 isolated_anon:0 [ 183.217536][ T6652] active_file:0 inactive_file:47218 isolated_file:0 [ 183.217536][ T6652] unevictable:768 dirty:744 writeback:0 [ 183.217536][ T6652] slab_reclaimable:9444 slab_unreclaimable:94751 [ 183.217536][ T6652] mapped:514963 shmem:8709 pagetables:675 [ 183.217536][ T6652] sec_pagetables:0 bounce:0 [ 183.217536][ T6652] kernel_misc_reclaimable:0 [ 183.217536][ T6652] free:1378140 free_pcp:1803 free_cma:0 [ 183.367390][ T6652] Node 0 active_anon:94988kB inactive_anon:0kB active_file:0kB inactive_file:189168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:2059852kB dirty:152kB writeback:0kB shmem:33300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10836kB pagetables:2708kB sec_pagetables:0kB all_unreclaimable? no [ 183.463060][ T6662] BTRFS info (device loop1): balance: start -s [ 183.466032][ T6652] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 183.539997][ T6662] BTRFS info (device loop1): relocating block group 1048576 flags system [ 183.567509][ T6652] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.645077][ T6652] lowmem_reserve[]: 0 2571 2571 0 0 [ 183.650396][ T6652] Node 0 DMA32 free:1558416kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:95044kB inactive_anon:0kB active_file:0kB inactive_file:185664kB unevictable:1536kB writepending:152kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:1440kB local_pcp:520kB free_cma:0kB [ 183.680856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.770771][ T6652] lowmem_reserve[]: 0 0 0 0 0 [ 183.776980][ T6670] loop4: detected capacity change from 0 to 1024 [ 183.790162][ T6652] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 183.859154][ T6652] lowmem_reserve[]: 0 0 0 0 0 [ 183.891083][ T6652] Node 1 Normal free:3945176kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.006745][ T6652] lowmem_reserve[]: 0 0 0 0 0 [ 184.030597][ T6652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 184.078123][ T6652] Node 0 DMA32: 56*4kB (UM) 134*8kB (UM) 268*16kB (UME) 294*32kB (UME) 229*64kB (UME) 133*128kB (UME) 56*256kB (UM) 29*512kB (UME) 16*1024kB (UME) 1*2048kB (U) 358*4096kB (UM) = 1560656kB [ 184.139368][ T6652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 184.144261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 184.163935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 184.172497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 184.173736][ T6652] Node 1 Normal: 6*4kB (UM) 2*8kB (UM) 9*16kB (UM) 13*32kB (UM) 8*64kB (U) 7*128kB (U) 9*256kB (UM) 5*512kB (UM) 4*1024kB (U) 3*2048kB (UM) 959*4096kB (M) = 3945176kB [ 184.216348][ T6652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.230599][ T6652] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.275150][ T6662] BTRFS info (device loop1): balance: ended with status: 0 [ 184.292988][ T6652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 184.315122][ T6652] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.466531][ T6652] 58068 total pagecache pages [ 184.471368][ T6652] 0 pages in swap cache [ 184.496387][ T6652] Free swap = 124472kB [ 184.521159][ T6652] Total swap = 124996kB [ 184.747518][ T6652] 2097051 pages RAM [ 184.774967][ T6652] 0 pages HighMem/MovableOnly [ 184.834981][ T6652] 400871 pages reserved [ 184.862292][ T6652] 0 pages cma reserved [ 186.635430][ T6692] loop3: detected capacity change from 0 to 64 [ 186.847589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 186.856440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 186.891227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 186.932736][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 186.932753][ T29] audit: type=1800 audit(1716934099.016:53): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=2 res=0 errno=0 [ 188.864621][ T6718] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.006144][ T6719] loop2: detected capacity change from 0 to 1024 [ 189.292306][ T5114] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.661070][ T6727] loop3: detected capacity change from 0 to 1024 [ 189.935848][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.974658][ T6742] tipc: Started in network mode [ 189.993729][ T6742] tipc: Node identity 6, cluster identity 4711 [ 190.043880][ T6742] tipc: Node number set to 6 [ 190.222212][ T6727] hfsplus: bad catalog entry used to create inode [ 190.258058][ T6727] hfsplus: failed to load root directory [ 191.487739][ T6727] loop3: detected capacity change from 0 to 8 [ 191.532775][ T6727] squashfs: Unknown parameter 'Ò«ò!|B01777777777777777777777' [ 191.551491][ T6748] loop2: detected capacity change from 0 to 1024 [ 191.608887][ T6748] hfsplus: bad catalog entry used to create inode [ 191.617001][ T6748] hfsplus: failed to load root directory [ 191.737622][ T6748] loop2: detected capacity change from 0 to 8 [ 191.744537][ T6760] loop1: detected capacity change from 0 to 512 [ 191.760922][ T6760] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 191.778752][ T6748] squashfs: Unknown parameter 'Ò«ò!|B01777777777777777777777' [ 192.014684][ T29] audit: type=1800 audit(1716934104.086:54): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 192.403562][ T5146] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 192.590158][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.621163][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.643932][ T5146] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 192.669341][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.702966][ T5146] usb 1-1: config 0 descriptor?? [ 192.993348][ T6770] loop2: detected capacity change from 0 to 32768 [ 193.120339][ T5146] usbhid 1-1:0.0: can't add hid device: -71 [ 193.133728][ T5146] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 193.173718][ T5146] usb 1-1: USB disconnect, device number 4 [ 193.204816][ T6770] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 193.273710][ T6770] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 193.328559][ T6770] bcachefs (loop2): alloc_read... done [ 193.345148][ T6770] bcachefs (loop2): stripes_read... done [ 193.361818][ T6770] bcachefs (loop2): snapshots_read... done [ 193.380886][ T6770] bcachefs (loop2): journal_replay... done [ 193.405414][ T6770] bcachefs (loop2): resume_logged_ops... done [ 193.423168][ T6770] bcachefs (loop2): going read-write [ 193.443616][ T6770] bcachefs (loop2): done starting filesystem [ 193.969139][ T29] audit: type=1800 audit(1716934106.056:55): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 194.084195][ T5118] bcachefs (loop2): shutting down [ 194.089651][ T5118] bcachefs (loop2): going read-only [ 194.123772][ T5118] bcachefs (loop2): finished waiting for writes to stop [ 194.190799][ T5118] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 194.290715][ T5118] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 194.295397][ T6814] loop0: detected capacity change from 0 to 512 [ 194.345876][ T5118] bcachefs (loop2): shutdown complete, journal seq 14 [ 194.366811][ T5118] bcachefs (loop2): marking filesystem clean [ 194.445192][ T6814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.461240][ T6814] ext4 filesystem being mounted at /root/syzkaller-testdir3841186778/syzkaller.oXFzpw/72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.527275][ T5118] bcachefs (loop2): shutdown complete [ 194.536168][ T6814] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 194.579212][ T6814] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor.0: mark_inode_dirty error [ 194.604087][ T6814] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 194.639725][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.647584][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.673176][ T6814] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 194.855851][ T5109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.346986][ T29] audit: type=1800 audit(1716934108.436:56): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 197.567843][ T6873] loop1: detected capacity change from 0 to 1024 [ 197.722459][ T29] audit: type=1800 audit(1716934109.806:57): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 199.636159][ T6879] loop3: detected capacity change from 0 to 32768 [ 199.655265][ T6879] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6879) [ 199.740482][ T6879] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.790941][ T6879] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 199.819616][ T6879] BTRFS info (device loop3): using free-space-tree [ 199.939533][ T6878] loop0: detected capacity change from 0 to 32768 [ 200.084431][ T6878] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 200.135080][ T6897] loop2: detected capacity change from 0 to 4096 [ 200.154201][ T6878] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.162302][ T6897] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 200.263960][ T6897] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 200.291291][ T6897] ntfs3: loop2: mft corrupted [ 200.327144][ T6897] ntfs3: loop2: Failed to load $Extend (-22). [ 200.353602][ T6897] ntfs3: loop2: Failed to initialize $Extend. [ 200.374549][ T6878] XFS (loop0): Ending clean mount [ 200.409495][ T29] audit: type=1800 audit(1716934112.496:58): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 200.486157][ T5111] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.488597][ T6878] XFS (loop0): Quotacheck needed: Please wait. [ 200.661581][ T6895] loop1: detected capacity change from 0 to 32768 [ 200.696139][ T6895] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6895) [ 200.711500][ T6878] XFS (loop0): Quotacheck: Done. [ 200.800248][ T6895] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.821260][ T5109] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.852608][ T6926] loop4: detected capacity change from 0 to 64 [ 200.869952][ T6895] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 200.887514][ T6895] BTRFS info (device loop1): using free-space-tree [ 200.978598][ T6941] loop3: detected capacity change from 0 to 64 [ 201.190134][ T5114] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.707953][ T6953] loop3: detected capacity change from 0 to 1024 [ 204.489200][ T6984] loop0: detected capacity change from 0 to 64 [ 204.758622][ T6963] loop2: detected capacity change from 0 to 32768 [ 204.796923][ T6963] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6963) [ 204.830778][ T6988] loop0: detected capacity change from 0 to 64 [ 204.853913][ T6963] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.903589][ T6963] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 204.912350][ T6963] BTRFS info (device loop2): using free-space-tree [ 205.002717][ T6972] loop3: detected capacity change from 0 to 32768 [ 205.087536][ T6972] BTRFS: device /dev/loop3 (7:3) using temp-fsid 47e0eeee-7b59-45c1-8644-84aef1ca9adf [ 205.133860][ T6972] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6972) [ 205.165894][ T6972] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.176590][ T6972] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 205.192166][ T6972] BTRFS info (device loop3): using free-space-tree [ 206.062790][ T6963] BTRFS error (device loop2): open_ctree failed [ 206.830982][ T7029] loop4: detected capacity change from 0 to 1024 [ 207.045173][ T7032] loop0: detected capacity change from 0 to 128 [ 207.100142][ T7032] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 207.115147][ T7032] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 207.324614][ T5111] BTRFS info (device loop3): last unmount of filesystem 47e0eeee-7b59-45c1-8644-84aef1ca9adf [ 208.706304][ T7047] loop1: detected capacity change from 0 to 4096 [ 208.739874][ T7047] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 208.833019][ T7047] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 209.088630][ T7054] loop3: detected capacity change from 0 to 64 [ 209.418980][ T7040] loop0: detected capacity change from 0 to 32768 [ 209.963350][ T7063] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.268487][ T7071] loop2: detected capacity change from 0 to 128 [ 210.292206][ T7059] loop3: detected capacity change from 0 to 32768 [ 210.305312][ T7059] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7059) [ 210.330584][ T5857] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 210.426846][ T7071] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.462290][ T7071] ext4 filesystem being mounted at /root/syzkaller-testdir2399515350/syzkaller.pTKs8y/89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.487470][ T7059] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 210.509507][ T7059] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 210.522443][ T7059] BTRFS info (device loop3): using free-space-tree [ 210.540658][ T5857] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 210.553900][ T5857] usb 1-1: config 1 has no interface number 1 [ 210.560269][ T5857] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 210.575078][ T5857] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 210.586605][ T5857] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.610997][ T5857] usb 1-1: string descriptor 0 read error: -22 [ 210.622328][ T5857] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.650757][ T5118] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.652976][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.716287][ T5857] usb 1-1: low speed audio streaming not supported [ 210.823105][ T7066] loop4: detected capacity change from 0 to 32768 [ 210.952699][ T5857] usb 1-1: USB disconnect, device number 5 [ 211.106912][ T5111] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.370082][ T7095] loop4: detected capacity change from 0 to 47 [ 211.506103][ T7095] syz-executor.4: attempt to access beyond end of device [ 211.506103][ T7095] loop4: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 211.548744][ T7095] Buffer I/O error on dev loop4, logical block 24, lost async page write [ 211.604905][ T7095] syz-executor.4: attempt to access beyond end of device [ 211.604905][ T7095] loop4: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 211.628100][ T7098] loop0: detected capacity change from 0 to 64 [ 211.631045][ T7095] Buffer I/O error on dev loop4, logical block 25, lost async page write [ 211.839674][ T7099] loop3: detected capacity change from 0 to 4096 [ 211.861765][ T7099] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 211.901671][ T7099] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 212.026952][ T7093] loop2: detected capacity change from 0 to 32768 [ 212.049265][ T7093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7093) [ 212.095864][ T7093] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.121908][ T7093] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 212.146936][ T7093] BTRFS info (device loop2): using free-space-tree [ 212.153640][ T5146] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 212.353962][ T5118] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.370155][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 212.410783][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 212.443984][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 212.452242][ T5146] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.483167][ T5146] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.497724][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.517469][ T5146] usb 1-1: config 0 descriptor?? [ 212.524873][ T7101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.663728][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 212.678348][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.738398][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 212.751125][ T8] usb 4-1: config 1 has an invalid descriptor of length 53, skipping remainder of the config [ 212.783505][ T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 212.801698][ T8] usb 4-1: config 1 has no interface number 1 [ 212.808551][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 212.843696][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 212.882789][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 212.906843][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.933724][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.941832][ T8] usb 4-1: Product: syz [ 212.963139][ T8] usb 4-1: Manufacturer: syz [ 212.981765][ T7103] loop4: detected capacity change from 0 to 32768 [ 212.989969][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 212.997957][ T8] usb 4-1: SerialNumber: syz [ 213.004455][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.011894][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.070617][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.114654][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.160889][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.187863][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.203924][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.219935][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.236943][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.250451][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.258925][ T8] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 213.268010][ T8] usb 4-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 213.277168][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.286902][ T8] usb 4-1: found format II with max.bitrate = 0, frame size=39301 [ 213.299815][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.307906][ T8] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 213.316369][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.324291][ T8] usb 4-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 213.332949][ T5146] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 213.341022][ T8] usb 4-1: found format II with max.bitrate = 0, frame size=39301 [ 213.354578][ T5146] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 213.407089][ T5146] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 213.448670][ T8] usb 4-1: USB disconnect, device number 2 [ 213.460675][ T5146] usb 1-1: USB disconnect, device number 6 [ 213.987466][ T7136] loop2: detected capacity change from 0 to 512 [ 214.255687][ T7136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.297435][ T7136] EXT4-fs (loop2): Test dummy encryption mode enabled [ 214.332451][ T7136] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #17: comm syz-executor.2: iget: bogus i_mode (0) [ 214.416031][ T7136] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 17 (err -117) [ 214.439964][ T5857] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 214.497091][ T7136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.600327][ T5111] syz-executor.3 (5111) used greatest stack depth: 17240 bytes left [ 214.636119][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.646727][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.657021][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.665023][ T5857] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 214.676102][ T5857] usb 5-1: config 1 has no interface number 1 [ 214.682582][ T5857] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 214.695751][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.704838][ T5857] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 214.715947][ T5857] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.726999][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.738857][ T5857] usb 5-1: string descriptor 0 read error: -22 [ 214.745257][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.752560][ T5857] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.761888][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.811045][ T5857] usb 5-1: low speed audio streaming not supported [ 214.872711][ T7136] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 214.969415][ T6113] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.029925][ T5118] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.064188][ T8] usb 5-1: USB disconnect, device number 2 [ 215.149581][ T7134] loop0: detected capacity change from 0 to 32768 [ 215.168375][ T7134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7134) [ 215.169448][ T6113] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.210460][ T7134] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.231072][ T7134] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 215.260426][ T7152] loop2: detected capacity change from 0 to 64 [ 215.260658][ T7134] BTRFS info (device loop0): using free-space-tree [ 215.338533][ T6113] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.473785][ T6113] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.552882][ T5109] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.571988][ T7161] loop1: detected capacity change from 0 to 4096 [ 215.606116][ T7161] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 215.657415][ T7161] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 215.930932][ T7144] chnl_net:caif_netlink_parms(): no params data found [ 216.215005][ T6113] bridge_slave_1: left allmulticast mode [ 216.221396][ T6113] bridge_slave_1: left promiscuous mode [ 216.242665][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.286749][ T6113] bridge_slave_0: left allmulticast mode [ 216.292595][ T6113] bridge_slave_0: left promiscuous mode [ 216.298691][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.845100][ T7177] loop4: detected capacity change from 0 to 32768 [ 216.881497][ T5112] Bluetooth: hci3: command tx timeout [ 216.889180][ T7177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7177) [ 216.916235][ T7177] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 216.939464][ T7177] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 216.958434][ T7177] BTRFS info (device loop4): using free-space-tree [ 217.148504][ T5113] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.554287][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.592241][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.620649][ T6113] bond0 (unregistering): Released all slaves [ 217.685165][ T7213] syz-executor.4[7213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.685330][ T7213] syz-executor.4[7213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.722288][ T7215] loop1: detected capacity change from 0 to 64 [ 217.861929][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.893760][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.901035][ T7144] bridge_slave_0: entered allmulticast mode [ 217.921524][ T7144] bridge_slave_0: entered promiscuous mode [ 217.948799][ T6113] tipc: Left network mode [ 217.966177][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.977211][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.985321][ T7144] bridge_slave_1: entered allmulticast mode [ 218.022907][ T7144] bridge_slave_1: entered promiscuous mode [ 218.135918][ T7221] loop4: detected capacity change from 0 to 4096 [ 218.166158][ T7221] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 218.249413][ T7221] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 218.483426][ T7144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.530244][ T7144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.788925][ T6113] hsr_slave_0: left promiscuous mode [ 218.819117][ T6113] hsr_slave_1: left promiscuous mode [ 218.943993][ T5112] Bluetooth: hci3: command tx timeout [ 219.093246][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.207501][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.418333][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.462526][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.603971][ T6113] veth1_macvtap: left promiscuous mode [ 219.610261][ T6113] veth0_macvtap: left promiscuous mode [ 219.647237][ T6113] veth1_vlan: left promiscuous mode [ 219.652940][ T6113] veth0_vlan: left promiscuous mode [ 220.182639][ T5146] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 220.287254][ T7228] loop1: detected capacity change from 0 to 32768 [ 220.325060][ T7228] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7228) [ 220.361064][ T7228] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.382676][ T7228] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 220.391851][ T5146] usb 1-1: Using ep0 maxpacket: 8 [ 220.411637][ T5146] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.424966][ T5146] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 220.444759][ T7228] BTRFS info (device loop1): using free-space-tree [ 220.451484][ T5146] usb 1-1: config 1 has an invalid descriptor of length 53, skipping remainder of the config [ 220.482689][ T5146] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 220.520367][ T5146] usb 1-1: config 1 has no interface number 1 [ 220.543984][ T5146] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 220.593032][ T5146] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 220.614095][ T5146] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 220.628459][ T5146] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.638381][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.659206][ T5146] usb 1-1: Product: syz [ 220.663430][ T5146] usb 1-1: Manufacturer: syz [ 220.668719][ T5146] usb 1-1: SerialNumber: syz [ 220.779006][ T5114] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.916863][ T5146] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 220.951516][ T5146] usb 1-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 220.979239][ T5146] usb 1-1: found format II with max.bitrate = 0, frame size=39301 [ 221.013745][ T5146] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 221.021617][ T5146] usb 1-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 221.033794][ T5112] Bluetooth: hci3: command tx timeout [ 221.054991][ T5146] usb 1-1: found format II with max.bitrate = 0, frame size=39301 [ 221.097623][ T5146] usb 1-1: USB disconnect, device number 7 [ 221.565437][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 221.574868][ T7261] loop1: detected capacity change from 0 to 64 [ 221.697794][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 222.035768][ T7271] loop1: detected capacity change from 0 to 4096 [ 222.249148][ T7271] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 222.780706][ T7271] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 223.103705][ T5112] Bluetooth: hci3: command tx timeout [ 223.454493][ T7144] team0: Port device team_slave_0 added [ 223.468869][ T7144] team0: Port device team_slave_1 added [ 223.621112][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.639801][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.655814][ T7300] loop2: detected capacity change from 0 to 64 [ 223.675077][ T7284] loop4: detected capacity change from 0 to 32768 [ 223.687499][ T7284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7284) [ 223.734913][ T7284] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.743664][ T7144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.759189][ T7284] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 223.788196][ T7144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.803498][ T7144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.829991][ T7284] BTRFS info (device loop4): using free-space-tree [ 223.893033][ T7144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.142385][ T5113] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.156194][ T7144] hsr_slave_0: entered promiscuous mode [ 224.204082][ T7144] hsr_slave_1: entered promiscuous mode [ 224.242252][ T7144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.267557][ T7144] Cannot create hsr debugfs directory [ 224.786856][ T7327] loop2: detected capacity change from 0 to 4096 [ 224.808170][ T7327] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 224.876243][ T7327] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 