last executing test programs: 13.147311405s ago: executing program 3 (id=2256): ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_delete_stored_link_key={{}, {0x1}}}}, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x8919, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r3, &(0x7f0000000300)=""/154, 0x9a) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x76, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x5, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x60ffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) syz_usb_connect(0x0, 0x109, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x89, 0xdd, 0x6b, 0x10, 0x547, 0x2720, 0x8ace, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0xfd, 0x2, 0x20, 0x9b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x10, 0x0, 0x0, 0x8e, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xcc, 0x3, "15f412771584f81cb1da5dde8e6ec2edd5c48b62bfbe14aa1b5d2dddcc9216d9a95b754df267f2e392b8c31bb4a9ae15d34e4d89753de02d45a8f0ac556bd583b961dc5ed7d743b19f5dadc57f62c2c3f63a059792b9bdd0218b232376077ddbf0a10aaa4f4a3f6ee27f4058c05004a07c33f773fb65ea413cfcb90b3f3afc4d30750c15b01c3ed7586895311ad4c271b6d3316e6b146feccb1ef0fa8e25ff8cc85ddcf2a2387ed1f14aa304e8f22a25eab64be0dafc93a18dd47a95c9633dee387bd01230d6c1618e5e"}]}}]}}]}}]}}, 0x0) write$binfmt_misc(r2, &(0x7f0000001380)={'syz0', "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"}, 0x1004) 11.325559484s ago: executing program 4 (id=2262): accept$ax25(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fcntl$setstatus(r1, 0x4, 0x2800) 11.176135996s ago: executing program 3 (id=2265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x13, 0x0, &(0x7f0000000200)) mlockall(0x0) 8.93247261s ago: executing program 0 (id=2269): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) socket$packet(0x11, 0x0, 0x300) connect$tipc(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x2000011a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x1}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @dev, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xed7, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000005600)="$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") 8.275463763s ago: executing program 0 (id=2271): syz_open_dev$dri(0x0, 0x1f, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2a042) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0xffffffffffffffa3, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000180)={r3}) 8.027969234s ago: executing program 0 (id=2272): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r3}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 7.995263106s ago: executing program 1 (id=2273): rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() r4 = epoll_create(0x7) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0xb0000008}) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000280)={0x80, 0x8001, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000322000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="66b838008ed066baa00066b8070066ef0f01dfc4e232f78f8d00000026080c87360fc719670f01ca0f770f21dbf3ae", 0x2f}], 0x1, 0x40, &(0x7f0000000100)=[@cr0, @cstype3], 0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) close_range(r2, 0xffffffffffffffff, 0x0) 6.954920581s ago: executing program 2 (id=2274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "00000010", "000800003f98afbe"}, 0x38) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 6.900593905s ago: executing program 4 (id=2275): ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_delete_stored_link_key={{}, {0x1}}}}, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x8919, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r3, &(0x7f0000000300)=""/154, 0x9a) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x76, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x5, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x60ffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) syz_usb_connect(0x0, 0x109, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x89, 0xdd, 0x6b, 0x10, 0x547, 0x2720, 0x8ace, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0xfd, 0x2, 0x20, 0x9b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x10, 0x0, 0x0, 0x8e, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xcc, 0x3, "15f412771584f81cb1da5dde8e6ec2edd5c48b62bfbe14aa1b5d2dddcc9216d9a95b754df267f2e392b8c31bb4a9ae15d34e4d89753de02d45a8f0ac556bd583b961dc5ed7d743b19f5dadc57f62c2c3f63a059792b9bdd0218b232376077ddbf0a10aaa4f4a3f6ee27f4058c05004a07c33f773fb65ea413cfcb90b3f3afc4d30750c15b01c3ed7586895311ad4c271b6d3316e6b146feccb1ef0fa8e25ff8cc85ddcf2a2387ed1f14aa304e8f22a25eab64be0dafc93a18dd47a95c9633dee387bd01230d6c1618e5e"}]}}]}}]}}]}}, 0x0) write$binfmt_misc(r2, &(0x7f0000001380)={'syz0', "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"}, 0x1004) 6.874815637s ago: executing program 1 (id=2276): socket(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1c, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {0x2, 0x0, @private}, 'lo\x00'}) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[], 0x1, 0x188, &(0x7f00000004c0)="$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") 6.761387047s ago: executing program 2 (id=2277): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 6.615424919s ago: executing program 1 (id=2278): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000001c0)={[{@resuid={'resuid', 0x3d, r1}}, {@noacl}, {@usrquota}], [{@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '#$/\xb4\x02\x95\xe0\x10O\xb0\xc1\xceI\x95\xa8\xfc\x7f\xfb\xd4\x1d}3\t\xad\x02?\x1d\x05l,\xe2\x96\v\'\xf5\xac\xb8\\$(6\xde\xa7J\xdf\xce\xd0\x05w\x1e\xecV_*V\x88\xbe\x04t\x81\x9di\xe1\xc9.\x9eZe\xa7B\xa6cj\x90x3r\xfd\xe3\x84\xb2\xc7\xcaC\x8b\x9d\xeby\xe4H\xbc7\xd9\x96\x11biGX\x8e\xbduy\xa7\x12\xbf\xf2\xcaU\xcd\x0f\x9c\xb3\xa8B\x92\x90\xb9\xd2\xa0\xe4\x9f09H\xa8E1\x04\xa7xB\xc0\xc68T\xd9\x11\xae\xd9\xc8bs\xc4|\x9c\x83\xc1\x98\x17'}}]}, 0x0, 0x3da, &(0x7f00000004c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001e00)={'bond0\x00'}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x19) syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/mnt\x00') r5 = creat(&(0x7f0000001040)='./file0\x00', 0x38) socket$alg(0x26, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000240)={r11, 0x2}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000000000000141000000180017000000000000000069623a636169663000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xe) 6.512739697s ago: executing program 2 (id=2279): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) write$sndseq(r0, &(0x7f0000000000), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000004000000000002c00b62c38cdb600000e00000f0001006e657464617683696d3000"/51], 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x0, 0xe0}) sendmsg$DEVLINK_CMD_TRAP_GET(r1, 0x0, 0x0) 6.265116127s ago: executing program 0 (id=2280): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 5.437253795s ago: executing program 2 (id=2281): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) socket$packet(0x11, 0x0, 0x300) connect$tipc(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x2000011a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x1}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @dev, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xed7, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") 5.37673005s ago: executing program 1 (id=2282): syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000), 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB='='], 0x6) 5.344082763s ago: executing program 3 (id=2283): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) 5.314381505s ago: executing program 0 (id=2284): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.701442645s ago: executing program 2 (id=2285): accept$ax25(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fcntl$setstatus(r1, 0x4, 0x2800) 4.344699284s ago: executing program 4 (id=2286): syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="005eefe3080e4ec28a3ae319e8ed2387249657614cc571e8c65b092e5f12c85585ff133ce10da9a0b5e074d05d248b7f40c782e61b677c89ba26c0ce1495c51c228f4a8bbc4dd76b30fa990f8f1befde16a5425075fdcb2b96533f57728cf01b030e3efe258738faa620ff2c414aceb4a7c37e5b59fd19c2c62ab448f30663a0f7c7a8e1cd92c19129412caa5b"], 0x1, 0x24c, &(0x7f0000002840)="$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") creat(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="d0", 0x1}], 0x1, 0x410000, 0x0) 4.344270404s ago: executing program 3 (id=2287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "00000010", "000800003f98afbe"}, 0x38) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 4.176004788s ago: executing program 3 (id=2288): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75840000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) socket$isdn(0x22, 0x2, 0x10) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000002640)={0x1, 0x0, 0x1000, 0x33, 0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = eventfd(0x0) read$eventfd(r5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r6, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "8c4f71a14c58b7e91b7594e94c2a226d8ac0ee26db5d7c27907d61d68dfbb45079055ad86fa0ff1418a5d146bdf66d0d640ce9de2c134b62cb718f8462bc9c"}, 0x60) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(0xffffffffffffffff, r7, 0xff, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000000)={{0x2000, 0x3000, 0x8, 0x6, 0x67, 0x88, 0x34, 0x3, 0x19, 0x80, 0xd7, 0x2}, {0x0, 0x4000, 0x14, 0x4, 0x9, 0x4, 0x8, 0xd0, 0x6, 0x11, 0x9, 0x7a}, {0x2, 0x5000, 0xc, 0x7f, 0xa, 0x40, 0x0, 0x3, 0x63, 0x2a, 0x93, 0x6}, {0x1000, 0x0, 0x4, 0x4, 0x6, 0x4, 0x6, 0x2, 0x0, 0x6, 0x1, 0x6}, {0x4000, 0xc6ac75e94724214a, 0x10, 0xf, 0x8, 0xa, 0x8, 0x6, 0x7f, 0x3, 0x3, 0xcc}, {0x3000, 0x4000, 0x0, 0xc, 0x5, 0x8, 0x4, 0x32, 0xcf, 0x3, 0x7d}, {0x0, 0x10000, 0x0, 0x8, 0x2, 0x2, 0x6, 0x20, 0x3, 0x57, 0x5, 0x2}, {0x4000, 0x6000, 0x10, 0x2, 0x8d, 0x4, 0x17, 0x0, 0x0, 0xfe, 0x3, 0x7}, {0x10000, 0x5}, {0x1000, 0x9}, 0x80010000, 0x0, 0x6000, 0x142, 0x7, 0x8801, 0x4000, [0x8, 0x8000000000000001, 0x80000001, 0x7]}) 4.061764057s ago: executing program 4 (id=2289): mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 3.083600188s ago: executing program 3 (id=2290): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r3}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 2.92939813s ago: executing program 4 (id=2291): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) write$sndseq(r0, &(0x7f0000000000), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000004000000000002c00b62c38cdb600000e00000f0001006e657464617683696d3000"/51], 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x0, 0xe0}) sendmsg$DEVLINK_CMD_TRAP_GET(r1, 0x0, 0x0) 1.760676595s ago: executing program 4 (id=2292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x1a00, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000200)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r4, 0x0, 0x7ffff000) 1.657664034s ago: executing program 0 (id=2293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x13, 0x0, &(0x7f0000000200)) mlockall(0x0) 1.58632333s ago: executing program 2 (id=2294): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000100)={[{@nodatasum}, {@notreelog}, {@compress_force}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@autodefrag}, {@nodatasum}, {@max_inline={'max_inline', 0x3d, [0x1f, 0x67, 0x37, 0x34, 0x65, 0x78]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000d) 1.45665268s ago: executing program 1 (id=2295): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) socket$packet(0x11, 0x0, 0x300) connect$tipc(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x2000011a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x1}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @dev, 0x0, 0x0, 'ipvlan1\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xed7, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") 0s ago: executing program 1 (id=2296): ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_delete_stored_link_key={{}, {0x1}}}}, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x8919, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r3, &(0x7f0000000300)=""/154, 0x9a) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x76, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x5, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x60ffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) syz_usb_connect(0x0, 0x109, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x89, 0xdd, 0x6b, 0x10, 0x547, 0x2720, 0x8ace, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0xfd, 0x2, 0x20, 0x9b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x10, 0x0, 0x0, 0x8e, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xcc, 0x3, "15f412771584f81cb1da5dde8e6ec2edd5c48b62bfbe14aa1b5d2dddcc9216d9a95b754df267f2e392b8c31bb4a9ae15d34e4d89753de02d45a8f0ac556bd583b961dc5ed7d743b19f5dadc57f62c2c3f63a059792b9bdd0218b232376077ddbf0a10aaa4f4a3f6ee27f4058c05004a07c33f773fb65ea413cfcb90b3f3afc4d30750c15b01c3ed7586895311ad4c271b6d3316e6b146feccb1ef0fa8e25ff8cc85ddcf2a2387ed1f14aa304e8f22a25eab64be0dafc93a18dd47a95c9633dee387bd01230d6c1618e5e"}]}}]}}]}}]}}, 0x0) write$binfmt_misc(r2, &(0x7f0000001380)={'syz0', "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"}, 0x1004) kernel console output (not intermixed with test programs): 634] hid-generic 0003:0158:0100.001A: unknown main item tag 0x1 [ 506.813578][ T3634] hid-generic 0003:0158:0100.001A: unexpected long global item [ 506.822833][ T3634] hid-generic: probe of 0003:0158:0100.001A failed with error -22 [ 506.830943][ T26] audit: type=1800 audit(1720221527.396:66): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1179" name="bus" dev="loop3" ino=9291 res=0 errno=0 [ 506.878904][ T3634] usb 2-1: USB disconnect, device number 18 [ 506.981214][ T3567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.991431][ T3567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 507.000439][ T3567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 507.011429][ T3567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 507.020289][ T3567] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 507.028194][ T3567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 507.767916][ T7887] XFS (loop3): Unmounting Filesystem [ 508.288556][ T3626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.737937][ T3626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.815715][ T9008] loop0: detected capacity change from 0 to 1024 [ 508.846511][ T9008] hfsplus: found bad thread record in catalog [ 509.007577][ T8998] UBIFS error (pid: 8998): cannot open "./file0", error -22 [ 509.111049][ T3626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.129641][ T3567] Bluetooth: hci4: command tx timeout [ 509.393008][ T3626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.873726][ T8983] chnl_net:caif_netlink_parms(): no params data found [ 510.726620][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.750555][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.765671][ T8983] device bridge_slave_0 entered promiscuous mode [ 510.867412][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.875252][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.899486][ T8983] device bridge_slave_1 entered promiscuous mode [ 511.126869][ T8983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.194217][ T3567] Bluetooth: hci4: command tx timeout [ 511.228474][ T8983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.495791][ T8983] team0: Port device team_slave_0 added [ 511.542509][ T8983] team0: Port device team_slave_1 added [ 511.571324][ T9024] loop3: detected capacity change from 0 to 40427 [ 511.647570][ T9024] F2FS-fs (loop3): invalid crc value [ 511.712545][ T9024] F2FS-fs (loop3): Found nat_bits in checkpoint [ 511.750379][ T4329] hfsplus: b-tree write err: -5, ino 4 [ 511.910276][ T9024] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 511.939973][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.957934][ T9024] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 511.971030][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.291170][ T9038] loop1: detected capacity change from 0 to 32768 [ 512.631312][ T9038] XFS (loop1): Mounting V5 Filesystem [ 512.640091][ T8983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.822110][ T9024] bio_check_eod: 4 callbacks suppressed [ 512.822133][ T9024] syz.3.1196: attempt to access beyond end of device [ 512.822133][ T9024] loop3: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 512.892668][ T9038] XFS (loop1): Ending clean mount [ 512.953452][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.964239][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.003141][ T9038] XFS (loop1): Quotacheck needed: Please wait. [ 513.111469][ T9038] XFS (loop1): Quotacheck: Done. [ 513.170353][ T9024] syz.3.1196: attempt to access beyond end of device [ 513.170353][ T9024] loop3: rw=34817, sector=53248, nr_sectors = 8 limit=40427 [ 513.211263][ T26] audit: type=1800 audit(1720221533.766:67): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1199" name="bus" dev="loop1" ino=9291 res=0 errno=0 [ 513.264433][ T8983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.275245][ T3567] Bluetooth: hci4: command tx timeout [ 513.324913][ T9022] syz.3.1196: attempt to access beyond end of device [ 513.324913][ T9022] loop3: rw=524288, sector=53248, nr_sectors = 8 limit=40427 [ 513.413051][ T9022] syz.3.1196: attempt to access beyond end of device [ 513.413051][ T9022] loop3: rw=524288, sector=77824, nr_sectors = 16 limit=40427 [ 513.445062][ T9022] syz.3.1196: attempt to access beyond end of device [ 513.445062][ T9022] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 513.476162][ T9022] syz.3.1196: attempt to access beyond end of device [ 513.476162][ T9022] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 513.946377][ T9022] syz.3.1196: attempt to access beyond end of device [ 513.946377][ T9022] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 514.061724][ T9022] syz.3.1196: attempt to access beyond end of device [ 514.061724][ T9022] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 514.137009][ T4471] XFS (loop1): Unmounting Filesystem [ 514.155804][ T9022] syz.3.1196: attempt to access beyond end of device [ 514.155804][ T9022] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 514.214308][ T9022] syz.3.1196: attempt to access beyond end of device [ 514.214308][ T9022] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 515.388741][ T3567] Bluetooth: hci4: command tx timeout [ 516.658531][ T8983] device hsr_slave_0 entered promiscuous mode [ 516.694047][ T8983] device hsr_slave_1 entered promiscuous mode [ 516.844810][ T9106] loop3: detected capacity change from 0 to 1024 [ 516.991573][ T9106] hfsplus: found bad thread record in catalog [ 519.289537][ T3626] device hsr_slave_0 left promiscuous mode [ 519.367981][ T3626] device hsr_slave_1 left promiscuous mode [ 519.388010][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.434210][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.459677][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.472362][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.481941][ T3626] device bridge_slave_1 left promiscuous mode [ 519.488562][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.503994][ T9131] loop1: detected capacity change from 0 to 512 [ 519.518524][ T9] hfsplus: b-tree write err: -5, ino 4 [ 519.588534][ T3626] device bridge_slave_0 left promiscuous mode [ 519.595931][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.815815][ T9131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 519.895567][ T9131] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038 (0x7fffffff) [ 519.941841][ T3626] device veth1_macvtap left promiscuous mode [ 520.029998][ T3626] device veth0_macvtap left promiscuous mode [ 520.174727][ T3626] device veth1_vlan left promiscuous mode [ 520.234741][ T3626] device veth0_vlan left promiscuous mode [ 520.443125][ T4471] EXT4-fs (loop1): unmounting filesystem. [ 520.852601][ T3626] bond1 (unregistering): Released all slaves [ 522.021348][ T9171] loop3: detected capacity change from 0 to 1024 [ 522.177793][ T9171] hfsplus: found bad thread record in catalog [ 523.672908][ T3626] team0 (unregistering): Port device team_slave_1 removed [ 523.785271][ T3626] team0 (unregistering): Port device team_slave_0 removed [ 523.839137][ T3626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.914601][ T3626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.410917][ T3626] bond0 (unregistering): Released all slaves [ 524.614988][ T56] hfsplus: b-tree write err: -5, ino 4 [ 526.567511][ T8983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 526.656468][ T8983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 526.935349][ T8983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 526.989514][ T8983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 527.525166][ T9203] loop0: detected capacity change from 0 to 32768 [ 528.025907][ T3768] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 528.170353][ T9243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.527173][ T9243] loop3: detected capacity change from 0 to 40427 [ 528.554860][ T9243] F2FS-fs (loop3): invalid crc value [ 528.636841][ T9243] F2FS-fs (loop3): Found nat_bits in checkpoint [ 528.659824][ T8983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.709160][ T9243] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 528.715742][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 528.716498][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 528.751451][ T9243] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 528.786791][ T8983] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.929167][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 528.944940][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 529.022296][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.029510][ T7268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.007675][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 530.085206][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 530.113093][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.115744][ T9264] loop1: detected capacity change from 0 to 1024 [ 530.129107][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.136390][ T7268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.170342][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 530.213384][ T9266] loop4: detected capacity change from 0 to 2048 [ 530.368271][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 530.433326][ T9266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 530.491521][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 530.909646][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.023973][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.059191][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 531.106955][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.142737][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 531.192292][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 531.243864][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 531.305428][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.315591][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 531.360861][ T56] hfsplus: b-tree write err: -5, ino 4 [ 531.499402][ T7946] EXT4-fs (loop4): unmounting filesystem. [ 532.614285][ T7405] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 532.688545][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.714683][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.739364][ T8983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.870956][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 532.885015][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 532.984347][ T7405] usb 2-1: Using ep0 maxpacket: 8 [ 533.041254][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 533.955476][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 533.967842][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.977103][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 534.009662][ T8983] device veth0_vlan entered promiscuous mode [ 534.034850][ T8983] device veth1_vlan entered promiscuous mode [ 534.094516][ T7405] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 534.249674][ T9322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.208975][ T9322] loop0: detected capacity change from 0 to 40427 [ 535.218583][ T7405] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 535.228422][ T7405] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 535.238741][ T7405] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 535.248710][ T7405] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.262140][ T7405] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 535.271241][ T7405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.316990][ T9322] F2FS-fs (loop0): invalid crc value [ 535.352126][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 535.360932][ T9322] F2FS-fs (loop0): Found nat_bits in checkpoint [ 535.503198][ T9332] loop4: detected capacity change from 0 to 2048 [ 535.620493][ T7405] usb 2-1: usb_control_msg returned -71 [ 535.626595][ T7405] usbtmc 2-1:16.0: can't read capabilities [ 535.652787][ T9322] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 535.757879][ T9322] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 535.925194][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 535.936782][ T8983] device veth0_macvtap entered promiscuous mode [ 535.946903][ T7405] usb 2-1: USB disconnect, device number 19 [ 535.962147][ T8983] device veth1_macvtap entered promiscuous mode [ 535.999312][ T3002] loop4: p2 p3 p7 [ 536.040153][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.130194][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.199721][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.249676][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.344941][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.363884][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.373680][ T9343] loop3: detected capacity change from 0 to 2048 [ 536.404213][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.444707][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.483012][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.508649][ T3633] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 536.537778][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 536.555846][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 536.556867][ T9343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 536.581783][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 536.620815][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.638296][ T3768] udevd[3768]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 536.652627][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 536.685457][ T3633] udevd[3633]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 536.714583][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.749989][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.767695][ T9350] loop4: detected capacity change from 0 to 1024 [ 536.783159][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.816797][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.861198][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.904214][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.934224][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.975287][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.994545][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 537.013828][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.048555][ T8983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.089246][ T8983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.134316][ T8983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.267518][ T8983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.758186][ T3618] hfsplus: b-tree write err: -5, ino 4 [ 537.848019][ T4133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.885504][ T4133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.958816][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 538.113523][ T4133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.122104][ T26] audit: type=1326 audit(1720221558.626:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9361 comm="syz.0.1264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e5b75bd9 code=0x0 [ 538.184174][ T4133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.197827][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 539.211250][ T7887] EXT4-fs (loop3): unmounting filesystem. [ 541.579324][ T9412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 543.462859][ T26] audit: type=1326 audit(1720221564.026:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.4.1275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 543.545053][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 543.937543][ T9435] loop2: detected capacity change from 0 to 2048 [ 543.958840][ T9442] loop3: detected capacity change from 0 to 1024 [ 544.005096][ T9435] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 544.045338][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.062098][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.091315][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.114224][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.135363][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.173883][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.207714][ T9452] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.257351][ T9452] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.325487][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.344540][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.430341][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.470677][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.493878][ T9452] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.544197][ T9452] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.567851][ T9459] loop4: detected capacity change from 0 to 512 [ 544.572072][ T9452] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.594485][ T9452] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.637973][ T9459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 544.663799][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.697639][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.733426][ T9459] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038 (0x7fffffff) [ 544.750594][ T9452] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.786001][ T9452] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.835203][ T9463] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.883197][ T9463] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.910380][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.924217][ T9442] hfsplus: request for non-existent node 33423360 in B*Tree [ 544.958103][ T7946] EXT4-fs (loop4): unmounting filesystem. [ 545.993279][ T8983] EXT4-fs (loop2): unmounting filesystem. [ 546.130101][ T9481] loop4: detected capacity change from 0 to 1024 [ 547.057331][ T3618] hfsplus: b-tree write err: -5, ino 4 [ 547.174043][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 547.426857][ T26] audit: type=1326 audit(1720221567.996:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.1292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0470b75bd9 code=0x0 [ 547.592437][ T9506] loop4: detected capacity change from 0 to 512 [ 547.716863][ T9506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 547.741281][ T9506] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038 (0x7fffffff) [ 547.829351][ T9511] tipc: Started in network mode [ 547.835206][ T9511] tipc: Node identity ac14140f, cluster identity 4711 [ 547.846751][ T9511] tipc: Enabled bearer , priority 10 [ 548.630959][ T7946] EXT4-fs (loop4): unmounting filesystem. [ 549.025612][ T9523] loop2: detected capacity change from 0 to 2048 [ 549.136700][ T1148] tipc: Node number set to 2886997007 [ 549.146264][ T9523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 550.599203][ T9526] loop4: detected capacity change from 0 to 32768 [ 550.700712][ T9526] XFS (loop4): Mounting V5 Filesystem [ 550.805972][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 550.853183][ T9526] XFS (loop4): Ending clean mount [ 550.867724][ T9526] XFS (loop4): Quotacheck needed: Please wait. [ 550.932073][ T9526] XFS (loop4): Quotacheck: Done. [ 550.989084][ T26] audit: type=1800 audit(1720221571.556:71): pid=9526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1298" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 551.826859][ T7946] XFS (loop4): Unmounting Filesystem [ 552.111288][ T8983] EXT4-fs (loop2): unmounting filesystem. [ 552.293082][ T9576] loop3: detected capacity change from 0 to 512 [ 552.324601][ T9576] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 553.058548][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 554.886361][ T9599] loop4: detected capacity change from 0 to 32768 [ 554.980255][ T9599] XFS (loop4): Mounting V5 Filesystem [ 555.119516][ T9599] XFS (loop4): Ending clean mount [ 555.134366][ T9599] XFS (loop4): Quotacheck needed: Please wait. [ 555.242912][ T9599] XFS (loop4): Quotacheck: Done. [ 555.299464][ T26] audit: type=1800 audit(1720221575.866:72): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1318" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 555.326539][ T9609] loop3: detected capacity change from 0 to 32768 [ 555.347296][ T9609] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.1321 (9609) [ 555.586645][ T9609] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 555.622424][ T9609] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 555.642177][ T9609] BTRFS info (device loop3): using free space tree [ 555.751972][ T26] audit: type=1804 audit(1720221576.316:73): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1318" name="/newroot/72/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 556.153098][ T9609] BTRFS info (device loop3): enabling ssd optimizations [ 556.247364][ T7946] XFS (loop4): Unmounting Filesystem [ 556.577336][ T7887] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 558.627375][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 559.841909][ T3565] Bluetooth: hci2: command 0x0406 tx timeout [ 560.310689][ T9724] loop3: detected capacity change from 0 to 4096 [ 560.349477][ T9728] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 560.490674][ T9706] loop4: detected capacity change from 0 to 32768 [ 560.517318][ T9706] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.1342 (9706) [ 560.596991][ T9706] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 560.617815][ T9706] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 560.633386][ T9706] BTRFS info (device loop4): using free space tree [ 561.014292][ T9706] BTRFS info (device loop4): enabling ssd optimizations [ 561.271051][ T7946] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 561.606455][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 562.797878][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.870535][ T9817] fuse: Bad value for 'fd' [ 563.920211][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 563.955180][ T9817] UBIFS error (pid: 9817): cannot open "./file0", error -22 [ 564.191197][ T9787] loop4: detected capacity change from 0 to 32768 [ 564.202419][ T9823] loop2: detected capacity change from 0 to 4096 [ 564.253797][ T9827] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 564.278917][ T9787] XFS (loop4): Mounting V5 Filesystem [ 564.385588][ T9787] XFS (loop4): Ending clean mount [ 564.396975][ T9809] loop3: detected capacity change from 0 to 32768 [ 564.411159][ T9787] XFS (loop4): Quotacheck needed: Please wait. [ 564.423468][ T9809] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.1365 (9809) [ 564.475467][ T9787] XFS (loop4): Quotacheck: Done. [ 564.489388][ T9809] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 564.517324][ T26] audit: type=1800 audit(1720221585.086:74): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1358" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 564.554307][ T9809] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 564.675509][ T9809] BTRFS info (device loop3): using free space tree [ 564.932841][ T26] audit: type=1804 audit(1720221585.496:75): pid=9845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1358" name="/newroot/76/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 565.483423][ T9809] BTRFS info (device loop3): enabling ssd optimizations [ 565.500087][ T7946] XFS (loop4): Unmounting Filesystem [ 565.659833][ T7887] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 566.380478][ T9888] fuse: Bad value for 'fd' [ 566.386017][ T9888] UBIFS error (pid: 9888): cannot open "./file0", error -22 [ 566.752808][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 567.162698][ T9897] xt_TCPMSS: Only works on TCP SYN packets [ 567.527528][ T9900] loop3: detected capacity change from 0 to 1024 [ 568.557622][ T5537] hfsplus: b-tree write err: -5, ino 4 [ 568.663195][ T9919] fuse: Bad value for 'fd' [ 568.806851][ T9924] UBIFS error (pid: 9924): cannot open "./file0", error -22 [ 568.988592][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1396'. [ 570.157017][ T9901] loop4: detected capacity change from 0 to 32768 [ 570.361168][ T9901] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.1386 (9901) [ 570.390857][ T9901] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 570.408865][ T9901] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 570.421546][ T9901] BTRFS info (device loop4): using free space tree [ 570.486254][ T9949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 571.449199][ T9949] loop3: detected capacity change from 0 to 40427 [ 571.467728][ T9949] F2FS-fs (loop3): invalid crc value [ 571.542970][ T9949] F2FS-fs (loop3): Found nat_bits in checkpoint [ 571.606309][ T9949] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 571.640972][ T9949] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 571.668452][ T9901] BTRFS error (device loop4): open_ctree failed [ 571.748006][ T9971] loop2: detected capacity change from 0 to 1024 [ 572.073018][ T9977] UBIFS error (pid: 9977): cannot open "./file0", error -22 [ 572.733674][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 572.801691][ T5537] hfsplus: b-tree write err: -5, ino 4 [ 573.634601][ T9995] loop4: detected capacity change from 0 to 1024 [ 575.024724][ T56] hfsplus: b-tree write err: -5, ino 4 [ 576.356991][T10022] UBIFS error (pid: 10022): cannot open "./file0", error -22 [ 576.738746][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 577.290985][T10032] loop2: detected capacity change from 0 to 1024 [ 577.494686][T10039] loop4: detected capacity change from 0 to 4096 [ 578.509371][T10054] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 578.837272][T10064] UBIFS error (pid: 10064): cannot open "./file0", error -22 [ 579.481502][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 581.350164][ T56] hfsplus: b-tree write err: -5, ino 4 [ 581.807348][T10092] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1440'. [ 582.089892][ T26] audit: type=1326 audit(1720221602.626:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.1.1440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0470b75bd9 code=0x0 [ 582.422398][T10113] UBIFS error (pid: 10113): cannot open "./file0", error -22 [ 582.688563][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 586.681259][T10161] UBIFS error (pid: 10161): cannot open "./file0", error -22 [ 586.761802][T10163] device syz_tun entered promiscuous mode [ 586.781730][T10163] device macsec1 entered promiscuous mode [ 587.116841][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 587.896528][T10174] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1463'. [ 587.914824][ T26] audit: type=1326 audit(1720221608.476:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.3.1463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 590.270402][T10203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 590.296433][ T3601] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 590.694462][ T3601] usb 1-1: Using ep0 maxpacket: 16 [ 591.274389][ T3601] usb 1-1: unable to get BOS descriptor or descriptor too short [ 591.344359][ T3601] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 591.365067][ T3601] usb 1-1: can't read configurations, error -71 [ 592.284290][T10231] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1478'. [ 592.299015][ T26] audit: type=1326 audit(1720221612.866:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10223 comm="syz.0.1478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e5b75bd9 code=0x0 [ 595.468608][T10258] UBIFS error (pid: 10258): cannot open "./file0", error -22 [ 595.686524][ T3552] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 596.034290][ T9770] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 596.294264][ T9770] usb 4-1: Using ep0 maxpacket: 16 [ 596.449391][ T9770] usb 4-1: unable to get BOS descriptor or descriptor too short [ 596.518393][ T9770] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 596.525254][T10279] loop2: detected capacity change from 0 to 512 [ 596.536278][ T9770] usb 4-1: can't read configurations, error -71 [ 596.568879][T10279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 596.910899][T10288] UBIFS error (pid: 10288): cannot open "./file0", error -22 [ 597.840711][T10279] EXT4-fs warning (device loop2): dx_probe:868: inode #2: comm syz.2.1493: Unimplemented hash flags: 0x0001 [ 597.859808][T10279] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.1493: Corrupt directory, running e2fsck is recommended [ 597.873030][T10279] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.1493: path /45/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 598.692281][ T8983] EXT4-fs (loop2): unmounting filesystem. [ 598.998480][T10314] loop3: detected capacity change from 0 to 1024 [ 599.015054][T10314] EXT4-fs: Ignoring removed orlov option [ 599.028521][T10314] EXT4-fs (loop3): Test dummy encryption mode enabled [ 599.096341][T10314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 599.127331][T10286] loop4: detected capacity change from 0 to 32768 [ 599.287078][T10286] XFS (loop4): Mounting V5 Filesystem [ 599.418144][T10286] XFS (loop4): Ending clean mount [ 599.430910][T10286] XFS (loop4): Quotacheck needed: Please wait. [ 599.494942][T10286] XFS (loop4): Quotacheck: Done. [ 599.528224][ T26] audit: type=1800 audit(1720221620.096:79): pid=10286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1497" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 599.694363][T10314] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 599.764303][ T3552] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 599.774795][ T3552] Bluetooth: hci2: Injecting HCI hardware error event [ 599.783335][ T3552] Bluetooth: hci2: hardware error 0x00 [ 600.354882][T10343] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 600.546804][ T7946] XFS (loop4): Unmounting Filesystem [ 600.560380][ T7887] EXT4-fs (loop3): unmounting filesystem. [ 600.844529][ T26] audit: type=1326 audit(1720221621.416:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.3.1509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 601.834595][ T3552] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 602.314425][ T9769] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 602.764989][ T9769] usb 4-1: Using ep0 maxpacket: 16 [ 602.914522][ T9769] usb 4-1: unable to get BOS descriptor or descriptor too short [ 603.034792][ T9769] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 603.122765][ T9769] usb 4-1: can't read configurations, error -71 [ 603.626205][T10369] loop4: detected capacity change from 0 to 64 [ 603.676128][ T3768] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 603.733203][T10388] TCP: MD5 Hash mismatch for [fe80::bb]:0->[ff02::1]:20002 L3 index 0 [ 603.790528][ T26] audit: type=1326 audit(1720221624.356:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.3.1519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 606.667031][ T3598] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 607.115631][ T3598] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 607.176574][ T3598] usb 3-1: config 0 has no interface number 0 [ 607.289041][ T3598] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.424019][ T3598] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.564520][ T3598] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 607.573779][ T3598] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 607.619019][ T3598] usb 3-1: Manufacturer: syz [ 607.641616][ T3598] usb 3-1: config 0 descriptor?? [ 607.649845][T10448] loop4: detected capacity change from 0 to 64 [ 607.730515][T10448] MINIX-fs: bad superblock or unable to read bitmaps [ 608.133098][ T3598] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.001B/input/input9 [ 608.259300][ T3598] sony 0003:054C:03D5.001B: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 608.329382][T10425] loop2: detected capacity change from 0 to 256 [ 608.445403][ T3768] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 608.484793][ T3598] usb 3-1: USB disconnect, device number 16 [ 609.252632][T10449] loop3: detected capacity change from 0 to 32768 [ 609.425248][T10449] XFS (loop3): Mounting V5 Filesystem [ 609.552942][T10449] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 609.822350][T10449] XFS (loop3): Starting recovery (logdev: internal) [ 609.893214][T10449] XFS (loop3): Ending recovery (logdev: internal) [ 610.680497][ T7887] XFS (loop3): Unmounting Filesystem [ 611.459607][ T5412] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 611.619168][T10526] loop3: detected capacity change from 0 to 512 [ 611.652777][T10526] ext4: Unknown parameter 'noacl' [ 611.824435][ T5412] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 611.846702][ T5412] usb 2-1: config 0 has no interface number 0 [ 611.868923][ T5412] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.900938][ T5412] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.004488][ T5412] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 612.039190][ T5412] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 612.087941][ T5412] usb 2-1: Manufacturer: syz [ 612.267812][ T5412] usb 2-1: config 0 descriptor?? [ 612.891684][ T5412] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.001C/input/input10 [ 613.012645][ T5412] sony 0003:054C:03D5.001C: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 613.288715][ T3600] usb 2-1: USB disconnect, device number 20 [ 615.045570][T10578] loop4: detected capacity change from 0 to 512 [ 615.094950][T10578] ext4: Unknown parameter 'noacl' [ 616.770984][ T9681] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 617.723268][T10631] netlink: 703 bytes leftover after parsing attributes in process `syz.4.1576'. [ 617.833887][ T26] audit: type=1326 audit(1720221638.396:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.4.1576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 617.884257][ T9681] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 617.892406][ T9681] usb 4-1: config 0 has no interface number 0 [ 617.904187][ T9681] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.975327][T10634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1579'. [ 618.620112][ T9681] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.709919][ T9681] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 618.730635][ T9681] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 618.752777][ T9681] usb 4-1: Manufacturer: syz [ 618.769114][ T9681] usb 4-1: config 0 descriptor?? [ 619.273109][ T9681] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.001D/input/input11 [ 619.392439][ T9681] sony 0003:054C:03D5.001D: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 619.510709][T10608] loop3: detected capacity change from 0 to 256 [ 619.635510][ T3600] usb 4-1: USB disconnect, device number 15 [ 620.369483][T10663] loop3: detected capacity change from 0 to 2048 [ 620.474629][T10663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 620.811785][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1591'. [ 621.422336][ T7887] EXT4-fs (loop3): unmounting filesystem. [ 621.890367][T10658] loop4: detected capacity change from 0 to 32768 [ 621.951569][T10658] XFS (loop4): Mounting V5 Filesystem [ 622.053487][T10658] XFS (loop4): Ending clean mount [ 622.065823][T10658] XFS (loop4): Quotacheck needed: Please wait. [ 622.120533][T10658] XFS (loop4): Quotacheck: Done. [ 622.163424][ T26] audit: type=1800 audit(1720221642.726:83): pid=10658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1589" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 623.099141][ T7946] XFS (loop4): Unmounting Filesystem [ 623.334167][ T5412] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 623.616284][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1603'. [ 623.714421][ T5412] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 623.801206][ T5412] usb 3-1: config 0 has no interface number 0 [ 623.920678][ T5412] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.108660][ T5412] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.236095][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.244967][ T5412] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 624.264125][ T5412] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 624.311608][ T5412] usb 3-1: Manufacturer: syz [ 624.422692][ T5412] usb 3-1: config 0 descriptor?? [ 625.104334][ T5412] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.001E/input/input12 [ 625.153788][T10710] loop2: detected capacity change from 0 to 256 [ 625.286667][ T5412] sony 0003:054C:03D5.001E: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 625.379650][ T3633] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 625.416167][ T3295] usb 3-1: USB disconnect, device number 17 [ 