225.728877][ T7345] loop4: detected capacity change from 0 to 64 [ 225.864346][ T7348] veth1_macvtap: left promiscuous mode [ 225.986899][ T7144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.011735][ T7144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.044690][ T7144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.083921][ T7144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.409872][ T7144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.525466][ T7365] loop2: detected capacity change from 0 to 4096 [ 226.569322][ T7365] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 226.601360][ T7144] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.654567][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.661748][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.699030][ T7365] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 226.725826][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.732980][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.869639][ T7355] loop4: detected capacity change from 0 to 32768 [ 226.887499][ T7355] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7355) [ 226.915891][ T7355] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.935817][ T7355] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 226.954755][ T7355] BTRFS info (device loop4): using free-space-tree [ 226.978294][ T7386] loop2: detected capacity change from 0 to 64 [ 227.080169][ T5113] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.159102][ T7144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.401139][ T7144] veth0_vlan: entered promiscuous mode [ 227.470257][ T7144] veth1_vlan: entered promiscuous mode [ 227.669715][ T7144] veth0_macvtap: entered promiscuous mode [ 227.733981][ T7144] veth1_macvtap: entered promiscuous mode [ 227.762390][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.780764][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.793331][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.809995][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.817882][ T7421] loop2: detected capacity change from 0 to 128 [ 227.824893][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.843524][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.854682][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.865339][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.893578][ T7421] FAT-fs (loop2): Directory bread(block 11554) failed [ 227.906908][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.914955][ T7421] FAT-fs (loop2): Directory bread(block 11555) failed [ 227.935880][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.966061][ T7421] FAT-fs (loop2): Directory bread(block 11556) failed [ 227.973265][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.983582][ T7421] FAT-fs (loop2): Directory bread(block 11557) failed [ 227.991723][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.002712][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.013327][ T7421] FAT-fs (loop2): Directory bread(block 11558) failed [ 228.020726][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.037638][ T7421] FAT-fs (loop2): Directory bread(block 11559) failed [ 228.046558][ T7421] FAT-fs (loop2): Directory bread(block 11560) failed [ 228.053986][ T7421] FAT-fs (loop2): Directory bread(block 11561) failed [ 228.061464][ T7421] FAT-fs (loop2): Directory bread(block 11562) failed [ 228.068776][ T7421] FAT-fs (loop2): Directory bread(block 11563) failed [ 228.072960][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.115577][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.149581][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.189824][ T7144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.242657][ T7144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.259413][ T7427] loop4: detected capacity change from 0 to 4096 [ 228.269839][ T7427] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 228.280050][ T7144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.293766][ T7144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.303022][ T7144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.350716][ T7427] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 228.383329][ T7429] loop2: detected capacity change from 0 to 64 [ 228.512032][ T2442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.525648][ T2442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.590997][ T5146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.623035][ T5146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.645629][ T7433] loop4: detected capacity change from 0 to 32768 [ 229.668982][ T7452] loop2: detected capacity change from 0 to 128 [ 229.675792][ T7433] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7433) [ 229.742841][ T7433] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.754467][ T7452] FAT-fs (loop2): Directory bread(block 11554) failed [ 229.761307][ T7452] FAT-fs (loop2): Directory bread(block 11555) failed [ 229.778975][ T7454] loop0: detected capacity change from 0 to 128 [ 229.781770][ T7433] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 229.798571][ T7452] FAT-fs (loop2): Directory bread(block 11556) failed [ 229.806070][ T7452] FAT-fs (loop2): Directory bread(block 11557) failed [ 229.813122][ T7433] BTRFS info (device loop4): using free-space-tree [ 229.820339][ T7452] FAT-fs (loop2): Directory bread(block 11558) failed [ 229.836714][ T7456] loop1: detected capacity change from 0 to 64 [ 229.843114][ T7452] FAT-fs (loop2): Directory bread(block 11559) failed [ 229.862568][ T7452] FAT-fs (loop2): Directory bread(block 11560) failed [ 229.875034][ T7452] FAT-fs (loop2): Directory bread(block 11561) failed [ 229.919339][ T7452] FAT-fs (loop2): Directory bread(block 11562) failed [ 229.941588][ T7452] FAT-fs (loop2): Directory bread(block 11563) failed [ 230.033013][ T5113] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.333262][ T7482] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 230.360704][ T7482] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.912894][ T7502] loop1: detected capacity change from 0 to 64 [ 230.919896][ T7501] loop4: detected capacity change from 0 to 128 [ 232.164744][ T7506] loop1: detected capacity change from 0 to 32768 [ 232.181065][ T7506] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7506) [ 232.221658][ T7506] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.243684][ T7506] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 232.259546][ T7506] BTRFS info (device loop1): using free-space-tree [ 232.371952][ T7538] loop4: detected capacity change from 0 to 64 [ 232.546897][ T5114] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.695253][ T7546] loop4: detected capacity change from 0 to 128 [ 233.592390][ T7573] loop3: detected capacity change from 0 to 64 [ 233.894739][ T7579] loop2: detected capacity change from 0 to 128 [ 234.566065][ T7602] loop3: detected capacity change from 0 to 512 [ 234.632137][ T7602] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2) [ 234.691656][ T7602] EXT4-fs (loop3): 2 truncates cleaned up [ 234.723246][ T7602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.768941][ T7575] loop1: detected capacity change from 0 to 32768 [ 234.785568][ T7575] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7575) [ 234.994803][ T7575] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.023903][ T7575] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 235.035115][ T7614] loop2: detected capacity change from 0 to 64 [ 235.061438][ T7575] BTRFS info (device loop1): using free-space-tree [ 235.477865][ T5114] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.890591][ T7638] fuse: Bad value for 'fd' [ 237.069241][ T7649] loop2: detected capacity change from 0 to 128 [ 237.108583][ T7649] FAT-fs (loop2): Directory bread(block 11554) failed [ 237.128295][ T7649] FAT-fs (loop2): Directory bread(block 11555) failed [ 237.149092][ T7649] FAT-fs (loop2): Directory bread(block 11556) failed [ 237.159988][ T7649] FAT-fs (loop2): Directory bread(block 11557) failed [ 237.167843][ T7649] FAT-fs (loop2): Directory bread(block 11558) failed [ 237.179848][ T7649] FAT-fs (loop2): Directory bread(block 11559) failed [ 237.206034][ T7649] FAT-fs (loop2): Directory bread(block 11560) failed [ 237.242697][ T7649] FAT-fs (loop2): Directory bread(block 11561) failed [ 237.278565][ T7649] FAT-fs (loop2): Directory bread(block 11562) failed [ 237.280520][ T7657] loop1: detected capacity change from 0 to 64 [ 237.309943][ T7649] FAT-fs (loop2): Directory bread(block 11563) failed [ 239.183971][ T7606] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 239.596480][ T7683] fuse: Bad value for 'fd' [ 239.656012][ T7144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.716950][ T7685] loop0: detected capacity change from 0 to 128 [ 239.771984][ T7685] FAT-fs (loop0): Directory bread(block 11554) failed [ 239.807840][ T7685] FAT-fs (loop0): Directory bread(block 11555) failed [ 239.855952][ T7685] FAT-fs (loop0): Directory bread(block 11556) failed [ 239.864937][ T7688] fuse: Bad value for 'fd' [ 239.890423][ T7664] loop2: detected capacity change from 0 to 32768 [ 239.897876][ T7685] FAT-fs (loop0): Directory bread(block 11557) failed [ 239.913694][ T7664] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7664) [ 239.932149][ T7685] FAT-fs (loop0): Directory bread(block 11558) failed [ 239.939970][ T7685] FAT-fs (loop0): Directory bread(block 11559) failed [ 239.958312][ T7664] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.997347][ T7664] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 240.029699][ T7664] BTRFS info (device loop2): using free-space-tree [ 240.031535][ T7685] FAT-fs (loop0): Directory bread(block 11560) failed [ 240.066202][ T7685] FAT-fs (loop0): Directory bread(block 11561) failed [ 240.075342][ T7685] FAT-fs (loop0): Directory bread(block 11562) failed [ 240.083185][ T7685] FAT-fs (loop0): Directory bread(block 11563) failed [ 240.236660][ T5118] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.451398][ T7710] loop0: detected capacity change from 0 to 64 [ 241.095299][ T7727] fuse: Bad value for 'fd' [ 241.173612][ T5146] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 241.276629][ T7730] loop0: detected capacity change from 0 to 128 [ 241.293359][ T7730] FAT-fs (loop0): Directory bread(block 11554) failed [ 241.302014][ T7730] FAT-fs (loop0): Directory bread(block 11555) failed [ 241.310835][ T7730] FAT-fs (loop0): Directory bread(block 11556) failed [ 241.347723][ T7730] FAT-fs (loop0): Directory bread(block 11557) failed [ 241.387961][ T7730] FAT-fs (loop0): Directory bread(block 11558) failed [ 241.388677][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.409378][ T7730] FAT-fs (loop0): Directory bread(block 11559) failed [ 241.449084][ T7730] FAT-fs (loop0): Directory bread(block 11560) failed [ 241.463594][ T7730] FAT-fs (loop0): Directory bread(block 11561) failed [ 241.471266][ T5146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.488263][ T7730] FAT-fs (loop0): Directory bread(block 11562) failed [ 241.503748][ T5146] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 241.507139][ T7730] FAT-fs (loop0): Directory bread(block 11563) failed [ 241.512810][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.542327][ T5146] usb 2-1: config 0 descriptor?? [ 241.790159][ T7737] fuse: Bad value for 'fd' [ 242.003748][ T7741] loop2: detected capacity change from 0 to 64 [ 242.005849][ T7724] loop4: detected capacity change from 0 to 40427 [ 242.068040][ T7724] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.172826][ T5146] usb 2-1: language id specifier not provided by device, defaulting to English [ 242.197215][ T7724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.434767][ T5113] syz-executor.4: attempt to access beyond end of device [ 242.434767][ T5113] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.486526][ T5113] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 242.608565][ T7733] loop3: detected capacity change from 0 to 32768 [ 242.637686][ T7733] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7733) [ 242.719459][ T7733] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.743554][ T5159] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 242.761462][ T7733] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 242.790648][ T7733] BTRFS info (device loop3): using free-space-tree [ 242.826888][ T5146] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 242.850885][ T5146] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 242.864493][ T5146] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 242.872878][ T5146] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 242.881712][ T5146] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 242.905869][ T5146] usb 2-1: USB disconnect, device number 4 [ 242.937672][ T5159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.980106][ T5159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.016124][ T7144] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.034597][ T5159] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 243.054601][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.087627][ T5159] usb 3-1: config 0 descriptor?? [ 243.595391][ T5159] itetech 0003:06CB:73F5.0003: unknown main item tag 0x0 [ 243.679795][ T5159] itetech 0003:06CB:73F5.0003: hidraw0: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.2-1/input0 [ 243.715255][ T7777] fuse: Bad value for 'fd' [ 243.757703][ T5159] usb 3-1: USB disconnect, device number 3 [ 243.868736][ T29] audit: type=1326 audit(1716934155.956:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd725a7cee9 code=0x7ffc0000 [ 243.909561][ T7782] loop3: detected capacity change from 0 to 128 [ 243.942854][ T7782] FAT-fs (loop3): Directory bread(block 11554) failed [ 243.957166][ T29] audit: type=1326 audit(1716934155.986:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd725a7cee9 code=0x7ffc0000 [ 243.957354][ T7782] FAT-fs (loop3): Directory bread(block 11555) failed [ 243.989206][ T29] audit: type=1326 audit(1716934155.986:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd725a7cee9 code=0x7ffc0000 [ 244.018844][ T7782] FAT-fs (loop3): Directory bread(block 11556) failed [ 244.026103][ T7782] FAT-fs (loop3): Directory bread(block 11557) failed [ 244.033165][ T29] audit: type=1326 audit(1716934155.986:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd725a7cee9 code=0x7ffc0000 [ 244.062118][ T7782] FAT-fs (loop3): Directory bread(block 11558) failed [ 244.069484][ T7782] FAT-fs (loop3): Directory bread(block 11559) failed [ 244.079878][ T7782] FAT-fs (loop3): Directory bread(block 11560) failed [ 244.090522][ T29] audit: type=1326 audit(1716934155.986:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd725a7cee9 code=0x7ffc0000 [ 244.114200][ T7782] FAT-fs (loop3): Directory bread(block 11561) failed [ 244.130692][ T7782] FAT-fs (loop3): Directory bread(block 11562) failed [ 244.150888][ T7782] FAT-fs (loop3): Directory bread(block 11563) failed [ 244.162502][ T29] audit: type=1326 audit(1716934155.986:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd725a7cee9 code=0x7ffc0000 [ 244.189729][ T29] audit: type=1326 audit(1716934155.986:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd725a7cee9 code=0x7ffc0000 [ 244.240530][ T7786] loop4: detected capacity change from 0 to 64 [ 244.250195][ T29] audit: type=1326 audit(1716934155.986:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7779 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd725a7cee9 code=0x7ffc0000 [ 244.340670][ T7788] fuse: Bad value for 'fd' [ 244.721228][ T7800] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 244.763699][ T7800] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 244.800497][ T7800] netlink: 88156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.856366][ T7806] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 244.973286][ T7806] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 245.136008][ T7821] loop1: detected capacity change from 0 to 64 [ 245.212975][ T7823] vlan2: entered promiscuous mode [ 245.215959][ T7821] syz-executor.1: attempt to access beyond end of device [ 245.215959][ T7821] loop1: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 245.243158][ T7821] syz-executor.1: attempt to access beyond end of device [ 245.243158][ T7821] loop1: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 245.272689][ T7821] syz-executor.1: attempt to access beyond end of device [ 245.272689][ T7821] loop1: rw=34817, sector=76, nr_sectors = 506 limit=64 [ 245.305031][ T7792] loop2: detected capacity change from 0 to 32768 [ 245.316989][ T7792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7792) [ 245.335064][ T5163] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 245.370749][ T7792] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.381206][ T7792] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 245.396037][ T7792] BTRFS info (device loop2): using free-space-tree [ 245.472036][ T7839] loop0: detected capacity change from 0 to 128 [ 245.483222][ T7839] FAT-fs (loop0): Directory bread(block 11554) failed [ 245.509922][ T7839] FAT-fs (loop0): Directory bread(block 11555) failed [ 245.540636][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.563905][ T7839] FAT-fs (loop0): Directory bread(block 11556) failed [ 245.574171][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.584667][ T7839] FAT-fs (loop0): Directory bread(block 11557) failed [ 245.602702][ T7839] FAT-fs (loop0): Directory bread(block 11558) failed [ 245.616602][ T5163] usb 5-1: New USB device found, idVendor=056a, idProduct=f600, bcdDevice= 0.9c [ 245.630834][ T7839] FAT-fs (loop0): Directory bread(block 11559) failed [ 245.652938][ T7839] FAT-fs (loop0): Directory bread(block 11560) failed [ 245.660280][ T7839] FAT-fs (loop0): Directory bread(block 11561) failed [ 245.681925][ T7839] FAT-fs (loop0): Directory bread(block 11562) failed [ 245.706271][ T7839] FAT-fs (loop0): Directory bread(block 11563) failed [ 245.721965][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.735218][ T7847] loop1: detected capacity change from 0 to 64 [ 245.747656][ T5163] usb 5-1: config 0 descriptor?? [ 245.872877][ T5118] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.081629][ T7856] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 246.119710][ T7856] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 246.216894][ T5163] wacom 0003:056A:F600.0004: unknown main item tag 0x0 [ 246.261487][ T5163] wacom 0003:056A:F600.0004: unknown main item tag 0x0 [ 246.284695][ T5163] wacom 0003:056A:F600.0004: Unknown device_type for 'HID 056a:f600'. Ignoring. [ 246.380260][ T7862] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 246.413208][ T5163] usb 5-1: USB disconnect, device number 3 [ 246.432980][ T7862] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 246.461693][ T7862] netlink: 88156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.497255][ T7875] loop0: detected capacity change from 0 to 64 [ 247.598233][ T7875] syz-executor.0: attempt to access beyond end of device [ 247.598233][ T7875] loop0: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 247.632920][ T7875] syz-executor.0: attempt to access beyond end of device [ 247.632920][ T7875] loop0: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 247.650109][ T7875] syz-executor.0: attempt to access beyond end of device [ 247.650109][ T7875] loop0: rw=34817, sector=76, nr_sectors = 506 limit=64 [ 247.855180][ T7885] loop1: detected capacity change from 0 to 128 [ 247.926692][ T7885] FAT-fs (loop1): Directory bread(block 11554) failed [ 247.969677][ T7885] FAT-fs (loop1): Directory bread(block 11555) failed [ 248.016324][ T7885] FAT-fs (loop1): Directory bread(block 11556) failed [ 248.052625][ T7889] loop2: detected capacity change from 0 to 64 [ 248.063372][ T7885] FAT-fs (loop1): Directory bread(block 11557) failed [ 248.090630][ T7885] FAT-fs (loop1): Directory bread(block 11558) failed [ 248.097683][ T7885] FAT-fs (loop1): Directory bread(block 11559) failed [ 248.104640][ T7885] FAT-fs (loop1): Directory bread(block 11560) failed [ 248.111550][ T7885] FAT-fs (loop1): Directory bread(block 11561) failed [ 248.123008][ T7885] FAT-fs (loop1): Directory bread(block 11562) failed [ 248.143856][ T7885] FAT-fs (loop1): Directory bread(block 11563) failed [ 248.603362][ T7897] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 250.004591][ T7904] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 250.355458][ T7909] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 250.394740][ T7909] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 250.402872][ T7909] netlink: 88156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.632300][ T7922] loop2: detected capacity change from 0 to 64 [ 251.457025][ T7922] syz-executor.2: attempt to access beyond end of device [ 251.457025][ T7922] loop2: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 251.473215][ T7922] syz-executor.2: attempt to access beyond end of device [ 251.473215][ T7922] loop2: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 251.498768][ T7922] syz-executor.2: attempt to access beyond end of device [ 251.498768][ T7922] loop2: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 251.806802][ T7930] loop1: detected capacity change from 0 to 64 [ 251.879843][ T7932] loop2: detected capacity change from 0 to 128 [ 251.912834][ T7932] FAT-fs (loop2): Directory bread(block 11554) failed [ 251.960815][ T7932] FAT-fs (loop2): Directory bread(block 11555) failed [ 251.974275][ T7932] FAT-fs (loop2): Directory bread(block 11556) failed [ 251.981182][ T7932] FAT-fs (loop2): Directory bread(block 11557) failed [ 252.020848][ T7932] FAT-fs (loop2): Directory bread(block 11558) failed [ 252.032218][ T7932] FAT-fs (loop2): Directory bread(block 11559) failed [ 252.039522][ T7932] FAT-fs (loop2): Directory bread(block 11560) failed [ 252.052659][ T7932] FAT-fs (loop2): Directory bread(block 11561) failed [ 252.061426][ T7932] FAT-fs (loop2): Directory bread(block 11562) failed [ 252.083173][ T7932] FAT-fs (loop2): Directory bread(block 11563) failed [ 252.119389][ T7940] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 252.187186][ T7940] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 252.373227][ T7947] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 252.390638][ T7947] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 252.398889][ T7947] netlink: 88156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.434146][ T7952] loop1: detected capacity change from 0 to 64 [ 252.462579][ T7952] syz-executor.1: attempt to access beyond end of device [ 252.462579][ T7952] loop1: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 252.503662][ T7952] syz-executor.1: attempt to access beyond end of device [ 252.503662][ T7952] loop1: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 252.692555][ T7952] syz-executor.1: attempt to access beyond end of device [ 252.692555][ T7952] loop1: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 253.074236][ T7969] loop3: detected capacity change from 0 to 64 [ 254.362837][ T7983] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 254.400668][ T7983] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 254.473727][ T5159] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 254.577142][ T7967] loop2: detected capacity change from 0 to 32768 [ 254.590150][ T7967] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7967) [ 254.638673][ T7967] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.661535][ T7967] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 254.666324][ T5159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.674524][ T7967] BTRFS info (device loop2): using free-space-tree [ 254.699512][ T7993] loop4: detected capacity change from 0 to 64 [ 254.709690][ T5159] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.728088][ T7993] syz-executor.4: attempt to access beyond end of device [ 254.728088][ T7993] loop4: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 254.747632][ T7993] syz-executor.4: attempt to access beyond end of device [ 254.747632][ T7993] loop4: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 254.765937][ T5159] usb 2-1: New USB device found, idVendor=056a, idProduct=f600, bcdDevice= 0.9c [ 254.784129][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.844775][ T5159] usb 2-1: config 0 descriptor?? [ 254.946296][ T7993] syz-executor.4: attempt to access beyond end of device [ 254.946296][ T7993] loop4: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 255.175115][ T5118] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.242403][ T8015] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 255.292233][ T5159] wacom 0003:056A:F600.0005: unknown main item tag 0x0 [ 255.315686][ T8015] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 255.335963][ T5159] wacom 0003:056A:F600.0005: unknown main item tag 0x0 [ 255.385938][ T5159] wacom 0003:056A:F600.0005: Unknown device_type for 'HID 056a:f600'. Ignoring. [ 255.398125][ T8015] netlink: 88156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.517423][ T5159] usb 2-1: USB disconnect, device number 5 [ 255.950989][ T8033] loop2: detected capacity change from 0 to 128 [ 256.079754][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.088403][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.123944][ T8043] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 256.141315][ T8043] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 257.008558][ T8066] loop3: detected capacity change from 0 to 128 [ 257.251394][ T8045] loop1: detected capacity change from 0 to 32768 [ 257.305518][ T8045] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8045) [ 257.310510][ T8074] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 257.371433][ T8045] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.400228][ T8045] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 257.413631][ T8045] BTRFS info (device loop1): using free-space-tree [ 257.650382][ T8097] tipc: Failed to remove unknown binding: 66,1,1/0:2097903653/2097903655 [ 257.673335][ T5114] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 257.679038][ T8097] tipc: Failed to remove unknown binding: 66,1,1/0:2097903653/2097903655 [ 257.717392][ T5163] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 257.950589][ T5163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.969194][ T5163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.996140][ T5163] usb 3-1: New USB device found, idVendor=056a, idProduct=f600, bcdDevice= 0.9c [ 258.018287][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.046805][ T5163] usb 3-1: config 0 descriptor?? [ 258.375259][ T8118] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 258.528208][ T8124] loop4: detected capacity change from 0 to 64 [ 258.529712][ T5163] wacom 0003:056A:F600.0006: unknown main item tag 0x0 [ 258.552225][ T5163] wacom 0003:056A:F600.0006: unknown main item tag 0x0 [ 258.574297][ T5163] wacom 0003:056A:F600.0006: Unknown device_type for 'HID 056a:f600'. Ignoring. [ 258.763712][ T5159] usb 3-1: USB disconnect, device number 4 [ 258.870831][ T8131] tipc: Failed to remove unknown binding: 66,1,1/0:445377867/445377869 [ 258.887163][ T8131] tipc: Failed to remove unknown binding: 66,1,1/0:445377867/445377869 [ 258.903560][ T5163] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 259.107168][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.133569][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.161632][ T5163] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 259.185712][ T5163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.215073][ T5163] usb 1-1: config 