625.923827][T10741] netlink: 'syz.1.1610': attribute type 29 has an invalid length. [ 625.978675][T10741] netlink: 'syz.1.1610': attribute type 29 has an invalid length. [ 626.024469][T10742] netlink: 'syz.1.1610': attribute type 29 has an invalid length. [ 626.419390][T10751] loop2: detected capacity change from 0 to 512 [ 626.569012][T10751] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 627.131454][T10767] EXT4-fs warning (device loop2): dx_probe:868: inode #2: comm syz.2.1611: Unimplemented hash flags: 0x0001 [ 627.330968][T10767] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.1611: Corrupt directory, running e2fsck is recommended [ 627.605007][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1616'. [ 628.727155][T10787] loop3: detected capacity change from 0 to 256 [ 628.810253][T10788] tipc: Started in network mode [ 628.815559][T10788] tipc: Node identity ac14140f, cluster identity 4711 [ 628.825167][T10788] tipc: Enabled bearer , priority 10 [ 628.854677][ T3598] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 629.122854][T10787] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 629.668869][T10792] netlink: 703 bytes leftover after parsing attributes in process `syz.4.1620'. [ 629.690201][ T26] audit: type=1326 audit(1720221650.256:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10779 comm="syz.4.1620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 629.765387][ T3598] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 629.773703][ T3598] usb 1-1: config 0 has no interface number 0 [ 629.814672][ T3598] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.860214][ T3598] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.896895][ T153] tipc: Node number set to 2886997007 [ 629.974254][ T3598] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 629.983535][ T3598] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 630.014285][ T3598] usb 1-1: Manufacturer: syz [ 630.045139][ T3598] usb 1-1: config 0 descriptor?? [ 630.528190][ T8983] EXT4-fs (loop2): unmounting filesystem. [ 630.562979][ T3598] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.001F/input/input13 [ 630.775396][ T3598] sony 0003:054C:03D5.001F: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 630.867537][ T3598] usb 1-1: USB disconnect, device number 14 [ 631.633159][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1629'. [ 631.885796][ T3552] Bluetooth: hci4: command 0x0406 tx timeout [ 632.406395][T10814] block device autoloading is deprecated and will be removed. [ 632.433621][T10814] loop1: detected capacity change from 0 to 524288000 [ 633.029827][ T9771] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 633.294164][ T9771] usb 2-1: Using ep0 maxpacket: 16 [ 633.415127][ T9771] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 633.451813][ T9771] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 633.480660][ T9771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.514850][ T9771] usb 2-1: config 0 descriptor?? [ 634.049639][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.069301][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.111188][ T9771] hid (null): unknown global tag 0xc [ 634.131489][ T9771] hid-generic 0003:0158:0100.0020: unknown main item tag 0x1 [ 634.157380][ T9771] hid-generic 0003:0158:0100.0020: unexpected long global item [ 634.185812][ T9771] hid-generic: probe of 0003:0158:0100.0020 failed with error -22 [ 634.234242][ T3601] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 634.482765][T10852] netlink: 703 bytes leftover after parsing attributes in process `syz.4.1640'. [ 635.479508][ T3601] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 635.488790][ T3601] usb 3-1: config 0 has no interface number 0 [ 635.495747][ T3601] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.506817][ T3601] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.594509][ T3601] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 635.603698][ T3601] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 635.620847][ T3601] usb 3-1: Manufacturer: syz [ 635.637683][ T3601] usb 3-1: config 0 descriptor?? [ 636.347940][T10844] loop2: detected capacity change from 0 to 256 [ 636.462075][ T3633] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 636.466258][ T3601] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0021/input/input14 [ 636.604973][ T26] audit: type=1326 audit(1720221657.166:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10873 comm="syz.4.1649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 636.631372][ T3601] sony 0003:054C:03D5.0021: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 636.679829][ T3601] usb 3-1: USB disconnect, device number 18 [ 637.021559][ T3601] usb 2-1: USB disconnect, device number 21 [ 637.308398][T10885] loop1: detected capacity change from 0 to 2048 [ 637.372015][T10885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 638.371624][ T4471] EXT4-fs (loop1): unmounting filesystem. [ 640.400683][T10932] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1659'. [ 640.433634][ T26] audit: type=1326 audit(1720221660.996:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 640.434405][ T9681] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 640.834874][ T9681] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 640.854835][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 640.874562][ T9681] usb 5-1: config 0 has no interface number 0 [ 640.929733][ T9681] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.083249][ T9681] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.275171][ T9681] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 641.318781][ T9681] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 641.412012][ T9681] usb 5-1: Manufacturer: syz [ 641.556691][ T9681] usb 5-1: config 0 descriptor?? [ 641.731835][T10943] loop2: detected capacity change from 0 to 2048 [ 641.803553][T10943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 642.262299][ T9681] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0022/input/input15 [ 642.318677][T10921] loop4: detected capacity change from 0 to 256 [ 642.577321][ T9681] sony 0003:054C:03D5.0022: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 642.667811][ T9681] usb 5-1: USB disconnect, device number 19 [ 642.826874][ T8983] EXT4-fs (loop2): unmounting filesystem. [ 643.481315][ T7267] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 644.444173][ T7267] usb 2-1: Using ep0 maxpacket: 8 [ 644.577704][ T7267] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 644.608572][ T7267] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 644.639132][ T7267] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 644.664117][ T7267] usb 2-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 644.694219][ T7267] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.724203][ T7267] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 644.743525][T10980] loop3: detected capacity change from 0 to 2048 [ 644.743580][ T7267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.841041][ T7267] usbtmc 2-1:16.0: bulk endpoints not found [ 645.211864][T10986] vivid-001: disconnect [ 645.226108][T10985] vivid-001: reconnect [ 645.346734][T10980] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 645.392700][ T26] audit: type=1326 audit(1720221665.956:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.4.1684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 646.106606][ T7267] usb 2-1: USB disconnect, device number 22 [ 646.248876][ T7887] EXT4-fs (loop3): unmounting filesystem. [ 647.228590][T11015] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1682'. [ 647.387052][ T26] audit: type=1326 audit(1720221667.956:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.0.1682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e5b75bd9 code=0x0 [ 648.561007][T11037] loop2: detected capacity change from 0 to 1024 [ 648.910987][T11039] loop1: detected capacity change from 0 to 2048 [ 649.197510][T11039] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 650.078687][ T4471] EXT4-fs (loop1): unmounting filesystem. [ 650.097528][ T26] audit: type=1326 audit(1720221670.666:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11053 comm="syz.3.1697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 650.450328][ T8996] hfsplus: b-tree write err: -5, ino 4 [ 650.974145][ T3295] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 652.084369][ T3295] usb 3-1: Using ep0 maxpacket: 16 [ 652.204404][ T3295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 652.228039][ T3295] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 652.257654][ T3295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.314996][ T3295] usb 3-1: config 0 descriptor?? [ 652.910954][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.025925][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.086344][ T3295] hid (null): unknown global tag 0xc [ 653.121489][ T3295] hid-generic 0003:0158:0100.0023: unknown main item tag 0x1 [ 653.166569][T11090] loop4: detected capacity change from 0 to 2048 [ 653.184536][ T3295] hid-generic 0003:0158:0100.0023: unexpected long global item [ 653.192776][ T3295] hid-generic: probe of 0003:0158:0100.0023 failed with error -22 [ 653.233653][T11090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 653.297592][ T3600] usb 3-1: USB disconnect, device number 19 [ 653.539034][T11095] loop1: detected capacity change from 0 to 64 [ 654.038842][ T7946] EXT4-fs (loop4): unmounting filesystem. [ 654.181495][T11106] loop1: detected capacity change from 0 to 256 [ 654.340430][T11106] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 654.417965][ T26] audit: type=1326 audit(1720221674.986:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11110 comm="syz.4.1712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 654.460212][T11113] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1709'. [ 654.481510][ T26] audit: type=1326 audit(1720221675.046:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.3.1714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 654.556609][ T26] audit: type=1326 audit(1720221675.106:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.0.1709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e5b75bd9 code=0x0 [ 657.725400][ T3295] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 657.782338][ T26] audit: type=1326 audit(1720221678.346:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.1725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7a375bd9 code=0x0 [ 657.974548][T11132] loop1: detected capacity change from 0 to 40427 [ 657.996750][T11132] F2FS-fs (loop1): invalid crc value [ 658.029863][T11132] F2FS-fs (loop1): Found nat_bits in checkpoint [ 658.087773][ T3295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.119180][ T3295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.147231][ T3295] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 658.173124][ T3295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.193816][T11132] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 658.208531][ T3295] usb 4-1: config 0 descriptor?? [ 658.217991][T11132] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 658.290643][ T4471] bio_check_eod: 9 callbacks suppressed [ 658.290660][ T4471] syz-executor: attempt to access beyond end of device [ 658.290660][ T4471] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 658.917739][T11138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.988284][T11138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.063109][T11138] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 659.070057][T11138] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 659.091642][T11138] vhci_hcd vhci_hcd.0: Device attached [ 659.113007][T11174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.151947][T11176] loop2: detected capacity change from 0 to 256 [ 659.172171][T11174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.240778][T11176] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 659.555380][T11170] vhci_hcd: connection closed [ 659.585560][ T11] vhci_hcd: stop threads [ 659.604297][ T3295] usb 4-1: string descriptor 0 read error: -71 [ 659.678558][ T3295] uclogic 0003:256C:006D.0024: failed retrieving string descriptor #200: -71 [ 659.744472][ T11] vhci_hcd: release socket [ 659.870331][ T3295] uclogic 0003:256C:006D.0024: failed retrieving pen parameters: -71 [ 659.906713][ T11] vhci_hcd: disconnect device [ 659.956651][ T3295] uclogic 0003:256C:006D.0024: failed probing pen v2 parameters: -71 [ 660.004298][ T3295] uclogic 0003:256C:006D.0024: failed probing parameters: -71 [ 660.052951][ T3295] uclogic: probe of 0003:256C:006D.0024 failed with error -71 [ 660.069335][ T7268] vhci_hcd: vhci_device speed not set [ 660.125241][T11180] loop1: detected capacity change from 0 to 128 [ 660.150825][ T3295] usb 4-1: USB disconnect, device number 16 [ 660.219803][T11180] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 660.301276][T11180] syz.1.1731: attempt to access beyond end of device [ 660.301276][T11180] loop1: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 660.385655][T11180] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 660.402174][T11180] syz.1.1731: attempt to access beyond end of device [ 660.402174][T11180] loop1: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 660.404408][T11184] loop3: detected capacity change from 0 to 2048 [ 660.444913][T11180] Buffer I/O error on dev loop1, logical block 8833403, async page read [ 660.488487][T11180] syz.1.1731: attempt to access beyond end of device [ 660.488487][T11180] loop1: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 660.504253][T11180] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 660.529798][T11184] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 660.533180][T11180] syz.1.1731: attempt to access beyond end of device [ 660.533180][T11180] loop1: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 660.554937][T11180] Buffer I/O error on dev loop1, logical block 8073606, async page read [ 660.564451][T11180] syz.1.1731: attempt to access beyond end of device [ 660.564451][T11180] loop1: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 660.578957][T11180] Buffer I/O error on dev loop1, logical block 3245771, async page read [ 660.587428][T11180] syz.1.1731: attempt to access beyond end of device [ 660.587428][T11180] loop1: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 660.601166][T11180] Buffer I/O error on dev loop1, logical block 8834171, async page read [ 660.609631][T11180] syz.1.1731: attempt to access beyond end of device [ 660.609631][T11180] loop1: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 660.623731][T11180] Buffer I/O error on dev loop1, logical block 13466417, async page read [ 660.632321][T11180] syz.1.1731: attempt to access beyond end of device [ 660.632321][T11180] loop1: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 660.646061][T11180] Buffer I/O error on dev loop1, logical block 8073606, async page read [ 660.656657][T11180] syz.1.1731: attempt to access beyond end of device [ 660.656657][T11180] loop1: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 660.672127][T11180] Buffer I/O error on dev loop1, logical block 3245774, async page read [ 660.682248][T11180] Buffer I/O error on dev loop1, logical block 8834939, async page read [ 661.277905][T11194] netlink: 703 bytes leftover after parsing attributes in process `syz.4.1732'. [ 661.435711][ T26] audit: type=1326 audit(1720221681.946:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.4.1732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 661.524992][ T7887] EXT4-fs (loop3): unmounting filesystem. [ 662.957476][ T26] audit: type=1326 audit(1720221683.526:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.2.1737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7a375bd9 code=0x0 [ 663.874326][T11204] loop3: detected capacity change from 0 to 40427 [ 663.925978][T11204] F2FS-fs (loop3): invalid crc value [ 663.979761][T11204] F2FS-fs (loop3): Found nat_bits in checkpoint [ 664.142030][T11204] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 664.232419][T11204] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 665.006898][ T7887] bio_check_eod: 1 callbacks suppressed [ 665.006920][ T7887] syz-executor: attempt to access beyond end of device [ 665.006920][ T7887] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 665.184190][ T7267] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 665.601449][ T7267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.635965][ T7267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.690304][ T7267] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 665.729790][ T7267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.771346][T11236] loop3: detected capacity change from 0 to 2048 [ 665.790428][ T7267] usb 3-1: config 0 descriptor?? [ 665.925116][T11236] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 666.145209][T11243] loop4: detected capacity change from 0 to 256 [ 666.159267][T11243] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 666.575005][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.644787][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.714756][T11229] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 666.721335][T11229] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 666.790708][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.851016][T11229] vhci_hcd vhci_hcd.0: Device attached [ 666.853816][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.904956][ T7887] EXT4-fs (loop3): unmounting filesystem. [ 667.054218][ T3600] vhci_hcd: vhci_device speed not set [ 667.124391][ T3600] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 667.150870][T11250] vhci_hcd: connection reset by peer [ 667.156502][ T8996] vhci_hcd: stop threads [ 667.160788][ T8996] vhci_hcd: release socket [ 667.182136][ T8996] vhci_hcd: disconnect device [ 667.216684][ T7267] usb 3-1: string descriptor 0 read error: -71 [ 667.254357][ T7267] uclogic 0003:256C:006D.0025: failed retrieving string descriptor #200: -71 [ 667.255730][T11257] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1748'. [ 667.263276][ T7267] uclogic 0003:256C:006D.0025: failed retrieving pen parameters: -71 [ 667.317685][ T7267] uclogic 0003:256C:006D.0025: failed probing pen v2 parameters: -71 [ 667.326966][ T26] audit: type=1326 audit(1720221687.896:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.0.1748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e5b75bd9 code=0x0 [ 667.367689][ T7267] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 667.381233][ T7267] uclogic: probe of 0003:256C:006D.0025 failed with error -71 [ 667.421036][ T7267] usb 3-1: USB disconnect, device number 20 [ 669.978346][T11269] loop2: detected capacity change from 0 to 40427 [ 670.023211][T11269] F2FS-fs (loop2): invalid crc value [ 670.150143][T11269] F2FS-fs (loop2): Found nat_bits in checkpoint [ 670.690887][T11269] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 670.783186][T11269] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 671.028163][ T8983] syz-executor: attempt to access beyond end of device [ 671.028163][ T8983] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 671.069877][ T3552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 671.083612][ T3552] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 671.092001][ T3552] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 671.100998][ T3552] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 671.115468][ T3552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 671.123892][ T3552] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 671.266280][ T3295] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 671.519954][ T3295] usb 1-1: Using ep0 maxpacket: 16 [ 671.573097][T11297] chnl_net:caif_netlink_parms(): no params data found [ 671.645714][ T3295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 671.687441][ T3295] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 671.717122][ T3295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.754754][ T3295] usb 1-1: config 0 descriptor?? [ 671.960885][T11297] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.975012][T11297] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.001709][T11297] device bridge_slave_0 entered promiscuous mode [ 672.031026][T11297] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.074532][T11297] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.082924][T11297] device bridge_slave_1 entered promiscuous mode [ 672.215277][T11297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.231843][T11296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.241778][ T3600] vhci_hcd: vhci_device speed not set [ 672.271237][T11296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.282370][T11297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.326621][ T3295] hid (null): unknown global tag 0xc [ 672.352134][ T3295] hid-generic 0003:0158:0100.0026: unknown main item tag 0x1 [ 672.369872][ T3295] hid-generic 0003:0158:0100.0026: unexpected long global item [ 672.390663][ T3295] hid-generic: probe of 0003:0158:0100.0026 failed with error -22 [ 672.528445][ T3295] usb 1-1: USB disconnect, device number 15 [ 672.541210][T11297] team0: Port device team_slave_0 added [ 672.602535][T11297] team0: Port device team_slave_1 added [ 672.742605][T11297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.802456][T11297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.828476][ C0] vkms_vblank_simulate: vblank timer overrun [ 673.216318][ T3565] Bluetooth: hci5: command tx timeout [ 673.334009][T11297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.436247][T11297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.511108][T11297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.594292][T11297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.702359][T11297] device hsr_slave_0 entered promiscuous mode [ 673.725026][T11297] device hsr_slave_1 entered promiscuous mode [ 673.742176][T11297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.771844][T11297] Cannot create hsr debugfs directory [ 674.281543][T11297] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.513230][T11297] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.517263][T11329] loop2: detected capacity change from 0 to 2048 [ 674.565407][T11330] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1769'. [ 674.635899][ T26] audit: type=1326 audit(1720221695.206:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.3.1769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 674.690538][T11329] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 675.274191][ T3552] Bluetooth: hci5: command tx timeout [ 675.557887][T11297] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.570460][ T8983] EXT4-fs (loop2): unmounting filesystem. [ 675.718725][T11297] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.164024][T11297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 676.194681][T11297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 676.233001][T11297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 676.273594][T11297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 676.583655][T11339] loop2: detected capacity change from 0 to 64 [ 676.695723][T11297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.732190][ T3768] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 677.228902][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 677.284948][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 677.297357][T11297] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.376841][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 677.421442][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.444192][ T3552] Bluetooth: hci5: command tx timeout [ 677.502755][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.510139][ T7267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.635563][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 677.643826][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 677.938226][T11359] loop2: detected capacity change from 0 to 4096 [ 677.978347][T11359] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 678.143262][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 678.154109][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.161254][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.169290][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 678.178484][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 678.224251][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 678.287433][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 678.368966][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 678.388148][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 678.409655][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 678.430004][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 678.443134][T11365] loop4: detected capacity change from 0 to 2048 [ 678.464938][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 678.500488][T11367] ntfs3: loop2: ino=1b, "file0" attr_set_size [ 678.526299][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 678.612154][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 678.739799][T11365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 678.792942][T11297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 679.395382][ T8983] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 679.433896][ T8983] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 679.515869][ T8983] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 679.525718][ T3552] Bluetooth: hci5: command tx timeout [ 679.997072][ T7946] EXT4-fs (loop4): unmounting filesystem. [ 681.793395][ T9771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 681.810781][ T9771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 681.858427][T11297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.921164][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 681.931565][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 681.991280][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 682.000714][ T9681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 682.038482][T11297] device veth0_vlan entered promiscuous mode [ 682.054963][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 682.063006][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 682.100474][T11297] device veth1_vlan entered promiscuous mode [ 682.167993][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 682.195060][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 682.203357][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 682.227766][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.243345][T11400] loop4: detected capacity change from 0 to 64 [ 682.267456][T11297] device veth0_macvtap entered promiscuous mode [ 682.281429][T11297] device veth1_macvtap entered promiscuous mode [ 682.324972][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.344631][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.364167][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.386569][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.414172][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.434146][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.444008][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.474319][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.488979][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.507363][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.523034][T11297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.544381][ T3768] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 682.565100][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 682.573471][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 682.611099][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 682.667034][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 682.720310][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.781191][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.841746][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.901069][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.953161][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.093624][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.105372][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.117853][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.196803][ T26] audit: type=1326 audit(1720221703.766:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11410 comm="syz.3.1793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 683.220176][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.251268][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.291865][T11297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.333605][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 683.353177][ T3295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 683.394906][T11297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.441357][T11297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.554365][T11297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.781160][T11297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.201391][T11428] loop4: detected capacity change from 0 to 2048 [ 684.461531][ T8996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.507174][ T8996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.547405][T11428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 684.669334][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 684.839713][ T3615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.864203][ T3615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.644185][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 685.675944][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.786591][T11451] netlink: 'syz.0.1802': attribute type 10 has an invalid length. [ 685.856676][ T7946] EXT4-fs (loop4): unmounting filesystem. [ 685.971117][T11451] team0: Port device netdevsim0 added [ 686.801735][T11455] UBIFS error (pid: 11455): cannot open "./file0", error -22 [ 686.869227][ T26] audit: type=1326 audit(1720221707.436:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11467 comm="syz.0.1806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e5b75bd9 code=0x0 [ 687.434641][T11477] tipc: Started in network mode [ 687.439775][T11477] tipc: Node identity ac14140f, cluster identity 4711 [ 687.451730][T11477] tipc: Enabled bearer , priority 10 [ 688.221371][T11488] loop2: detected capacity change from 0 to 16 [ 688.262835][T11489] loop3: detected capacity change from 0 to 256 [ 688.275766][T11489] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 688.380468][T11488] erofs: (device loop2): mounted with root inode @ nid 36. [ 688.586217][ T3598] tipc: Node number set to 2886997007 [ 689.791969][ T26] audit: type=1326 audit(1720221710.356:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.3.1819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 689.818321][ T3598] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 690.204844][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.236626][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.259125][ T3598] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 690.288204][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.309885][ T3598] usb 3-1: config 0 descriptor?? [ 690.337339][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 690.494001][ T26] audit: type=1326 audit(1720221711.056:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.1.1820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8629575bd9 code=0x0 [ 690.867348][T11518] tipc: Started in network mode [ 690.872287][T11518] tipc: Node identity ac14140f, cluster identity 4711 [ 690.880131][T11518] tipc: Enabled bearer , priority 10 [ 691.004164][T11499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.044548][T11499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.079932][T11499] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 691.086511][T11499] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 691.154884][T11499] vhci_hcd vhci_hcd.0: Device attached [ 691.174522][T11499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.184791][T11499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.344343][ T7267] vhci_hcd: vhci_device speed not set [ 691.586070][T11525] vhci_hcd: connection closed [ 691.595937][ T39] vhci_hcd: stop threads [ 691.652187][ T39] vhci_hcd: release socket [ 691.691818][ T39] vhci_hcd: disconnect device [ 691.847939][T11538] loop3: detected capacity change from 0 to 2048 [ 691.850100][ T7267] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 691.862036][ T7267] usb 13-1: enqueue for inactive port 0 [ 691.868309][ T3598] usb 3-1: string descriptor 0 read error: -71 [ 691.894325][ T3598] uclogic 0003:256C:006D.0027: failed retrieving string descriptor #200: -71 [ 691.913391][ T3598] uclogic 0003:256C:006D.0027: failed retrieving pen parameters: -71 [ 691.922506][ T3598] uclogic 0003:256C:006D.0027: failed probing pen v2 parameters: -71 [ 691.931253][ T3598] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 691.944206][ T3598] uclogic: probe of 0003:256C:006D.0027 failed with error -71 [ 691.954323][ T7267] vhci_hcd: vhci_device speed not set [ 691.974959][ T3598] usb 3-1: USB disconnect, device number 21 [ 691.998398][ T3599] tipc: Node number set to 2886997007 [ 692.005700][T11538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 692.716888][ T26] audit: type=1326 audit(1720221713.286:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.4.1832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 692.917531][ T7887] EXT4-fs (loop3): unmounting filesystem. [ 693.212005][T11561] tipc: Started in network mode [ 693.217220][T11561] tipc: Node identity ac14140f, cluster identity 4711 [ 693.226096][T11561] tipc: Enabled bearer , priority 10 [ 694.258723][ T26] audit: type=1326 audit(1720221714.826:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.4.1838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 694.314198][ T3599] tipc: Node number set to 2886997007 [ 694.715363][T11587] loop2: detected capacity change from 0 to 256 [ 694.746316][T11587] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 695.196628][T11591] loop3: detected capacity change from 0 to 2048 [ 695.435808][T11591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 697.006547][ T7887] EXT4-fs (loop3): unmounting filesystem. [ 697.344328][ T26] audit: type=1326 audit(1720221717.886:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11629 comm="syz.3.1857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 697.727406][T11641] loop2: detected capacity change from 0 to 256 [ 697.758647][T11641] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 698.956245][T11657] loop2: detected capacity change from 0 to 1024 [ 698.965330][T11657] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 699.043697][T11657] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 699.070621][T11657] EXT4-fs (loop2): invalid journal inode [ 699.104310][T11657] EXT4-fs (loop2): can't get journal size [ 699.127249][T11657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 699.273822][ T8983] EXT4-fs (loop2): unmounting filesystem. [ 699.348194][T11661] loop3: detected capacity change from 0 to 2048 [ 699.465091][T11661] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 700.362860][ T7887] EXT4-fs (loop3): unmounting filesystem. [ 700.601327][ T26] audit: type=1326 audit(1720221721.166:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11677 comm="syz.0.1872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e5b75bd9 code=0x0 [ 702.534422][ T7409] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 702.794614][ T7409] usb 3-1: Using ep0 maxpacket: 8 [ 702.914234][ T7409] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 702.934101][ T7409] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 702.964144][ T7409] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 702.994099][ T7409] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 703.027610][ T7409] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 703.057977][ T7409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.363290][T11702] loop3: detected capacity change from 0 to 40427 [ 703.426301][ T7409] usb 3-1: GET_CAPABILITIES returned 0 [ 703.435889][ T7409] usbtmc 3-1:16.0: can't read capabilities [ 703.451601][T11702] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 703.483773][T11702] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 703.601464][T11702] F2FS-fs (loop3): invalid crc value [ 703.721883][ T7267] usb 3-1: USB disconnect, device number 22 [ 703.961871][T11702] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 152982424156046821) [ 704.312799][T11702] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 704.330419][T11702] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 705.122444][ T26] audit: type=1326 audit(1720221725.686:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11732 comm="syz.2.1891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7a375bd9 code=0x0 [ 708.745791][ T26] audit: type=1326 audit(1720221729.316:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11777 comm="syz.4.1902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 710.783210][T11796] loop3: detected capacity change from 0 to 32768 [ 710.845836][T11796] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1909 (11796) [ 710.879938][T11793] loop4: detected capacity change from 0 to 40427 [ 711.052732][T11793] F2FS-fs (loop4): invalid crc value [ 711.121583][T11796] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 711.407752][T11796] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 711.490748][T11793] F2FS-fs (loop4): Found nat_bits in checkpoint [ 711.529527][T11796] BTRFS info (device loop3): setting nodatasum [ 711.564172][T11796] BTRFS info (device loop3): disabling tree log [ 711.620806][T11796] BTRFS info (device loop3): force zlib compression, level 3 [ 711.692750][T11796] BTRFS info (device loop3): turning off barriers [ 711.702930][T11796] BTRFS info (device loop3): use zlib compression, level 3 [ 711.730287][T11796] BTRFS info (device loop3): enabling auto defrag [ 711.749457][T11796] BTRFS info (device loop3): setting nodatasum [ 711.769856][T11793] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 711.800232][T11796] BTRFS info (device loop3): max_inline at 0 [ 711.812639][T11793] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 711.849802][T11796] BTRFS info (device loop3): using free space tree [ 711.924999][ T7946] syz-executor: attempt to access beyond end of device [ 711.924999][ T7946] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 712.004240][T11796] BTRFS info (device loop3): enabling ssd optimizations [ 712.406897][ T7887] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 712.802376][ T26] audit: type=1326 audit(1720221733.366:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.1917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7a375bd9 code=0x0 [ 717.256149][ T26] audit: type=1326 audit(1720221737.826:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.4.1930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 718.390446][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 719.394337][ T14] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 720.244230][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.268805][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.291345][ T14] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 720.315580][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.378342][ T14] usb 2-1: config 0 descriptor?? [ 721.695234][T11910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.725971][T11910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.816754][T11910] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 721.823332][T11910] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 721.889412][T11933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.908714][T11910] vhci_hcd vhci_hcd.0: Device attached [ 721.947131][ T26] audit: type=1326 audit(1720221742.516:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11939 comm="syz.3.1945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 721.978658][T11933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.109122][ T7404] vhci_hcd: vhci_device speed not set [ 722.189042][ T7404] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 722.263636][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'. [ 722.374224][T11935] vhci_hcd: connection reset by peer [ 722.380619][ T3705] vhci_hcd: stop threads [ 722.387643][ T3705] vhci_hcd: release socket [ 722.482899][ T3705] vhci_hcd: disconnect device [ 723.074198][ T14] usb 2-1: string descriptor 0 read error: -71 [ 723.094181][ T14] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #200: -71 [ 723.103057][ T14] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 723.148207][ T14] uclogic 0003:256C:006D.0028: failed probing pen v2 parameters: -71 [ 723.185475][ T14] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 723.204350][ T14] uclogic: probe of 0003:256C:006D.0028 failed with error -71 [ 723.264232][ T14] usb 2-1: USB disconnect, device number 23 [ 724.743034][T11968] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1951'. [ 724.774288][ T26] audit: type=1326 audit(1720221745.326:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11953 comm="syz.2.1951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7a375bd9 code=0x0 [ 725.781347][T11958] loop3: detected capacity change from 0 to 40427 [ 725.828598][T11958] F2FS-fs (loop3): invalid crc value [ 725.889235][T11958] F2FS-fs (loop3): Found nat_bits in checkpoint [ 726.251151][T11958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 726.678044][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 727.908797][ T26] audit: type=1326 audit(1720221748.476:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11996 comm="syz.3.1959" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 728.154324][ T7404] vhci_hcd: vhci_device speed not set [ 728.164902][ T14] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 728.534800][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.632557][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.812120][ T14] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 728.893942][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.965192][ T14] usb 3-1: config 0 descriptor?? [ 729.671532][T11999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.697871][T11999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.754985][T11999] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 729.761596][T11999] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 729.785165][T11999] vhci_hcd vhci_hcd.0: Device attached [ 729.838244][T11999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.849724][T12021] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1965'. [ 729.860390][ T26] audit: type=1326 audit(1720221750.426:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12005 comm="syz.3.1965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 729.931406][T11999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.974239][ T7404] vhci_hcd: vhci_device speed not set [ 730.044291][ T7404] usb 13-1: new full-speed USB device number 4 using vhci_hcd [ 730.295206][T12018] vhci_hcd: connection reset by peer [ 730.309377][ T4329] vhci_hcd: stop threads [ 730.313810][ T4329] vhci_hcd: release socket [ 730.334251][ T14] usb 3-1: string descriptor 0 read error: -71 [ 730.345587][ T4329] vhci_hcd: disconnect device [ 730.364194][ T14] uclogic 0003:256C:006D.0029: failed retrieving string descriptor #200: -71 [ 730.393401][ T14] uclogic 0003:256C:006D.0029: failed retrieving pen parameters: -71 [ 730.413606][ T14] uclogic 0003:256C:006D.0029: failed probing pen v2 parameters: -71 [ 730.444130][ T14] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 730.454141][ T14] uclogic: probe of 0003:256C:006D.0029 failed with error -71 [ 730.492610][ T14] usb 3-1: USB disconnect, device number 23 [ 730.605573][T12014] loop4: detected capacity change from 0 to 32768 [ 730.633808][T12014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1969 (12014) [ 730.681435][T12014] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 730.712363][T12014] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 730.741404][T12014] BTRFS info (device loop4): setting nodatasum [ 730.763097][T12014] BTRFS info (device loop4): disabling tree log [ 730.783337][T12014] BTRFS info (device loop4): force zlib compression, level 3 [ 730.801294][T12014] BTRFS info (device loop4): turning off barriers [ 730.823055][T12014] BTRFS info (device loop4): use zlib compression, level 3 [ 730.867456][T12014] BTRFS info (device loop4): enabling auto defrag [ 730.904236][T12014] BTRFS info (device loop4): setting nodatasum [ 730.917499][T12014] BTRFS info (device loop4): max_inline at 0 [ 730.937557][T12014] BTRFS info (device loop4): using free space tree [ 731.156728][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'. [ 731.554731][T12014] BTRFS info (device loop4): enabling ssd optimizations [ 732.197603][ T7946] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 733.028219][ T26] audit: type=1326 audit(1720221753.576:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12055 comm="syz.3.1975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 734.706487][ T7399] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 734.721764][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 735.604348][ T7404] vhci_hcd: vhci_device speed not set [ 735.948389][ T7399] usb 1-1: Using ep0 maxpacket: 16 [ 736.068619][T12095] loop2: detected capacity change from 0 to 64 [ 736.074937][ T7399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.074973][ T7399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.122310][ T7399] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 736.158608][ T7399] usb 1-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 736.179529][ T7399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.202796][ T7399] usb 1-1: config 0 descriptor?? [ 736.217700][ T3768] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 736.686258][ T7399] hid_mf 0003:0079:1844.002A: unknown main item tag 0x0 [ 736.693273][ T7399] hid_mf 0003:0079:1844.002A: item fetching failed at offset 10/11 [ 736.698010][ T26] audit: type=1326 audit(1720221757.256:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12096 comm="syz.2.1988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7a375bd9 code=0x0 [ 736.724660][ T7399] hid_mf 0003:0079:1844.002A: HID parse failed. [ 736.751405][ T7399] hid_mf: probe of 0003:0079:1844.002A failed with error -22 [ 736.957006][T12106] netlink: 703 bytes leftover after parsing attributes in process `syz.1.1985'. [ 736.974517][ T26] audit: type=1326 audit(1720221757.536:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8629575bd9 code=0x0 [ 736.998116][ T7404] usb 1-1: USB disconnect, device number 16 [ 737.051157][T12093] loop3: detected capacity change from 0 to 40427 [ 737.123913][T12093] F2FS-fs (loop3): invalid crc value [ 737.206834][T12093] F2FS-fs (loop3): Found nat_bits in checkpoint [ 737.466669][T12093] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 737.493065][T12093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 737.746129][ T7887] syz-executor: attempt to access beyond end of device [ 737.746129][ T7887] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 737.855615][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 739.724201][T12132] tipc: Enabling of bearer rejected, already enabled [ 740.807332][ T26] audit: type=1326 audit(1720221761.376:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12144 comm="syz.1.2003" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8629575bd9 code=0x0 [ 741.031048][ T3598] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 741.333026][T12149] loop2: detected capacity change from 0 to 40427 [ 741.341709][T12149] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 741.349964][T12149] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 741.360674][T12149] F2FS-fs (loop2): invalid crc value [ 741.401972][T12149] F2FS-fs (loop2): Found nat_bits in checkpoint [ 741.424539][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.448630][ T3598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.479137][ T3598] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 741.499386][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.531086][ T3598] usb 5-1: config 0 descriptor?? [ 741.582773][T12149] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 741.597609][T12149] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 742.053948][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'. [ 742.345237][T12150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.452926][T12150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.641628][T12150] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 742.648201][T12150] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 742.725035][T12170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.733766][T12170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.805797][T12150] vhci_hcd vhci_hcd.0: Device attached [ 743.004159][ T3599] vhci_hcd: vhci_device speed not set [ 743.074166][ T3599] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 743.103119][T12169] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 743.114183][T12168] vhci_hcd: connection closed [ 743.123774][ T3618] vhci_hcd: stop threads [ 743.159559][ T3618] vhci_hcd: release socket [ 743.164697][ T3598] usb 5-1: string descriptor 0 read error: -71 [ 743.194447][ T3598] uclogic 0003:256C:006D.002B: failed retrieving string descriptor #200: -71 [ 743.198352][ T3618] vhci_hcd: disconnect device [ 743.215444][ T3598] uclogic 0003:256C:006D.002B: failed retrieving pen parameters: -71 [ 743.250776][ T3598] uclogic 0003:256C:006D.002B: failed probing pen v2 parameters: -71 [ 743.270939][ T3598] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 743.281201][ T3598] uclogic: probe of 0003:256C:006D.002B failed with error -71 [ 743.406340][T12178] syz.2.2005: attempt to access beyond end of device [ 743.406340][T12178] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 743.428694][T12178] syz.2.2005: attempt to access beyond end of device [ 743.428694][T12178] loop2: rw=34817, sector=45096, nr_sectors = 128 limit=40427 [ 743.713668][ T3598] usb 5-1: USB disconnect, device number 20 [ 744.138277][ T5537] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 744.162203][ T5537] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 745.388095][ T26] audit: type=1326 audit(1720221765.956:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.4.2017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 745.726801][T12206] tipc: Enabling of bearer rejected, already enabled [ 746.059679][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 747.124559][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.588762][ T26] audit: type=1326 audit(1720221768.156:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12223 comm="syz.1.2022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8629575bd9 code=0x0 [ 748.234661][ T3599] vhci_hcd: vhci_device speed not set [ 748.261343][T12233] kvm: pic: non byte write [ 748.300173][T12240] loop2: detected capacity change from 0 to 2048 [ 748.344294][ T26] audit: type=1326 audit(1720221768.906:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12242 comm="syz.4.2030" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 748.485387][T12240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 749.784960][ T8983] EXT4-fs (loop2): unmounting filesystem. [ 749.952818][T12268] loop4: detected capacity change from 0 to 256 [ 750.272875][T12268] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 750.642452][T12273] tipc: Enabling of bearer rejected, already enabled [ 752.555414][ T26] audit: type=1326 audit(1720221773.126:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.1.2041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8629575bd9 code=0x0 [ 752.696262][T12294] loop2: detected capacity change from 0 to 2048 [ 752.803750][T12294] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 752.858385][ T26] audit: type=1326 audit(1720221773.426:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.4.2045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52a2175bd9 code=0x0 [ 753.687802][ T8983] EXT4-fs (loop2): unmounting filesystem. [ 753.770044][T12315] tipc: Enabling of bearer rejected, already enabled [ 755.595369][ T26] audit: type=1326 audit(1720221776.156:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12335 comm="syz.1.2058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8629575bd9 code=0x0 [ 756.345304][T12350] loop3: detected capacity change from 0 to 2048 [ 756.383747][ T26] audit: type=1326 audit(1720221776.946:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8629575bd9 code=0x0 [ 756.548977][T12350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 757.545962][ T7887] EXT4-fs (loop3): unmounting filesystem. [ 758.037264][T12369] tipc: Enabling of bearer rejected, already enabled [ 758.169893][T12345] loop4: detected capacity change from 0 to 32768 [ 759.553591][T12345] XFS (loop4): Mounting V5 Filesystem [ 759.624531][T12345] XFS (loop4): log mount failed [ 759.678882][ T26] audit: type=1326 audit(1720221780.246:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12390 comm="syz.3.2071" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 761.883829][ T26] audit: type=1326 audit(1720221782.446:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.1.2078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8629575bd9 code=0x0 [ 761.922177][T12399] loop2: detected capacity change from 0 to 40427 [ 761.935676][T12399] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 762.004209][T12399] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 762.061039][T12399] F2FS-fs (loop2): invalid crc value [ 762.097703][T12399] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 152982424156046821) [ 762.243896][T12399] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 762.269758][T12399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 763.331948][ T26] audit: type=1326 audit(1720221783.896:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.3.2085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c59175bd9 code=0x0 [ 763.753809][T12454] tipc: Enabling of bearer rejected, already enabled [ 764.527381][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'. [ 766.872157][ T26] audit: type=1326 audit(1720221787.436:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.1.2094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8629575bd9 code=0x0 [ 767.836183][ T26] audit: type=1326 audit(1720221788.396:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12510 comm="syz.2.2098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7a375bd9 code=0x0 [ 768.832354][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 771.791453][T12547] tipc: Started in network mode [ 771.796601][T12547] tipc: Node identity ac14140f, cluster identity 4711 [ 771.814322][T12547] tipc: Enabled bearer , priority 10 [ 772.837432][ T7399] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 773.070773][ T7404] tipc: Node number set to 2886997007 [ 773.445725][T12553] UBIFS error (pid: 12553): cannot open "./file0", error -22 [ 773.615255][ T7399] usb 4-1: Using ep0 maxpacket: 16 [ 773.764428][ T7399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 773.842593][ T7399] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 773.882653][ T7399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.933227][ T7399] usb 4-1: config 0 descriptor?? [ 774.428719][T12556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.449795][T12556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.486617][ T7399] hid (null): unknown global tag 0xc [ 774.499670][ T7399] hid-generic 0003:0158:0100.002C: unknown main item tag 0x1 [ 774.541316][ T7399] hid-generic 0003:0158:0100.002C: unexpected long global item [ 774.561240][ T7399] hid-generic: probe of 0003:0158:0100.002C failed with error -22 [ 774.687869][ T7399] usb 4-1: USB disconnect, device number 17 [ 776.567190][T12602] tipc: Enabling of bearer rejected, already enabled [ 777.054124][ T3598] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 777.304368][T12599] UBIFS error (pid: 12599): cannot open "./file0", error -22 [ 777.354234][ T7399] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 777.644205][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.654188][ T7399] usb 5-1: Using ep0 maxpacket: 16 [ 777.666454][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.702375][ T3598] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 777.739379][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.782585][ T3598] usb 2-1: config 0 descriptor?? [ 777.785450][ T7399] usb 5-1: unable to get BOS descriptor or descriptor too short [ 777.864266][ T7399] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 777.880818][ T7399] usb 5-1: can't read configurations, error -71 [ 777.980455][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2131'. [ 778.203395][T12622] loop2: detected capacity change from 0 to 2048 [ 778.284737][T12622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 778.713646][T12603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.825522][T12603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.903396][T12603] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 778.909987][T12603] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 779.025553][T12603] vhci_hcd vhci_hcd.0: Device attached [ 779.224300][ T7404] vhci_hcd: vhci_device speed not set [ 779.238461][T12635] vhci_hcd: connection closed [ 779.254679][ T3705] vhci_hcd: stop threads [ 779.281500][ T3705] vhci_hcd: release socket [ 779.297608][ T3705] vhci_hcd: disconnect device [ 779.305637][ T8983] EXT4-fs (loop2): unmounting filesystem. [ 779.314202][ T3598] usb 2-1: string descriptor 0 read error: -71 [ 779.337420][ T3598] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #200: -71 [ 779.346748][ T7404] usb 11-1: new full-speed USB device number 3 using vhci_hcd [ 779.357652][ T3598] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 779.370260][ T7404] usb 11-1: enqueue for inactive port 0 [ 779.424098][ T3598] uclogic 0003:256C:006D.002D: failed probing pen v2 parameters: -71 [ 779.432257][ T3598] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 779.458737][ T3598] uclogic: probe of 0003:256C:006D.002D failed with error -71 [ 779.464182][ T7404] vhci_hcd: vhci_device speed not set [ 779.496836][ T3598] usb 2-1: USB disconnect, device number 24 [ 780.119044][T12651] tipc: Enabling of bearer rejected, already enabled [ 780.314958][ T9769] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 780.584283][ T9769] usb 4-1: Using ep0 maxpacket: 8 [ 780.704218][ T9769] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 780.837887][ T9769] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 780.874855][ T9769] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 780.897982][ T9769] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 780.913990][ T9769] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.933194][ T9769] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 780.969483][ T9769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.264200][ T9769] usb 4-1: usb_control_msg returned -32 [ 781.274761][ T9769] usbtmc 4-1:16.0: can't read capabilities [ 781.584344][ T7] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 781.826338][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 781.944221][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 782.004287][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 782.024313][ T7] usb 5-1: can't read configurations, error -71 [ 782.034743][T12676] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 782.958510][ T7] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 783.238319][T12689] tipc: Enabling of bearer rejected, already enabled [ 783.291447][ T9681] usb 4-1: USB disconnect, device number 18 [ 783.334221][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.370915][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.390828][ T7] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 783.401082][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.418913][ T7] usb 5-1: config 0 descriptor?? [ 784.179653][ T3565] Bluetooth: hci4: unexpected event for opcode 0x0c12 [ 784.288670][T12702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.408329][T12702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.497231][ T9681] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 785.234436][T12683] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 785.241024][T12683] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 785.250659][T12683] vhci_hcd vhci_hcd.0: Device attached [ 785.337217][T12720] device team_slave_0 entered promiscuous mode [ 785.344093][T12720] device team_slave_1 entered promiscuous mode [ 785.444190][ T9769] vhci_hcd: vhci_device speed not set [ 785.474229][ T9681] usb 3-1: Using ep0 maxpacket: 16 [ 785.476007][T12714] vhci_hcd: connection closed [ 785.479817][ T3615] vhci_hcd: stop threads [ 785.489911][ T3615] vhci_hcd: release socket [ 785.504381][ T3615] vhci_hcd: disconnect device [ 785.524263][ T9769] usb 17-1: new full-speed USB device number 3 using vhci_hcd [ 785.534158][ T9769] usb 17-1: enqueue for inactive port 0 [ 785.554406][ T7] usb 5-1: string descriptor 0 read error: -71 [ 785.581803][ T7] uclogic 0003:256C:006D.002E: failed retrieving string descriptor #200: -71 [ 785.594382][ T9681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 785.602250][ T7] uclogic 0003:256C:006D.002E: failed retrieving pen parameters: -71 [ 785.622503][ T7] uclogic 0003:256C:006D.002E: failed probing pen v2 parameters: -71 [ 785.634337][ T9769] vhci_hcd: vhci_device speed not set [ 785.642305][ T7] uclogic 0003:256C:006D.002E: failed probing parameters: -71 [ 785.653700][ T7] uclogic: probe of 0003:256C:006D.002E failed with error -71 [ 785.674330][ T9681] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 785.686698][ T9681] usb 3-1: can't read configurations, error -71 [ 785.714258][ T7] usb 5-1: USB disconnect, device number 24 [ 785.905015][ T9771] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 786.204233][ T9771] usb 2-1: Using ep0 maxpacket: 8 [ 786.364242][ T9771] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 786.379858][ T9771] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.413018][ T9771] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 786.446059][ T9771] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 786.476323][ T9771] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.504212][ T9771] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 786.524646][ T9771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.824195][ T9771] usb 2-1: usb_control_msg returned -32 [ 786.829858][ T9771] usbtmc 2-1:16.0: can't read capabilities [ 787.046293][T12743] tipc: Enabling of bearer rejected, already enabled [ 787.238724][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2168'. [ 787.546294][T12752] loop3: detected capacity change from 0 to 512 [ 787.568931][T12752] ext4: Unknown parameter 'noacl' [ 788.118113][T12760] loop2: detected capacity change from 0 to 64 [ 788.234247][ T3565] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 788.243109][ T3565] Bluetooth: hci4: Injecting HCI hardware error event [ 788.253130][ T3552] Bluetooth: hci4: hardware error 0x00 [ 788.503323][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 789.672033][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2179'. [ 790.314790][ T3552] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 791.244904][T12819] loop4: detected capacity change from 0 to 512 [ 791.288496][T12819] ext4: Unknown parameter 'noacl' [ 791.345311][ T3768] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 791.781998][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 792.594687][T12744] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 792.718942][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2192'. [ 792.935707][T12843] loop2: detected capacity change from 0 to 64 [ 792.942193][ T9771] usb 2-1: USB disconnect, device number 25 [ 793.809873][T12860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 794.181019][T12860] loop4: detected capacity change from 0 to 40427 [ 794.211577][T12860] F2FS-fs (loop4): invalid crc value [ 794.261617][T12860] F2FS-fs (loop4): Found nat_bits in checkpoint [ 794.312818][T12860] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 794.332836][T12860] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 795.069092][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 795.334740][ T3565] Bluetooth: hci5: command 0x0406 tx timeout [ 796.005631][T12885] loop3: detected capacity change from 0 to 512 [ 796.017910][T12885] ext4: Unknown parameter 'noacl' [ 796.113457][ T26] audit: type=1326 audit(1720221816.676:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12887 comm="syz.2.2205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7a375bd9 code=0x0 [ 796.214190][ T7268] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 796.464147][ T7268] usb 5-1: Using ep0 maxpacket: 8 [ 796.584259][ T7268] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 796.604093][ T7268] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 796.628546][ T7268] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 796.654124][ T7268] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 796.685211][ T7268] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.714153][ T7268] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 796.743636][ T7268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.025092][ T7268] usb 5-1: usb_control_msg returned -32 [ 797.031905][ T7268] usbtmc 5-1:16.0: can't read capabilities [ 797.095182][T12900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 797.463493][T12900] loop2: detected capacity change from 0 to 40427 [ 797.495426][T12900] F2FS-fs (loop2): invalid crc value [ 797.559634][T12900] F2FS-fs (loop2): Found nat_bits in checkpoint [ 797.613460][T12900] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 797.622909][T12900] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 798.404800][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2214'. [ 799.119576][ T7] usb 5-1: USB disconnect, device number 25 [ 799.353956][T12935] loop3: detected capacity change from 0 to 512 [ 799.386879][T12935] ext4: Unknown parameter 'noacl' [ 799.499886][ T3768] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 800.476249][T12942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 800.844067][T12942] loop4: detected capacity change from 0 to 40427 [ 800.890945][T12942] F2FS-fs (loop4): invalid crc value [ 800.968578][T12942] F2FS-fs (loop4): Found nat_bits in checkpoint [ 801.003759][T12942] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 801.031863][T12942] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 803.559727][T12984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 803.746100][T12988] loop4: detected capacity change from 0 to 512 [ 803.804919][T12988] ext4: Unknown parameter 'noacl' [ 804.053717][T12984] loop2: detected capacity change from 0 to 40427 [ 804.074517][T12984] F2FS-fs (loop2): invalid crc value [ 804.172106][T12984] F2FS-fs (loop2): Found nat_bits in checkpoint [ 804.231355][T12984] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 804.257559][T12984] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 804.418201][ T3768] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 805.444885][T13015] overlayfs: overlapping lowerdir path [ 805.486252][T13015] overlayfs: overlapping lowerdir path [ 805.976911][ T9771] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 806.854144][ T9771] usb 4-1: Using ep0 maxpacket: 16 [ 807.008686][T13031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 807.044217][ T9771] usb 4-1: unable to get BOS descriptor or descriptor too short [ 807.135758][ T9771] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 807.153597][ T9771] usb 4-1: can't read configurations, error -71 [ 807.946731][T13049] loop3: detected capacity change from 0 to 512 [ 808.001276][T13049] ext4: Unknown parameter 'noacl' [ 808.086667][ T3768] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 808.565111][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.311158][T13065] overlayfs: overlapping lowerdir path [ 809.347952][T13065] overlayfs: overlapping lowerdir path [ 809.492586][T13063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 809.760495][T13063] loop2: detected capacity change from 0 to 40427 [ 809.788134][T13063] F2FS-fs (loop2): invalid crc value [ 809.826351][T13063] F2FS-fs (loop2): Found nat_bits in checkpoint [ 809.863200][T13063] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 809.876891][T13063] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 809.952342][ T9681] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 810.194492][ T9681] usb 4-1: Using ep0 maxpacket: 16 [ 810.283520][T13076] cgroup2: Unexpected value for 'nsdelegate' [ 810.474767][ T9681] usb 4-1: unable to get BOS descriptor or descriptor too short [ 810.624620][ T9681] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 810.632268][ T9681] usb 4-1: can't read configurations, error -71 [ 811.383563][T13101] loop2: detected capacity change from 0 to 512 [ 811.394900][T13101] ext4: Unknown parameter 'noacl' [ 812.018836][T13105] delete_channel: no stack [ 812.216711][ T3768] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 813.671055][T13120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 815.533174][T13150] overlayfs: overlapping lowerdir path [ 815.575243][T13150] overlayfs: overlapping lowerdir path [ 816.062877][ T7] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 816.994315][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 817.165092][T13174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 817.395245][T13174] loop2: detected capacity change from 0 to 40427 [ 817.410130][T13174] F2FS-fs (loop2): invalid crc value [ 817.420386][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 817.487132][T13174] F2FS-fs (loop2): Found nat_bits in checkpoint [ 817.514206][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 817.528034][T13174] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 817.544998][T13174] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 817.619899][ T7] usb 5-1: can't read configurations, error -71 [ 818.048303][T13189] loop4: detected capacity change from 0 to 64 [ 819.146746][T13194] delete_channel: no stack [ 821.310116][T13219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 822.274158][ T27] INFO: task syz.1.1731:11187 blocked for more than 143 seconds. [ 822.281942][ T27] Not tainted 6.1.97-syzkaller #0 [ 822.353929][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.434187][ T27] task:syz.1.1731 state:D stack:27272 pid:11187 ppid:4471 flags:0x00004004 [ 822.526465][ T27] Call Trace: [ 822.564032][ T27] [ 822.567124][ T27] __schedule+0x142d/0x4550 [ 822.573074][ T27] ? __sched_text_start+0x8/0x8 [ 822.588854][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 822.618440][ T3565] Bluetooth: hci5: unexpected event for opcode 0x0c12 [ 822.618935][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 822.684046][ T27] schedule+0xbf/0x180 [ 822.688230][ T27] d_alloc_parallel+0xbd5/0x1590 [ 822.693232][ T27] ? d_alloc_parallel+0x31a/0x1590 [ 822.751281][ T27] ? d_hash_and_lookup+0x1b0/0x1b0 [ 822.765594][ T27] ? do_task_dead+0xd0/0xd0 [ 822.796151][ T27] ? __init_waitqueue_head+0xaa/0x140 [ 822.827442][ T27] __lookup_slow+0x113/0x3d0 [ 822.841098][ T27] ? lookup_one_len+0x2d0/0x2d0 [ 822.863833][ T27] lookup_slow+0x53/0x70 [ 822.885949][ T27] link_path_walk+0x9d6/0xee0 [ 822.903719][ T27] ? handle_lookup_down+0x130/0x130 [ 822.904529][T13217] loop2: detected capacity change from 0 to 32768 [ 822.917587][ T27] path_openat+0x23d/0x2e60 [ 822.943103][ T27] ? mark_lock+0x9a/0x340 [ 822.954577][T13217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2294 (13217) [ 822.965457][ T27] ? do_filp_open+0x480/0x480 [ 822.987496][T13217] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 822.988529][ T27] do_filp_open+0x230/0x480 [ 822.998059][T13217] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 823.019882][T13217] BTRFS info (device loop2): setting nodatasum [ 823.026964][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 823.031643][ T27] ? _raw_spin_unlock+0x24/0x40 [ 823.037054][T13217] BTRFS info (device loop2): disabling tree log [ 823.043514][T13217] BTRFS info (device loop2): force zlib compression, level 3 [ 823.051328][ T27] ? alloc_fd+0x59c/0x640 [ 823.056156][ T27] do_sys_openat2+0x13b/0x500 [ 823.060906][ T27] ? do_sys_open+0x220/0x220 [ 823.065958][T13217] BTRFS info (device loop2): turning off barriers [ 823.072432][T13217] BTRFS info (device loop2): use zlib compression, level 3 [ 823.094115][ T9769] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 823.101819][ T27] __x64_sys_openat+0x243/0x290 [ 823.107113][ T27] ? __ia32_sys_open+0x270/0x270 [ 823.112113][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 823.118863][T13217] BTRFS info (device loop2): enabling auto defrag [ 823.134486][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 823.139754][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 823.146183][T13217] BTRFS info (device loop2): setting nodatasum [ 823.152413][T13217] BTRFS info (device loop2): max_inline at 0 [ 823.174055][ T27] do_syscall_64+0x3b/0xb0 [ 823.178544][ T27] ? clear_bhb_loop+0x45/0xa0 [ 823.183271][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.193214][T13217] BTRFS info (device loop2): using free space tree [ 823.214984][ T27] RIP: 0033:0x7f0470b75bd9 [ 823.224294][ T27] RSP: 002b:00007f0471872048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 823.232783][ T27] RAX: ffffffffffffffda RBX: 00007f0470d04038 RCX: 00007f0470b75bd9 [ 823.269600][ T27] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 823.299714][ T27] RBP: 00007f0470be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 823.323725][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.343555][ T27] R13: 000000000000006e R14: 00007f0470d04038 R15: 00007ffe0f6cfe08 [ 823.352561][ T9769] usb 2-1: Using ep0 maxpacket: 16 [ 823.358576][ T27] [ 823.361938][ T27] [ 823.361938][ T27] Showing all locks held in the system: [ 823.372109][ T27] 1 lock held by rcu_tasks_kthre/12: [ 823.380931][ T27] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 823.404163][ T27] 1 lock held by rcu_tasks_trace/13: [ 823.404211][T13217] BTRFS info (device loop2): enabling ssd optimizations [ 823.409771][ T27] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 823.442815][ T27] 1 lock held by khungtaskd/27: [ 823.448636][ T27] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 823.465720][ T27] 2 locks held by getty/3309: [ 823.470595][ T27] #0: ffff88814b3fb098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 823.484149][ T9769] usb 2-1: unable to get BOS descriptor or descriptor too short [ 823.487610][ T27] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 823.504197][ T27] 3 locks held by kworker/u4:7/3626: [ 823.509615][ T27] 2 locks held by kworker/1:8/3634: [ 823.523955][ T27] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 823.534781][ T27] #1: ffffc900047f7d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 823.546820][ T27] 3 locks held by kworker/1:12/9769: [ 823.552132][ T27] #0: ffff888013e7c538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 823.554337][ T9769] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 823.563947][ T27] #1: ffffc9000b647d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 823.582137][ T27] #2: ffff88802270d190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 823.591186][ T27] 1 lock held by syz.1.1731/11180: [ 823.598067][ T27] 1 lock held by syz.1.1731/11187: [ 823.603205][ T27] #0: ffff888073329160 (&type->i_mutex_dir_key#13){.+.+}-{3:3}, at: lookup_slow+0x45/0x70 [ 823.613731][ T9769] usb 2-1: can't read configurations, error -71 [ 823.623639][ T27] 1 lock held by syz.2.2294/13217: [ 823.628845][ T27] #0: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 823.641038][ T27] 4 locks held by syz.1.2296/13225: [ 823.656491][ T27] #0: ffff8880731f4410 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 823.674213][ T27] #1: ffffffff8e2f6d90 ((netlink_chain).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain+0x5e/0x1b0 [ 823.695911][ T27] #2: ffff88807bfc56b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nft_rcv_nl_event+0x112/0x620 [ 823.708950][ T27] #3: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 823.733800][ T27] [ 823.736237][ T27] ============================================= [ 823.736237][ T27] [ 823.745447][ T27] NMI backtrace for cpu 1 [ 823.749820][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 823.757638][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 823.767699][ T27] Call Trace: [ 823.771006][ T27] [ 823.773939][ T27] dump_stack_lvl+0x1e3/0x2cb [ 823.778642][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 823.784207][ T27] ? panic+0x764/0x764 [ 823.788279][ T27] ? vprintk_emit+0x622/0x740 [ 823.792974][ T27] ? printk_sprint+0x490/0x490 [ 823.797768][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 823.802902][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 823.807891][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 823.814059][ T27] ? _printk+0xd1/0x111 [ 823.818224][ T27] ? panic+0x764/0x764 [ 823.822317][ T27] ? __wake_up_klogd+0xcc/0x100 [ 823.827261][ T27] ? panic+0x764/0x764 [ 823.831376][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 823.837460][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 823.843545][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 823.849554][ T27] watchdog+0xf88/0xfd0 [ 823.853726][ T27] ? watchdog+0x1f8/0xfd0 [ 823.858070][ T27] kthread+0x28d/0x320 [ 823.862203][ T27] ? hungtask_pm_notify+0x50/0x50 [ 823.867250][ T27] ? kthread_blkcg+0xd0/0xd0 [ 823.871845][ T27] ret_from_fork+0x1f/0x30 [ 823.876282][ T27] [ 823.881126][ T27] Sending NMI from CPU 1 to CPUs 0: [ 823.886764][ C0] NMI backtrace for cpu 0 [ 823.886776][ C0] CPU: 0 PID: 3626 Comm: kworker/u4:7 Not tainted 6.1.97-syzkaller #0 [ 823.886794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 823.886805][ C0] Workqueue: phy29 ieee80211_iface_work [ 823.886831][ C0] RIP: 0010:preempt_count_add+0xc2/0x180 [ 823.886855][ C0] Code: e8 d3 51 0d 00 65 48 8b 1d 3b 0d a4 7e 48 81 c3 d8 14 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 5e b5 83 00 <4c> 89 33 5b 41 5e 41 5f c3 e8 c0 e4 d6 02 85 c0 74 9e 48 c7 c0 68 [ 823.886870][ C0] RSP: 0018:ffffc900048a7680 EFLAGS: 00000246 [ 823.886884][ C0] RAX: 1ffff11004986dc3 RBX: ffff888024c36e18 RCX: ffffffff8a959a00 [ 823.886899][ C0] RDX: dffffc0000000000 RSI: ffffffff81e1eaab RDI: ffffffff813ca4d3 [ 823.886912][ C0] RBP: 1ffff92000914ef0 R08: 0000000000000000 R09: ffffc900048a7870 [ 823.886925][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888024c35940 [ 823.886937][ C0] R13: ffffffff81784ea0 R14: ffffffff813ca4d3 R15: dffffc0000000000 [ 823.886951][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 823.886967][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.886979][ C0] CR2: 00007ffeeeaf6348 CR3: 0000000013f1e000 CR4: 00000000003506f0 [ 823.886997][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 823.887007][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 823.887018][ C0] Call Trace: [ 823.887023][ C0] [ 823.887029][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 823.887056][ C0] ? read_lock_is_recursive+0x10/0x10 [ 823.887084][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 823.887112][ C0] ? nmi_handle+0x25/0x440 [ 823.887146][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 823.887173][ C0] ? nmi_handle+0x12e/0x440 [ 823.887198][ C0] ? nmi_handle+0x25/0x440 [ 823.887224][ C0] ? preempt_count_add+0xc2/0x180 [ 823.887245][ C0] ? default_do_nmi+0x62/0x150 [ 823.887262][ C0] ? exc_nmi+0xa8/0x100 [ 823.887278][ C0] ? end_repeat_nmi+0x16/0x31 [ 823.887311][ C0] ? unwind_next_frame+0xb3/0x2220 [ 823.887329][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 823.887356][ C0] ? queued_write_lock_slowpath+0x420/0x441 [ 823.887379][ C0] ? kasan_set_track+0x4b/0x70 [ 823.887404][ C0] ? unwind_next_frame+0xb3/0x2220 [ 823.887422][ C0] ? preempt_count_add+0xc2/0x180 [ 823.887444][ C0] ? preempt_count_add+0xc2/0x180 [ 823.887466][ C0] ? preempt_count_add+0xc2/0x180 [ 823.887487][ C0] [ 823.887492][ C0] [ 823.887498][ C0] ? kasan_set_track+0x4b/0x70 [ 823.887522][ C0] unwind_next_frame+0xb3/0x2220 [ 823.887547][ C0] ? kasan_set_track+0x4b/0x70 [ 823.887572][ C0] ? kasan_set_track+0x4b/0x70 [ 823.887598][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 823.887622][ C0] arch_stack_walk+0x10d/0x140 [ 823.887644][ C0] ? kasan_set_track+0x4b/0x70 [ 823.887672][ C0] stack_trace_save+0x113/0x1c0 [ 823.887697][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 823.887727][ C0] ? ieee80211_iface_work+0x260/0xce0 [ 823.887748][ C0] kasan_set_track+0x4b/0x70 [ 823.887772][ C0] ? kasan_set_track+0x4b/0x70 [ 823.887826][ C0] kasan_save_free_info+0x27/0x40 [ 823.887845][ C0] ____kasan_slab_free+0xd6/0x120 [ 823.887873][ C0] kmem_cache_free+0x292/0x510 [ 823.887894][ C0] ? ieee80211_iface_work+0x260/0xce0 [ 823.887917][ C0] ieee80211_iface_work+0x260/0xce0 [ 823.887942][ C0] ? process_one_work+0x7a9/0x11d0 [ 823.887961][ C0] process_one_work+0x8a9/0x11d0 [ 823.887990][ C0] ? worker_detach_from_pool+0x260/0x260 [ 823.888012][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 823.888034][ C0] ? kthread_data+0x4e/0xc0 [ 823.888062][ C0] ? wq_worker_running+0x97/0x190 [ 823.888091][ C0] worker_thread+0xa47/0x1200 [ 823.888116][ C0] ? _raw_spin_unlock+0x40/0x40 [ 823.888144][ C0] kthread+0x28d/0x320 [ 823.888159][ C0] ? worker_clr_flags+0x190/0x190 [ 823.888178][ C0] ? kthread_blkcg+0xd0/0xd0 [ 823.888193][ C0] ret_from_fork+0x1f/0x30 [ 823.888225][ C0] [ 823.913621][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 823.913640][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 823.913663][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 823.913677][ T27] Call Trace: [ 823.913684][ T27] [ 823.913692][ T27] dump_stack_lvl+0x1e3/0x2cb [ 823.913735][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 823.913770][ T27] ? panic+0x764/0x764 [ 823.913802][ T27] ? vscnprintf+0x59/0x80 [ 823.913831][ T27] panic+0x318/0x764 [ 823.913858][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 823.913897][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 823.913928][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 823.913963][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 823.914006][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 823.914045][ T27] watchdog+0xfc7/0xfd0 [ 823.914081][ T27] ? watchdog+0x1f8/0xfd0 [ 823.914114][ T27] kthread+0x28d/0x320 [ 823.914133][ T27] ? hungtask_pm_notify+0x50/0x50 [ 823.914161][ T27] ? kthread_blkcg+0xd0/0xd0 [ 823.914183][ T27] ret_from_fork+0x1f/0x30 [ 823.914228][ T27] [ 823.917247][ T27] Kernel Offset: disabled [ 824.403034][ T27] Rebooting in 86400 seconds..