0 descriptor?? [ 259.247187][ T5163] usbhid 1-1:0.0: can't add hid device: -22 [ 259.277387][ T5163] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 259.455945][ T5163] usb 1-1: USB disconnect, device number 8 [ 259.501669][ T8145] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 259.683191][ T8148] loop2: detected capacity change from 0 to 64 [ 259.740476][ T8148] syz-executor.2: attempt to access beyond end of device [ 259.740476][ T8148] loop2: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 259.786367][ T8148] syz-executor.2: attempt to access beyond end of device [ 259.786367][ T8148] loop2: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 259.842758][ T8148] syz-executor.2: attempt to access beyond end of device [ 259.842758][ T8148] loop2: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 260.046127][ T8151] loop2: detected capacity change from 0 to 64 [ 260.436551][ T8159] tipc: Failed to remove unknown binding: 66,1,1/6:1304829627/1304829629 [ 260.463601][ T8159] tipc: Failed to remove unknown binding: 66,1,1/6:1304829627/1304829629 [ 260.701182][ T8173] loop1: detected capacity change from 0 to 64 [ 260.710345][ T8175] loop0: detected capacity change from 0 to 64 [ 260.760767][ T8175] syz-executor.0: attempt to access beyond end of device [ 260.760767][ T8175] loop0: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 260.783406][ T8175] syz-executor.0: attempt to access beyond end of device [ 260.783406][ T8175] loop0: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 260.823571][ T5162] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 260.826422][ T8175] syz-executor.0: attempt to access beyond end of device [ 260.826422][ T8175] loop0: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 260.979092][ T5163] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 261.026359][ T5162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 261.044872][ T5162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 261.071645][ T5162] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.098451][ T5162] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.129642][ T5162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.145488][ T5162] usb 3-1: config 0 descriptor?? [ 261.151905][ T8165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 261.169765][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.184907][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.225998][ T5163] usb 5-1: New USB device found, idVendor=056a, idProduct=f600, bcdDevice= 0.9c [ 261.259428][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.313741][ T5163] usb 5-1: config 0 descriptor?? [ 261.407640][ T8190] tipc: Failed to remove unknown binding: 66,1,1/0:1041233909/1041233911 [ 261.434961][ T8190] tipc: Failed to remove unknown binding: 66,1,1/0:1041233909/1041233911 [ 261.582700][ T8198] loop0: detected capacity change from 0 to 64 [ 261.758392][ T8201] loop1: detected capacity change from 0 to 64 [ 261.771646][ T5163] wacom 0003:056A:F600.0007: unknown main item tag 0x0 [ 261.798863][ T5163] wacom 0003:056A:F600.0007: unknown main item tag 0x0 [ 261.825004][ T5163] wacom 0003:056A:F600.0007: Unknown device_type for 'HID 056a:f600'. Ignoring. [ 261.842116][ T8201] syz-executor.1: attempt to access beyond end of device [ 261.842116][ T8201] loop1: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 261.844041][ T5162] usbhid 3-1:0.0: can't add hid device: -71 [ 261.862102][ T8201] syz-executor.1: attempt to access beyond end of device [ 261.862102][ T8201] loop1: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 261.894854][ T5162] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 261.942691][ T5162] usb 3-1: USB disconnect, device number 5 [ 261.947116][ T8201] syz-executor.1: attempt to access beyond end of device [ 261.947116][ T8201] loop1: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 262.023917][ T5146] usb 5-1: USB disconnect, device number 4 [ 262.553182][ T8209] syz-executor.2[8209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.553377][ T8209] syz-executor.2[8209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.155638][ T8203] loop0: detected capacity change from 0 to 32768 [ 263.215274][ T8221] veth0_vlan: entered allmulticast mode [ 263.229324][ T8203] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (8203) [ 263.307925][ T8222] ªªªªªª: renamed from vlan0 [ 263.312619][ T8203] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.382147][ T8203] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 263.405428][ T8203] BTRFS info (device loop0): using free-space-tree [ 263.440867][ T8229] loop4: detected capacity change from 0 to 64 [ 263.512091][ T8241] loop2: detected capacity change from 0 to 64 [ 263.560235][ T8241] syz-executor.2: attempt to access beyond end of device [ 263.560235][ T8241] loop2: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 263.583275][ T5109] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.642449][ T29] audit: type=1326 audit(1716934175.726:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 263.690479][ T29] audit: type=1326 audit(1716934175.736:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 263.765576][ T29] audit: type=1326 audit(1716934175.736:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 263.804015][ T29] audit: type=1326 audit(1716934175.736:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 263.840799][ T29] audit: type=1326 audit(1716934175.736:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 263.943617][ T29] audit: type=1326 audit(1716934175.736:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 264.024106][ T8256] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 264.027804][ T29] audit: type=1326 audit(1716934175.736:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 264.123388][ T29] audit: type=1326 audit(1716934175.736:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7aec7cee9 code=0x7ffc0000 [ 264.318269][ T8265] loop2: detected capacity change from 0 to 64 [ 265.489989][ T8270] loop2: detected capacity change from 0 to 32768 [ 265.506812][ T8270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8270) [ 265.542773][ T8270] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.554487][ T8270] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 265.578783][ T8270] BTRFS info (device loop2): using free-space-tree [ 265.752652][ T5118] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.153313][ T8290] loop1: detected capacity change from 0 to 64 [ 266.190167][ T8290] bio_check_eod: 2 callbacks suppressed [ 266.190186][ T8290] syz-executor.1: attempt to access beyond end of device [ 266.190186][ T8290] loop1: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 266.227901][ T8290] syz-executor.1: attempt to access beyond end of device [ 266.227901][ T8290] loop1: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 266.279736][ T8290] syz-executor.1: attempt to access beyond end of device [ 266.279736][ T8290] loop1: rw=34817, sector=76, nr_sectors = 506 limit=64 [ 293.947097][ T5124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.958696][ T5124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.968191][ T5124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.977992][ T5124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.985746][ T5124] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 293.993072][ T5124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.191378][ T5124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.202256][ T5124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.212389][ T5124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.220556][ T5124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.228526][ T5124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 294.236010][ T5124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 294.536737][ T5124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.554560][ T5124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.564072][ T5124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.574993][ T5124] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.582757][ T5124] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 294.593681][ T5124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 296.029654][ T5112] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 296.049817][ T5112] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 296.063661][ T5112] Bluetooth: hci5: command tx timeout [ 296.070403][ T5112] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 296.083079][ T5112] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 296.091266][ T5112] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 296.099077][ T5112] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 296.303788][ T5112] Bluetooth: hci6: command tx timeout [ 296.633712][ T5112] Bluetooth: hci7: command tx timeout [ 296.849132][ T5124] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 296.860108][ T5124] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 296.869543][ T5124] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 296.879289][ T5124] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 296.887366][ T5124] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 296.895066][ T5124] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 298.144633][ T5124] Bluetooth: hci8: command tx timeout [ 298.156236][ T5112] Bluetooth: hci5: command tx timeout [ 298.384025][ T5124] Bluetooth: hci6: command tx timeout [ 298.703540][ T5124] Bluetooth: hci7: command tx timeout [ 298.943640][ T5124] Bluetooth: hci9: command tx timeout [ 300.223674][ T5112] Bluetooth: hci5: command tx timeout [ 300.230020][ T5124] Bluetooth: hci8: command tx timeout [ 300.463958][ T5124] Bluetooth: hci6: command tx timeout [ 300.783621][ T5124] Bluetooth: hci7: command tx timeout [ 301.025793][ T5124] Bluetooth: hci9: command tx timeout [ 302.303556][ T5124] Bluetooth: hci8: command tx timeout [ 302.303666][ T5112] Bluetooth: hci5: command tx timeout [ 302.544511][ T5112] Bluetooth: hci6: command tx timeout [ 302.864064][ T5112] Bluetooth: hci7: command tx timeout [ 303.103518][ T5112] Bluetooth: hci9: command tx timeout [ 304.389055][ T5112] Bluetooth: hci8: command tx timeout [ 305.183635][ T5112] Bluetooth: hci9: command tx timeout [ 317.514340][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.520694][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.063515][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 359.021266][ T5124] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 359.040020][ T5124] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 359.064123][ T5124] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 359.072231][ T5124] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 359.090978][ T5124] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 359.098639][ T5124] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 359.377786][ T5124] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 359.392725][ T5124] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 359.403889][ T5124] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 359.412198][ T5124] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 359.424895][ T5124] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 359.432385][ T5124] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 359.671235][ T5124] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 359.691159][ T5124] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 359.702010][ T5124] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 359.714076][ T5124] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 359.721918][ T5124] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 359.731814][ T5124] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 361.143359][ T5112] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 361.155244][ T5112] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 361.170853][ T5112] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 361.179191][ T5112] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 361.186908][ T53] Bluetooth: hci10: command tx timeout [ 361.202137][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 361.210732][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 361.506875][ T5124] Bluetooth: hci11: command tx timeout [ 361.823786][ T5124] Bluetooth: hci12: command tx timeout [ 361.877373][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 361.888868][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 361.897648][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 361.911606][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 361.920163][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 361.933670][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 363.263715][ T53] Bluetooth: hci13: command tx timeout [ 363.272313][ T5124] Bluetooth: hci10: command tx timeout [ 363.587555][ T5124] Bluetooth: hci11: command tx timeout [ 363.910048][ T5124] Bluetooth: hci12: command tx timeout [ 363.983690][ T5124] Bluetooth: hci14: command tx timeout [ 365.345982][ T53] Bluetooth: hci13: command tx timeout [ 365.352569][ T5124] Bluetooth: hci10: command tx timeout [ 365.663666][ T5124] Bluetooth: hci11: command tx timeout [ 365.983690][ T5124] Bluetooth: hci12: command tx timeout [ 366.063506][ T5124] Bluetooth: hci14: command tx timeout [ 367.423767][ T5124] Bluetooth: hci10: command tx timeout [ 367.429325][ T5124] Bluetooth: hci13: command tx timeout [ 367.743682][ T5124] Bluetooth: hci11: command tx timeout [ 368.071252][ T5124] Bluetooth: hci12: command tx timeout [ 368.143508][ T5124] Bluetooth: hci14: command tx timeout [ 369.503575][ T5124] Bluetooth: hci13: command tx timeout [ 370.228251][ T5124] Bluetooth: hci14: command tx timeout [ 378.948057][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.954625][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 416.892012][ T5122] Bluetooth: hci7: command 0x0406 tx timeout [ 416.913447][ T5124] Bluetooth: hci5: command 0x0406 tx timeout [ 416.916082][ T5117] Bluetooth: hci6: command 0x0406 tx timeout [ 421.994065][ T5112] Bluetooth: hci9: command 0x0406 tx timeout [ 421.994080][ T5122] Bluetooth: hci8: command 0x0406 tx timeout [ 423.115851][ T30] INFO: task syz-executor.4:8252 blocked for more than 143 seconds. [ 423.124400][ T30] Not tainted 6.10.0-rc1-next-20240528-syzkaller #0 [ 423.131520][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.146369][ T30] task:syz-executor.4 state:D stack:24672 pid:8252 tgid:8252 ppid:5113 flags:0x00000006 [ 423.158997][ T30] Call Trace: [ 423.162304][ T30] 2024/05/28 22:12:15 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 423.168826][ T30] __schedule+0x17e8/0x4a20 [ 423.178424][ T30] ? __pfx___schedule+0x10/0x10 [ 423.190525][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.199990][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 423.209963][ T30] ? schedule+0x90/0x320 [ 423.214440][ T30] schedule+0x14b/0x320 [ 423.218623][ T30] schedule_preempt_disabled+0x13/0x30 [ 423.229969][ T30] __mutex_lock+0x6a4/0xd70 [ 423.234692][ T30] ? __mutex_lock+0x527/0xd70 [ 423.239394][ T30] ? ppp_release+0x8a/0x1f0 [ 423.250646][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 423.255867][ T30] ? __pfx___fsnotify_parent+0x10/0x10 [ 423.261355][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 423.266696][ T30] ppp_release+0x8a/0x1f0 [ 423.271055][ T30] ? __pfx_ppp_release+0x10/0x10 [ 423.282232][ T30] __fput+0x406/0x8b0 [ 423.291261][ T30] __x64_sys_close+0x7f/0x110 [ 423.302083][ T30] do_syscall_64+0xf3/0x230 [ 423.310342][ T30] ? clear_bhb_loop+0x35/0x90 [ 423.316392][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.322328][ T30] RIP: 0033:0x7fa7aec7bdda [ 423.332694][ T30] RSP: 002b:00007ffe8c2ecb10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 423.341499][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fa7aec7bdda [ 423.350273][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 423.365183][ T30] RBP: 00007fa7aedb59a0 R08: 0000001b33320000 R09: 0000000000000001 [ 423.373195][ T30] R10: 00000000000004a5 R11: 0000000000000293 R12: 00000000000409fc [ 423.383880][ T30] R13: 00007fa7aedb3fac R14: 0000000000000032 R15: 00007fa7aedb59a0 [ 423.401907][ T30] [ 423.405403][ T30] INFO: task syz-executor.3:8263 blocked for more than 143 seconds. [ 423.422934][ T30] Not tainted 6.10.0-rc1-next-20240528-syzkaller #0 [ 423.431555][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.441755][ T30] task:syz-executor.3 state:D stack:23768 pid:8263 tgid:8261 ppid:7144 flags:0x00000006 [ 423.457905][ T30] Call Trace: [ 423.461218][ T30] [ 423.465847][ T30] __schedule+0x17e8/0x4a20 [ 423.470412][ T30] ? __pfx___schedule+0x10/0x10 [ 423.481251][ T30] ? __pfx_lock_release+0x10/0x10 [ 423.486691][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 423.501476][ T30] ? schedule+0x90/0x320 [ 423.507649][ T30] schedule+0x14b/0x320 [ 423.511852][ T30] schedule_preempt_disabled+0x13/0x30 [ 423.525632][ T30] __mutex_lock+0x6a4/0xd70 [ 423.530191][ T30] ? __mutex_lock+0x527/0xd70 [ 423.542102][ T30] ? dev_ethtool+0x21e/0x1bc0 [ 423.547180][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 423.552245][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 423.557702][ T30] ? dev_ethtool+0x145/0x1bc0 [ 423.562403][ T30] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 423.573793][ T30] dev_ethtool+0x21e/0x1bc0 [ 423.578343][ T30] ? dev_load+0x21/0x1f0 [ 423.582602][ T30] ? __pfx_dev_ethtool+0x10/0x10 [ 423.593651][ T30] ? dev_load+0x21/0x1f0 [ 423.597956][ T30] dev_ioctl+0x785/0x1340 [ 423.602310][ T30] sock_do_ioctl+0x240/0x460 [ 423.616492][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 423.621692][ T30] sock_ioctl+0x629/0x8e0 [ 423.631150][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 423.638386][ T30] ? __fget_files+0x29/0x470 [ 423.643020][ T30] ? __fget_files+0x3f6/0x470 [ 423.654807][ T30] ? __fget_files+0x29/0x470 [ 423.659450][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 423.669850][ T30] ? security_file_ioctl+0x87/0xb0 [ 423.675434][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 423.680320][ T30] __se_sys_ioctl+0xfc/0x170 [ 423.685958][ T30] do_syscall_64+0xf3/0x230 [ 423.690497][ T30] ? clear_bhb_loop+0x35/0x90 [ 423.698335][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.704856][ T30] RIP: 0033:0x7fcce2a7cee9 [ 423.709308][ T30] RSP: 002b:00007fcce38b40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.725467][ T30] RAX: ffffffffffffffda RBX: 00007fcce2bb3fa0 RCX: